Israel G (@ipartner_) header
Israel G (@ipartner_) profile picture

. ..: I love solve problems for which there is no obvious answer

Joined October 2011
Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)Photo by Israel G (@ipartner_)
Israel G retweeted
今天不发推文,我们决定开源近期自研的进攻型 Agent 工具——该工具在腾讯实测跑分中位列第三,红队/SRC/CTF三大场景; 项目地址:github.com/Yean-Sec/StrikeAg…, 跑分地址:tsecbench.zc.tencent.com/#le…
34
101
4
537
68,879
Israel G retweeted
RedLotus is a Rust based Windows UEFI bootkit that executes before ntoskrnl.exe to bypass DSE and manually map unsigned kernel drivers. A research focused PoC demonstrating modern bootkit techniques and low level rust development. by MemN0ps Blog:- memn0ps.github.io/rusty-wind…
2
111
1
575
40,162
Israel G retweeted
New Anthropic research: Discovering cryptographic weaknesses with Claude. Claude Mythos Preview has helped our researchers find weaknesses in cryptographic algorithms—the mathematical methods that are used to keep data private. Read more: anthropic.com/research/disco…
443
823
464
6,202
2,801,252
German and U.S. authorities dismantle the Kratos phishing-as-a-service platform Authorities in Germany and the United States disrupted the central infrastructure of Kratos, a phishing-as-a-service platform used to create credential-harvesting pages and conduct attacks globally. The suspected developer was arrested in Indonesia. #DDW #Phishing #Kratos #DarkWeb
2
1
16
6,347
Initial access. Post-exploitation. Persistence. These are the phases most of you need to simulate in your day-to-day engagements. RustPack can help across all of them. Our latest blog post covers a range of common TTPs and shows how RustPack can help you save time, reduce effort, and streamline your operations. 🫡 msecops.de/blog/posts/rustpa… #OST #maldev #Pentest #RedTeam
25
128
5,977
Burp Intruder has 4 attack types 👇 🔶 Sniper - One payload list in one position 🔶 Battering Ram - Same payload in multiple positions 🔶 Pitchfork - Different payload sets in parallel 🔶 Clusterbomb - All combinations of multiple payload sets Try it out 🧪
35
1
152
6,501
❗️❗️Threat actors are actively exploiting a critical authentication bypass flaw in Palo Alto Networks firewalls to breach corporate networks and deploy Qilin ransomware. Full Story: cybersecuritynews.com/cve-20… The flaw, tracked as CVE-2026-0257 (CVSS 7.8), affects the GlobalProtect portal and gateway in PAN-OS. It becomes exploitable when authentication override cookies are enabled alongside specific certificate configurations, allowing unauthenticated attackers to bypass login controls entirely and establish legitimate-looking VPN sessions. #cybersecuritynews
🤖 Made with AI
6
45
1
167
33,605
Israel G retweeted
🚨Cyber Alert ‼️ 🇦🇷Argentina - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝗱𝗮𝗱 𝗡𝗮𝗰𝗶𝗼𝗻𝗮𝗹 𝗱𝗲 𝗠𝗮𝗿 𝗱𝗲𝗹 𝗣𝗹𝗮𝘁𝗮 (𝗨𝗡𝗠𝗱𝗣) Nova hacking group claims to have breached Universidad Nacional de Mar del Plata (UNMdP). Allegedly, the attack led to the exfiltration of 3.5 GB of data. Threat actor: Nova Sector: Education Data exposure (claimed): 3.5 GB Data type: Not specified Observed: Jul 20, 2026 Status: Pending verification ESIX©: 5.23 Full details and impact assessment on HackRisk.io
7
1
30
7,820
🚨 Threat Actor Offers Fraudulent Emergency Data Requests for Major Platforms A threat actor is advertising what they claim are "emergency data requests" (EDRs) for several major technology platforms on a cybercrime forum. According to the listing, the service allegedly covers: * Meta (Facebook & Instagram) * X (formerly Twitter) * Telegram * T-Mobile The seller claims to provide emergency data requests for $300 per request, accepts cryptocurrency payments (preferably Monero), and advertises that "proof" can be provided to prospective buyers. Emergency Data Requests (EDRs) are legitimate legal mechanisms used by authorized law enforcement agencies to obtain user information in situations involving imminent threats to life or serious physical harm. Cybercriminals have increasingly attempted to abuse or fraudulently obtain these requests through social engineering, compromised government accounts, or forged legal documentation. Daily Dark Web cannot verify the authenticity of the seller's claims or whether they possess the advertised capability. Analyst Note: The emergence of EDR-related services on cybercrime forums highlights continued attempts by threat actors to exploit trusted legal disclosure processes. Organizations should ensure robust verification procedures for emergency requests, enforce strong identity validation for government portals, and monitor for signs of unauthorized access to law enforcement or government accounts. #DDW #Intelligence #DarkWeb #Cybercrime
1
25
6,971
Updated our inference fuzzing write-up - now with the vuln specifics we held back. Full detail on a pre-auth path traversal in OpenWRT (LuCI bmx7) that reads any file as root. Notified 8 July, no reply. hacker.house/blog/inference-…
2
19
90
6,915
Cyber Security Attack Mindmap 🔥 🔥 Telegram: t.me/hackinarticles ✴ Twitter: teapaw.org/hackinarticles Cyber Attacks focus on identifying vulnerabilities, exploiting systems, and maintaining access during offensive security operations. This mindmap provides a structured breakdown of real-world attack techniques, tools, and methodologies used by attackers and red teamers. 📚 Topics Covered in the Mindmap 🔍 Reconnaissance ⚔️ Initial Access 💥 Exploitation 🎯 Privilege Escalation 🕵️ Lateral Movement 📦 Credential Dumping 🔐 Persistence 🚫 Defense Evasion 📡 Command & Control 🧠 Mindmap: github.com/Ignitetechnologie… #CyberSecurity #EthicalHacking #RedTeam #Pentesting #Infosec #Hacking
16
84
8,835
🚨 RaidForums [.]su domain was suspended. New domain: [.]ru They also have a new site called RaidBin, which is a paste-sharing platform. raidbin[.]org Dark Web: http://raidbinahr33urj6dcnuphimsnnxkvryvomimphp5wsfa5x3gkm2jsqd[.]onion
2
45
304
24,694
Microsoft researchers have observed increased ACR Stealer activity across customer environments. These campaigns are using ClickFix lures to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments. microsoft.com/en-us/security…
6
21
2,144
We desperately need someone to update noob malware literature. The shit for malware noobs looks like it was written in 1995 and by someone who doesn't know shit about malware or how it actually works. It reads like someone describing swimming who hasn't ever been in a pool
16
9
1
535
32,547
Israel G retweeted
We recently investigated cases involving a vishing playbook and passkey-themed domains from an extortion group calling itself FALCON. We track this activity as CL-CRI-1182 and assess with moderate confidence that this is related to CL-CRI-1116 (BlackFile) bit.ly/3TfKBzW
26
1
99
11,067