0x6rss
@0x6rss • 18,713 subscribers
OSINT & malware enthusiast, CTI analyst https://t.co/bktDzzYyfz
Shorts
Videos
daha önce paylaşmıştım ama yine paylaşayım. bu durumda teknik olarak hesaba sızan kişinin; - IP adresine dayalı konumu (p2p açıksa)+port -çalınan hesaba kaç cihazın bağlı olduğu -sızan kişinin mobilde mi wifi ağında mı olduğu -sızan kişinin işletim sistemine dair info (iphone-android-web vb) gibi bilgileri tek bir sesli aramayla(cevaplandığı takdirde) elde edebilirsiniz. repo:
0x6rss149,649 просмотров • 1 месяц назад
🔥Hi OSINTers, Identify the followers and followed accounts that a private Instagram profile interacts with. I built Instagram Private Graph powered by my own algorithm to uncover a large portion of the followers and followed accounts linked to private Instagram profiles. ➡️GitHub:
0x6rss98,581 просмотров • 1 месяц назад
this is probably a caller ID spoofing call (yes, in most cases, calls can be made from the requested number.)
0x6rss113,427 просмотров • 3 месяцев назад
hatırlarsanız geçtiğimiz yaz BtcTürk'teki cüzdanlar hedef alınarak yaklaşık 45-50 milyon dolarlık bir siber saldırı gerçekleşmişti. Düzgün 'ın geliştirdiği PusulaTrace isimli algoritmik model, bu saldırının Kuzey Kore ilişkili Lazarus APT grubuna atfetdildiğini önemli ölçüde kanıtlar nitelikte. 👇
0x6rss14,887 просмотров • 16 дней назад
I searched for my username in underground telegram channels😀
0x6rss115,530 просмотров • 10 месяцев назад
❤️🔥❤️🔥❤️🔥Hi threat hunters and malware analysts! The weaponized web version of Matkap is now open source! Level up your hunt for malicious Telegram bots! -View reports and tweets about Telegram bots being used as C2 infrastructure directly in the panel, and extract IOCs. -Use JADX MCP to extract Telegram bot tokens and chat IDs from Android malware. -Scrape bot tokens from web addresses indexed by urlscan, ThreatFox, and ZoomEye. -Pull malware samples that use Telegram bots directly from MalwareBazaar. All in one panel. Happy hunting!
0x6rss25,733 просмотров • 2 месяцев назад
meet track2pulse enables you to monitor, via an interactive map, OSINT-driven intelligence streams aggregated from country-specific telegram channels, covering topics such as geopolitics, information warfare, domestic developments, and strategic shifts. you can track: -APT group activities targeting specific countries -Terror-related fatality data and organizational intelligence -Critical infrastructure across relevant geographic regions -The Interpol wanted persons list -War-related flights and aircraft movements (flight tracking) -International arms trade flows between countries -National intelligence insights and satellite imagery-based data -cybersecurity incidents, including ransomware campaigns and threat reports You can create a personalized profile and follow only the developments that align with your operational interests , all in real time, directly on the map interface.
0x6rss56,463 просмотров • 8 месяцев назад
Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.
0x6rss49,516 просмотров • 8 месяцев назад
APT35/charmingkitten IRGC biriminin Türkiye özelinde yeni faaliyetleri ifşa olmuş. İran’ın sızdırılan Kashef ismindeki istihbarat sisteminde Türkiye’ye özel kritik unsurlar: Tahran’daki Türkiye Büyükelçiliğine giren-çıkan herkes plaka, saat, kimlik ve istihbarat notlarıyla takip ediliyor. Ayrıca İran’dan Türkiye’ye seyahat eden tüm vatandaşlar dini mezhep, aile bağı, iletişim ve hareket geçmişi ile profilleniyor. IRGC’nin siber birimi(APT35) ise bu verileri hedefleme, takip ve operasyon planlamasında kullanıyormuş. videoda Kashef istihbarat izleme sisteminde büyükelçilikler özelinde nasıl çalıştığı görülebiliyor
0x6rss44,892 просмотров • 10 месяцев назад
Telegram channel belonging to DarkForums (The Jacuzzi) has been banned. It was a channel I had been following, but what made it distinctive was its cycle of ownership transfers. Initially, it was associated with BreachForums (BaphChat), then it was taken over by the FBI. Afterwards, it was put up for sale by an actor named “weep,” and finally it was used by DarkForums under the name “The Jacuzzi.” Although this lifecycle raises questions, it has left behind an archive consisting of thousands of messages.
0x6rss37,926 просмотров • 9 месяцев назад
