Programm.r @thatCoding_Yogi

🛑 Malicious MCP servers can make AI coding agents exfiltrate SSH keys, .env secrets, source code, and customer data. The attack, dubbed “GhostSplice,” splits a request across MCP channels so no single fragment looks overtly malicious. In the researchers’ tests, splitting the request in two raised average compliance across 11 API-tested models from 42% to 82%. See how it works: thehackernews.com/2026/08/malici…

DEF CON 33 - Turning your Active Directory into the attackers C2. TL;DR: GPOs can turn Active Directory into a powerful C2 primitive. This talk dives into GPO internals, enumeration, persistence, privilege escalation, and advanced exploitation techniques.

A Detailed Guide on AI-Powered Nmap Using ShellGPT 🔥 Telegram: t.me/hackinarticles ✴ Twitter: x.com/hackinarticles ShellGPT brings the power of AI directly into your terminal, allowing you to generate Nmap commands, automate reconnaissance tasks, and simplify complex command-line operations using natural language prompts. 📚 What You’ll Learn in This Guide 🤖 Introduction to ShellGPT & AI-Assisted Pentesting ⚙️ Installing & Configuring ShellGPT 🔑 Setting Up OpenAI API Access 💻 Using Natural Language to Generate Nmap Commands 🔍 Host Discovery & Network Enumeration 📡 Port Scanning & Service Detection Automation 🛠️ Vulnerability Assessment with AI-Generated Commands 📋 Creating Custom Nmap Scan Profiles 🚀 Automating Reconnaissance Workflows 📊 Improving Productivity During Security Assessments 🧠 Best Practices for AI-Assisted Command Generation 🛡️ Security Considerations & Limitations of AI Tools 📖 Article: hackingarticles.in/ai-powered-nma… #CyberSecurity #Nmap #ShellGPT #AI #Eth

keyboard_arrow_left Previous keyboard_arrow_right Next

Can you spot the bypass technique? if you can't, don't worry about it, Just wait for the new challenges on pwnbox.io, they'll teach you :D

keyboard_arrow_left Previous keyboard_arrow_right Next

I did a video on alternative way to perform DCSync attack, and the best thing about it? It is C# assembly which easily can be obfuscated and used within any modern C2 framework. More details: youtu.be/nCA7h71dLTk

BruteForceAI Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks Credit/Resource: github.com/MorDavid/Brute…

Pass-the-Certificate: Lateral Movement Technique 🔥 Telegram: t.me/hackinarticles ✴ Twitter: x.com/hackinarticles Pass-the-Certificate is an advanced post-exploitation technique where attackers use X.509 certificates (.pfx) to authenticate instead of passwords or NTLM hashes. ⚡ Key Features 🎟️ Authentication using PFX certificates 🔐 Leverages Kerberos PKINIT (certificate-based login) 💻 Works with NetExec & Impacket tools 🚀 Lateral movement via SMB, WMI, WinRM & MSSQL 🖥️ Remote access using Evil-WinRM ⚡ Supports certificate → CCACHE conversion 🕵️ Stealthy & hard to detect 💡 Attackers can use stolen or forged certificates to request Kerberos TGTs and access domain systems without credentials, enabling seamless lateral movement across Active Directory. 📖 Article: hackingarticles.in/lateral-moveme… #CyberSecurity #EthicalHacking #RedTeam #Pentesting #ActiveDirectory #Kerberos #LateralMovement #InfoSec

keyboard_arrow_left Previous keyboard_arrow_right Next

armourinfosec/wireless-security-and-wifi-penetration-testing: Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0. github.com/armourinfosec/…

More than just an agent harness for pentesting, yet lightweight and transparent. github.com/BuFuuu/shiftgr…

illiahaidar/mcptrustchecker: MCP security scanner — offline, deterministic A–F Trust Score for Model Context Protocol servers. Detects tool poisoning, prompt injection & toxic flows. github.com/illiahaidar/mc…

They Broke the Story on Flock Leaking Cops' License Plate Searches. Ask Them Anything. open.substack.com/pub/pwnhackers…

SpotifyC2 github.com/NirvanaOn/Spot…

SMB Password Cracking 🔥 Telegram: t.me/hackinarticles ✴ Twitter: x.com/hackinarticles Open SMB services can expose systems to credential attacks. Weak passwords allow attackers to gain initial access and pivot deeper into the network. ⚡ Common Tools 🛠️ Metasploit (smb_login) ⚡ NetExec (CrackMapExec successor) 🔥 Hydra (fast brute-force tool) 📡 Patator & BruteSpray (automation) 💡 SMB authentication often relies on weak or reused credentials, making it a prime target for brute-force and dictionary attacks. 📖 Article: hackingarticles.in/smb-password-c… #CyberSecurity #EthicalHacking #RedTeam #Pentesting #SMB #PasswordCracking #InfoSec

keyboard_arrow_left Previous keyboard_arrow_right Next

Get Started with QUIC and HTTP/3 We are all familiar with HTTP/1 and HTTP/2. But soon the web will be on HTTP/3, and we need to stay ahead of these changes. So, we prepared an article that describes what HTTP/3 is and what it looks like: hackers-arise.com/network-securi…

🛡️ Nmap for Pentester: Vulnerability Scan 🔥 Telegram: t.me/hackinarticles Nmap can perform basic vulnerability detection using the Nmap Scripting Engine (NSE). These scripts help pentesters identify known vulnerabilities in services running on a target system. ⚡ Vulnerability checks covered: 💥 MS17-010 (EternalBlue) 📁 vsFTPd 2.3.4 Backdoor 🔐 SSL POODLE Vulnerability ☕ Java RMI Classloader Vulnerability 🌐 HTTP Slowloris Vulnerability 🔓 SSL CCS Injection 🧠 Nmap Vulners Script Integration 🎯 NSE scripts allow security testers to automate vulnerability discovery and quickly identify exploitable services during reconnaissance. 📖 Read the full guide: hackingarticles.in/nmap-for-pente… #CyberSecurity #Pentesting #Nmap #VulnerabilityScanning #RedTeam #InfoSec #HackingArticles 🚀

keyboard_arrow_left Previous keyboard_arrow_right Next

Looking for open-source contributors. Apache 2.0.

Lateral Movement: Enabling RDP Remotely hackingarticles.in/lateral-moveme…

Driver Reverse Engineering 101 - Unpacking a VMProtected Kernel Driver eversinc33.com/2025/11/21/dri…

Hackers have been found using code camouflage techniques, hiding malware code within PNG image files to release malware.

IDA Pro plugin for LLM-powered reverse engineering github.com/symgraph/IDAss…