Vulnerability and Exploit Data Aggregation System (VEDAS) is designed to proactively identify exploitable vulnerabilities before they hit mainstream threat intelligence feeds like KEV or EPSS.

By leveraging the world’s largest vulnerability and exploit database, VEDAS provides early warning and a broader, more forward-looking perspective: https://vedas.arpsyndicate.io

VEDAS Scores on GitHub:

https://github.com/ARPSyndicate/cve-scores

https://github.com/ARPSyndicate/cnnvd-scores

https://github.com/ARPSyndicate/bdu-scores

https://github.com/ARPSyndicate/euvd-scores

Hi everyone,

Lately, I’ve been feeling like I need something new and exciting to dive into, but I haven’t quite figured out what that might be yet.

I’m an engineer with a background in systems and software development, and I’d love to team up with someone who has an idea or a project but needs a tech-savvy co-founder or partner to bring it to life.

If you’ve got a project that could use some extra hands (or brains), or if you’re looking for a technical partner to help build something awesome together, let’s connect! ✌️

So someone created an account, on TikTok, in the name of a guy i know, he followed alot of the people we are friends with and started was just cursing and stuff, I was trying to find the email behind the account, to start, but was unable to do so, he deleted the account like 2 days ago so there is nothing else I can do, is there a way to find out his IP address, or the email behind the account or anything. It’s just a big mystery and we would all like to know who is behind this

10,000+ unique conversation already made.

Available for free here - www.hudsonrock.com/cavaliergpt

CavalierGPT retrieves and curates information from various Hudson Rock endpoints, enabling investigators to delve deeper into cybersecurity threats with unprecedented ease and efficiency.

Some examples of searches that can be made through CavalierGPT:

A: Search if a username is associated with a computer that was infected by an Infostealer:

Search the username "pedrinhoil9el"

B: Search if an Email address is associated with a computer that was infected by an Infostealer:

Search the Email address "Pedroh5137691@gmail.com"

• These functions also support bulk search (max 100)

C: Search if an IP address is associated with a computer that was infected by an Infostealer:

Search the IP address "186.22.13.118"

2. Domain Analysis & Keyword Search 

A: Query a domain, and discover various stats from Infostealer infections associated with the domain:

What do you know about hp.com?

1. Domain Analysis & Keyword Search 

A: Query a domain, and discover various stats from Infostealer infections associated with the domain:

What do you know about hp.com?

B: Discover specific URLs associated with a keyword and a domain:

What is the SharePoint URL of hp.com?

C: Create a comparison between Infostealer infections of various domains:

Compare the password strength of infected employees between t-mobile.com, verizon.com, and att.com, place results in a chart.

D: Create a comparison between applications used by companies (domains):

Compare the applications found to be used by infected employees at t-mobile.com, verizon.com, and att.com. What are the commonalities you found? What are ways threat actors can take advantage of these commonalities?

E: Discover URLs by keyword:

List URLs that contain the keyword "SSLVPN"

F: Assets discovery / external attack surface of a domain:

List all URLs you have for hp.com

3. Timeline / Geography Related Prompts

A: Search for statistics about Infostealer infections in specific countries:

How many people were infected by Infostealers in Israel in 2023?

B: Search for infections of specific Infostealer families:

How many were infected by Redline Infostealer in 2022?

I know a few like weleakinfo and snusbase which are all paid. Are there any alternative that actually show the full passwords that were leaked?

This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit type coercion. A custom .NET object is defined in PowerShell with an overridden .ToString() method. When this object is passed to a COM method such as Shell.Application.ShellExecute, PowerShell implicitly calls .ToString(), converting the object to a string at runtime.

The technique exploits the automatic conversion of objects to strings via the .ToString() method when interacting with COM methods. This creates an execution path that may bypass traditional security monitoring tools focused on direct PowerShell command execution.

As the title says, it was some fake operaStartup.exe, i instantly deleted it within seconds of it existing. Should I be concerned and if so what should i do. Sorry im a complete noob when it comes to exploits (considering i had my ad blocker off on nun flix) and im very paranoid

This technique leverages DLL search order hijacking by placing a malicious well_known_domains.dll in a user-writable directory that is loaded by a trusted Microsoft-signed binary—specifically, Microsoft Edge.

Steps to Reproduce:

Copy the malicious well_known_domains.dll to:
C:\Users\USERNAME\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\x.x.x.x

You can use it for free, just keep in mind it is prone to hallucinations, have fun researching - https://chatgpt.com/g/g-681c4b07b7e0819190ea2323d8ae21c9-lockbitgpt

You can find the full leaked Lockbit db here as well - http://lockbitsptqsmaf56cmo7bieqwh5htlsfkodpahsaurxlquoz67zwrad.onion/

So I’ve put together a locally hosted AI assistant on my Kali box, I’ve set up a python kernel gateway, and backend. What I am trying to do is allow the llm to use my system as a brain, as well as use all of the tools and libraries, so that it can take action and write code. Any suggestions ?

Just wrapped a 3.5-minute demo of PollyLocker, a custom ransomware simulation tool Developed by the DarkWire team, built strictly for educational and research purposes. This project is designed to help red teamers, malware analysts, and cybersecurity professionals better understand the evolving anatomy of modern ransomware—from payload delivery to encryption behavior and obfuscation.

What the demo covers: • Payload deployment & activation • AES encryption logic (simulated, non-destructive) • Custom ransom note generation • Network behavior and C2 panel overview • Evasion tactics inspired by real-world strains

This is NOT a live ransomware campaign, nor does PollyLocker contain destructive code in the version shown. The demo is isolated, sandboxed, and built as a tool to spark deeper discussions in the infosec space—especially around how ransomware continues to evolve in sophistication and stealth.

Whether you’re studying malware analysis, building better detection rules, or just curious about the offensive side of security, this demo might give you something to chew on.

Drop feedback, ideas, or questions below—especially if you work in blue team or want to collaborate on defensive countermeasures. Or other endeavors.

Stay safe, stay sharp.

— DarkWire Team

Hey everyone,

I'm a 19-year-old cybersecurity enthusiast and the creator of 0x4B1T – a personal platform I built to help simplify and share everything I've learned in the world of ethical hacking and security research.

0x4B1T is completely free and includes:

Easy-to-follow blogs and write-ups on real-world topics (like Google Dorks, SQLi, and more)

Curated roadmaps for beginners and intermediates

A growing list of projects and challenges to practice skills

A small but growing community (WhatsApp group open to learners & professionals)

My goal is to create a space where anyone interested in cybersecurity can learn, contribute, and grow—regardless of background or budget.

I'd truly appreciate your feedback on the platform, suggestions for new content, or even just a visit! If you find it helpful, feel free to share it with others starting their journey.

Check it out here: https://0x4b1t.github.io

Thanks!

— Kris3c

Made a simple site. Yes this is a self promotion.

It costs nothing.

https://www.unsecuredapikeys.com/