hackerfantastic.crypto
@hackerfantastic.bsky.social
Co-Founder https://hacker.house cyber security assurance & hacker training ~ ISBN9781119561453 ~ a book on professional hacking. Contact for competitive quotes on cyber security projects.
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root thehackernews.com/2026/07/crit...
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
OpenWrt 24.10.8 fixes CVE-2026-53921, a critical odhcpd stack overflow triggered by crafted DHCPv6 requests that could enable code execution.
thehackernews.com
Inference Fuzzing with Recursive Prompting: A Practical Methodology for LLM-Driven Code Audits
Hacker House - Cybersecurity Services & Expertise
Hacker House provides leading cybersecurity services, expert consulting, and security training for organizations worldwide.
hacker.house
Unreal Tournament (2004/1999) Multiple Vulnerabilities in Uri and Argument Handlers result in Arbitrary Code Execution [0day] - hacker.house/services - Patches are being made available. Advisory on HH github.
MoneroMiner - A lightweight, high-performance Monero (XMR) CPU miner using the RandomX proof-of-work algorithm. Designed for maximum efficiency and cross-platform compatibility. github.com/hackerhouse-...
GitHub - hackerhouse-opensource/MoneroMiner: A high-performance Monero (XMR) mining implementation in C++ using the RandomX algorithm. This miner is optimized for modern CPUs and provides efficient mi...
A high-performance Monero (XMR) mining implementation in C++ using the RandomX algorithm. This miner is optimized for modern CPUs and provides efficient mining capabilities with a simple command-li...
github.com
bitchat-esp32: A minimal implementation of bitchat for use on ESP32-C6 based devices. github.com/hackerhouse-...
For more than a year I’ve spoken with Scattered Spider “caller” Noah Urban from a Florida jail. I wanted to know how they chose victims, their methods and how Noah became entangled in a virtually and physically violent world. We’re publishing his story today: www.bloomberg.com/news/feature...
‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker
Noah Urban’s role in the notorious Scattered Spider gang was talking people into unwittingly giving criminals access to sensitive computer systems.
bloomberg.com
The U.S. Treasury Department has sanctioned Funnull Technology, a Philippines-based company that supports hundreds of thousands of malicious websites behind cyber scams linked to over $200 million in losses for Americans.
US sanctions firm linked to cyber scams behind $200 million in losses
The U.S. Treasury Department has sanctioned Funnull Technology, a Philippines-based company that supports hundreds of thousands of malicious websites behind cyber scams linked to over $200 million in losses for Americans.
bleepingcomputer.com
Exploiting MS-TNAP, 1-click, no prompts.
We released three advisories on Microsoft Telnet Server & Client, targeting MS-TNAP vulnerabilities. 1️⃣ Guest Restriction Bypass (CVSS 7.5) 2️⃣ MS-TNAP Mutual Auth Protocol Issue: Non-exploitable config/protocol issue. 3️⃣ Telnet Client PoC: Exposes MS-TNAP risks e.g. phishing. #Cybersecurity
Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit github.com/hackerhouse-...
Hacker House exposes flaws in Microsoft Telnet Server! Two advisories reveal a high-severity Guest Access Bypass (CVSS 7.5) in MS-TNAP, risking unauthorized access on Windows 2000 to Server 2008 R2, and an unexploitable NTLM mutual auth issue github.com/hackerhouse-... & github.com/hackerhouse-...
github.com
Interesting that the cyberbeat journalists wrote multiple news articles about a fake exploit of this recent bug. It's fine though, I almost fell for this AI generated crap too, just like the fake TaskScheduler UAC Bypass you all wrote about. ;-) cyberdom.blog/abusing-the-...
Abusing the Windows Update Stack to Gain SYSTEM Access (CVE-2025-21204)
The CVE-2025-21204 is precisely that kind of vulnerability. It doesn't require a zero-day exploit or complex memory corruption chain. It doesn't need a phishing campaign or a dropped malware loader. A...
cyberdom.blog
hackerfantastic.crypto@hackerfantastic.bsky.social · last yr.Exploitation of CVE-2025-21204. Low-privileged user creates an "inetpub" and populates with content. Administrator later installs IIS (logic bomb). The attackers malicious IIS data is still available, executes code under IIS privileges resulting in an LPE. KB/patches do stuff too
I found this article interesting, but it isn't technically a UAC bypass - if you have the Administrator username and password, you can authenticate to the host via TaskScheduler by design. The other vulnerabilities were also not really of any value to an attacker. cymulate.com/blog/task-sc...
Task Scheduler– New Vulnerabilities for schtasks.exe
UAC bypass, metadata poisoning, and log overflow vulnerabilities in Windows Task Scheduler reveal new tactics for defense evasion and privilege escalation
cymulate.com
Department of Homeland Security Secretary Kristi L. Noem’s purse was stolen from a downtown Washington restaurant Sunday night, with her passport, DHS badge and about $3,000 cash inside, the department confirmed Monday.
DHS Secretary Noem’s purse stolen at Easter dinner with family in D.C.
The theft occurred as Homeland Security Secretary Kristi L. Noem dined with her extended family at the Capital Burger on Seventh Street NW, people familiar with the incident said.
washingtonpost.com
This morning Minnesota Republicans introduced a bill banning mRNA vaccines and labeling them "weapons of mass destruction." It would make manufacturing, possessing or administering them a crime punishable by up to 20 years in prison. www.revisor.mn.gov/bills/bill.p...
Zhuowei Zhang released POC code for CVE-2024-53104, a zero-day used by Cellebrite to unlock Android devices -patched in February -used by Serbian law enforcement to unlock the phones of anti-government protesters and journalists github.com/zhuowei/face...
facedancer/examples/camera.py at rawgadget2 · zhuowei/facedancer
Fork of https://github.com/xairy/Facedancer/tree/rawgadget with patches for testing CVE-2024-53197 - zhuowei/facedancer
github.com
Mikrotik "opensesame" SNMP backdoor. Tutorial on how to create a backdoor modelled on EXTRABACON that resets the admin password using a UDP packet (SNMPset) as a post-exploitation technique. github.com/hackerhouse-...
Exploitation of CVE-2025-21204. Low-privileged user creates an "inetpub" and populates with content. Administrator later installs IIS (logic bomb). The attackers malicious IIS data is still available, executes code under IIS privileges resulting in an LPE. KB/patches do stuff too
Mikrotik "opensesame" SNMP backdoor. Tutorial on how to create a backdoor modelled on EXTRABACON that resets the admin password using a UDP packet (SNMPset) as a post-exploitation technique. github.com/hackerhouse-...
NEW: A secretive surveillance company is building "AI persona" bots for cops intended to gather evidence on people. Personas include "college protesters," "radicalized" divorced moms, children. We have docs that shows how it works and what cops can do with it: www.404media.co/this-college...
This ‘College Protester’ Isn’t Real. It’s an AI-Powered Undercover Bot for Cops
Massive Blue is helping cops deploy AI-powered social media bots to talk to people they suspect are anything from violent sex criminals all the way to vaguely defined “protesters.”
404media.co
Exploitation of CVE-2025-21204. Low-privileged user creates an "inetpub" and populates with content. Administrator later installs IIS (logic bomb). The attackers malicious IIS data is still available, executes code under IIS privileges resulting in an LPE. KB/patches do stuff too
my takeaway from reading this is that i have to assume that every half-competent intelligence agency in the world has an almost real-time glimpse into what the white house and the pentagon are doing
jamelle@jamellebouie.net · last yr.holy shit www.theatlantic.com/politics/arc...
CISA has told workers in an email today to stop sending weekly responses to Musk's "What did you do last week?" email. The agency says it's still reviewing responses received to the initial Feb 28 email, and workers should withhold any additional responses "until further notice."
Breaking: Apple pulls end-to-end encrypted storage option from UK after secret order for a back door. www.washingtonpost.com/technology/2...
Apple yanks encrypted storage in U.K. instead of allowing backdoor access
Apple disabled its most secure data storage offering for new customers in the United Kingdom on Friday rather than comply with a secret government order.
washingtonpost.com
An unknown leaker has released what they claim to be an archive of internal Matrix chat logs with messages exchanged by Black Basta ransomware members between September 18, 2023, and September 28, 2024. www.bleepingcomputer.com/news/securit...
Black Basta ransomware gang's internal chat logs leak online
An unknown leaker has released what they claim to be an archive of internal Matrix chat logs belonging to the Black Basta ransomware operation.
bleepingcomputer.com
