NEW BOT Телеграм, страница

https://blog.ripstech.com/2019/wordpress-csrf-to-rce/

1.94K viewsAmir, 21:22

https://portswigger.net/blog/xss-without-parentheses-and-semi-colons

A few years ago I discovered a technique to call functions in JavaScript without parentheses using onerror and the throw statement. It works by setting the onerror handler to the function you want to

1.94K viewsAmir, 18:18

HackerOne

https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

www.cyberus-technology.de

Cyberus Technology: ZombieLoad: Cross Privilege-Boundary Data Leakage

Cyberus Technology - Where Virtualization Meets German Engineering

1.97K viewsAmir, 07:13

HackerOne

https://www.youtube.com/watch?v=xU9m4RlyqNc

YouTube

Clone Credit Card With A Cassette Tape

Ever wonder how a credit card works? Well it is just a magnetic strip like a cassette tape. There have been pocket sized credit sized card cloners forever but I just wanted to point out how basic the technology is. I don’t really care if they upgrade the…

2.4K viewsAmir, 20:19

HackerOne

https://medium.com/tenable-techblog/stealing-downloads-from-slack-users-be6829a55f63

Medium

Stealing Downloads from Slack Users

I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app on Windows. The vulnerability was…

2.78K viewsAmir, 08:50

HackerOne

6.52K viewsAmir, 09:02

HackerOne

https://www.ambionics.io/blog/drupal8-rce

Ambionics

Exploiting Drupal8's REST RCE

Exploitation and mitigation bypasses for the new Drupal 8 RCE (SA-CORE-2019-003, CVE-2019-6340), targeting the REST module.

2.15K viewsAmir, 22:46

HackerOne

https://www.hackerone.com/zerodaily/2019-05-29

Hackerone

2019-05-29 | OSINT 101, SnapLion, XSS Hunter gone postal | HackerOne

Wednesday, May 29 TOP STORY One simple IDOR. Krebs First American Financial Corp. breach bomb last Friday smartly dropped before a long holiday weekend as all other journalists were probably on vacay for the weekend or at least not in the state of mind to…

1.92K viewsAmir, 16:55

HackerOne

2.01K viewsAmir, 16:57

HackerOne

Proof of concept for CVE-2019-0708
https://github.com/Ekultek/BlueKeep

GitHub

GitHub - Ekultek/BlueKeep: Proof of concept for CVE-2019-0708

Proof of concept for CVE-2019-0708. Contribute to Ekultek/BlueKeep development by creating an account on GitHub.

2.3K viewsAmir, 14:53

HackerOne

DPI technique in action:

https://github.com/SadeghHayeri/GreenTunnel

GitHub

GitHub - SadeghHayeri/GreenTunnel: GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place…

GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites. - SadeghHayeri/GreenTunnel

2.9K viewsMir Saman Tajbakhsh, 07:22

HackerOne

Watch Live Video from Android's Spy Camera.

https://github.com/mirsamantajbakhsh/LiveHiddenCamera/

GitHub

GitHub - mirsamantajbakhsh/LiveHiddenCamera: Live Hidden Camera is a library which record live video and audio from Android device…

Live Hidden Camera is a library which record live video and audio from Android device without displaying a preview. - mirsamantajbakhsh/LiveHiddenCamera

2.49K viewsMir Saman Tajbakhsh, 14:30

HackerOne

Forwarded from Mir Saman Tajbakhsh

https://darksearch.io/

https://twitter.com/binitamshah/status/1137751379655692288?s=09

201 viewsMir Saman Tajbakhsh, 03:50

HackerOne

https://telegra.ph/Cisco-RV130W-10344-Remote-Stack-Overflow---udalyonnoe-perepolnenie-steka-i-vypolnenie-komand-na-routere-06-10

Telegraph

Cisco RV130W 1.0.3.44 Remote Stack Overflow - удалённое переполнение стека и выполнение команд на роутере

t.me/webware Доброго времени суток, форумчане. Сегодня мы разберём свежий эксплойт для переполнения буфера Cisco rv130w версии 1.0.3.44. Кто не знает что такое переполнение буфера: переполнение буфера - явление, возникающее, когда компьютерная программа записывает…

2.09K viewsپدرخوانده, 10:23

HackerOne

Mobile phishing toolkit remotely controlled by an app
https://github.com/UndeadSec/SocialFishMobile

GitHub

GitHub - UndeadSec/SocialFishMobile: :iphone: An app to remote control SocialFish.

:iphone: :fish: An app to remote control SocialFish. - GitHub - UndeadSec/SocialFishMobile: :iphone: An app to remote control SocialFish.

2.36K viewsپدرخوانده, 10:41

HackerOne

https://medium.com/intigriti/how-spending-our-saturday-hacking-earned-us-20k-60990c4678d4

Medium

How spending our Saturday hacking earned us €20.000

Intigriti organised a hacking event in which we found an oracle bug worth more than €20.000 in bounties.

2.25K viewsAmir, 22:24

HackerOne

Running iOS in QEMU to an interactive bash shell (1): tutorial

https://alephsecurity.com/2019/06/17/xnu-qemu-arm64-1/

Alephsecurity

Running iOS in QEMU to an interactive bash shell (1): tutorial

2.09K viewsپدرخوانده, 14:41

HackerOne

https://threatpost.ru/mozilla-patches-firefox-zero-day-attacked-itw/33147/

1.97K viewsپدرخوانده, 07:18

HackerOne

https://www.zdnet.com/google-amp/article/russian-apt-hacked-iranian-apts-infrastructure-back-in-2017/

ZDNET

Russian APT hacked Iranian APT's infrastructure back in 2017

Turla APT hacked Iran's APT34 group and used its C&C servers to re-infect APT34 victims with its own malware.

1.9K viewsپدرخوانده, 07:47

HackerOne

https://github.com/sophoslabs/CVE-2019-0888/blob/master/cve-2019-0888-poc.html

GitHub

CVE-2019-0888/cve-2019-0888-poc.html at master · sophoslabs/CVE-2019-0888

PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO) - CVE-2019-0888/cve-2019-0888-poc.html at master · sophoslabs/CVE-2019-0888

2.01K viewsپدرخوانده, 17:22

HackerOne

https://medium.com/@satboy.fb/art-of-unrestricted-file-upload-exploitation-92ed28796d0

Medium

The Art of Unrestricted File Upload Exploitation

Hey Whatsup! This is Satyendra an Infosec noob, I hope you are doing well. I’m presenting here my little research on Unrestricted file…

2.28K viewsAmir, 21:55

About

Blog

Apps

Platform