All posts by John Doe

■■□□□ Sirius is an open-source comprehensive vulnerability scanner that leverages community-driven security intelligence and automated penetration testing capabilities. https://github.com/SiriusScan/Sirius

4️⃣ The AWS hack, a supply chain ⛓️ attack taking over AWS JavaScript library. Am interesting thread! https://x.com/i/status/2011842613389726109

https://state-of-iranblackout.whisper.security/

⭐️InvisibleJS: A CLI tool to convert JavaScript into an invisible, executable payload using Zero-Width encoding. https://github.com/oscarmine/InvisibleJS.git

■■□□□ United States: A Chinese-linked cyberespionage group targeted U.S. government and policy-related officials with Venezuela-themed phishing emails in the days after the U.S. operation to topple Venezuelan President Nicolas Maduro, cybersecurity researchers said Thursday. https://www.reuters.com/business/media-telecom/chinese-linked-hackers-target-us-entities-with-venezuelan-themed-malware-2026-01-15/

■■■■■ $312,500 worth of stored/reflected XSS vulnerabilities in Meta’s Conversions API Gateway allowed Javascript code to run on any Facebook domain and millions of third-party websites. The flaw enabled zero-click Facebook account takeover and more: https://ysamm.com/uncategorized/2025/01/13/capig-xss.html

■■■■□ Instagram account takeover via Meta Pixel script abuse (Bug bounty – $32,500) by Youssef Sammouda. https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html

■□□□□ United States’ CIA made a public post targetting Chinese citizens to commit treason and risk their lives for the ✡️ US regime. The link of public post shared below. https://x.com/i/status/2011802282589835414

■■■■□ Cisco 0-Day RCE Secure Email Gateway Vulnerability Exploited in the Wild. Cisco 0-Day RCE Secure Email Gateway Vulnerability Exploited in the Wild

■■■■□ CVE-2025-54918 – Proof of Concept (PoC): A technical Proof of Concept demonstrating how a low-privileged domain user can escalate to Domain Admin–level access by abusing NTLM reflection combined with authentication coercion. https://github.com/Wh0am123/CVE-2025-54918-POC