Carlos Mogas da Silva @r3pek@r3pek.org

RT @VOSTPT
ℹ️🛩️ A @VOSTPT associa~se aos #70AnosFAP da @fap_emfa, contribuindo com uma aplicação web que te vai permitir saber a lotação dos parques exteriores, no dia 3 de julho de 2022, dia do Festival Aéreo na Base N.º 11 de #Beja (distrito onde por vezes há #AgitaçãoMarítima

RT @omglinuxtv
Hurrah, @Zoom's Linux client can now screen share from Wayland sessions #linux #wayland https://www.omglinux.com/zoom-linux-can-now-screenshare-wayland/

RT @fap_emfa
Conheça as Patrulhas Acrobáticas do 70.º Aniversário da Força Aérea.

- Frecce Tricolori, da Força Aérea Italiana;
- “La Marche Verte” da Força Aérea Marroquina;
- “ASPA”, da Força Aérea Espanhola;
- Flying Bulls.

#ForçaAérea #70AnosFA #FestivalAéreo #AirShow

RT @fap_emfa
A Força Aérea faz 70 anos este ano e para celebrar vai dar cor aos ceús de Beja, a partir da Base Aérea N.º 11, com um Festival Aéreo, dia 3 de julho.

O evento é aberto ao público e todos os acessos serão brevemente divulgados.

Contamos consigo!
#ForçaAérea #70AnosFA #AirShow

RT @ptracesecurity
Active Directory & Red-Team Cheat-Sheet in constant expansion. https://github.com/RistBS/Awesome-RedTeam-Cheatsheet #Pentesting #ActiveDirectory #RedTeam #CyberSecurity #Infosec

RT @H3KTlC
you either die a hero or live long enough to switch to linux

RT @ptracesecurity
Recursive MMIO VM Escape PoC https://github.com/QiuhaoLi/CVE-2021-3929-3947 #Pentesting #CyberSecurity #Infosec

RT @ptracesecurity
CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation https://github.com/tr3ee/CVE-2022-23222 #Pentesting #Linux #Kernel #PrivilegeEscalation #CyberSecurity #Infosec

RT @hackthebox_eu
Time to answer the million-dollar question... 🥚

RT @0xBacco
Follina P2?

Wget the html payload as user = auto execute???

RT @an0n_r0
Reproduced the MS-MSDT Office RCE (on up-to-date Win10 and up-to-date Office 2019). Had some troubles with building the appropriate docx with external HTML reference, so quickly made some notes how to do it, step-by-step: https://gist.github.com/tothi/66290a42896a97920055e50128c9f040

RT @ErSurajShukla
7 Layer of OSI model with all Work Details :-
1) - Application
2) - Presentation
3) - Session
4) - Transport
5) - Network
6) - Data Link
7) - Physical Layers

#Linux #infosec #cybersecurity #cyber #infosecurity #Pentesting #nmap #cyberattack #ransomware #security #AWS #Linux

RT @KyleHanslovan
Curious what fetches the malicious HTML but can't find ms-msdt in the 05-2022-0438.doc file? Open that Word doc in 7zip (remember, it's just a zip file) and look inside document.xml.rels. Target points to the malicious RDF842l.html file that is d/l from the xmlformats[.]com C2.

RT @KyleHanslovan
For the detection engineers and hunters chasing MS-MSDT/#Follina, keep an eye on child processes with sdiagnhost.exe parent process. #BlueTeam 💙

RT @Hakin9
Linux Smart Enumeration - tool for pentesting and CTFs https://hakin9.org/linux-smart-enumeration/

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #network #CTF