NEW BOT Телеграм, страница - 315746949

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://www.owasp.org/index.php/OWASP_Mobile_Security_Project

1.28K viewsAmir Kiani, edited 19:44

https://www.blackhillsinfosec.com/how-to-hack-websockets-and-socket-io/

Black Hills Information Security, Inc.

How to Hack WebSockets and Socket.io - Black Hills Information Security, Inc.

Ethan Robish // WebSockets Overview WebSockets is a technology to allow browsers and servers to establish a single TCP connection and then asynchronously communicate in either direction. This is great […]

1.62K viewsAmir Kiani, 08:13

Forwarded from Rayanfam (Sina)

Hypervisor From Scratch – Part 1: Basic Concepts & Configure Testing Environment https://rayanfam.com/topics/hypervisor-from-scratch-part-1/

Hypervisor From Scratch - Part 1: Basic Concepts & Configure Testing Environment

We write about Windows Internals, Hypervisors, Linux, and Networks.

144 viewsAwdel, 20:38

https://ninja.style/post/bcard/

1.54K viewsxDD, 18:54

https://haiderm.com/10-methods-to-bypass-cross-site-request-forgery-csrf/

Haider's Infosec Blog

10 Methods to Bypass Cross Site Request Forgery Protection

Anti CSRF token bypass, Cross Site Request Forgery Bypass, Cross Site Request Forgery examples, Methods to Bypass CSRF, CSRF protection

1.71K viewsAmir Kiani, 18:12

https://blog.scrt.ch/2018/08/24/remote-code-execution-on-a-facebook-server/

1.33K viewsAmir Kiani, 17:06

https://hackenproof.com/cup

HackenProof is Vulnerability Disclosure & Bug Bounty Platform. By working with the community of security researchers we help companies uncover security vulnerabilities.

1.32K viewsAmir Kiani, 07:32

1.27K viewsxDD, 04:41

https://hackerone.com/reports/398641

DuckDuckGo disclosed on HackerOne: SSRF on duckduckgo.com/iu/

Normally, a call to `https://duckduckgo.com/iu` contains a query parameter (`u`) with some path using the domain `yimg.com`. This call will succeed in most cases.
{F337121}

And if we change that...

1.51K viewsAmir Kiani, 10:34

https://github.com/portswigger/upload-scanner

GitHub - PortSwigger/upload-scanner: HTTP file upload scanner for Burp Proxy

HTTP file upload scanner for Burp Proxy. Contribute to PortSwigger/upload-scanner development by creating an account on GitHub.

1.79K viewsAmir Kiani, 10:59

https://www.offensive-security.com/offsec/say-try-harder/

Offensive Security Say – Try Harder! | OffSec

Offsec students go through hell. We've dedicated the following song to anyone who's taken an Offsec course. Do you have what it takes to Try Harder?

1.51K viewsAmir Kiani, 11:03

https://cdn.area1security.com/reports/Area-1-Security-OperationDoos-IRN2%20Targets%20Saudi%20Arabian%20Oil%20and%20Gas%20Industry%20With%20Career-Themed%20Phishing%20Attack.pdf

2.31K viewsAmir Kiani, 07:54

PCLITEOS is a hardened Unix-like operating system based on BSD and Linux kernel for desktop and workstation that is designed registered and supported by PCLITE LTD Software & Hardware Systems(England and Wales) There are Professional and Enterprise editions both present KDE plasma and Qt applications for different types of work PCLITEOS is configured with LVM and OpenZFS as defaults.

https://pclite.net

1.68K viewsMir Saman Tajbakhsh, 10:23

1.57K viewsAmir Kiani, 18:07

Forwarded from Bug Bounty (Amir Kiani)

http://omespino.com/write-up-lovestory-from-closed-as-informative-to-xx00-usd-in-yahoo-ios-mail-app/

122 viewsAmir Kiani, 14:13

https://medium.com/@r99tiq/idor-how-i-was-able-to-see-any-private-album-passwrod-in-picturepush-264913f45e10

How I was able to see any private album in Picturepush — IDOR

1.11K viewsAmir Kiani, 21:35

https://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/

RET2 Systems Blog

A Methodical Approach to Browser Exploitation

Pwn2Own is an industry-level security competition organized annually by Trend Micro’s Zero Day Initiative. Pwn2Own invites top security researchers to showca...

1.16K viewsxDD, 00:04

https://github.com/ret2/P2O_2018

GitHub - ret2/P2O_2018

Contribute to ret2/P2O_2018 development by creating an account on GitHub.

1.2K viewsxDD, 00:04

https://github.com/hayderimran7/free-tech-ebooks-from-packtpub

1.31K viewsxDD, 00:07

Most Important Cyber Attack Techniques that often used by Hackers
https://gbhackers.com/cyber-attack-technique/

GBHackers Security | #1 Globally Trusted Cyber Security News Platform

Most Important Cyber Attack Techniques

The cyber attack occurs on a daily basis, and these can range from attacks on tech giants to individuals falling foul many scams.

1.22K viewsAwdel, 21:07

https://www.youtube.com/watch?v=Pvzhtjl86wc

turla gazer backdoor code injection & winlogon shell persistence

This video demonstrates Turla Gazer backdoor's code injection and Winlogon shell persistence Technique
If you are interested in learning malware analysis & memory forensics, register for the hands-on training at Black Hat USA 2019: https://ubm.io/2RmxVBR…

1.17K viewsxDD, 18:45