NEW BOT Телеграм, страница - 780698909

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://shenaniganslabs.io/2019/02/13/Dirty-Sock.html

Shenanigans Labs

Privilege Escalation in Ubuntu Linux (dirty_sock exploit)

In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux. This was due to a bug in the snapd API, a default service. Any local user could exploit this vulnerability to obtain immediate root access to the…

2.06K viewsAmir Kiani, 20:32

https://google.github.io/clusterfuzz/

2.15K viewsAmir Kiani, 00:05

Forwarded from Bug Bounty (Amir Kiani)

https://ysamm.com/?p=185

118 viewsAmir Kiani, 11:33

https://github.com/swisskyrepo/PayloadsAllTheThings

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

2.06K viewsMir Saman Tajbakhsh, 21:17

2.47K viewsMmD, 21:22

Forwarded from Mir Saman Tajbakhsh

OSINT: Email Mining

Email mining: Tasks, common techniques, and tools. Email is one of the most popular forms of communication nowadays, mainly due to its efficiency, low cost, and compatibility of diversified types of information.

https://www.cs.sfu.ca/~jpei/publications/EmailMining-KAIS.pdf

119 viewsMir Saman Tajbakhsh, 21:41

https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/

Critical vulnerabilities in JSON Web Token libraries

Which libraries are vulnerable to attacks and how to prevent them.

2.75K viewsAmir Kiani, 09:20

2.63K viewsAmir Kiani, 20:43

https://github.com/christophetd/CloudFlair

GitHub - christophetd/CloudFlair: 🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys. - christophetd/CloudFlair

2.96K viewsAmir Kiani, 12:46

2.94K viewsMmD, 13:55

https://generaleg0x01.com/2019/03/10/escalating-ssrf-to-rce/

2.11K viewsAmir Kiani, 23:25

https://medium.com/@armaanpathan/brute-forcing-user-ids-via-csrf-to-delete-all-users-with-csrf-attack-216ccd4d832c

Brute Forcing User IDS via CSRF To Delete all Users with CSRF attack.

While testing an application, there was a module “Delete User” in which an admin can delete any user.

2.22K viewsAmir Kiani, 20:19

This media is not supported in your browser

VIEW IN TELEGRAM

2.1K viewsMmD, 23:52

https://hackerone.com/reports/470520

Valve disclosed on HackerOne: RCE on Steam Client via buffer...

## Introduction

In Steam and other valve games (CSGO, Half-Life, TF2) there is a functionality to find game servers called the server browser. In order to retrieve the information about these...

2.1K viewsAmir Kiani, 20:28

2.3K viewsMmD, 15:35

embedded-linux-primer-a-practical-real-world-appro.pdf

Embedded Linux Primer: A Practical Real-World Approach, 2nd Edition

2.93K viewsMmD, 23:35

https://hackaday.com/2017/02/20/33c3-dissecting-3g4g-phone-modems/

33C3: Dissecting 3G/4G Phone Modems

[LaForge] and [Holger] have been hacking around on cell phones for quite a while now, and this led to them working on the open cellphone at OpenMoko and developing the OsmocomBB GSM SDR software. N…

2.03K viewsAmir Kiani, 21:29

SecHub.io - Educational Platform for Web Sec

2.32K viewsAmir Kiani, 18:15

https://amp.cnn.com/cnn/2019/03/21/tech/facebook-password-database/index.html?__twitter_impression=true

#good_news

Facebook staff had access to hundreds of millions of people's passwords

Facebook is back with another mea culpa.

1.88K viewsAmir Kiani, 23:31

1.57K viewsAmir Kiani, 01:03