HackerOne – Telegram
HackerOne
11K subscribers
644 photos
31 videos
79 files
2.74K links
Community : @Sec0x01
@Bug0x
Download Telegram
HackerOne
#Qubes_Core Qubes OS A reasonably secure operating system ( https://www.qubes-os.org/ ) Founder : https://en.wikipedia.org/wiki/Joanna_Rutkowska Download : https://www.qubes-os.org/downloads/
Qubes OS is a project, Qubes support Linux multi-process applications. Comparable to virtual machines, (eg : Graphene runs applications in an isolated environment (QVM)),

We can see "Graphene Library OS" [https://github.com/oscarlab/graphene] can support running Linux applications with the latest Intel SGX (Software Guard Extension) in secure hardware and diffrent memory regions,

We have different application environment with multi-tasking in the virtual machines in user-space with Qubes OS,
XXE inside a SOAP node:

<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://0x0:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
Abusing RFC-1342 to spoof email addresses vulnerability, Most mail clients are vunerable,

Vendors affected by Mailsploit (https://www.mailsploit.com/index) :

https://docs.google.com/spreadsheets/d/1jkb_ZybbAoUA43K902lL-sB7c1HMQ78-fhQ8nowJCQk/edit#gid=0
PoC:

https://www.youtube.com/embed/gfAGOMeiXNI
Today free book is out!
Expert Python Programming - Second Edition
https://www.packtpub.com/packt/offers/free-learning
Forwarded from Amir Kiani
syhunt.com
Powerful Tools For Penetration
The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer


https://github.com/AlessandroZ/LaZagne
Charming Kitten: Iranian Cyber Espionage Against Human Rights Activists, Academic Researchers and Media Outlets – And the HBO Hacker Connection

http://www.clearskysec.com/charmingkitten/