Notcoin Community

Whale Chanel

Паглядзець

Proxy MTProto | پروکسی

Паглядзець

Волосатый бублик

All credits to authors.

Рэйтынг TGlist

ТыпПублічны

Вертыфікацыя

Не вертыфікаваны

Надзейнасць

Не надзейны

РазмяшчэннеРосія

МоваІншая

Дата стварэння каналаFeb 21, 2020

Дадана ў TGlist

May 23, 2024

Я ўладальнік канала

Гісторыя змяненняў

Прыкрепленая група

Волосатый Public

Статыстыка Тэлеграм-канала Волосатый бублик

Падрабязней

Падпісчыкаў

6 983

24 гадз.

30%Тыдзень

10%Месяц

10-0.1%

Індэкс цытавання

0

Згадкі0Рэпостаў на каналах0Згадкі на каналах0

Сярэдняе ахоп 1 паста

1 051

12 гадз.1 0510%24 гадз.1 0510%48 гадз.1 0510%

Узаемадзеянне (ER)

1.33%

Рэпостаў13Каментары0Рэакцыі1

Узаемадзеянне па ахопу (ERR)

15.04%

24 гадз.0%Тыдзень

1.51%Месяц

37.97%

Ахоп 1 рэкламнага паста

1 051

1 гадз.1 051100%1 – 4 гадз.00%4 - 24 гадз.00%

Падрабязней

Падключыце нашага бота да канала і даведайцеся пол аўдыторыі гэтага канала.

Усяго пастоў за 24 гадзіны

2

Дынаміка

Апошнія публікацыі ў групе "Волосатый бублик"

Усе пасты

10.02.202512:20

[ Top 10 web hacking techniques of 2024 ]

By PortSwigger Research team

https://portswigger.net/research/top-10-web-hacking-techniques-of-2024

09.02.202514:30

[ Kerberos Relaying ]

Picture source.

Please ask this question on the job interview and expect a full answer from junior penetration tester with 3 HTB labs of experience.

08.02.202501:27

🚨 The wait is finally over 🚨

Evilginx Pro is launching on February 25th 2025 🔥🪝🐟

It's been a long ride, but it's finally happening!

Official website: https://evilginx.com
What's new: https://help.evilginx.com/pro/whats-new

Stay tuned!

05.02.202516:05

[ Active Directory Domain Services Elevation of Privilege Vulnerability New — CVE-2025-21293 ]

«Network Configuration Operators» group privilege escalation

CVE: https://www.cve.org/CVERecord?id=CVE-2025-21293

MSRC: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21293

Blog with a PoC code: https://birkep.github.io/posts/Windows-LPE

29.01.202511:38

23.01.202502:56

22.01.202503:46

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298

Обновляться, писять и спать!

Обновление все равно будет кривым, нервничать бесполезно, а писять и спасть всегда полезно.

13.12.202415:06

🤙🤙🤙

11.12.202419:10

😼

11.12.202419:00

‼️NEW ORANGE TSAI RESEARCH‼️https://worst.fit‼️

Preprint version of our research: https://worst.fit/assets/EU-24-Tsai-WorstFit-Unveiling-Hidden-Transformers-in-Windows-ANSI.pdf

A detailed blog is on the way, but in the meantime, check out the pre-alpha website https://worst.fit for early access and the slides!

https://x.com/orange_8361/status/1866868458883088487

11.12.202418:01

#dcom #lateral

[ Forget PSEXEC: DCOM Upload & Execute Backdoor ]

An advanced lateral movement technique to upload custom payloads to a victim, load them to a service, execute them and receive the execution result.
Time to forget PSEXEC (and MMC20.Application) and dive into the future of lateral movement!

https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor

GitHub: https://github.com/deepinstinct/DCOMUploadExec

11.12.202414:50

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability

Да что ж происходит?! Новогодние чудеса, не иначе!

11.12.202414:43

- https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49112

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Мммм, вкуснятина )

04.12.202407:13

Veeam Service Provider Console Vulnerabilities
(CVE-2024-42448 | CVE-2024-42449)

From the VSPC management agent machine, under the condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution (RCE) on the VSPC server machine.

https://www.veeam.com/kb4679

24.10.202418:05

You already know about CVE-2024-47575, right? RIGHT?

[ FortiManager Zero-Day (CVE-2024-47575) ]

FortiManager fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests (critical) / aka FortiJump.

From Vendor: https://www.fortiguard.com/psirt/FG-IR-24-423

From Mandiant: https://cloud.google.com/blog/topics/threat-intelligence/fortimanager-zero-day-exploitation-cve-2024-47575

Усе пасты

Рэкламаваўся0 секунда

0

04.02.202521:23Бінарний XOR

1.2K

Падрабязней

Рэкорды

25.01.202523:59

7K

Падпісчыкаў

23.05.202423:59

0

Індэкс цытавання

25.01.202523:59

3.5K

Ахоп 1 паста

31.01.202523:59

3.5K

Ахоп рэкламнага паста

10.02.202513:13

6.35%

23.01.202523:59

50.75%

ERR

Развіццё

Падрабязней

Падпісчыкаў

Індэкс цытавання

Ахоп 1 паста

Ахоп рэкламнага паста

ERR

Падрабязней

Папулярныя публікацыі Волосатый бублик

Усе пасты

10.02.202512:20

[ Top 10 web hacking techniques of 2024 ]

By PortSwigger Research team

https://portswigger.net/research/top-10-web-hacking-techniques-of-2024

05.02.202516:05

29.01.202511:38

09.02.202514:30

[ Kerberos Relaying ]

Picture source.

Please ask this question on the job interview and expect a full answer from junior penetration tester with 3 HTB labs of experience.

08.02.202501:27

Увайдзіце, каб разблакаваць больш функцый.