NEW BOT Телеграм, страница - 999623555

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

http://securityscrapbook.com/2016/12/17/cuckoo-sandbox-installation-configuration-guide/

669 viewsAmir OFFensive, 10:39

https://www.youtube.com/watch?v=mkv8aoJzGSo

Exploiting Insecure Cross Origin Resource Sharing ( CORS ) | api.artsy.net

Insecure CORS Artsy [ api.artsy.net ]
Exploiting Insecure Cross Origin Resource Sharing ( CORS ) | api.artsy.net

Thanks,

Muhammad Khizer Javed
https://bugcrowd.com/MuhammadKhizerJaved
https://hackerone.com/babayaga_

654 viewsAmir OFFensive, 11:40

Code Execution Flaws Patched in Several VMware Products
http://feedproxy.google.com/~r/Securityweek/~3/RZIW08BqLtg/code-execution-flaws-patched-several-vmware-products

VMware has released patches and updates for its ESXi, vCenter Server Appliance (vCSA), Workstation and Fusion products to address a total of four vulnerabilities, including ones that can be exploited for arbitrary code execution.
read more (http://www.securityweek.com/code-execution-flaws-patched-several-vmware-products)

Code Execution Flaws Patched in Several VMware Products | SecurityWeek.Com

VMware patches code execution and other vulnerabilities in ESXi, vCenter Server Appliance, Workstation and Fusion products

583 viewsיהונתן, 16:19

Code Execution Flaws Patched in Several VMware Products
http://feedproxy.google.com/~r/Securityweek/~3/RZIW08BqLtg/code-execution-flaws-patched-several-vmware-products

VMware has released patches and updates for its ESXi, vCenter Server Appliance (vCSA), Workstation and Fusion products to address a total of four vulnerabilities, including ones that can be exploited for arbitrary code execution.
read more (http://www.securityweek.com/code-execution-flaws-patched-several-vmware-products)

Code Execution Flaws Patched in Several VMware Products | SecurityWeek.Com

VMware patches code execution and other vulnerabilities in ESXi, vCenter Server Appliance, Workstation and Fusion products

687 viewsיהונתן, 16:19

Trend Micro Smart Protection Server Multiple Vulnerabilities
https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities

Trend Micro Smart Protection Server Multiple Vulnerabilities | CoreLabs Advisories

1. Advisory Information Title: Trend Micro Smart Protection Server Multiple VulnerabilitiesAdvisory ID: CORE-2017-0008Advisory URL: https://www.coresecurity.com/core-labs/advisories/trend-micro-smart-protection-server-multiple-vulnerabilitiesDate published:…

756 viewsיהונתן, 16:36

Reversing EVM bytecode with radare2 – ICO Security
https://blog.positive.com/reversing-evm-bytecode-with-radare2-ab77247e5e53

Reversing EVM bytecode with radare2

Howdy ya’ll. Today we will look into the insides of Ethereum Virtual Machine (EVM), how Solidity language is translated into bytecode, how…

800 viewsיהונתן, 15:32

https://hawkinsecurity.com/2017/12/13/rce-via-spring-engine-ssti/

756 viewsAmir OFFensive, 11:44

https://github.com/blechschmidt/massdns

GitHub - blechschmidt/massdns: A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration) - blechschmidt/massdns

816 viewsAmir OFFensive, 12:20

https://github.com/x-Ai/BurpUnlimitedre

x-Ai/BurpUnlimitedre

This project !replace! BurpUnlimited of depend (BurpSutie version 1.7.27). It is NOT intended to replace them! - x-Ai/BurpUnlimitedre

927 viewsAmir OFFensive, 10:24

https://github.com/spacehuhn/esp8266_deauther

GitHub - SpacehuhnTech/esp8266_deauther: Affordable WiFi hacking platform for testing and learning

Affordable WiFi hacking platform for testing and learning - SpacehuhnTech/esp8266_deauther

766 viewsAmir OFFensive, 10:27

https://medium.com/hungys-blog/linux-kernel-memory-addressing-a0d304283af3

Linux Kernel: Memory Addressing

《Understanding the Linux Kernel》閱讀筆記

717 viewsRamin Farajpour Cami, 14:29

http://esec-lab.sogeti.com/static/publications/10-hitbamsterdam-dmaattacks.pdf

634 viewsعلیرضا هستم., 05:22

https://mikecvet.wordpress.com/2010/08/14/ptrace-tutorial/

ptrace() Tutorial

The ptrace() system call provides the unique functionality under many *nix systems allowing a process to examine the data, and control the execution of, another running process. This includes the a…

664 viewsعلیرضا هستم., 05:22

https://hackerone.com/reports/253429

Tor disclosed on HackerOne: Linux TBB SFTP URI allows local IP...

Browsing to a simple URL to an sftp URI allows bypasses socks proxy for DNS and browsing.
Tested on a clean install of Ubuntu 16.04 with TBB 7.0.2 (4097d43aa0be86ae3fe43ec8f3ac5394) download from...

672 viewsSaeed021, 10:22

https://hackerone.com/reports/288704

Phabricator disclosed on HackerOne: Command injection on...

Hi phabricator,

I found an evil branch name of hg a repo can lead to arbitrary command injection on phabricator instance.

Here is the reproduction steps:
1. Monitor a remote mercurial repo with...

719 viewsSaeed021, 10:32

745 viewsAmir OFFensive, 09:44

https://hackerone.com/reports/117073

Informatica disclosed on HackerOne: [informatica.com] Blind SQL...

Hi guys!

JSON POST parameter "docId" is vulnerable to Blind SQL Injection attack

PoC (Raw query)

POST /_vti_bin/RatingsCalculator/RatingsCalculator.asmx/CalculateRatings HTTP/1.1
User-Agent:...

680 viewsAmir OFFensive, 13:30

https://github.com/We5ter/Scanners-Box

GitHub - We5ter/Scanners-Box: A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑 - We5ter/Scanners-Box

776 viewsAmir OFFensive, 13:31

https://medium.com/bread-and-circuses/how-i-got-paid-0-from-the-uber-security-bug-bounty-aa9646aa103f

825 viewsAmir OFFensive, 16:11

Forwarded from burpsuite (not official)

burpsuite_pro_v1.7.30.zip

pass: 311138

Happy Hacking in new Year!

👍1

169 viewsAmir OFFensive, 07:15

This media is not supported in your browser

VIEW IN TELEGRAM

837 viewsعلیرضا هستم., 07:17