4 Photos and videos
thetqweb retweeted
19 Jun 2024
🚨MAJOR DATA BREACH🚨888 has allegedly leaked data belonging to Accenture. Revenue: $64.5 Billion
In June 2024, Accenture suffered a data breach from a third party that exposed 32,826 employees/former employees.
The Compromised Data Includes: Email Addresses, Full Names and Broadcast Dates.
14
141
543
147,588
thetqweb retweeted
18 Jun 2024
🚨Outlook Zero-Click🚨TLDR; Recommended Steps for Microsoft 365 Admins can be seen in this blog post.
ironscales.com/blog/zero-cli…
The CVE-2024-30103 vulnerability leverages a flaw in how Microsoft Outlook handles specific types of email content.
An attacker can embed malicious code within the body of an email, which gets executed as soon as the email is opened. This can lead to unauthorized access, data breaches, and further network compromise.
4
87
287
95,812
#OSINT #infosec
Get availability status of select services/organizations @Speedtest's DOWNDETECTOR! downdetector.com/companies/
23
thetqweb retweeted
2 Feb 2023
Top story: GitHub - pwn0sec/PwnXSS: PwnXSS: Vulnerability (XSS) scanner exploit github.com/pwn0sec/PwnXSS, see more tweetedtimes.com/v/1939?s=tn…
14
36
2,957
thetqweb retweeted
31 Jan 2023
If you want to master hacking JWT tokens, open this thread!
JWT tokens are often used to authenticate logged-in users. They do this by signing the data so that the server can verify forged tokens. But in some cases, we can bypass this protection! 🤯
A Thread 🧵👇
37
302
924
130,768
thetqweb retweeted
30 Jan 2023
🥽 The Anti-Recon Recon Thread 🥽
Recon is important, but some people hate it. I get it.
When you're in the zone & ready to pounce on a target, you just want to start hacking.
Want the best of both worlds? Quick/complete recon, WITH great coverage?
(a long thread)
🧵⬇️
53
324
883
164,653
28 Jan 2023
👮 Hacking into several Prisons 👮
Here's how I did it (legally), and what I learned along the way!
A thread for security testers and cyber security pros
🧵👇
26
Total loss of digital assets and compromise of every account is a terrible terrible way to learn.
Never click any links (even sponsored links) you are not absolutely sure of. And if you must, do it in a SandBox or such.
@nft_god, we can all learn sth from your thread...
Last night my entire digital livelihood was violated.
Every account connected to me both personally and professionally was hacked and used to hurt others.
Less importantly, I lost a life changing amount of my net worth
23
Don't get blinded by a new 'innovation' that is proprietary. If it was done inhouse and proprietary, it can also be done FREE, #opensource!
The community just needs to work together. "Together we hit harder" like @Hacker0x01 says. There is power in unity!
@fsf #infosec
As long as the code behind "smart" home devices is proprietary, these companies are free to spy on us as much as they like. Help us fight back: tell your friends about free software and urge then to join the FSF! Support #FreeSoftware. fsf.org
ALT An image of a camera pointed toward two people near an "Alexa" looking thing that says, "Don't invite spies into your home."
13
thetqweb retweeted
29 Dec 2022
342 million views of "flipper zero" content on TikTok, and millions more on YouTube... apparently it can be used to change prices on gas pump displays... (script) github.com/UberGuidoZ/Flippe… picture src (not me) from reddit. This is going end in tears when someone gets arrested.
41
468
2,734
454,773
thetqweb retweeted
29 Dec 2022
GitHub - KingOfBugbounty/Bugbounty-Checklist: Tips and Tutorials for Bug Bounty and also Penetration Tests. github.com/KingOfBugbounty/B…
6
61
171
17,532
thetqweb retweeted
29 Dec 2022
There's been a lot of chit-chat regarding the "Twitter DB leak". If you're curious how Threat Actors were able to get information on users via the API please see the attached images below.
Have a nice day.
tl;dr returns information if e-mail or phone number is valid
14
112
501
86,905
If you're interested in bluetooth low level hacking take a look at this cool project by Matheus Eduardo Garbelini (@MatheusGarbelin)
Active Bluetooth BR/EDR Sniffer/Injector: github.com/Matheus-Garbelini…
#bluetooth #esp32 #espressif #hacking #infosec
10
195
811
77,513
#informationsecurity community && #bugbounty hunters,
take note of the #bugbountytips compiled by @intigriti on SSRF!
13 Dec 2022
If you want to master SSRF, open this thread!
Server-Side Request Forgery vulnerabilities are attacks that allow attackers to send arbitrary requests from the server often resulting in gaining authorized access to data!🤯
A Thread 🧵👇
To get into #infosec || #CyberSec || #BugBounty you need to start somewhere. Networking and Network Security can be that somewhere @udacity!
11 Dec 2022
🚨FREE TRAINING:
16-week Network Security course for anyone trying to break into cybersecurity or learn more about network security.
🔗udacity.com/course/network-s…
#Infosec #Tech #Course #TheSecureEdge
1
thetqweb retweeted
6 Dec 2022
Kali Linux 2022.4 is out!
* New platforms (Azure, Generic Cloud/OpenStack, QEMU & Vagrant libvirt)
* NetHunter Pro - Kali Linux on the @thepine64 PinePhone / PinePhone Pro
* New tools
* And more
Download now! kali.org/blog/kali-linux-202…
33
406
1,479
thetqweb retweeted
6 Dec 2022
Big update! #nuclei just got a major update, adding URL Fuzzing and many new features 🧵
Release Blog –– blog.projectdiscovery.io/nuc…
Release CL –– github.com/projectdiscovery/…
Fuzzing Templates –– github.com/projectdiscovery/…
#hackwithautomation #dast #opensource #cybersecurity #bugbounty
5
133
376
To get the latest @pdiscoveryio's NUCLEI @pdnuclei templates:
nuclei -ut [-update-templates]
To scan for vulnerabilities with new templates:
nuclei -u TARGET -nt [-new-templates]
#informationsecurity #infosec #bugbounty #bugbountytip
4 Dec 2022
Nuclei Templates v9.3.0 release update 🔊
✅ 73 New Templates
⭐️ 30 Contributors
🥳 13 New Contributors
🗒 Release Changelog ––
github.com/projectdiscovery/…
#hackwithautomation #appsec #security #bugbounty
1
Note that the above might not be necessary as NUCLEI currently automatically checks for and does updates, unless you've disabled that explicitly via:
nuclei -duc [-disable-update-check]
#infosec #bugbounty