🛡️ Ciberseguridad | 🐧 Linux | ⚙️ Herramientas El recurso definitivo para SysAdmins y Pentesters. "sudo follow esgeeks" 👇

Joined February 2017
Manual de privacidad para gente normal: 22 capítulos, rutas exactas para Android, iPhone, Windows y Mac, y qué hacer si ya te hackearon. PDF + 3 bonos, 30 días de garantía. 9,99 USD hasta el 1 de octubre. #privacidad #ciberseguridad #anonimato 👉 esgeeks.com/anonimato-platin…
10
1,159
🕵️‍♂️⏳🔍 StrataScan | Historia web convertida en superficie de ataque Los archivos no olvidan. Los defensores sí. Reconstruye cada snapshot histórico de un dominio, encuentra secretos congelados y verifica qué sigue vivo hoy. Pipeline de 47 fases, +200 capacidades, reportes listos.
1
4
249
🛡️📡🔍 NetSpecter | Exposición real de tu sistema en vivo ¿Qué procesos y puertos tiene tu máquina abiertos ahora mismo? Monitorea en tiempo real puertos, exposición de red y actividad de procesos, clasificando el riesgo y alertando solo los cambios respecto a tu baseline.
1
6
411
🐞 Iniciamos la segunda sesión del Curso Análisis Forense + IA 🪲 📲 WhatsApp: wa.me/reydes 🌎 Información: reydes.com/e/Curso_Analisis_…
3
5
6
644
Es Geeks retweeted
⚡️Android Pentest Checklist ✅Download Full PDF - t.me/brutsecurity/1317 #android #BugBounty #cybersecurity #infosec
1
3
499
github.com/thecybergeek/php2… php2shell OOM in mod_php (CVE-2026-109618): the fake-HashTable fire only runs ~14-byte commands, too short for a shell. Poison a PHP session via upload_progress with , then exec in 11 bytes: php /tmp/s* www-data shell. Full PoCs in my github repo! #php2shell #CVE #InfoSec #PHP #RCE
9
2
63
6,338
Es Geeks retweeted
🎯𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗜𝗣 + 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 = 𝗛𝗶𝗴𝗵-𝗖𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 ​ 🌐 DeviceNetworkEvents → Remote IP matches a GreyNoise-tagged 𝗽𝗵𝗽𝟮𝘀𝗵𝗲𝗹𝗹 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿 🛡️ DeviceTvmSoftwareVulnerabilities → The same endpoint has a 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 𝗶𝗻𝘀𝘁𝗮𝗻𝗰𝗲 ​ Put them together: 𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 → 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗲𝗻𝗱𝗽𝗼𝗶𝗻𝘁 → 𝗛𝗶𝗴𝗵-𝗰𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 🔥 ​ When both conditions are observed, the signal becomes significantly more actionable for defenders. This is a good candidate for a 𝗰𝘂𝘀𝘁𝗼𝗺 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 + 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗱𝗲𝘃𝗶𝗰𝗲 𝗶𝘀𝗼𝗹𝗮𝘁𝗶𝗼𝗻, helping defenders move quickly from threat intelligence to containment while investigation and remediation take place. ​ PHP2Shell ThreatLock KQL: detections.ai/share/rule/I4G… ​ #Threathunting
6
35
2,463
Es Geeks retweeted
Tails 7.15.1 is out: tails.net/news/version_7.15.…
3
34
1
199
4,782
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library. CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript. What you need to know ↓ thehackernews.com/2026/10/cr…
22
81
18
389
59,513
Es Geeks retweeted
UAF vulnerability in Samsung's Android kernel (@LucidBitLabs) lucidbitlabs.com/blog/when-d… #infosec
13
71
3,494
#Kimsuky (APT-C-55) is delivering persistent backdoors through multilingual LNK phishing lures After reading the 360 Threat Intelligence Center's report on APT-C-55's multi-path delivery campaign, we found a cluster of nine related malicious LNK files submitted between September and October 2026, with detection ratios around 10-30 out of 60+ engines. The LNK files execute a layered attack chain: base64-encoded batch scripts decoded via a renamed copy of certutil.exe, staging in C:\Users\Public, nircmd disguised as ntoskrnl.exe, and scheduled tasks running every 9 minutes for persistence. A parallel variant uses PowerShell with double hex-encoded payloads, and a third path poisons the open-source pybroker Python library as a supply chain attack. Analysis & IOCs: github.com/NextronSystems/io…
11
1
45
3,774
Es Geeks retweeted
Networking in Linux - A Detailed Guide to VPN Kill Switches In the previous guide in our Networking in Linux series, we followed a packet through a VPN tunnel and saw how WireGuard encrypts and encapsulates our traffic before sending it over the physical network. But what happens if the VPN connection suddenly goes down? Under normal circumstances, Linux can reach the internet through our physical network interface. If the VPN tunnel disappears, what's stopping Linux from simply using that interface again and sending our traffic outside the VPN? That's where a VPN kill switch comes in. In this final part of our Networking in Linux series, we'll explore how Proton VPN's Standard Kill Switch works under the hood. We'll examine Linux network interfaces and routing tables to understand what happens when the VPN server becomes unreachable, when the tunnel interface disappears unexpectedly, and when we intentionally disconnect from the VPN. Learn more in this guide: blog.sysxplore.com/p/ep4-net…
2
5
42
2,828
⚠️ LiteLLM’s release pipeline was hijacked. Malicious v1.107.0 packages shipped a credential stealer and backdoor. Attackers later tested stolen AWS credentials. LiteLLM suspects GitHub OAuth tokens were taken from logs on its exposed internal deployment. Read ↓ thehackernews.com/2026/10/li…
26
60
14
196
42,645
🎯🔍🛠️ TikTap | OSINT de TikTok + 75 plataformas en pure Bash Un solo username de TikTok y obtienes más de 40 puntos de datos del perfil más enumeración cruzada en 75+ sitios. #osint #ciberseguridad #redteam #ethicalhacking #tiktok #recon #infosec
1
1
455
Motor de veredicto con scoring de confianza, anti-bot awareness, Wayback, TLS, DNS y generador de 60+ dorks. Todo en Bash puro, compatible con Termux y sin runtimes pesados. Para investigadores OSINT y pentesters en objetivos autorizados. github.com/sylhetyhackvenger…
70