DarkCoder @DarkCoder75

Here are all the links 👇 osintsearch.org github.com/koala73/worldm… github.com/mbrg/power-pwn Follow @MAXdeg0 for more! & join my tg channel for more tools t.me/max_lab_1

THIS IS F**KING INSANE FOUND 3 OSINT TOOLS I WISH I KNEW ABOUT YEARS AGO These can make OSINT work ridiculously easier. and it all FREE to use osintsearch —> Give it a username, email, or phone number and it searches hundreds of platforms for matching public accounts even catching accounts using different names through profile picture matching. power-pwn —> Finds exposed AI agents sitting online and checks whether they’re connected to company data. worldmonitor — > A live global intelligence dashboard showing what’s happening around the world in real time — and you can run it yourself. Different tools. Different use cases. Same goal: finding information faster. If you’re into OSINT, cybersecurity, or security research, BOOKMARK this this before someone take it down LINKS BELOW

⭐️Undocumented Windows Internals Learn about NtQueryInformationProcess, the PEB and how to parse the module list. Internal, External, x86 & x64 examples. ↘️ youtu.be/3wZCVEJOGos

Cloudflare Bypass Tool 2026 github.com/1837620622/clo…

When hackers gain access to a Windows system, the biggest mistake they don’t make is rushing. Instead of running random tools or poking around files, skilled attackers go straight for credentials. Why? Because with passwords or NTLM hashes, they can move to other systems, escalate privileges, or impersonate users silently. Windows stores these credentials in memory, especially inside a process called lsass.exe (Local Security Authority Subsystem Service), which is responsible for handling logins. To extract this sensitive information, attackers use a common method: they dump the memory of lsass.exe using a tool like procdump, then load the dump into mimikatz, a powerful post-exploitation tool. Once that dump is opened in mimikatz, the tool can reveal the usernames and passwords of users who logged in, sometimes even domain admin accounts. This is how attackers quietly elevate their control and move across the network without triggering alerts, especially if logging isn’t properly configured. In the terminal output, we first locate the lsass.exe process using tasklist | findstr lsass.exe to get its PID. Then we use procdump.exe -ma lsass.dmp to dump the process memory into a file. After that, mimikatz is launched, and we load the dump using sekurlsa::minidump lsass.dmp, then run sekurlsa::logonpasswords to extract plaintext credentials from memory. This technique is extremely effective and often used by both red teams and real attackers during lateral movement.

keyboard_arrow_left Previous keyboard_arrow_right Next

Security Trybe @SecurityTrybe

8 months ago

Hackers don’t search for passwords. They dump them all in seconds. Do you know how?

18 10 176 106K 63

Un outil permettant de suivre plus de trois milliards d'utilisateurs de @WhatsApp et @signalapp a été rendu public. Il suffit aux pirates de connaître le numéro de téléphone pour déterminer quand les utilisateurs rentrent chez eux, quand ils utilisent activement leur téléphone, quand ils se couchent ou quand ils sont hors ligne. Ils peuvent également vider les batteries et épuiser les limites de données sans que les utilisateurs ne s'en aperçoivent. cybernews.com/security/whats…

@SouveraineTech @WhatsApp @signalapp 😳Fonctionne bien, attention : utilisez de préférence un numéro virtuel, car l'application envoie de nombreux messages au contact pour obtenir les confirmations (PING). Lors de certaines opérations comme la connexion entre deux comptes, il est possible que le numéro apparaisse.

PowerShell for Hackers, Part 1: The Basics As a cybersecurity specialist, whether in an offensive or defensive role, you must be comfortable using PowerShell: hackers-arise.com/powershell-for… @three_cube

🛡️ GhostLocker Tool Leverages Windows AppLocker to Neutralize and Control EDR Source: cybersecuritynews.com/ghostlocker-to… A new tool named GhostLocker has been released, demonstrating a novel technique to neutralize Endpoint Detection and Response (EDR) systems by weaponizing the native Windows AppLocker feature. Unlike traditional EDR bypasses that attempt to exploit kernel drivers or perform complex memory manipulation, GhostLocker leverages the inherent authority granted to system administrators. The tool utilizes AppLocker, Microsoft’s application whitelisting framework introduced in Windows 7, to enforce “Deny” rules against EDR executables.​ GhostLocker automates this by deploying policies that explicitly block EDR processes from launching or restarting. #cybersecuritynews

''Malware development: persistence - part 26. Microsoft Edge - part 1. Simple C example.'' #infosec #pentest #redteam #blueteam cocomelonc.github.io/persistence/20…

#NorthKorea #APT37 The key threat is that the North Korean hacking group APT37 abuses legitimate HWP files and DLL side-loading techniques to evade security detection and stealthily execute malicious DLLs. genians.co.kr/en/blog/threat…

Simple introduction to virtual memory for beginners nghiant3223.github.io/2025/05/29/fun… #cybersecurity

VectoredOverloading PoC in Rust... github.com/Whitecat18/Rus… Thanks & Credits to : @_CPResearch_ & @eversinc33, @JaromirHorejsi

Founding is a stealth binary generator that weaponizes indirect syscalls, AMSI bypasses, and sandbox detection to create undetectable shellcode loaders. meterpreter.org/founding-the-n…

@Officialwhyte22 PDF please

How hackers exploit SSH Thread 🧵

Linux Commands Cheat Sheet

Enumerate DNS zones that allow unauthenticated updates using NetExec🔥 Adding or updating DNS entries without authentication can give attackers a huge advantage. Thanks to @toffyrak such DNS zones can now be enumerated using NetExec🚀