HackerOne – Telegram
HackerOne
@HackerOne
11K subscribers
644 photos
31 videos
79 files
2.74K links
Community : @Sec0x01
@Bug0x
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
11K subscribers
HackerOne
1.4K viewsAmir, 
HackerOne
https://github.com/threat9/routersploit
GitHub
GitHub - threat9/routersploit: Exploitation Framework for Embedded Devices
Exploitation Framework for Embedded Devices. Contribute to threat9/routersploit development by creating an account on GitHub.
1.28K viewsMir Saman Tajbakhsh, 
HackerOne
SleuthQL - Burp History Parsing Tool To Discover Potential SQL Injection Points
https://github.com/RhinoSecurityLabs/SleuthQL
GitHub
GitHub - RhinoSecurityLabs/SleuthQL: Python3 Burp History parsing tool to discover potential SQL injection points. To be used in…
Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL
1.41K viewsMir Saman Tajbakhsh, 
HackerOne
Forwarded from Mir Saman Tajbakhsh
https://opsecx.com/index.php/security-books/
OpSecX
Security Books
At OpSecX, we understand the importance of security education. We believe that books are great resources that provide detailed and in-depth knowledge on a topic and serves as a great reference material. If you are into books, then we recommend the following…
113 viewsMir Saman Tajbakhsh, 
HackerOne
https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
1.29K viewsAmir, 
HackerOne
Ever had trouble searching for particular malware samples? This project is an analyst-friendly web GUI to look through your digital warehouse.
mquery can be used to search through terabytes of malware in a blink of an eye

https://github.com/CERT-Polska/mquery
GitHub
GitHub - CERT-Polska/mquery: YARA malware query accelerator (web frontend)
YARA malware query accelerator (web frontend). Contribute to CERT-Polska/mquery development by creating an account on GitHub.
1.65K viewsMir Saman Tajbakhsh, 
HackerOne
https://github.com/maxchehab/CSS-Keylogging
GitHub
GitHub - maxchehab/CSS-Keylogging: Chrome extension and Express server that exploits keylogging abilities of CSS.
Chrome extension and Express server that exploits keylogging abilities of CSS. - maxchehab/CSS-Keylogging
1.83K viewsMir Saman Tajbakhsh, 
HackerOne
https://github.com/cryps1s/DARKSURGEON
GitHub
GitHub - cryps1s/DARKSURGEON: DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware…
DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense. - cryps1s/DARKSURGEON
1.83K viewsMir Saman Tajbakhsh, 
HackerOne
https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html
0x09AL Security blog
Bypassing Web-Application Firewalls by abusing SSL/TLS
During the latest years Web Security has become a very important topic in the IT Security field. The advantages the web offers resulted in very critical services being developed as web applications. The business requirements for their web applications security…
1.46K viewsAmir, 
HackerOne
Android Mobile CTFs:
https://github.com/xtiankisutsa/awesome-mobile-CTF
GitHub
GitHub - xtiankisutsa/awesome-mobile-CTF: This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them…
This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform. - GitHub - xtiankisutsa/awesome-mobile-CTF: This i...
1.78K viewsMir Saman Tajbakhsh, 
HackerOne
https://medium.com/@th3g3nt3l/how-i-found-an-ssrf-in-yahoo-guesthouse-recon-wins-8722672e41d4
Medium
How i found an SSRF in Yahoo! Guesthouse (Recon Wins)
Hi Guys,
1.34K viewsAmir, 
HackerOne
165.pdf
3.4 MB
Find Evil - know normal. \n hunting malware document
1.94K viewsxDD, edited  
HackerOne
backdooring pe file with aslr
https://hansesecure.de/backdooring-pe-file-with-aslr/
1.2K viewsxDD, 
HackerOne
Forwarded from PacktPub Free Learning
Today free book is out!
Expert Delphi
https://www.packtpub.com/packt/offers/free-learning
129 viewsxDD, 
HackerOne
https://github.com/OWASP/OWASP-Testing-Guide-v5
GitHub
GitHub - OWASP/wstg: The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications…
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services. - OWASP/wstg
4.03K viewsAmir, 
HackerOne
https://github.com/linkedin/qark
GitHub
GitHub - linkedin/qark: Tool to look for several security related Android application vulnerabilities
Tool to look for several security related Android application vulnerabilities - linkedin/qark
1.39K viewsMir Saman Tajbakhsh, 
HackerOne
https://raw.githubusercontent.com/Captainarash/The_Holy_Book_of_X86/master/book_vol_1.txt
1.31K viewsB14CK SPID3R, 
HackerOne
Forwarded from P0SCon
91 viewsMir Saman Tajbakhsh, 
HackerOne
Forwarded from P0SCon
Details of Speakers: Nikita Tarakanov - BlackHat USA 2017 Speaker
93 viewsMir Saman Tajbakhsh, 
HackerOne
https://cloudblogs.microsoft.com/microsoftsecure/2018/07/11/hawkeye-keylogger-reborn-v8-an-in-depth-campaign-analysis/
Microsoft Security Blog
Hawkeye Keylogger - Reborn v8: An in-depth campaign analysis | Microsoft Security Blog
Hawkeye Keylogger is an info-stealing malware that’s being sold as malware-as-a-service. Over the years, the malware authors behind Hawkeye have improved the malware service, adding new capabilities and techniques.
1.18K viewsxDD, 
HackerOne
Kenan Abdullahoğlu is one of the Turkey's cryptocurrency leaders. He has been interviewed with many news networks including Al Jazeera and BloombergHT about the different aspects of cryptocurrency including its security. Kenan will be present at poscon2018. More information and registration:
http://poscon.ir

@P0SCon
1.49K viewsMir Saman Tajbakhsh,