Santiago @sstrcpy

Infosec Nerd. Joined March 2019

Tweets

164
Followers

65
Following

585
Likes

5K

Nikhil Mittal @nikhil_mitt

a year ago

🚨 I am giving away 1 seat each of our June Red team (CRTP) and Azure (CARTP) bootcamps. 🚨 Repost, like and reply to this tweet to participate. I will announce the winners on Monday (27th May). alteredsecurity.com/bootcamps #redteam #pentest #giveaway

560 608 855 72K 78

Download Image

PentesterLab @PentesterLab

3 years ago

Giveaway time! To celebrate 80k followers! We are going to give a 1-month voucher to **80** people who RT this tweet (picked randomly)! We are going to send our socks, t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet (picked randomly)!!

177 1K 2K 0 8

PentesterLab @PentesterLab

3 years ago

Giveaway time! We are going to send a t-shirt and few goodies to one person who follows @PentesterLab and likes this tweet !! And we are going to give a 1-year voucher to someone who RT this tweet!

157 1K 2K 0 4

Emad Shanab - أبو عبد الله @Alra3ees

5 years ago

How to discover up to 10,000 subdomains with your own tool | by _Y000_ | Mar, 2021 | InfoSec Write-ups infosecwriteups.com/this-time-you-…

2 104 274 0 76

pikpikcu @pikpikcu

5 years ago

Apache solr Arbitrary file read. POC: Request: POST /solr/db/debug/dump?param=ContentStreams stream.url=file//etc/passwd Response: 200 ... root:x:0:0... mp.weixin.qq.com/s?__biz=Mzg3ND…

0 84 252 0 54

☣ KitPloit - Hacker Tools @KitPloit

5 years ago

SharpEDRChecker - Checks Running Processes, Process Metadata, DLLs Loaded Into Your Current Process And The Eac... j.mp/2YrqgrT

0 44 119 0 20

Download Image

Nicolas Krassas @Dinosn

5 years ago

PoC for CVE-2021-3156 (sudo heap overflow) github.com/stong/CVE-2021…

2 60 168 0 21

Rich Warren @buffaloverflow

5 years ago

Releasing PyBeacon. A collection of scripts for dealing with Cobalt Strike beacons in Python. Covers: - staging - asymmetric encryption and metadata parsing - symmetric encryption (tasks) and decoding - beacon registration - beacon callbacks github.com/nccgroup/pybea…

3 117 271 0 37

Florian Hansemann @CyberWarship

5 years ago

Hide your Powershell script in plain sight. Bypass all (a lot of ;-) Powershell security features #infosec #pentest #redteam github.com/OmerYa/Invisi-…

1 78 342 0 59

Download Gif

Michael Koczwara @MichalKoczwara

5 years ago

I mapped active Cobalt Strike servers in the wild (over 450). Some of them could be legit Red Team Ops. However, the majority probably belongs to APT/Ransomware groups. docs.google.com/spreadsheets/d… cc @cyb3rops

11 149 491 0 97

Panos Gkatziroulis 🦄 @netbiosX

5 years ago

HppDLL - local password dumping using MsvpPasswordValidate hooks github.com/last-byte/HppD…

0 29 88 0 13

Nicolas Krassas @Dinosn

5 years ago

Advanced Boolean-Based SQLi Filter Bypass Techniques secjuice.com/advanced-sqli-…

0 8 12 0 6

Dirk-jan @_dirkjan

5 years ago

It has a few more prerequisites, but I finally managed to get a #Zerologon exploit working that doesn't rely on resetting passwords to exploit. Use the printerbug to make DC1 connect to you, then with lots of magic relay that to DC2 directly to DRSUAPI to DCSync 😁

27 554 1K 0 98

Download Image

👑 OFJAAAH 👑 @ofjaaah

5 years ago

👽A few days, I viewed this PDF, I believe it can help many people. It talks about API tests. I don't know who the owner is. But congratulations. 🤖 Some already used to search for bugs. docdro.id/TqEDnLJ #bugbounty #bugbountytips #bughunter #KingOfBugBountyTips

5 327 719 0 283

Patrik Fehrenbach @ITSecurityguard

5 years ago

I just uploaded some of the most common file types for my Patrik's Bug Bounty Tools mind map here: SVG: blog.it-securityguard.com/pbbt.svg PDF: blog.it-securityguard.com/pbbt.pdf XMIND: blog.it-securityguard.com/pbbt.xmind PNG: blog.it-securityguard.com/pbbt.png enjoy! 🥰🥳👑 #BugBountytips #BugBounty

10 277 737 0 265

Download Image

☣ KitPloit - Hacker Tools @KitPloit

5 years ago

Chimera - PowerShell Obfuscation Script Designed To Bypass AMSI And Commercial Antivirus Solutions ift.tt/3hys49j

1 97 185 0 22

Download Gif

Nicolas Krassas @Dinosn

5 years ago

Run as SYSTEM using Evil-WinRM feedproxy.google.com/~r/Room362com/…

0 31 84 0 7

Nicolas Krassas @Dinosn

5 years ago

A simple Bash script for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. github.com/chvancooten/Bu…

0 44 139 0 30

Florian Hansemann @CyberWarship

5 years ago

RustScan - Turns a 17 minutes Nmap scan into 19 seconds 😲 - I haven't tested it, but 2.2k Stars & 170 Forks are a good sign 😉 #infosec #pentest #bugbounty github.com/RustScan/RustS…