#𝑶𝒔𝒊𝒏𝒕 #𝑷𝒆𝒏𝒕𝒆𝒔𝒕𝒆𝒓. 𝑰 𝒍𝒐𝒗𝒆 #𝑳𝒊𝒏𝒖𝒙 𝑺𝒚𝒔𝒕𝒆𝒎 #H𝒂𝒄𝒌𝒆𝒓 - Python and C #programmer 🇮🇹 #Windows Admin Active Directory
127.0.0.1-local host
Joined December 2018
- Tweets31.2K
- Following3.9K
- Followers5.6K
- Likes11.7K
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
🚨 OSINT INVESTIGATION: fr4ud.site
Domain “fr4ud” (leetspeak for fraud) registered on June 16, 2026 via GoDaddy + Cloudflare.
It presents “BRZ Control Criminal” — an Android + Desktop suite with:
• Remote control and screen capture
• APK builder
• Banking injects
• APK bypass
• Data lookups (including databases targeting the elderly)
100% PIX payments (no personal data required). No CNPJ, no corporate identity.
Tweet 2/3
Subdomain painel.fr4ud.site (“FR4UD Center”): operational query panel (CPF, phone, license plate, RG, credit score, documents such as CRLV) + API, with plans starting at R$ 29/month.
Linked to fr4ud.xyz (“FR4UD SHOP”), an open storefront selling logins, fake APKs, panels, and fraud tools.
Typical disposable operation architecture: young domain, privacy protection, CDN, and low public footprint.
Tweet 3/3
Conclusion: commercial cluster of tools and data oriented toward fraud and unauthorized access within the Brazilian “painéis” + mobile malware ecosystem.
Avoid any interaction.
#CyberSecurity #OSINT #ThreatIntel #Fraud #Brazil #CyberCrime #Malware #InfoSec #ThreatHunting #DigitalFraud #Cybersecurity #OSINTBrazil
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
🚨 Esta web parece sacada de una agencia de ESPIONAJE.
Puedes seleccionar una región y generar un informe con información sobre ese lugar (lo más INQUIETANTE es que utiliza información pública).
Desde un único mapa puedes consultar:
- Información sobre ciberamenazas.
- Noticias y acontecimientos internacionales.
- Aviones y sus trayectorias.
- Barcos navegando por los océanos.
- Satélites alrededor de la Tierra.
- Cámaras públicas.
- Terremotos e incendios forestales.
Se llama GORGONA EYE y convierte todo el planeta en un centro de inteligencia global.
También incorpora herramientas para investigar direcciones IP, dominios y vulnerabilidades conocidas.
Y sin necesidad de acceder a información clasificada.
Bienvenidos a eye.gorgona-one.com/ donde verás todo desde una interfaz que parece el centro de operaciones de una película de espionaje.
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
‼️ #MariaDB: Proof of Concept (#PoC) per lo sfruttamento delle vulnerabilità CVE-2026-92262, CVE-2026-85748, CVE-2026-85746 e CVE-2026-107821
Rischio: 🔴
⚠ Aggiornare tempestivamente il software interessato
👉 link al post principale: teapaw.org/csirt_it/status/210958…
#MariaDB: risolte molteplici vulnerabilità di cui 3 con gravità "critica" e 8 con con gravità "alta"
Rischio: 🟠
Tra le tipologie:
🔸 Remote Code Execution
🔸 Privilege Escalation
🔸 Denial of Service
🔸 Tampering
🔗 acn.gov.it/portale/w/risolte…
🔄️ Aggiornamenti disponibili 🔄️
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
New on the channel: a fully FREE Wireshark course, made in honour of Mariusz. Learn to read the network like a hacker 🐀 youtube.com/watch?v=D19eUY8x… #infosec #bugbounty #wireshark
Liked this? Level up with the Big Beautiful Bug Bounty Bundle (a discount applies via the link): thexssrat.podia.com/big-beau…
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Gemini hackera tra aziende e poi si ferma. Ma ora la domanda è: chi ha davvero il controllo?
📌 Link all'articolo : redhotcyber.com/post/gemini-…
Carolina Vivianti
#redhotcyber #cybersecurity #cybercrime #hacking #cti #ai #privacy #news #technology
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
#Zabbix: risolte vulnerabilità nel noto prodotto open source per il monitoraggio di reti e sistemi informatici
Rischio: 🟡
Tipologia:
🔸 Security Feature Bypass
🔸 Authentication Bypass
🔗 acn.gov.it/portale/w/rilevat…
🔄 Aggiornamenti disponibili 🔄
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
🦺 Wifite Complete Guide: Guide to Checking Your Router’s Security with Wifite
Blog: stationx.net/how-to-use-wifi…
Author: @rdezso
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Credential Dumping: Local Security Authority (LSASS.exe)
🔥 Telegram: t.me/hackinarticles
✴ Twitter: teapaw.org/hackinarticles
Credential Dumping via LSASS targets the Local Security Authority Subsystem Service (lsass.exe), which stores sensitive authentication data like NTLM hashes, Kerberos tickets, and sometimes plaintext passwords in memory. Attackers dump this memory to extract credentials and escalate privileges.
📚 Topic Covered
📖 Introduction
🧠 Understanding LSA & LSASS
🔐 Credentials Stored in Memory
💉 Dumping LSASS Memory
🛠 Mimikatz
📦 ProcDump
⚙️ comsvcs.dll Technique
🧪 Windows Credential Editor (WCE)
🚀 Privilege Escalation using Dumped Credentials
🔄 Lateral Movement
🛡 Detection & Mitigation Techniques
📖 Article:
hackingarticles.in/credentia…
#CyberSecurity #RedTeam #Pentesting #EthicalHacking #CredentialDumping #WindowsSecurity #InfoSec
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Active Directory Pentesting with BloodyAD 🩸
🔥 Telegram: t.me/hackinarticles
✴ Twitter: teapaw.org/hackinarticles
BloodyAD is a powerful Active Directory exploitation tool used to abuse AD permissions (DACLs) for privilege escalation, persistence, and domain compromise. It enables attackers to manipulate objects, reset passwords, and gain full control over the domain.
📚 Techniques Covered in This Guide
⚙️ Lab Setup
🔎 Understanding AD ACL & DACL Abuse
🧠 BloodHound Path Analysis
🔐 Authentication (Password / Hash / Kerberos)
👥 Add User to Privileged Groups
🔑 Reset Password & Takeover Accounts
⚡ GenericAll / GenericWrite Abuse
🛠 WriteDACL & WriteOwner Exploitation
📡 Resource-Based Constrained Delegation (RBCD)
🐚 Shadow Credentials Attack
🎯 Privilege Escalation to Domain Admin
📖 Article:
hackingarticles.in/active-di…
#CyberSecurity #EthicalHacking #Pentesting #RedTeam #ActiveDirectory #BloodyAD #InfoSec
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Hackers have been found using code camouflage techniques, hiding malware code within PNG image files to release malware.
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
You can say what you want about not being able to teach bug bounty, I disagree but you know what i disagree even more with?
"You don't need certs to get a job"
Technically you don't need anything and sure there might be exceptions but practically you can be damn sure i would look at who has a cert and who does not
thexssrat.podia.com/uncle-ra…
The more certs the better which is exactly why i have developed 3 cert paths that are not only cheaper than competitors but also more fun and complete. A better learning experience overal.
- CAPIE being the simple API hacking expert cert
- CNWPP being the advanced pentesting cert
- CxWAP being my web app hacking cert
Are you ready?
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
‼ #telnet: Proof of Concept (#PoC) per lo sfruttamento della vulnerabilità CVE-2026-32746 in #GNU #Inetutils #telnetd risulta disponibile in rete.
Rischio: 🔴
Tiplogia:
🔸 Remote Code Execution
🔗 acn.gov.it/portale/w/vulnera…
⚠ Migrare a SSH le istanze telnet esposte⚠
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
45.000 IP malevoli smantellati! La minaccia globale e la risposta dell’INTERPOL
📌 Link all'articolo : redhotcyber.com/post/45-000-…
#redhotcyber #news #cybercrime #criminalitàinformatica #sicurezzainformatica #collaborazioneinternazionale #hacking #malware #servermalevoli
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Gli Hacker entrano nei server FBI e accedono ai dati esclusivi sull’indagine di Jeffrey Epstein
📌 Link all'articolo : redhotcyber.com/post/gli-hac…
#redhotcyber #news #cybersecurity #hacking #fbi #jeffreyepstein #indaginifbi #violaioneserver #sicurezzainformatica
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
#cURL: risolte diverse vulnerabilità , di cui una con gravità “alta”, nel noto tool a linea di comando e libreria per il trasferimento dati
Rischio: 🟡
Tipologia:
🔸 Denial of Service
🔗 acn.gov.it/portale/w/risolta…
🔄 Aggiornamenti disponibili 🔄
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
#Cisco: aggiornamenti di sicurezza risolvono nuove vulnerabilità, di cui tre con gravità “alta” nel software Cisco #IOS_XR
Rischio: 🟠
Tipologia:
🔸 Privilege Escalation
🔸 Denial of Service
🔗 acn.gov.it/portale/w/risolte…
🔄 Aggiornamenti disponibili 🔄
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
Risolte vulnerabilità su #GitLab Community Edition (CE) e Enterprise Edition (EE)
Rischio: 🟠
Tipologia:
🔸 Denial of Service
🔸 Security Feature Bypass
🔗 acn.gov.it/portale/w/risolte…
🔄 Aggiornamenti disponibili 🔄
🏴☠️🏴☠️T̵i̵g̵e̵r̵m̵a̵m̵R̵o̵o̵t̵ ̵🏴☠️🏴☠️ retweeted
#Google: nuovo aggiornamento di #Chrome per Windows, Mac e Linux corregge molteplici vulnerabilità
Rischio: 🟠
Tipologia:
🔸 Remote Code Execution
🔸 Denial of Service
🔗 acn.gov.it/portale/w/risolte…
🔄 Aggiornamenti disponibili 🔄
