3ackd0or (@3ackd0or) header
3ackd0or (@3ackd0or) profile picture

3ackd0or

@3ackd0or

🔥 A back door between the bits. 🔗 Coming soon...

 Islamic Republic of Iran
hackerone.com/
Joined March 2022
  • Tweets4.8K
  • Following29
  • Followers21K
574Media
Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)Photo by 3ackd0or (@3ackd0or)
Image from 3ackd0or (@3ackd0or)
66
14
14
151
72,763
مترجم: inj3ct0r سلام فرمانده، سلام درمانده در ادامه داستان، افسران و سربازان سایبری نظام را مثل گذشته منتشر خواهیم کرد. بارها گفتیم اربابان دنیای سایبری ما هستیم. #Gomnaman @NarimanGharib @m_pourmohsen @IranIntl
Image from 3ackd0or (@3ackd0or)
14
2
4
36
13,856
مترجم: inj3ct0r سلام خفن سلام جذاب سلام جیمز باند فکر کردی پیدات نمی کنیم؟ چربش کن😁 اینا نباشن ما به کی بخندیم؟ #Gomnaman @NarimanGharib @m_pourmohsen
6
1
7
9,754
3ackd0or retweeted
0b1d1 (@_0b1d1) profile picture
0b1d1@_0b1d114 Sep 2025
🔓 Top 20 Free Hacking Books You Can Read Online Want to level up your cybersecurity skillswithout paying a penny? Here’s a hand-picked list of 20 high-quality hacking & infosec books that are available online (PDFs or official readers)
Image from 0b1d1 (@_0b1d1)
16
271
6
1,823
94,969
3ackd0or retweeted
Smukx.E (@5mukx) profile picture
Smukx.E
@5mukx15 Sep 2025
Malware Reverse Engineering for Beginners – Part 1: From 0x0 intezer.com/blog/malware-rev… #c #malware #basics
Image from Smukx.E (@5mukx)
Image from Smukx.E (@5mukx)
3
121
803
36,424
Amazon blocks APT29 campaign targeting Microsoft device code authentication securityaffairs.com/181747/a…
Amazon blocks APT29 campaign targeting Microsoft device code authentication

Amazon blocks APT29 campaign targeting Microsoft device code authentication

Amazon stopped a Russia-linked APT29 watering hole attack that hijacked Microsoft device code authentication via compromised sites.

securityaffairs.com
2
4
30
8,106
Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 reddit.com/r/blueteamsec/com…
From the blueteamsec community on Reddit: Citrix forgot to tell you CVE-2025–6543 has been used as...

From the blueteamsec community on Reddit: Citrix forgot to tell you CVE-2025–6543 has been used as...

Explore this post and more from the blueteamsec community

reddit.com
9
1
62
8,274
#USA 🇺🇸 - A critical zero-click RCE 0-day exploit for Android 11-15 is allegedly being sold on the dark web, threatening millions of devices with full remote takeover. dailydarkweb.net/critical-an…
Image from Dark Web Intelligence (@DailyDarkWeb)
27
135
12
808
99,937
🚨 A fake PDF editor is hijacking Google ads—tricking users into downloading TamperedChef, a new info-stealing malware. It steals logins, cookies & even backdoors your system. The worst part? It hid for 56 days before activating. Read → thehackernews.com/2025/08/ta…
3
69
5
137
22,066
ReconFTW Tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities (Just Sharing) Link: github.com/six2dez/reconftw
Image from 7h3h4ckv157 (@7h3h4ckv157)
2
22
1
116
9,450
NEW LAB: Scattered Spider (UNC3944) 🕷️🕸️ Scattered Spider hits indie studio AB Projekt Blue, deploying ransomware and stealing unreleased game code. Test your skills on: 👀 Social Engineering & MFA Fatigue 👀 Credential Theft via OST Files 👀 Bring Your Own Vulnerable Driver (BYOVD) 👀 EDR Manipulation 👀 Custom Ransomware Binary 👀 RMM Exploitation Lab Contributors Adversarial Emulation @q8fawazo Incident Response @r3nzsec Threat Intelligence @CuratedIntel Solve it here 👉 xintra.org @XintraOrg
Image from inversecos (@inversecos)
Image from inversecos (@inversecos)
13
84
4
508
72,509
Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install thehackernews.com/2025/07/ha…
Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

Critical WordPress flaw CVE-2025-5394 lets attackers take over sites using the "Alone" theme. 120K+ attempts blocked.

thehackernews.com
1
28
3
84
7,952
3ackd0or retweeted
0xor0ne (@0xor0ne) profile picture
0xor0ne
@0xor0ne31 Jul 2025
Exploiting CVE-2025-37752: array-Out-Of-Bounds vulnerability in the Linux network packet scheduler syst3mfailure.io/two-bytes-o… #infosec #Linux
Image from 0xor0ne (@0xor0ne)
Image from 0xor0ne (@0xor0ne)
3
41
229
14,889
🚨 One flaw. Total takeover. A critical bug in Windows Server 2025 lets attackers generate any dMSA/gMSA password—across the forest. It bypasses Credential Guard and can persist for years. Details here → thehackernews.com/2025/07/cr…
Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent...

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent...

Researchers expose critical flaw in Windows Server 2025’s dMSA, enabling enterprise-wide access and lateral movement across domains.

thehackernews.com
4
104
4
312
39,000
Malware in DNS dti.domaintools.com/malware-…
DomainTools Investigations | Malware in DNS

DomainTools Investigations | Malware in DNS

Because it's always DNS, we wanted to share this fun finding of malware stored across DNS TXT records.

dti.domaintools.com
3
129
7
483
36,536
Grok-4 Falls to a Jailbreak Two days After Its Release securityweek.com/grok-4-fall…
Grok-4 Falls to a Jailbreak Two Days After Its Release

Grok-4 Falls to a Jailbreak Two Days After Its Release

The latest release of the xAI LLM, Grok-4, has already fallen to a sophisticated jailbreak.

securityweek.com
3
33
3
113
14,563
🚨 A critical flaw in Fortinet’s FortiWeb lets unauthenticated attackers run SQL commands remotely (CVSS 9.6). The bug? It blindly trusts tokens—letting attackers write to the file system. Fix it now or risk real damage. Read → thehackernews.com/2025/07/fo…
Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)

Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)

Fortinet fixes a critical SQL injection vulnerability in FortiWeb (CVE-2025-25257), posing risks to database security.

thehackernews.com
5
79
5
156
26,175
🚨Alert🚨 CVE-2025-49704 : Microsoft SharePoint Remote Code Execution Vulnerability 📊24.9K Services are found on the hunter.how yearly. 🔗Hunter Link:hunter.how/list?searchValue=… 👇Query HUNTER : product.name="SharePoint Server" 📰Refer:msrc.microsoft.com/update-gu… windowsforum.com/threads/cri… zerodayinitiative.com/adviso… #hunterhow #infosec #infosecurity #OSINT #Vulnerability
Image from Hunter (@HunterMapping)
43
125
8,962
3ackd0or retweeted
0xor0ne (@0xor0ne) profile picture
0xor0ne
@0xor0ne10 Jul 2025
Evaluation of different tools for routers firmware emulation (FACT, QEMU, EMUX, Qiling, Firmadyne, FAT, FirmAE, Pandawan, and EMBA) "Challenges and Pitfalls while Emulating Six Current Icelandic Household Routers" skemman.is/bitstream/1946/50… #infosec #embedded
Image from 0xor0ne (@0xor0ne)
4
102
439
17,724
📌 FYI: #CryptersAndTools es un servicio de crypter-as-a-service de origen brasileño 🇧🇷 utilizado por actores como #BlindEagle (APT-C-36), #TA558 y #Aggah entre otros. Anteriormente hubo algo de confusión por el uso compartido de infraestructura, sin embargo, algunos servidores formaban parte del mismo CaaS (+teapaw.org/1ZRR4H/status/16774395…). Una de las funciones más destacadas del crypter es la capacidad de ocultar código malicioso en imágenes legítimas, flujo que también es conocido como #StegoCampaign. Más referencias en el análisis de #AndeLoader (esentire.com/blog/blind-eagl…). Anteriormente, también vimos a Blind Eagle y Aggah utilizar otros crypters como Vs-Crypt, 3LOSH, "codigo" y FuckCrypt, escritos por Roda o Pjoao1578. este último también se encuentra desarrollando Upcrypter (ya incluye la función para utilizar imágenes). + REF (Parte 1): global.ptsecurity.com/analyt…. + REF (Parte 2): global.ptsecurity.com/analyt…. H/T @01Xyris 🥷
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
Germán Fernández (@1ZRR4H) profile pictureGermán Fernández
@1ZRR4H7 Jul 2023
Interesante: APT-C-36 aka #BlindEagle, en su operación dirigida a organizaciones en Colombia 🇨🇴 (también conocida como Operación Spalax) está utilizando una serie de sitios web que en las últimas horas han entregado, al menos, 4 descargas diferentes: 1.- Documento_digitaL.UUE (tria.ge/230706-r1hg1scc53/be…) 2.- Documento.uue (tria.ge/230707-ew2nwagc9z/be…) 3.- CARPETA_DE_FOLIO_Y_ACTA_ENTREGADA-PDF.UUE (tria.ge/230707-elcxrsfb83/be…) 4.- carpeta_documento_digital_ acta_ del_caso_jurídico.scr (virustotal.com/gui/file/5c40…) Los correos phishing simulan ser demandas de estudios jurídicos o firmas de abogados y contienen adjuntos PDF o Word inofensivos, con enlaces no clicables hacia los sitios maliciosos (montados en website[.]org): - notificacionesjuridicasonline.otcy[.]com - notificacionesjuridicas.blog-online[.]eu Flujo de infección: email > .pdf -> sitio web > archivo .uue protegido con contraseña (desde Discord) > .vbs (ofuscado con Vbs-Crypter "Codigo") > .ps1 > DLL desde cryptersandtools.minhacasa[.]tv/e/e > PDF decoy. Payloads finales son: #NjRAT C2 46.246.86[.]19:0509 nj0509.duckdns[.]org #RemcosRAT C2 46.246.86[.]19:2798 yumaguoc.duckdns[.]org 46.246.86[.]19:2525 yumaguoc.duckdns[.]org 46.246.86[.]19:2798 matarife.duckdns[.]org + master1981.duckdns[.]org + remnew.duckdns[.]org + kbum1963.duckdns[.]org Todos los C2 en 46.246.86.19 🇸🇪 (FrootVPN), como de costumbre últimamente para esta distribución (en ocasiones comparada con #Aggah aka #Haggah). 📌 Respecto a cryptersandtools.minhacasa[.]tv todo indica que debería ser un servicio de crypters y herramientas para distintos actores de amenaza (tipo MaaS), ya que desde aquí se pueden ver ataques en otros lenguajes, dirigidos hacia otras partes del mundo y que no forman parte del flujo de infección aquí descrito 👇 Dos #opendir en el servidor utilizado por este servicio: cryptersandtools.minhacasa[.]tv/e/ cryptersandtools.minhacasa[.]tv/inf/ [+] (virustotal.com/gui/domain/cr…) Más infra asociada a este tercero (desde 2021 en uso): 91.213.50[.]74/CRYPS/ 91.213.50[.]74/GREEN/ 91.213.50[.]74/new/ [+] (virustotal.com/gui/ip-addres…) 79.110.49[.]55/ [+] (virustotal.com/gui/ip-addres…)
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
Image from Germán Fernández (@1ZRR4H)
5
22
3
68
15,693
Load more