Cyber Guardians

Public

View Channel

5.9K

2.1K

1.5K

Can't Join? @IRCyberGuardians

14.7k Members

Updated: April 11, 2026 at 4:11 AM

About Cyber Guardians – Cybersecurity Telegram Channel

RedTeaming TTPs Bug Hunting Web PenTest Web Security Binary Analysis Exploit DEV Malware DEV Malware Analysis BlueTeaming Threat Hunting SOC CSIRT FORENSICS Open-Source Intelligence(OSINT) Cybersec Tools

Join @IRCyberGuardians for exclusive analysis and malware content and discussions in 21

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 3 Days)

Total: 14.7K

24h growth: -46 0%

Latest Posts

Cyber Guardians

10. Apr. 2026, 05:17

Exploit Reversing

https://exploitreversing.com/2026/02/11/exploiting-reversing-er-series-article-06/

1,170

Cyber Guardians

10. Apr. 2026, 05:17

ESET-KeyGen - Trial-Key & Account generator for ESET Antivirus

https://github.com/fidelhacker13/Eset/tree/main

1,440

Cyber Guardians

10. Apr. 2026, 05:17

https://github.com/Flangvik/SharpCollection

1,510

Cyber Guardians

10. Apr. 2026, 05:17

https://github.com/lkarlslund/ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP). No Windows audit logs generated. High speed ~ up to 50K/sec per server - go way beyond that with multiple servers in parallel!

829

Cyber Guardians

10. Apr. 2026, 05:17

https://github.com/SpecterOps/OktaHound

A new data collector for the Okta Platform that ingests information about entities and their relationships within an Okta organization and represents them as nodes and edges in BloodHound’s graph database.

Blog: https://specterops.io/blog/2026/03/23/discovering-unexpected-okta-attack-paths-with-bloodhound/#why-okta

850

Cyber Guardians

10. Apr. 2026, 05:17

Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest cleartext passwords (if enabled) from LSASS using a Microsoft-signed driver.

https://github.com/S1lkys/KslKatz

751

Cyber Guardians

10. Apr. 2026, 05:17

Breaking the Shield: Unpacking a VMProtected Windows Kernel Driver

Original text by eversinc33

The article explains a practical workflow for unpacking a Windows kernel driver protected with VMProtect and preparing it for reverse engineering. The author analyzes an anti-cheat driver (KSophon_x64.sys) protected by VMProtect v2–3 and demonstrates how to bypass its protection mechanisms to restore a usable binary for analysis. The main challenge comes…

https://core-jmp.org/2026/03/breaking-the-shield-unpacking-a-vmprotected-windows-kernel-driver/

998

Cyber Guardians

10. Apr. 2026, 05:17

KslDump extracts credentials from PPL-protected LSASS using only Microsoft-signed components. No exploit is deployed. No driver is loaded. The entire attack chain ships pre-installed with Windows Defender. Microsoft patched the running version (wd\KslD.sys) by nulling out MmCopyMemory, but left the old vulnerable version (drivers\KslD.sys) sitting on disk. The attacker doesn't bring anything — they just point the service back to what Microsoft forgot to clean up.

https://github.com/andreisss/KslDump

681

Cyber Guardians

10. Apr. 2026, 05:17

https://github.com/watchtowrlabs/watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

• Bypass authentication with CVE-2025-71257.
• If it is successful, it tries to verify the CVE-2025-71260 RCE by writing a ranomized .jsp file to the tomcat servers webroot. This .jsp file just enumerates system information.

Blog: https://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chains/

BMC FootPrints is an IT Service Management (ITSM) solution designed to help IT teams manage service requests, incidents, assets, and changes through configurable workflows and an intuitive web interface.

630

Cyber Guardians

10. Apr. 2026, 05:17

A heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and . NET assemblies, but with a heavy focus on evasion and signature resistance.

https://github.com/0xROOTPLS/Fritter

647

Cyber Guardians

6. Apr. 2026, 01:13

Analysis of RCE of Xiaomi C400 camera by exploiting Vulnerability #1 and #3 combined together. Vulnerabilities are not patched!
Vulnerability #1: Xiaomi - miIO Protocol Authentication Bypass
Vulnerability #2: Xiaomi - miIO client cryptographically weak PRNG
Vulnerability #3: miIO client heap buffer overflow
Analysis: https://labs.taszk.io/articles/post/nowyouseemi/
Exploits and jailbreak for Xiaomi Smart Cameras: https://github.com/TaszkSecLabs/xiaomi-c400-pwn

888

Cyber Guardians

6. Apr. 2026, 01:13

A Deep Dive into the GetProcessHandleFromHwnd API
https://projectzero.google/2026/02/gphfh-deep-dive.html


https://github.com/R41N3RZUF477/PPLwindow

735

Cyber Guardians

6. Apr. 2026, 01:13

RCE via a malicious SVG in mPDF https://medium.com/@brun0ne/rce-via-a-malicious-svg-in-mpdf-216e613b250b

747

Cyber Guardians

6. Apr. 2026, 01:13

PulseAPK: Cross-Platform GUI for APK Decompilation, Analysis, and Recompilation
https://github.com/deemoun/PulseAPK-Core

826

Cyber Guardians

6. Apr. 2026, 01:13

A monitoring tool for the Windows Event log in pure python. You can just attach it via the network and then filter for specific event IDs or keywords.

https://github.com/NeffIsBack/EVENmonitor

901

Cyber Guardians

6. Apr. 2026, 01:13

ibWebAdmin Unauthenticated RCE

https://hawktrace.com/blog/ibwebadmin/

https://github.com/hawktrace/ibwebadmin-unauth-rce

874

Cyber Guardians

6. Apr. 2026, 01:13

A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets
https://blog.calif.io/p/a-race-within-a-race-exploiting-cve

735

Cyber Guardians

6. Apr. 2026, 01:13

Without VMkatz, the traditional workflow looks like this: exfiltrate the entire VM disk or memory snapshot, mount it locally, install a full Windows analysis stack, load the snapshot into a debugger or use mimikatz on a booted copy, and manually piece together credentials from each VM - one at a time. Multiply that by a dozen VMs on the cluster and you are looking at days of bandwidth, tooling, and post-processing.

VMkatz exists because you shouldn't have to exfiltrate what you can read in place. It extracts Windows secrets - NTLM hashes, DPAPI master keys, Kerberos tickets, cached domain credentials, LSA secrets, NTDS.dit - directly from VM memory snapshots and virtual disks, on the NAS, the hypervisor, wherever the VM files are.

https://github.com/nikaiw/VMkatz

578

Cyber Guardians

6. Apr. 2026, 01:13

The article explores a technique for hooking COM methods inside Windows Subsystem for Linux (WSL) by leveraging C++ Runtime Type Information (RTTI). The research begins with the author’s attempt to instrument and log activity within WSL components that interact with Windows through COM interfaces. Instead of relying on traditional API-level…

https://core-jmp.org/2026/03/wsl-com-hooking-rtti/

796

Cyber Guardians

6. Apr. 2026, 01:13

CVE-2026-24291: Windows LPE (RegPwn)

Exploit: https://github.com/mdsecactivebreach/RegPwn

Blog: https://www.mdsec.co.uk/2026/03/rip-regpwn/

BOF: https://github.com/Flangvik/RegPwnBOF

Tested versions:
Windows 11 25h2
Windows 11 24h2
Windows 10 21h2
Windows Servers 2016/2019/2022

637

Showing 20 of 20 posts

No more posts

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Related Telegram Channels

Loading recommended channels...

Cyber Guardians

About Cyber Guardians – Cybersecurity Telegram Channel

Ranking

Participant Growth (Last 3 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

attack-xX.hub

🇮🇳𝗗𝗔𝗡𝗚𝗘𝗥 𝗙𝗘𝗘𝗗𝗕𝗔𝗖𝗞 𝗖𝗛𝗘𝗡𝗡𝗔𝗟🇮🇳

cRyPtHoN™ INFOSEC (EN)

Trusted Middleman

Analysen, Dokumente und Interviews des Expertcouncil

Aube Digitale

𝙑𝘼𝙉𝙃𝙄𝙊𝙎 𝙑𝙉

𝗖𝘆𝗯𝗲𝗿 𝗧𝗩 - 𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹

Related Telegram Channels

attack-xX.hub

🇮🇳𝗗𝗔𝗡𝗚𝗘𝗥 𝗙𝗘𝗘𝗗𝗕𝗔𝗖𝗞 𝗖𝗛𝗘𝗡𝗡𝗔𝗟🇮🇳

cRyPtHoN™ INFOSEC (EN)

Trusted Middleman

Analysen, Dokumente und Interviews des Expertcouncil

Aube Digitale

𝙑𝘼𝙉𝙃𝙄𝙊𝙎 𝙑𝙉

𝗖𝘆𝗯𝗲𝗿 𝗧𝗩 - 𝗢𝗳𝗳𝗶𝗰𝗶𝗮𝗹

User Reviews (0)

Latest Posts