ThugCrowd
@thugcrowd
Followers
21,928
Following
937
Media
1,213
Statuses
8,093
Evil Hacker Group ★ Inventor of the ClSSP ★ Pronouns: we/us
0.0.0.0/0
Joined March 2018
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Venezuela
• 425460 Tweets
Canadá
• 333616 Tweets
#THEMUSICDAY
• 133244 Tweets
期日前投票
• 129580 Tweets
hoshi
• 91692 Tweets
Vinotinto
• 70555 Tweets
Rondón
• 51159 Tweets
選挙妨害
• 48979 Tweets
Angel Reese
• 47441 Tweets
ボボステ
• 47098 Tweets
リンツのチョコ
• 41552 Tweets
#黄金のワンスプーン
• 28263 Tweets
#キントレ
• 27647 Tweets
BELLE ON ITS SHOWTIME
• 24982 Tweets
ウルトラマンアーク
• 22977 Tweets
ボーボボ
• 22110 Tweets
श्यामा प्रसाद मुखर्जी
• 19983 Tweets
Manny
• 18211 Tweets
ソフトン
• 17737 Tweets
蓮舫赤軍
• 16276 Tweets
GULF LIVE IN JAPAN
• 16240 Tweets
Romo
• 15653 Tweets
ところ天の助
• 14101 Tweets
首領パッチ
• 13795 Tweets
Aramburu
• 12203 Tweets
リンドール
• 10978 Tweets
運転見合わせ
• 10930 Tweets
エンティーム
• 10749 Tweets
運転再開
• 10378 Tweets
Yangel
• 10304 Tweets
Damn someone either has a jackpot Twitter vuln or played the long game with some creds.
31
349
932
Every time someone tries to rope us into "hacking" for them on Twitter, one of us will usually waste their time. You have been warned.
40
148
920
The next time that a company doesn't respond to you about a security issue, publicly announce that you are helping their employees unionize.
13
121
933
We've gotten a lot of responses after calling out that sock account last night. Those who have been following us know this has been an ongoing issue for many people in infosec. Let's examine what happened and what we can do moving forward. 1//
36
267
898
We are pleased to announce a new cert for the most dedicated hackers - introducing the ClSSP: Certified lowercase Security Shitposting Professional.
49
230
882
@ARINZEACO
Your post needs a little work, but you can still order this book in time for Christmas with Amazon Prime!
1
7
746
If you make bomb threats on schools, you are not a hacker.
If you buy booter spots and ddos, you are not a hacker.
If you dox girls that won't send you nudes, you are not a hacker.
If you buy a verified twitter to dm us and tell us that you are a hacker, you are not a hacker.
31
140
753
This dude is trending on Twitter right now for a Tiktok of him skateboarding and drinking juice while listening to Fleetwood Mac. He's singlehandedly one of the most wholesome people on that platform, and this is where he lives. How can we help him out?
12
257
733
Infosec twitter wastes time entertaining boring tired hot takes about lgbtq, women, and "identity politics", while all of the illest hacks we've seen this year have been done by our gay, femme, trans and enby friends who literally don't give a single fuck about any of that.
11
97
693
The fact that this person is not only pretending to work at the NSA, but is seriously responding to a picture of a Bad Dragon challenge coin that was a gift for purchasing a 16 inch alien penis dildo is the highlight of this fine day.
28
123
681
Like this tweet to get disqualified from the hiring process at your next job.
19
51
652
It must be weird to work for a company where whenever there's an outage, people say things like "Let's hope it stays down forever" and "Democracy is saved!" like someone finally took the Infinity Gauntlet from Thanos and snapped him out of existence.
9
125
562
Homeboy couldn't figure out input sanitization and parameterization and is now blaming the "Mentally ill tranny demon hackers" for his inability to code.
13
47
546
@notdan
@mallory_yu
Kinda is a big deal, it's medical info. They're disregarding people with last names like Yu, Li, Ng, etc. If you have to prove your legal identity to release medical results (like any non-shady medical company would do), then it poses a significant problem to millions of people.
6
2
349
PSA
- It's okay to say "I don't know".
- It's okay to ask for clarity or further resources.
- It's okay to be unsure and take extra time to understand.
That is all for now.
6
144
480
Get a kali linux tattoo.
It looks great and secretly tells other hackers that you are a hacker.
Make sure it’s in a visible location.
Maybe your forehead.
34
55
447
Stop shaming your kids for learning about hacking. Stop telling them they will go to jail for downloading malware to understand how it works. Stop telling them they aren't smart enough to work in cybersecurity or in tech. Instead, ask them how to protect yourself. Listen.
16
112
447
Imagine dancing to Killing In The Name, arguably the most explictly anti-police RATM song, while wearing a Blue Lives Matter flag as a cape, in public, holy fuck.
25
53
434
Let's say, hypothetically, you're in a hotel. In adjacent room, adults have been verbally abusing their kids all day. The guest wifi router uses default creds, and you can hypothetically reroute all requests to a page reading "No internet til Room 203 stops yelling at their kids"
21
36
442
Someone’s mother has four sons. North, South and East. Their complete phone GPS histories, personal shopping habits, and json blobs containing bank statements since 2014 are on an unsecured S3 bucket. What did the mother get for Christmas?
44
87
437
PROTIP: If you have to upload a picture to a website and there is a minimum file size that your image file doesn't meet, simply attach a webshell to the end of your file to increase the total size.
9
56
414
Things that are flirting:
- Giving someone a root shell (any system)
- Giving someone an account on whatever you host on your server with a cool domain name
17
62
402
Some of you may be following the situation with the person who's sock accounts we keep outing. Our new strategy will be to immediately block and report them, as well as share their new @'s. They are targeting and harassing women in infosec by sharing private info about them.
13
67
402
PROTIP: Surround yourself with smart people. Don't strive to be the smartest person in the room.
9
58
375
1// Given all of the endless debate on the merits of certs vs degrees vs side projects vs whatever, there's something that is not usually brought up. Probably because it's difficult to talk about or even put into words. That thing is "obsession".
15
107
382
Remember kids, when it comes to military and police robots, always look for bugs, but never, ever report them. Not even for money.
10
105
358
We've been hearing stories about supposed fake power boxes that mysteriously show up near the homes politically active people. In this thread, we will analyze current information about them, what they could be used for, and advice for a police-state-to-be regarding infra.
11
181
361
If your employer says something to you about not speaking out on social media, or protesting in the street, fuck your employer. Fwd bullshit HR emails to info at thugcrowd dot com.
7
96
354
Looking for a specific file on Linux? Type:
$ tree | grep "filename"
13
32
352
Also RE: people mad at hackers posting lewd pics. Do you know how many SWs are also hackers? Do you realize how many hackers pushed technology to it's limits and innovated just so we could see more tits and ass and dicks, faster, in higher resolutions? Have some respect.
11
41
352
Imagine if there were malware truthers, who didn't believe that malware existed and refused to use antivirus software or install security updates.
29
52
344
@IanColdwater
I'd just like to interject for a moment. What you're referring to as Inclusive Language, is in fact, GNU/Inclusive Language, or as I've recently taken to calling it, GNU plus Inclusive Language. Inclusive Language is not an operating system unto itself, but rather another free co
4
13
341
This is the US president posting an interview with one of 8chan/8kun's admins, talking out of his ass about election security.
@OANN
has absolutely no business talking about cybersecurity given the state of their own infra lmao.
11
48
318
Stop falling for this idiot's sock accounts. He does the exact same thing every time, it's embarrassing.
24
35
301
Just to clear up some confusion, the term "Hire-A-Hacker" in our community means "hire someone with the hacker mindset". We use it to connect our community members with jobs and vice versa. It does not mean "spam every channel and inbox asking for people to do crimes for you".
7
50
294
Imagine if Trump landed at Walter Reed and had to sit in the ER lobby with a clipboard to figure out insurance and find out nothing is covered because of his pre-existing conditions.
7
58
290
Just a reminder that this account is in fact run by professional reverse engineers and exploit devs who use it to shitpost (and sometimes post technical stuff too).
12
2
295
The next two days are going to be some of the most batshit of all. Brace yourselves.
13
29
274
This is spearphishing at a community scale. It's grifting. They know everything about us. They don't do anything else in their life except watch all of us and figure out what we react to. It's like a sentient, malignant version of the algorithms that serve us tons of ads. 13//
5
24
264
Here's a tip: Don't join hacker chats with a blank display name and continually ask for exploit dev help. Don't repeatedly ask people where they work and whether or not they have a clearance. Don't sketchily delete all of your messages once someone says no to you.
19
19
257
Leaving fat tips without saying anything and donating to charities anonymously is gangster shit and should be strived for.
4
39
250
People who use language like this are only telling on themselves.
19
14
249
If in doubt, take a screen shot! Better yet, get their Twitter ID. This will allow you to see if they changed their handle. You can use or similar. You can also connect your account with Spoonbill to track username/bio changes 10//
1
21
247
DNS stands for "Dairy, Nuts, Shellfish", which are common food allergies. When a server makes a DNS query, they are merely asking if you have any dietary needs that they must be aware of so that they can alert the kitchen.
4
43
247
First off, who is Kenny? Kenny is a person who has spent well over a year targeting women in infosec, gaining their trust through various accounts and guilt trips, and becoming a huge emotional burden. Then, when his targets stick up for themselves, he threatens their safety. 2//
3
21
236
He has threatened to "find people" at cons (which for many of his targets are work events), and he has also threatened to show up at people's houses / work. He hit new lows recently by forging screenshots to make it look like someone was suicidal to get cops called on them 3//
1
12
228
Sorry to break it to you, whoever told you that you need a Security+ cert to do RE was trying to sell you a Security+ cert.
19
18
228
We've been getting DMs asking if we can look at people's resumes. We can't answer everyone, so here are some general best practices for tech resumes in general, leaning more towards information security. Also tips on making your resume more modular.
1/
5
47
235
Hey idiot, I know you can see this - if you're going to phish people's bank details on Twitter don't follow your main on the fake account.
8
8
228
Here's a tip, stop posing as "Women in Tech/Infosec" and then proceed to weasel your way into online social circles to further your harassment campaign of women in this space. All it does is sow mistrust in women who are actually trying to use Twitter to network and share stuff.
10
37
228
Programming concepts you need to know if you want to get into hacking: (Python 🐍)
- Functions
- Classes
- Objects
- Methods
- List comprehension
- List slicing
- String formatting
- Dictionaries
- Tuples
- Carding methods
17
40
231
@erikfinman
This is just a drop shipping MLM. Maybe someone who became a "teenage millionaire" by pure chance (bitcoin) isn't actually good at business and only knows how to scam, who knew!?
7
16
216
┏━┓┏┓┏┓┏━━┓┏━━┓
┃┏┛┃┃┃┃┃┏━┛┃┏━┛
┃┗┓┃┃┃┃┃┃ ┃┃
┃┏┛┃┃┃┃┃┃ ┃┃
~~~~~~𝓽𝓱𝓮 𝓟𝓸𝓵𝓲𝓬𝓮~~~~~~~
┃┃ ┃┗┛┃┃┗━┓┃┗━┓
┗┛ ┗━━┛┗━━┛┗━━┛
4
53
220
He uses a multitude of sock accounts he sets up on Twitter using multiple cheap android phones and sim cards. Here are multiple screenshots of taunts, and him flat out revealing his harassment infra and leaking his SIM cards ICCID. 4//
2
8
212
Now you have some history, let's talk about what you can do. We noticed red flags specific to this person, but sock accounts are nothing new. It's important to know some of the signs of a sock account/astroturf effort. Here are some awesome tips: 8//
If a "new" Twitter account
- already knows the community hashtags that will draw them attention
- already knows and plays on the community's "hot topics" right off the bat...
- and uses them methodically to draw on sympathy, retweets and visibility
...
(1/2)
9
92
474
1
22
218
Shoutout to the Master Hacker who signed up for Discord using a fake thugcrowd email address. Of course we'd notice, and of course you'd use a VPN on one computer, but get confident and not use a VPN on your second computer lol. Well anyways, thanks for the Discord account!
5
6
209
Showed Hackers (1995) to my 5 year old today! She said: "Wow, the Military Industrial Complex really did gentrify hacker culture and called it "infosec". PHC said it 18 years ago and it still rings true: THE SECURITY INDUSTRY DEMOLISHED OUR WORLD. THERE WILL NOW BE HELL TO PAY."
4
36
214
Another thing: We'd much rather talk to some budding hacker who learned binary exploitation and found some cool bugs on her tablet by watching youtube, than some boring ass career pentester struggling to read a phrack article and thinking they are god when they finish it lmao.
7
28
213
@DHSgov
I have a picture of their leader but it's a bit blurry, you're going to need to use the 'enhance' feature a few times. Also, boogaloo people are def right wing terrorists.
14
13
193