NEW BOT Телеграм, страница - 933374354

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

500 viewsinspector, 17:55

https://highon.coffee/blog/nmap-cheat-sheet/

Nmap Cheat Sheet: Commands, Flags, Switches & Examples (2024)

Nmap Cheat Sheet, learn Nmap commands, flags & real world exmaples allowing you to leverage the OG portscanner.

548 viewsinspector, 18:00

LOCAL FILE READ VIA XSS IN DYNAMICALLY GENERATED PDF
http://www.noob.ninja/2017/11/local-file-read-via-xss-in-dynamically.html?m=1

Local File Read via XSS in Dynamically Generated PDF

REDIRECTING TO THE NEW BLOG ... Hello Hunters, This time I am writing about a Vulnerability found in another ...

758 viewsinspector, 19:41

https://hackerone.com/reports/288704

Phabricator disclosed on HackerOne: Command injection on...

Hi phabricator,

I found an evil branch name of hg a repo can lead to arbitrary command injection on phabricator instance.

Here is the reproduction steps:
1. Monitor a remote mercurial repo with...

592 viewsRamin Farajpour Cami, 04:57

https://github.com/rapid7/metasploit-framework/pull/8747

Added Geutebrueck GCore Remote Code Execution for 1.3.8.42 and 1.4.2.37 by m4p0 · Pull Request #8747 · rapid7/metasploit-framework

Geutebrueck_GCore_X64_RCE_BO
Metasploit module for Geutebrueck GCore "video management" system. Tested with version 1.3.8.42 and 1.4.2.37.
Full remote code execution with NT/System privileges on Wi...

641 viewsRamin Farajpour Cami, 06:43

Hacked https://gemgroup.tv

900 viewsRamin Farajpour Cami, edited 12:43

663 viewsinspector, 20:39

https://youtu.be/UMrNQ1bnEBA

Remotely gain root on Android via NFC

one of videos I demonstrated on Code Blue 2017

572 viewsRamin Farajpour Cami, 09:21

unicode domain phishing with EvilURL

Demo : https://youtu.be/ug5ZuezbD3c

https://github.com/UndeadSec/EvilURL

553 viewsRamin Farajpour Cami, 13:43

IDN Homograph attack in Hackerone.com

https://hackerone.com/reports/29491

HackerOne disclosed on HackerOne: homograph attack. IDNs displayed...

the IDN: http://ebаy.com/

is a homograph for the latin ebay.com. if you click that first link, youm might think that you are going to ebay.com. in fact, you are going to a homograph url...

474 viewsRamin Farajpour Cami, 13:47

XSS payloads in PNG IDAT chunks

https://www.adamlogue.com/revisiting-xss-payloads-in-png-idat-chunks/

An XSS on Facebook via PNGs

https://whitton.io/articles/xss-on-facebook-via-png-content-types/

An XSS on Facebook via PNGs & Wonky Content Types

Bug Bounty & Application Security

553 viewsRamin Farajpour Cami, 13:57

http://www.noob.ninja/2017/11/local-file-read-via-xss-in-dynamically.html

Local File Read via XSS in Dynamically Generated PDF

REDIRECTING TO THE NEW BLOG ... Hello Hunters, This time I am writing about a Vulnerability found in another ...

583 viewsRamin Farajpour Cami, edited 15:29

https://www.offensive-security.com/metasploit-unleashed/web-application-exploit-development/

Offensive-Security

Web Application Exploit Development | Offensive Security

In this section of Metasploit Unleashed we are going to go over the development of web application exploits in the Metasploit Framework.

577 viewsAmir OFFensive, 16:03

http://blog.vulspy.com/2017/11/09/Wordpress-4-8-2-SQL-Injection-POC/

462 viewsAmir OFFensive, 16:29

https://ha.cking.ch/s8_data_line_locator/

413 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 17:26

https://posts.specterops.io/bypassing-application-whitelisting-with-runnoscripthelper-exe-1906923658fc

Bypassing Application Whitelisting with runnoscripthelper.exe

422 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 17:26

https://embedi.com/files/white-papers/Hack-ATM-with-an-anti-hacking-feature-and-walk-away-with-1M-in-2-minutes.pdf

433 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 17:29

http://www.securityweek.com/hackers-helped-pentagon-patch-thousands-flaws

Hackers Helped Pentagon Patch Thousands of Flaws | SecurityWeek.Com

Pentagon addresses thousands of vulnerabilities reported by researchers through its bug bounty and vulnerability disclosure initiatives

393 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 17:39

Convert Hex To Assembly Using Simple Python Script
https://haiderm.com/convert-hex-assembly-using-simple-python-noscript/

Haider's Infosec Blog

Convert Hex To Assembly Using Simple Python Script

Convert hex Shellcode to Assembly instructions using Python noscript. This noscript will convert your Hex input straight into assembly

438 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 17:59

Shed - Inspect .NET malware like a Sir
http://antonioparata.blogspot.sg/2017/11/shed-inspect-net-malware-like-sir.html?m=1

antonioparata.blogspot.co.uk

Shed - Inspect .NET malware like a Sir

When I start to analyze a new malware, there are some initial tasks that provide a lot of useful information to speedup the analysis. Two ...

390 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 18:40

Using PowerShell to resolve Sysprep problems involving App-X packages
http://techgenix.com/sysprep-problems-app-x-packages/

Deploying App-X packages in Windows images prepared using Sysprep can be problematical. Here's how one IT pro solved the problem with PowerShell.
The post Using PowerShell to resolve Sysprep problems involving App-X packages (http://techgenix.com/sysprep-problems-app-x-packages/) appeared first on TechGenix (http://techgenix.com/).

399 views̶̶_̶̶_̶̶آ̶̶ل̶̶ز̶̶ا̶̶ی̶̶م̶̶ر̶̶_̶̶_̶̶ יהונתן, 18:43