@EsGeeks

🛡️ Ciberseguridad | 🐧 Linux | ⚙️ Herramientas El recurso definitivo para SysAdmins y Pentesters. "sudo follow esgeeks" 👇

esgeeks.com/
Joined February 2017
  • Tweets20.7K
  • Following196
  • Followers22.6K
836Media
Manual de privacidad para gente normal: 22 capítulos, rutas exactas para Android, iPhone, Windows y Mac, y qué hacer si ya te hackearon. PDF + 3 bonos, 30 días de garantía. 9,99 USD hasta el 1 de octubre. #privacidad #ciberseguridad #anonimato 👉 esgeeks.com/anonimato-platin…
10
1,169
🔓🛡️🤖 open-sesame | Pentesting IA con Claude Code Di el alcance autorizado y Claude ejecuta el engagement completo: recon, metodología, validación y reportes PDF. OWASP WSTG para web/API y PTES para redes + Active Directory, con playbooks seguros de Burp, nuclei, BloodHound.
2
1
4
350
Para pentesters y red teamers que quieren rigor y entregables listos. Solo autorizado. Hack responsibly. github.com/hassan-algo/open-… #pentesting #ethicalhacking #redteam #owasp #claude #cybersecurity #infosec

GitHub - hassan-algo/open-sesame: 🔓 An AI web-pentest skill for Claude Code. Point it at a site...

🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes dev + stak...

github.com
2
47
‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js. Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability. Read full details ↓ thehackernews.com/2026/10/br…

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one Node.js build.

thehackernews.com
20
84
13
323
41,134
📡📶🔍 AndroCSI | Wi-Fi signal intel en Termux Transforma tu Android en un sistema de detección de actividad y anomalías analizando solo las fluctuaciones de la señal Wi-Fi. #ciberseguridad #wifisensing #redteam #termux #androidhacking #signalintelligence #ethicalhacking
1
10
568
Clasifica walking, still, fast movement e impact events con scores de confianza en un dashboard en vivo. Radar, waterfall, sensores y exportación JSON, todo local y offline. Para red team, perimeter monitoring y research de señal sin hardware CSI real. github.com/sylhetyhackvenger…

GitHub - sylhetyhackvenger/AndroCSI: AndroCSI is a professional-grade Wi-Fi signal intelligence and...

AndroCSI is a professional-grade Wi-Fi signal intelligence and activity analysis system designed for Android devices running Termux. It transforms your mobile device into a sophisticated signal mon...

github.com
82
🛡️🤖🔥 cybersec-toolkit | IA que piloto el arsenal de seguridad Un comando instala 670+ herramientas de seguridad en Linux y Termux. El servidor MCP deja que Claude, Codex o Gemini descubran, recomienden y ejecuten esas tools dentro de una VM Kata desechable.
2
1
1
22
787
Targets externos y scripts vienen off por defecto; solo se activan con tu autorización explícita. 872 agent skills cubren CTF, pentest, bug bounty, DFIR y red/blue team. github.com/26zl/cybersec-too… #ciberseguridad #redteam #ethicalhacking #pentesting #mcp #ia #ctf #infosec

GitHub - 26zl/cybersec-toolkit: One command installs 670+ security tools on Debian/Ubuntu/Kali,...

One command installs 670+ security tools on Debian/Ubuntu/Kali, Fedora, Arch, openSUSE and Termux. Its authorization-gated MCP server runs them in a disposable Kata Containers VM sandbox for Claude...

github.com
1
1
125
🕵️‍♂️⏳🔍 StrataScan | Historia web convertida en superficie de ataque Los archivos no olvidan. Los defensores sí. Reconstruye cada snapshot histórico de un dominio, encuentra secretos congelados y verifica qué sigue vivo hoy. Pipeline de 47 fases, +200 capacidades, reportes listos.
1
32
878
Para quienes entienden que el pasado del target es su mapa real de ataque. Uso autorizado únicamente. github.com/sylhetyhackvenger… #osint #ethicalhacking #ciberseguridad #redteam #attacksurface #recon #infosec

GitHub - sylhetyhackvenger/STRATASCAN: StrataScan is a gray-hat hackers attack-surface reconstruc...

StrataScan is a gray-hat hackers attack-surface reconstruction engine that transforms web history into actionable security intelligence. It combines OSINT, archive forensics, DNS/TLS analysis, subd...

github.com
1
100
PHP shares mitigation for new RCE vulnerability with no patch bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch.

bleepingcomputer.com
15
43
3
152
18,771
¿Tu película de Netflix no se abre fuera de la app? Así funciona Keeprix para Netflix en Windows y Mac, paso a paso. #Netflix #Keeprix #SinConexion esgeeks.com/keeprix-para-net…

Keeprix para Netflix: descarga en MP4 o MKV paso a paso

Guarda títulos en MP4 o MKV a 1080p con Keeprix para Netflix, con el audio y los subtítulos que elijas. Mira los pasos, precios y la prueba gratis.

esgeeks.com
6
356
🛡️📡🔍 NetSpecter | Exposición real de tu sistema en vivo ¿Qué procesos y puertos tiene tu máquina abiertos ahora mismo? Monitorea en tiempo real puertos, exposición de red y actividad de procesos, clasificando el riesgo y alertando solo los cambios respecto a tu baseline.
1
13
612
Modelo ligero, bajo ruido y 100 % defensivo. Ideal para Linux y aprendizaje de seguridad ofensiva-defensiva sin herramientas pesadas. github.com/MrHackerCharlie/n… #ciberseguridad #ethicalhacking #infosec #blueteam #systemmonitoring #python #linux

GitHub - MrHackerCharlie/NetSpecter: Real-time system monitoring tool for detecting process...

Real-time system monitoring tool for detecting process activity and network exposure! - MrHackerCharlie/NetSpecter

github.com
82
🐞 Iniciamos la segunda sesión del Curso Análisis Forense + IA 🪲 📲 WhatsApp: wa.me/reydes 🌎 Información: reydes.com/e/Curso_Analisis_…
3
5
7
740
⚡️Android Pentest Checklist ✅Download Full PDF - t.me/brutsecurity/1317 #android #BugBounty #cybersecurity #infosec
1
4
598
github.com/thecybergeek/php2… php2shell OOM in mod_php (CVE-2026-109618): the fake-HashTable fire only runs ~14-byte commands, too short for a shell. Poison a PHP session via upload_progress with , then exec in 11 bytes: php /tmp/s* www-data shell. Full PoCs in my github repo! #php2shell #CVE #InfoSec #PHP #RCE
14
4
109
11,249
Es Geeks retweeted
Steven Lim
@0x534cOct 23
🎯𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗜𝗣 + 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 = 𝗛𝗶𝗴𝗵-𝗖𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗗𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 ​ 🌐 DeviceNetworkEvents → Remote IP matches a GreyNoise-tagged 𝗽𝗵𝗽𝟮𝘀𝗵𝗲𝗹𝗹 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿 🛡️ DeviceTvmSoftwareVulnerabilities → The same endpoint has a 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗣𝗛𝗣 𝗶𝗻𝘀𝘁𝗮𝗻𝗰𝗲 ​ Put them together: 𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 → 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗹𝗲 𝗲𝗻𝗱𝗽𝗼𝗶𝗻𝘁 → 𝗛𝗶𝗴𝗵-𝗰𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 🔥 ​ When both conditions are observed, the signal becomes significantly more actionable for defenders. This is a good candidate for a 𝗰𝘂𝘀𝘁𝗼𝗺 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻 + 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗲𝗱 𝗱𝗲𝘃𝗶𝗰𝗲 𝗶𝘀𝗼𝗹𝗮𝘁𝗶𝗼𝗻, helping defenders move quickly from threat intelligence to containment while investigation and remediation take place. ​ PHP2Shell ThreatLock KQL: detections.ai/share/rule/I4G… ​ #Threathunting
1
8
48
3,061
Es Geeks retweeted
Tails@Tails_liveOct 23
Tails 7.15.1 is out: tails.net/news/version_7.15.…
3
55
2
304
8,639
🛑 A filename is enough to trigger OS command execution in Python's widely used Pillow image library. CVE-2026-112900 abuses how Pillow passes EPS filenames to Ghostscript. What you need to know ↓ thehackernews.com/2026/10/cr…

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow 13.0.0 fixes EPS, JPEG, and TIFF flaws, including command execution paths involving Ghostscript and crafted image files.

thehackernews.com
25
129
35
651
109,526
Es Geeks retweeted
0xor0ne
@0xor0neOct 23
UAF vulnerability in Samsung's Android kernel (@LucidBitLabs) lucidbitlabs.com/blog/when-d… #infosec
15
1
103
5,191
Load more