NEW BOT Телеграм, страница - 548062505

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

Exploring, Exploiting Active Directory Admin Flaws
https://www.darkreading.com/vulnerabilities---threats/exploring-exploiting-active-directory-admin-flaws/d/d-id/1332593?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Common methods AD administrators use to protect their environments can easily be exploited. Here's how.

Exploring, Exploiting Active Directory Admin Flaws

Common methods AD administrators use to protect their environments can easily be exploited. Here's how.

1.45K viewsAwdel, 18:19

https://blog.path.network/fuzzing-cs-go-bsp-files/

Path Network, Inc - Blog

Fuzzing CS:GO BSP Files

We fuzzed BSP map files for Counter Strike: Global Offensive leading to the discovery of a stack-based buffer overflow. Through some reverse engineering and source code analysis, we discovered that the vulnerability can lead to remote code execution.

1.84K viewsAmir Kiani, 07:36

https://github.com/Souhardya/Uboat

UBoat-Botnet/UBoat

HTTP Botnet Project. Contribute to UBoat-Botnet/UBoat development by creating an account on GitHub.

1.52K viewsMir Saman Tajbakhsh, 10:04

https://hackerone.com/reports/395518

HackerOne disclosed on HackerOne: Internal usage of AdBlockPlus may...

Hello HackerOne team,

this is probably going to be a *different* kind of report than what you are used to: it looks to me this is more of an internal, operational security best-practice that you...

1.38K viewsAmir Kiani, 12:39

https://www.owasp.org/index.php/OWASP_Mobile_Security_Project

1.28K viewsAmir Kiani, edited 19:44

https://www.blackhillsinfosec.com/how-to-hack-websockets-and-socket-io/

Black Hills Information Security, Inc.

How to Hack WebSockets and Socket.io - Black Hills Information Security, Inc.

Ethan Robish // WebSockets Overview WebSockets is a technology to allow browsers and servers to establish a single TCP connection and then asynchronously communicate in either direction. This is great […]

1.62K viewsAmir Kiani, 08:13

Forwarded from Rayanfam (Sina)

Hypervisor From Scratch – Part 1: Basic Concepts & Configure Testing Environment https://rayanfam.com/topics/hypervisor-from-scratch-part-1/

Hypervisor From Scratch - Part 1: Basic Concepts & Configure Testing Environment

We write about Windows Internals, Hypervisors, Linux, and Networks.

144 viewsAwdel, 20:38

https://ninja.style/post/bcard/

1.54K viewsxDD, 18:54

https://haiderm.com/10-methods-to-bypass-cross-site-request-forgery-csrf/

Haider's Infosec Blog

10 Methods to Bypass Cross Site Request Forgery Protection

Anti CSRF token bypass, Cross Site Request Forgery Bypass, Cross Site Request Forgery examples, Methods to Bypass CSRF, CSRF protection

1.71K viewsAmir Kiani, 18:12

https://blog.scrt.ch/2018/08/24/remote-code-execution-on-a-facebook-server/

1.33K viewsAmir Kiani, 17:06

https://hackenproof.com/cup

HackenProof is Vulnerability Disclosure & Bug Bounty Platform. By working with the community of security researchers we help companies uncover security vulnerabilities.

1.32K viewsAmir Kiani, 07:32

1.27K viewsxDD, 04:41

https://hackerone.com/reports/398641

DuckDuckGo disclosed on HackerOne: SSRF on duckduckgo.com/iu/

Normally, a call to `https://duckduckgo.com/iu` contains a query parameter (`u`) with some path using the domain `yimg.com`. This call will succeed in most cases.
{F337121}

And if we change that...

1.51K viewsAmir Kiani, 10:34

https://github.com/portswigger/upload-scanner

GitHub - PortSwigger/upload-scanner: HTTP file upload scanner for Burp Proxy

HTTP file upload scanner for Burp Proxy. Contribute to PortSwigger/upload-scanner development by creating an account on GitHub.

1.79K viewsAmir Kiani, 10:59

https://www.offensive-security.com/offsec/say-try-harder/

Offensive Security Say – Try Harder! | OffSec

Offsec students go through hell. We've dedicated the following song to anyone who's taken an Offsec course. Do you have what it takes to Try Harder?

1.51K viewsAmir Kiani, 11:03

https://cdn.area1security.com/reports/Area-1-Security-OperationDoos-IRN2%20Targets%20Saudi%20Arabian%20Oil%20and%20Gas%20Industry%20With%20Career-Themed%20Phishing%20Attack.pdf

2.31K viewsAmir Kiani, 07:54

PCLITEOS is a hardened Unix-like operating system based on BSD and Linux kernel for desktop and workstation that is designed registered and supported by PCLITE LTD Software & Hardware Systems(England and Wales) There are Professional and Enterprise editions both present KDE plasma and Qt applications for different types of work PCLITEOS is configured with LVM and OpenZFS as defaults.

https://pclite.net

1.68K viewsMir Saman Tajbakhsh, 10:23

1.57K viewsAmir Kiani, 18:07

Forwarded from Bug Bounty (Amir Kiani)

http://omespino.com/write-up-lovestory-from-closed-as-informative-to-xx00-usd-in-yahoo-ios-mail-app/

122 viewsAmir Kiani, 14:13

https://medium.com/@r99tiq/idor-how-i-was-able-to-see-any-private-album-passwrod-in-picturepush-264913f45e10

How I was able to see any private album in Picturepush — IDOR

1.11K viewsAmir Kiani, 21:35

https://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/

RET2 Systems Blog

A Methodical Approach to Browser Exploitation

Pwn2Own is an industry-level security competition organized annually by Trend Micro’s Zero Day Initiative. Pwn2Own invites top security researchers to showca...

1.16K viewsxDD, 00:04