Filter
Exclude
Time range
-
Near
BLOODEAD retweeted
YES... FINALLY I MADE THE ASPX SIBLINGS DESIGN... IM FRYING... #RobloxCreationLoreAU #aspx #xspa #materialaspx #aspxzpd #soundaspx #robloxau #noli
5
7
54
aloe retweeted
Aspx cosplay thingy ! ^o^ #aspx #TPC #terminationprotocol
6
26
584
Phaedrik retweeted
SharePoint Server RCE via webshell upload — CVE-2026-45454. A user with basic Contribute perms can upload an ASPX webshell to the Master Page Gallery and get code execution as the app pool identity. One HTTP request, no admin needed. Patch now. aretiq.ai/research/12/

37
120
13,083
🚨 CYBER INTELLIGENCE ALERT: 🇱🇰 [UNCONFIRMED] ALLEGED SALE OF PERSISTENT ACCESS AND INFRASTRUCTURE INTRUSION — INSTITUTE OF BANKER'S OF SRI LANKA (IBSL) [STATUS: UNCONFIRMED / INITIAL ACCESS BROKER (IAB) / SERVER COMPROMISE / FINANCIAL-EDUCATIONAL SECTOR] An offer has been detected on clandestine channels (identified under the section "BLACK MARKET 1337 | NEW", visible in the screenshot) that is selling persistent server-level access that directly compromises the official platform of the Institute of Banker's of Sri Lanka (ibsl. lk). Threat Actor: BLACK MARKET 1337 Affected Entity: Institute of Banker's of Sri Lanka (ibsl.lk/) 📂 Technical Analysis of the Intrusion and Persistence (Terminal Evidence) According to the Indonesian-language announcement and the terminal-based proof of concept (PoC) shown in the image evidence, the attacker has managed to establish command execution privileges within the server, detailing advanced technical capabilities: 1. Diagnosis of the Compromised Environment (System Logs) The interactive terminal reveals that the attackers have compromised a virtualized environment in the cloud (specifically on the Microsoft Azure infrastructure): Host Identifier: VM-SMS (This name critically suggests that the server hosts or is directly connected to the institute's payroll, human resources, and SMS messaging system). Privilege Level: The attacker executes commands under the standard web user account, with the ability to list active processes (ps auxf), view environment variables, and map the system architecture. 2. Access Vectors and Hardcoded Evasion The actor advertises access through three malware control methods: Operational WebShell (ASPX/PHP): A browser-based interface for uploading, downloading, and manipulating web system files, explicitly evading the rules ...of the Web Application Firewall (WAF). Reverse Shell / Bind Shell Ready: Communication channels ready to establish reverse connections to the attacker's infrastructure. 3. Advanced Persistence Mechanism (GS-NetCat) The most critical technical aspect of the alert lies in the installation of GS-NetCat (Global Socket Netcat). The attacker details having embedded a secret backup key (Key Backup: GS-NetCat Installed & Embedded). Self-healing Function: If the IT team or the institute's antivirus software detects and removes the main WebShell file, attackers can reactivate and restore full access within seconds using the encrypted background connections provided by the GS-NetCat key. 🛡️ Recommended Actions (Tactical Level) Network Threat Hunting (GS-NetCat Hunting): IBSL network administrators are strongly advised to inspect outbound connections and active sockets on their Linux servers for anomalous binaries or network traffic linked to Global Socket tools (ports and encrypted outbound connections utilizing external server relay). VECERT TOOLS Strategic Monitoring Tools & Intelligence Platform: 🌐 analyzer.vecert.io Security Verification & Monitoring: 🛡️ monitor.vecert.io #CyberSecurity 🔐 #ThreatIntelligence 📊 #SriLanka 🇱🇰 #IBSL #InitialAccess #WebShell #GSNetCat #FinancialInvestigation 💸 #Azure #VECERT 🏢
1
4
923
Replying to @Forsakencov
Nah give it all to ASPX
97
Drag0Pj retweeted
noli being a papa to his heavy head ass pill babies, ft. aspx and reverse aspx/xpsa roblox au, non forsaken, banlands high
26
752
6,133
54,192
Nolifan2473 🎭 retweeted
Achluophobia (Reverse Aspx) #aspx #noli #roblox
2
9
60
651