☠️ Web Cache Poisoning ☠️ - is an attack where a hacker manipulates HTTP requests to store malicious or incorrect content in a web cache or CDN.

👉 As a result, all users who later access the cached page receive the poisoned version, potentially leading to mass XSS, phishing, or content manipulation.

👉 Read more about: Here

🤖 Prompt Injection Methodology for GenAI Application Pentesting 🤖

👉 Get Started: Here

#AI #Pentest #Red_Team

🛠️ SSH Tunnels: Port Forwarding on Steroids 🛠️

🔸 A short Cheat Sheet to help you understand SSH tunneling.

#ssh_tunneling #pentest #red_team

⛔ Microsoft: DNS outage impacts Azure and Microsoft 365 services ⛔

Microsoft is suffering an ongoing DNS outage affecting customers worldwide, preventing them from logging into company networks and accessing Microsoft Azure and Microsoft 365 services.

☠️ Evading Elastic Security - Deep dive into bypassing detections through string obfuscation, symbol randomization, XOR-encoded fragments & behavioral evasion techniques. ☠️

Here 👉 https://matheuzsecurity.github.io/hacking/bypassing-elastic

#infosec #redteam #linux #rootkit #elastic #malware

🧨 The Top 10 Most Dangerous Web3 Vulnerabilities Right Now 🧨

🔸 Access Control Vulnerabilities
🔸 Price Oracle Manipulation
🔸 Logic Errors
🔸 Lack of Input Validation
🔸 Reentrancy Attacks
🔸 Unchecked External Calls
🔸 Flash Loan Attacks
🔸 Integer Overflow and Underflow
🔸 Insecure Randomness
🔸 Denial of Service (DoS) Attacks

Details: 👉 Here

⚠️ How To Secure A Linux Server. ⚠️

This guides purpose is to teach you how to secure a Linux server.
There are a lot of things you can do to secure a Linux server and this guide will attempt to cover as many of them as possible.

👉 Read more - Here 👈

#info_sec #linux #hardening

Top virtual machines for Cybersecurity Engineers.

#info_sec #Red_Team #pentest_OS

Host-Pulse - a fast, lightweight domain liveness probe for pentesters and security engineers.

Scans large domain lists, quickly skips dead targets, detects reachable hosts (including 403/401/5xx), and produces clean alive.txt and compact results.csv reports.

Tool: 👉 https://github.com/xV4nd3Rx/Host-Pulse

⚡ Fast-skip dead targets.
🎯 Alive logic tuned for pentesting
🧩 Randomized User-Agent per request to avoid simple UA-based filtering.
🔁 Parallel workers + controlled delays
🔐 Insecure HTTPS requests are supported (suppressed warnings) so scanning continues even with untrusted certs

#pentest_tools #Red_Team #cybersecurity #Passive_Recon

👉 I believe the Telegram channel should bring real value to subscribers. 👈

💥 New column for Monday: Job Offers. 💥

As a Senior Security Engineer, become part of a cross-functional development team engineering experiences of tomorrow. We are seeking a highly skilled and motivated Senior Security & Penetration Tester.

In this role, you will be responsible for identifying and mitigating security vulnerabilities in a project in the biomedicine field. You will proactively test our applications, including infrastructure, ensuring our digital assets are secure against emerging threats.

💬 For details, please contact me via direct: @V4nd3R 💬

#cybersecurity_career #job_offers #security

🛠️ How digital signatures works? 🛠️

#info_security #cryptography #integrity

C2 techniques used by hackers.

#ThreatHunting #DFIR #SOC

🔥 SPF Attacks: Quick Overview

1️⃣ Alignment Bypass
SPF checks MAIL FROM, not the visible From - easy spoofing.

2️⃣ SoftFail Abuse
~all / ?all often deliver anyway.

3️⃣ Lookalike Domains
Fake domains with valid SPF look legit.

4️⃣ DNS Poisoning (no DNSSEC)
SPF TXT records can be spoofed.

5️⃣ Macro Abuse
Macros leak info or behave unpredictably.

6️⃣ Oversized SPF
>10 lookups → PermError → sometimes treated as pass.

7️⃣ Subdomain Takeover / Abuse
Forgotten subdomains with weak policies.

8️⃣ Trusted Sender Hijack
Compromised authorized mail services = SPF pass.

💡 Takeaway

SPF alone is weak. Use DKIM + DMARC enforcement.

🚨 110+ Splunk Queries for SOC Analysts ⚡

Collection of real-world detection queries a goldmine for SOC analysts, threat hunters, and blue teamers.

#SOC #Blue_Team #security

☠️ EVADING EDR ☠️

The Definitive Guide to Defeating Endpoint Detection Systems.

#Offensive #Red_Team #penetration_testing

🧨 This github repository contains a collection of 150+ tools and resources that can be useful for red teaming activities. 🧨

Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context.

Get it 👉 Here

#Offensive #Red_Team #penetration_testing

🛠️ Security Operations Centre 🛠️

Exploring this SOC Analyst guide really highlights how critical structured security operations are in today’s evolving threat landscape.

#SOC #Blue_Team #Cyber_Sec