NEW BOT Телеграм, страница - 388647306

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://blog.redforce.io/sql-injection-in-insert-update-query-without-comma/

Comma is forbidden! No worries!! Inject in insert/update queries without it

A writeup regarding exploiting SQL injection issue in an insert query while it wasn't possible to use a comma at my payload at all.

2.41K viewsAmir Kiani, 06:24

Apache Root Privilege Escalation
https://cfreal.github.io/carpe-diem-cve-2019-0211-apache-local-root.html

cfreal.github.io

Hacker.

Maintainer of <a href=

2.43K viewsAmir Kiani, 10:24

https://github.com/seemoo-lab/nexmon

GitHub - seemoo-lab/nexmon: The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode,…

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more - seemoo-lab/nexmon

2.18K viewsMmD, 02:35

https://papers.mathyvanhoef.com/dragonblood.pdf

A Security Analysis of WPA3’s SAE Handshake

2.2K viewsAmir Kiani, edited 04:50

Forwarded from Mir Saman Tajbakhsh

A simple denoscription about VPN through TOR and TOR through VPN.

https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/

112 viewsMir Saman Tajbakhsh, 08:15

https://github.com/zerosum0x0/smbdoor

2.14K viewsAmir Kiani, 09:02

Forwarded from UCTF

Join @uutctf at http://ctf.uut.ac.ir

107 viewsMir Saman Tajbakhsh, 16:21

https://portswigger.net/blog/xss-without-html-client-side-template-injection-with-angularjs

PortSwigger Research

XSS without HTML: Client-Side Template Injection with AngularJS

Abstract Naive use of the extremely popular JavaScript framework AngularJS is exposing numerous websites to Angular Template Injection. This relatively low profile sibling of server-side template inje

1.6K viewsAmir Kiani, 05:20

https://twitter.com/WHHackersBR/status/1118393568656334850?s=19

1.62K viewsAmir Kiani, 05:30

https://securitydiscovery.com/iranian-ride-hailing-app-database-exposure/

Securitydiscovery

Iranian Ride-Hailing App Database Exposure | Security Discovery

On April 18th, during our regular security audit of nonSql databases with BinaryEdge search engine, I have discovered an open […]

1.69K viewsAmir Kiani, 13:16

https://www.zdnet.com/article/source-code-of-iranian-cyber-espionage-tools-leaked-on-telegram/

Source code of Iranian cyber-espionage tools leaked on Telegram

APT34 hacking tools and victim data leaked on a secretive Telegram channel since last month.

1.93K viewsDmitriy, 23:45

https://medium.com/@armaanpathan/pdfreacter-ssrf-to-root-level-local-file-read-which-led-to-rce-eb460ffb3129?_branch_match_id=540891355441283646

PDFReacter SSRF to ROOT Level Local File Read which led to RCE

What is PDFReacter? - PDFReacter is a parser which parses HTML content from HTML to PDF.

2.06K viewsAmir Kiani, 08:24

https://twitter.com/Alra3ees/status/1120136388572217345?s=09

A completely free, open source and online course about Reverse Engineering iOS Applications. https://t.co/5M8vnp5fdW

2.16K viewsMir Saman Tajbakhsh, 15:44

https://www.deepdotweb.com/2019/04/21/wall-street-market-exit-scamming-do-not-deposit/

1.94K viewsAmir Kiani, 19:23

https://medium.com/@logicbomb_1/the-journey-of-web-cache-firewall-bypass-to-ssrf-to-aws-credentials-compromise-b250fb40af82

The journey of Web Cache + Firewall Bypass to SSRF to AWS credentials compromise!

Hi Guys, Back with an interesting hack that I was eagerly waiting to get the writeup to publish. This hack is about a chain of…

2.27K viewsAmir Kiani, 21:27

https://medium.com/@ronak_9889/denial-of-service-using-cookie-bombing-55c2d0ef808c

Denial of Service using Cookie Bombing

Hello Guys! This is my first write up, I hope it would be informative. This article is about bug, i recently found on the private program…

2.2K viewsAmir Kiani, 19:51

1.84K viewsAmir, 22:26

https://medium.com/bugbountywriteup/uutcf-2019-writeups-6c11ea3f9d22

UUTCF 2019 WriteUps

In this post I am going to walk you through 3 CTF challenges from UUTCTF 2019, 2 Forensics and 1 Misc. I was so excited to solve these…

2.83K viewsAmir, 17:02

2.06K viewsMmD, 13:20

به محقق امنیتی افشا کرده که اکسپلویت‌های Shadow Brokers یک سال قبل توسط یک گروه هکری چینی استفاده میشدن. واقعا قدرت هک لذت بخش.
https://twitter.com/TheHackersNews/status/1125683411627139072?s=19

2.52K viewsYasho, 22:06

https://blog.ripstech.com/2019/wordpress-csrf-to-rce/

1.94K viewsAmir, 21:22