NEW BOT Телеграм, страница - 737446112

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://six2dez.gitbook.io/pentest-book/others/web-checklist

Pentesting Web checklist | Pentest Book

2.46K viewsAmir Kiani, 04:27

https://securitylab.github.com/research/Ubuntu-gdm3-accountsservice-LPE

2.31K viewsAdeL, 09:11

Sleep Attack:
Intel Bootguard vulnerability waking from S3 (CVE-2020-8705 PoC)
https://trmm.net/Sleep_attack/

Trammell Hudson's Projects

Sleep Attack: Intel Bootguard vulnerability waking from S3

Details on CVE-2020-8705, a TOCTOU attack against the Bootguard hardware root of trust in Intel x86 systems when they resume from S3 sleep.

2.07K viewsAdeL, 04:54

Popular software products from Adobe, Apple, Google, Microsoft, Mozilla, and Samsung successfully PWNED at Tianfu Cup 2020 cybersecurity contest—with previously unseen exploits.

Read details: https://thehackernews.com/2020/11/windows-10-ios-chrome-firefox-and.html

2.01K viewsAdeL, 07:15

⚡ SAD DNS Attack !!!

A series of new vulnerabilities (CVE-2020-25705) in Linux, Windows, macOS, and FreeBSD systems re-enable classic DNS cache poisoning attack, leaving millions of users vulnerable.

Details: https://thehackernews.com/2020/11/sad-dns-new-flaws-re-enable-dns-cache.html

2.29K viewsAdeL, 07:17

https://nechudav.blogspot.com/2020/11/31k-ssrf-in-google-cloud-monitoring.html

31k$ SSRF in Google Cloud Monitoring led to metadata exposure

Update 25.01.2021: Added Google engineers exploit method for getting access token. Google Cloud Monitoring (formerly called Stackdriver)...

2.39K viewsAmir Kiani, 11:14

https://github.com/The-Art-of-Hacking/h4cker/tree/master/web_application_testing

h4cker/web_application_testing at master · The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar...

3.13K viewsAmir Kiani, 06:07

https://link.medium.com/BjNRllpfobb

Interesting case of SQLi

Hey everyone, didn’t get time this year to blog about my findings. But this one, i found around 2–3 months back , it was interesting case…

2.91K viewsAmir Kiani, 13:54

https://blog.nvisium.com/p606

Using Burp Intruder to Test CSRF Protected Applications

2.47K viewsAmir Kiani, 11:03

https://cyc10n3.medium.com/rce-via-server-side-template-injection-ad46f8e0c2ae

RCE via Server-Side Template Injection

In this write-up, we’ll see how I identified a remote code execution vulnerability and bypassed the Akamai WAF rule(s). While I was doing…

2.23K viewsAmir Kiani, 22:16

https://malwation.com/ryuk-ransomware-technical-analysis/

RYUK Ransomware Technical Analysis - Malwation

2.18K viewsAdeL, 15:37

Romanians arrested for running underground malware services
https://ift.tt/3nJfqIc

2.26K viewsAdeL, 15:45

TOR binary for Android with helper classes

https://github.com/mirsamantajbakhsh/TorAndroid

GitHub - mirsamantajbakhsh/TorAndroid: Tor Binary in Android as a Library

Tor Binary in Android as a Library. Contribute to mirsamantajbakhsh/TorAndroid development by creating an account on GitHub.

2.35K viewsMir Saman Tajbakhsh, 19:14

BURP SUITE 403 Bypasser

https://github.com/sting8k/BurpSuite_403Bypasser

GitHub - sting8k/BurpSuite_403Bypasser: Burpsuite Extension to bypass 403 restricted directory

Burpsuite Extension to bypass 403 restricted directory - sting8k/BurpSuite_403Bypasser

2.54K viewsAdeL, 13:51

1000+ iq

2.82K viewsAmir Kiani, edited 00:56

Physical Layer Security

Part 1 :
https://youtu.be/JbscNhkQpGU

Part 2 :
https://youtu.be/BNXyv0GmPDs

Physical-Layer Security: Bounds, Codes and Protocols (João Barros) - Part 1 (SPCodingSchool)

3.3K viewsAmir Kiani, 15:21

https://github.com/mirsamantajbakhsh/NMAPAndroid

GitHub - mirsamantajbakhsh/NMAPAndroid: NMAP Build for Android (x86, armeabi)

NMAP Build for Android (x86, armeabi). Contribute to mirsamantajbakhsh/NMAPAndroid development by creating an account on GitHub.

2.38K viewsMir Saman Tajbakhsh, 15:52

https://cybergeeks.tech/dissecting-apt21-samples-using-a-step-by-step-approach/

2.11K viewsAdeL, 19:14

https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html

An iOS zero-click radio proximity exploit odyssey

Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in...

2.15K viewsAmir Kiani, 09:43

Designing The Adversary Simulation Lab

https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/

Designing The Adversary Simulation Lab - MDSec

As some of you will know, we have recently entered into the Red Team training space. Before deciding to create our course now known as “Adversary Simulation and Red Team...

2K viewsAdeL, 18:43

🇮🇱: Hackers who breached Israeli insurance firm demand $1m to keep data private.

https://www.timesofisrael.com/hackers-who-breached-israeli-insurance-firm-demand-1m-to-keep-data-private/amp/

The Times of Israel

Hackers who breached Israeli insurance firm demand $1m to keep data private

Group warns sum will double every 24 hours, and say they'll sell the documents if ransom money not paid within 3 days

2.15K viewsAdeL, 22:53