TheSphinx @SPX

#WebDeveloper #Malware researcher. #Senior developer. React, Python, C++, C#, VB, Java, Php. 🇮🇹 WannaBe #redteamer. ✏️ [email protected] Italia Joined November 2017

Tweets

2K
Followers

904
Following

675
Likes

8K

John Hammond @_JohnHammond

3 years ago

The MOVEit Transfer exploitation is not just SQL injection(👀) We uncovered the very last stage of the attack chain to drop human2.aspx ultimately ends up gaining remote code execution ‼ We fully recreated the attack chain with a demo achieving a reverse shell & ransomware!

30 462 2K 237K 286

View Details

hacker.house @hackerfantastic

4 years ago

I asked GPT3 to rewrite one of my LPE exploits in Perl, Python, Rust and Fortran. It did a remarkably good job when the C code is clear and concise, original: github.com/hackerhouse-op… GPT3 in screens below.

4 48 253 0 43

View Details

张惠倩 @momika233

4 years ago

Cobalt Strike 4.7 by uCare (custom license) Download: mega.nz/file/nxkglKyT#… Pass: uCare@Pwn3rzs

38 330 1K 0 536

View Details

BleepingComputer @BleepinComputer

4 years ago

Chinese hackers use new Cobalt Strike-like attack framework - @billtoulas bleepingcomputer.com/news/security/…

1 48 96 0 7

View Details

TheSphinx @SPX

4 years ago

@MediasetTgcom24 attacco “ramsonwere” ?? 😩

0 0 0 0 0

View Details

BC Security @bcsecurity

4 years ago

Empire Ops: Tactics is a hands-on course at this year’s @defcon. We will teach how to recreate aspects of the #APT28 Prime Minister Attack while learning advanced #redteam techniques. #defcon30 Register: defcontrainings.myshopify.com/products/antho…

1 29 91 0 19

View Details

Mike Driscoll @driscollis

4 years ago

How to send a tweet with #Python and TweePy in under 10 lines of code 🐍🔥

19 123 688 0 120

View Details

Virus Bulletin @virusbtn

4 years ago

JPCERT/CC's @shu_tom writes about the Lazarus VSingle malware that has recently been updated to retrieve C2 server information from GitHub. blogs.jpcert.or.jp/en/2022/07/vsi…

0 20 44 0 10

View Details

Cas van Cooten @chvancooten

4 years ago

Kicked off my "MalDev for Dummies" workshop successfully yesterday, which means the repo is now public! Slides, exercises, example code and resources to get you started on your malware development journey. C# and Nim supported for now. Enjoy!! github.com/chvancooten/ma…

15 186 582 0 218

View Details

_leon_jacobs(💥) @leonjza

4 years ago

Poking at my toy C2, godoh, I managed to add #cobaltstrike's external C2 support. This is a beacon staged using DNS-over-HTTPS. It's nothing novel, but I had fun gluing together TCP sockets and DoH.

3 3 60 0 6

View Details

Kim Dotcom @KimDotcom

4 years ago

Now you know that Mega is not really a privacy company. It’s important to understand that those who control the code can create backdoors to defeat encryption. I know the lead developers. They lack morality. I recommend not to use Mega for sensitive files: arstechnica.com/information-te…

40 154 648 0 34

View Details

The Hacker News @TheHackersNews

4 years ago

A new version of the XLoader #botnet malware has been discovered that uses a probability-based approach to camouflage its command and control (C&C) infrastructure. Read details: thehackernews.com/2022/06/new-xl… #infosec #cybersecurity #hacking #malware

0 41 65 0 5

View Details

vx-underground @vxunderground

4 years ago

Lockbit ransomware group has named Lockbit 3.0 as "Lockbit Black".

8 95 288 0 25

View Details

Cyber, etc... @cyber_etc

4 years ago

Italy 🇮🇹 : the Italian #police website is accessible again but only from #Italy. The site had been unavailable since May 16 following a #DDoS #cyberattack claimed by the pro-Kremin #Killnet hacker group. #Ukraine #Russia Via @giornalettismo

Giornalettismo @giornalettismo

4 years ago

Tutto (quasi) come prima. Ma ci è voluto molto tempo. Il sito della #Polizia è di nuovo online, dopo l'attacco rivendicato da #Killnet e #Legion giornalettismo.com/sito-polizia-d…

0 0 2 0 0

0 4 2 0 0

View Details

Pascal Bornet @pascal_bornet

4 years ago

In Japan, the school board is equipped with an electronic scanner. It erases what is written and at the same time stores it so that the students can get later copies if they want Credit: Jousef Murad #innovation #science #technology #engineering #education @Fabriziobustama

1 25 91 0 5

View Details

Pierluigi Paganini - Security Affairs @securityaffairs

4 years ago

A custom #PowerShell #RAT uses to target German users using #Ukraine crisis as bait securityaffairs.co/wordpress/1313… #securityaffairs #hacking #malware

0 1 2 0 0

View Details

Fulvius @IppocampoC

4 years ago

Who are you? Here we go again. This work belongs to @_Blue_hornet #ATW and was released on April 3 on Doomsec telegram channel t.me/DoomSec/117 #AgainstTheWest #DoomSec @YourPolandAnon @DeepNetAnon @arks414 #Killnet

Giornalettismo @giornalettismo

4 years ago

Tutto (quasi) come prima. Ma ci è voluto molto tempo. Il sito della #Polizia è di nuovo online, dopo l'attacco rivendicato da #Killnet e #Legion giornalettismo.com/sito-polizia-d…

0 0 2 0 0

3 8 18 0 1

View Details

Fabrizio Bustamante Escudero @Fabriziobustama

4 years ago

This #WEBSITE listens to your #keyboard by @DigitalTrends #100DaysOfCode #CyberSecurity #AI #Python #ArtificialIntelligence Cc: @Nicochan33 @jblefevre60 @chboursin @Ym78200 @mvollmer1 @PawlowskiMario @Shi4Tech @FrRonconi @sebbourguignon @sallyeaves @MargaretSiegien @kalydeoo

5 47 56 0 6

View Details

@

4 years ago

Intervista #esclusiva di @matricedigitale al gruppo hacker che ha attaccato l'Italia. "Sono il fondatore di Killnet e di Legion. L’ho creato io, ma non voglio controllarlo. Stiamo formando migliaia di persone pronte a combattere la NATO in futuro." matricedigitale.it/inchieste/kill…