NEW BOT Телеграм, страница

HackerOne

https://sensepost.com/blog/2013/a-software-level-analysis-of-trustzone-os-and-trustlets-in-samsung-galaxy-phone/

1.75K viewsMmD, 14:42

HackerOne

https://media.blackhat.com/us-13/US-13-Nixon-Denying-Service-to-DDOS-Protection-Services-WP.pdf

1.69K viewsAmir Kiani, 00:20

HackerOne

https://www.youtube.com/watch?v=AJKt41u5c1w

YouTube

Black Hat USA 2013 - Universal DDoS Mitigation Bypass

By: Tony Miu, Albert Hui & Wai Leng Lee

Today's commercial DDoS mitigation technologies employ many different techniques for identifying DDoS traffics and blocking these threats. Common techniques range from basic malformed traffic check, to traffic profiling…

2.05K viewsAmir Kiani, 00:22

HackerOne

Forwarded from Mir Saman Tajbakhsh

Connecting to Hidden Mail Server using Android

Previously, I described about connecting ThunderBird (a PC based email client) to a hidden mail service. In this post, I modified K-9 Andoird mail client in order to support SOCKs proxy and described how to use it.

https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/

119 viewsMir Saman Tajbakhsh, 23:19

HackerOne

https://www.reuters.com/investigates/special-report/usa-spying-raven/

Reuters

Exclusive: Ex-NSA cyberspies reveal how they helped hack foes of UAE

Reuters reveals how a UAE surveillance operation, staffed by former U.S. cyber-agents, spied on dissidents, rivals and Americans. Inside 'Project Raven.'

2.08K viewsAmir Kiani, 10:08

HackerOne

Forwarded from bZp

3:11

This media is not supported in your browser

VIEW IN TELEGRAM

Exploiting Windows with Android (Disable UAC & Windows Defender) on bZp (HID Attack)

130 viewsMmD, 16:48

HackerOne

2.68K viewsMmD, 12:11

HackerOne

https://corb3nik.github.io/blog/insomnihack-teaser-2019/l33t-hoster

corb3nik.github.io

l33t-hoster

Corb3nik's personal blog - Infosec, CTFs and tools

1.94K viewsAmir Kiani, 21:36

HackerOne

https://hackerone.com/reports/489146

HackerOne

HackerOne disclosed on HackerOne: Confidential data of users and...

On January 31st, 2019 at 7:16pm PST, HackerOne confirmed that two reporters were able to query confidential data through a GraphQL endpoint. This vulnerability was introduced on December 17th, 2018...

2.17K viewsAmir Kiani, 13:26

HackerOne

Forwarded from امن افزار گستر آپادانا

✔️Application Enforcement
✔️Protected Folders
✔️Temporary Protection
✔️File and Folder Honeypot
✔️DLL protection
✔️System Restore Management
✔️VSS protection

portal.kaipod.ir
@pishgaman_kaipod

125 viewsAmir Kiani, 16:35

HackerOne

https://shenaniganslabs.io/2019/02/13/Dirty-Sock.html

Shenanigans Labs

Privilege Escalation in Ubuntu Linux (dirty_sock exploit)

In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux. This was due to a bug in the snapd API, a default service. Any local user could exploit this vulnerability to obtain immediate root access to the…

2.06K viewsAmir Kiani, 20:32

HackerOne

https://google.github.io/clusterfuzz/

2.15K viewsAmir Kiani, 00:05

HackerOne

Forwarded from Bug Bounty (Amir Kiani)

https://ysamm.com/?p=185

118 viewsAmir Kiani, 11:33

HackerOne

https://github.com/swisskyrepo/PayloadsAllTheThings

GitHub

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

2.06K viewsMir Saman Tajbakhsh, 21:17

HackerOne

2.47K viewsMmD, 21:22

HackerOne

Forwarded from Mir Saman Tajbakhsh

OSINT: Email Mining

Email mining: Tasks, common techniques, and tools. Email is one of the most popular forms of communication nowadays, mainly due to its efficiency, low cost, and compatibility of diversified types of information.

https://www.cs.sfu.ca/~jpei/publications/EmailMining-KAIS.pdf

119 viewsMir Saman Tajbakhsh, 21:41

HackerOne

https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/

Auth0 - Blog

Critical vulnerabilities in JSON Web Token libraries

Which libraries are vulnerable to attacks and how to prevent them.

2.75K viewsAmir Kiani, 09:20

HackerOne

2.63K viewsAmir Kiani, 20:43

HackerOne

https://github.com/christophetd/CloudFlair

GitHub