Dad-Husband-Vet-Passwords 🧍🤵🇺🇸🤫 Operator Handbook: https://xitter.cf/t.co/Wbst8aQZYH Hash Crack: https://xitter.cf/t.co/3auNNKgcAV
NoVA
Joined July 2011
- Tweets1.5K
- Following860
- Followers5.1K
- Likes1.8K
Netmux retweeted
NetNTLMv1 is dead. Long live NetNTLMv1. 🌈
Today we're releasing NTLMRain: recovering NT hashes from NetNTLMv1 responses.
🌐 Browser-based cracking
⌨️ Cross-platform CLI with GPU/CPU support
💾 Searchable tables that fit on a 4 TB disk
Read the blog: outflank.nl/blog/2026/09/08/…
Netmux retweeted
Updated Corporate Masks for red team/pentesters looking to get higher cracking rates without needing a 6 figure GPU rig: github.com/golem445/Corporat…
Netmux retweeted
INTEL DROP
CyberStrikeAI C2 panels in the Total Insights Feed jumped significantly mid-July. Most of that growth is two freshly stood-up blocks, one in Hong Kong and one in the US, each lit up across eight sequential /24s.
156.250.196.0/24 +28 observed
156.250.157.0/24 +26 observed
156.250.184.0/24 +26 observed
156.250.208.0/24 +26 observed
156.250.210.0/24 +26 observed
156.250.206.0/24 +25 observed
156.250.205.0/24 +24 observed
156.250.207.0/24 +22 observed
38.6.101.0/24 +19 observed
38.6.103.0/24 +19 observed
38.6.108.0/24 +18 observed
38.6.96.0/24 +18 observed
38.6.107.0/24 +16 observed
38.6.109.0/24 +16 observed
38.6.126.0/24 +16 observed
38.6.104.0/24 +15 observed
**IP's in 38. CIDRs are also hosting PentAGI, possibly tied to that service. Ranges hosting domains that have been blocked from transfer.
Neither block was in our feed a month ago.
#TotalInsights #ThreatIntel #CyberStrikeAI #C2
team-cymru.com/total-insight…
🤖 Made with AI
Netmux retweeted
🔧 Top 25 Tools Observed - Team Cymru - S2
Ranked by unique source IPs over 14 days:
1. Nessus: 2,844
2. Asset Recon Lighthouse: 2,595
3. GoPhish: 2,044
4. Metasploit: 1,247
5. Interactsh: 863
6. CobaltStrike: 673
7. Burp Collaborator: 667
8. Sliver: 416
9. QuasarRAT: 204
10. RemcosRAT: 189
11. reNgine: 185
12. asyncrat: 170
13. SuperShell: 167
14. Mythic: 150
15. Vidar: 142
16. PlugX: 142
17. ValleyRAT: 136
18. Hashtopolis: 134
19. CyberStrikeAI: 117
20. Havoc: 117
21. Vshell: 102
22. AdaptixC2: 101
23. Stealc: 86
24. Ligolo-ng: 78
25. XWorm: 76
#threatintel #c2 #malware
Netmux retweeted
A password like G7$kL9#mQ2&xP4!w looks strong.
Every password checker rates it "excellent."
But researchers at Irregular just published something worth knowing: that exact string appeared 18 out of 50 times when Claude was asked to generate a password.
The reason: LLMs are prediction engines. They're optimized for plausibility, not randomness. Claude's passwords had ~27 bits of entropy. A truly random password has ~98.
Password checkers can't detect this. They see character variety. They can't see statistical distribution.
It gets worse for developers: Irregular also found AI coding agents hardcoding these patterns directly into Docker configs and .env files — without the developer knowing.
They found the patterns on GitHub.
Are you auditing AI-generated codebases for hardcoded credentials?
#CyberSecurity #PasswordSecurity #DevSecOps #AppSec
Author: T.O. Mercer
Netmux retweeted
You require more passwords 👾 . Finally, released breach.txt, a wordlist built from real-world passwords found in breaches, forum dumps, leaked logs, and other "sources".
weakpass.com/wordlists/breac…
Will try to keep it up-to-date, at least for some time 😀
#infosec
Netmux retweeted
A very big hashcat rules collection with 455 rulesets: github.com/ibnaleem/rules/
Spreadsheets with benchmarks on how these rules score:
🟢docs.google.com/spreadsheets…
🟢docs.google.com/spreadsheets…
Netmux retweeted
First look at the dynamic hash-mode support in upcoming hashcat, powered by the new Rust Bridge. No coding needed: write your pattern on the command line.
Don't want to wait for Release? Try it now via GitHub master or hashcat.net/beta. Feedback welcome on our Discord
Who’s going to be brave enough to name their four kids Syn, Synack, Ack, and Fin? Bonus points for the parent with the initials TCP.
Helping coordinate and present at this event 😃Folks in NoVA or DMV that are interested please ping me. I’d love to link up.
This quoted post is unavailable.
Netmux retweeted
Complete @hashcat benchmarks on the @NVIDIAGeForce RTX 5090 FE! Running nice and cool so far with solid improvements across the board. Most hash modes got at least a 20% uplift over the RTX 4090 and some modes boasting quite a bit more!
Full Benchmark: gist.github.com/Chick3nman/0…
ALT Hashcat v6.2.6-851 Benchmark on the RTX 5090, hand tuned to show ideal performance.
Absolutely fantastic read! The first book in years I couldn’t put down til I was finished.
Thanks @bquintero and the founding @virustotal team!
Netmux retweeted
Just wrote a blog entry looking into John the Ripper's new Tokenize attack mode and comparing it to other attacks. Lots of side tangents as well such as using Hashmob wordlists for cracking sessions, and a deep dive into Hashcat Utilities. Link: reusablesec.blogspot.com/202…
Netmux retweeted
Meet 𝘄𝗲𝗮𝗸𝗽𝗮𝘀𝘀_𝟰! 🕵️♂️
After three years, I'm finally excited to announce the release of 𝘄𝗲𝗮𝗸𝗽𝗮𝘀𝘀_𝟰 and a brand-new website packed with features! Check it out at weakpass.com.
Netmux retweeted
Here’s a short write-up covering some research Ian Odette (@wikibinge) and I conducted so that our team would have a documented method for cracking Citrix NetScaler system user passwords.
github.com/CDW-OffSec/NetSca…
Netmux retweeted
New blog up: "What a Cluster! How Industry Groups and Names Threat Activity Clusters". I decided there was a need for it since we are more regularly talking about UNCs and STACs these days and it can be confusing for those just getting into #cti.
medium.com/@Shinigami42/what…
