reconcore
Open in Telegram
#vulnerability #research #cve #rce #lpe #poc #tools #pentest #blueteam #redteam #technique Educational use only. Content from public sources. Admin holds no liability for misuse. Users are solely responsible for their actions https://t.me/reconcore?direct
Show more2 552
Subscribers
+124 hours
+17 days
+3830 days
Loading data
Similar Channels
![RME-DisCo @ UNIZAR [www.reversea.me]](https://cdn.tlmtr.io/_next/image?url=https%3A%2F%2Fimg.telemetr.io%2Fc%2F1yS5QI%2F5954169611656212876%3Fty%3Dx&w=96&q=75){kind=small}
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
November '26Nov '26
November '26
+13
in 1 channels
October '26
+95
in 2 channels
Get PRO
September '26
+135
in 2 channels
Get PRO
August '26
+136
in 1 channels
Get PRO
July '26
+122
in 0 channels
Get PRO
June '26
+159
in 2 channels
Get PRO
May '26
+92
in 3 channels
Get PRO
April '26
+89
in 2 channels
Get PRO
March '26
+116
in 1 channels
Get PRO
February '26
+145
in 2 channels
Get PRO
January '26
+157
in 2 channels
Get PRO
December '25
+317
in 3 channels
Get PRO
November '25
+170
in 0 channels
Get PRO
October '25
+216
in 1 channels
Get PRO
September '25
+125
in 2 channels
Get PRO
August '25
+118
in 5 channels
Get PRO
July '25
+96
in 2 channels
Get PRO
June '25
+51
in 1 channels
Get PRO
May '25
+68
in 3 channels
Get PRO
April '25
+117
in 2 channels
Get PRO
March '25
+84
in 1 channels
Get PRO
February '25
+108
in 1 channels
Get PRO
January '25
+73
in 2 channels
Get PRO
December '24
+4
in 0 channels
Get PRO
November '24
+127
in 0 channels
Get PRO
October '24
+38
in 0 channels
Get PRO
September '24
+37
in 0 channels
Get PRO
August '24
+328
in 0 channels
Get PRO
July '240
in 0 channels
Get PRO
June '24
+15
in 1 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 08 November | +1 | |||
| 07 November | +2 | |||
| 06 November | +1 | |||
| 05 November | +1 | |||
| 04 November | +1 | |||
| 03 November | +1 | |||
| 02 November | +2 | |||
| 01 November | +4 |
Channel Posts
UEFI Development Kit
UEFI Dev Kit turns Visual Studio into a firmware development environment: it highlights EDK II file formats, drives the EDK II build system, boots the result in QEMU with OVMF, and generates EFI GUIDs in every format you need — without leaving the IDE.#efi #bootkit @reconcore
| 2 | PhantomBuffer
EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)
PhantomBuffer: Effective EDR Evasion Through Stealth Injection
#redteam #evasion #injection #bypass #edr @reconcore | 205 |
| 3 |  WireTapper
WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear situational intelligence 📡
#osint @reconcore | 193 |
| 4 | UEFI Development Kit
UEFI Dev Kit turns Visual Studio into a firmware development environment: it highlights EDK II file formats, drives the EDK II build system, boots the result in QEMU with OVMF, and generates EFI GUIDs in every format you need — without leaving the IDE.
#uefi #bootkit @reconcore | 1 |
| 5 |  obfusheader.h
Obfusheader.h is a portable header file for C++14 compile-time obfuscation.
#encryption #obfuscation #protection @reconcore | 284 |
| 6 | Once you’ve viewed the image, please share your feedback in the group or via a direct message to the channel. | 83 |
| 7 |  No text... | 394 |
| 8 |  96 stars | 380 |
| 9 | 96 stars | 3 |
| 10 | 1337 stars | 38 |
| 11 |  Pass-ta-key Golden Attack: Extracting the Security Domain Secret from Chrome process memory
Part 1 of a technical deep-dive into the Pass-ta-key Golden Attack, covering a new method for extracting the Security Domain Secret (SDS) of Google Password Manager from Chrome process memory.
#bugbounty #forensic #technique @reconcore | 421 |
| 12 | Pass-ta-key Golden Attack: Extracting the Security Domain Secret from Chrome process memory
Part 1 of a technical deep-dive into the Pass-ta-key Golden Attack, covering a new method for extracting the Security Domain Secret (SDS) of Google Password Manager from Chrome process memory.
#bugbounty #technique @reconcore | 12 |
| 13 |  sshhole
A 257-character wrong password can get attackers into accounts that aren't supposed to accept passwords. No password cracking needed.
Fix: Update OpenSSH and restart sshd, or set PasswordAuthentication no.
OpenSSH allows long-password logins to * accounts on musl with PAM off
#bypass #ssh @reconcore | 397 |
| 14 |  CVE-2026-97798
LPE in the Windows Error Reporting (WER) Time Travel Debugging path. An unprivileged caller can preserve attacker-controlled command-line syntax across the WER privilege boundary. The elevated collector later concatenates that input into a TTTracer.exe command line without preserving argument boundaries. Injected -out and -launch switches are therefore interpreted by the TTD recorder as recorder options, allowing an attacker-selected executable to be launched with the collector's elevated token.
The included single-file PoC turns that primitive into an interactive NT AUTHORITY\SYSTEM shell. It has been validated from both a standard user and a medium-integrity, UAC-filtered administrator account.
#vulnerability #lpe #cve #eop #uac #injection #poc @reconcore | 353 |
| 15 |  CVE-2026-42980
This repository contains the public disclosure material for CVE-2026-42980, a Windows kernel WMI integer-underflow vulnerability that can be exploited for local privilege escalation to NT AUTHORITY\SYSTEM on vulnerable lab builds.
Reversing and Exploiting the Windows Kernel WMI Underflow
#vulnerability #lpe #cve #wmi @reconcore | 364 |
| 16 | verified-ida
Verified IDA is a harness for model-led reverse engineering.
#re @reconcore | 370 |
| 17 |  IDA PRO 9.5
magnet:?xt=urn:btih:ed810311f1af78b9f9872da12076d2a413bd9ae5&dn=ida95&xl=5820581379&tr=udp%3A%2F%2Ftracker.corpscorp.online%3A80%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce&tr=https%3A%2F%2Ftracker.7471.top%3A443%2Fannounce&tr=http%3A%2F%2Ftracker.mywaifu.best%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.nyaa.vc%3A6969%2Fannounce&tr=http%3A%2F%2Ftracker.waaa.moe%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce
#re @reconcore | 625 |
| 18 |  +1ANYLLMSCOPE EST. 2014-2026
ANYLLMSCOPE - Single-User Auth Gate + P7 Data-Plane Redirect | 606 |
| 19 |  BeyondTrust Remote Support File Upload to RCE metasploit module CVE-2026-102764
An anonymous attacker can forge the MRS local router alias and invoke the appliance-side thin worker's native file-transfer service. This module uploads a PHP payload into the site's public directory and requests its extensionless URL. PHP and Unix command payloads execute as the site user. Tested on Remote Support 24.1.2;
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support CVE-2026-102764
#rce #php #payload @reconcore | 601 |
| 20 |  CredGuardRuntimeShutdown
Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)
Blog: https://medium.com/@s12deff/runtime-credential-guard-deactivation-d01cb9eb0062 | 650 |
