NEW BOT Телеграм, страница - 212822916

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

⚡ SAD DNS Attack !!!

A series of new vulnerabilities (CVE-2020-25705) in Linux, Windows, macOS, and FreeBSD systems re-enable classic DNS cache poisoning attack, leaving millions of users vulnerable.

Details: https://thehackernews.com/2020/11/sad-dns-new-flaws-re-enable-dns-cache.html

2.29K viewsAdeL, 07:17

https://nechudav.blogspot.com/2020/11/31k-ssrf-in-google-cloud-monitoring.html

31k$ SSRF in Google Cloud Monitoring led to metadata exposure

Update 25.01.2021: Added Google engineers exploit method for getting access token. Google Cloud Monitoring (formerly called Stackdriver)...

2.39K viewsAmir Kiani, 11:14

https://github.com/The-Art-of-Hacking/h4cker/tree/master/web_application_testing

h4cker/web_application_testing at master · The-Art-of-Hacking/h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar...

3.13K viewsAmir Kiani, 06:07

https://link.medium.com/BjNRllpfobb

Interesting case of SQLi

Hey everyone, didn’t get time this year to blog about my findings. But this one, i found around 2–3 months back , it was interesting case…

2.91K viewsAmir Kiani, 13:54

https://blog.nvisium.com/p606

Using Burp Intruder to Test CSRF Protected Applications

2.47K viewsAmir Kiani, 11:03

https://cyc10n3.medium.com/rce-via-server-side-template-injection-ad46f8e0c2ae

RCE via Server-Side Template Injection

In this write-up, we’ll see how I identified a remote code execution vulnerability and bypassed the Akamai WAF rule(s). While I was doing…

2.23K viewsAmir Kiani, 22:16

https://malwation.com/ryuk-ransomware-technical-analysis/

RYUK Ransomware Technical Analysis - Malwation

2.18K viewsAdeL, 15:37

Romanians arrested for running underground malware services
https://ift.tt/3nJfqIc

2.26K viewsAdeL, 15:45

TOR binary for Android with helper classes

https://github.com/mirsamantajbakhsh/TorAndroid

GitHub - mirsamantajbakhsh/TorAndroid: Tor Binary in Android as a Library

Tor Binary in Android as a Library. Contribute to mirsamantajbakhsh/TorAndroid development by creating an account on GitHub.

2.35K viewsMir Saman Tajbakhsh, 19:14

BURP SUITE 403 Bypasser

https://github.com/sting8k/BurpSuite_403Bypasser

GitHub - sting8k/BurpSuite_403Bypasser: Burpsuite Extension to bypass 403 restricted directory

Burpsuite Extension to bypass 403 restricted directory - sting8k/BurpSuite_403Bypasser

2.54K viewsAdeL, 13:51

1000+ iq

2.82K viewsAmir Kiani, edited 00:56

Physical Layer Security

Part 1 :
https://youtu.be/JbscNhkQpGU

Part 2 :
https://youtu.be/BNXyv0GmPDs

Physical-Layer Security: Bounds, Codes and Protocols (João Barros) - Part 1 (SPCodingSchool)

3.3K viewsAmir Kiani, 15:21

https://github.com/mirsamantajbakhsh/NMAPAndroid

GitHub - mirsamantajbakhsh/NMAPAndroid: NMAP Build for Android (x86, armeabi)

NMAP Build for Android (x86, armeabi). Contribute to mirsamantajbakhsh/NMAPAndroid development by creating an account on GitHub.

2.38K viewsMir Saman Tajbakhsh, 15:52

https://cybergeeks.tech/dissecting-apt21-samples-using-a-step-by-step-approach/

2.11K viewsAdeL, 19:14

https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html

An iOS zero-click radio proximity exploit odyssey

Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in...

2.15K viewsAmir Kiani, 09:43

Designing The Adversary Simulation Lab

https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/

Designing The Adversary Simulation Lab - MDSec

As some of you will know, we have recently entered into the Red Team training space. Before deciding to create our course now known as “Adversary Simulation and Red Team...

2K viewsAdeL, 18:43

🇮🇱: Hackers who breached Israeli insurance firm demand $1m to keep data private.

https://www.timesofisrael.com/hackers-who-breached-israeli-insurance-firm-demand-1m-to-keep-data-private/amp/

The Times of Israel

Hackers who breached Israeli insurance firm demand $1m to keep data private

Group warns sum will double every 24 hours, and say they'll sell the documents if ransom money not paid within 3 days

2.15K viewsAdeL, 22:53

Researchers Discover New Obfuscation-As-a-Service Platform
https://www.darkreading.com/cloud/researchers-discover-new-obfuscation-as-a-service-platform/d/d-id/1339609

via Dark Reading

Researchers Discover New Obfuscation-As-a-Service Platform

Researchers detail how a Android APK obfuscation service automates detection evasion for highly malicious apps.

2.28K viewsAdeL, 22:54

@cybersecarticles
Free course

1.95K viewsAmir Kiani, 17:06

https://github.com/pry0cc/axiom

GitHub - pry0cc/axiom: The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools…

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more! - pry0cc/axiom

2.12K viewsAmir Kiani, 07:53

https://portswigger.net/research/cracking-recaptcha-turbo-intruder-style

PortSwigger Research

Cracking reCAPTCHA, Turbo Intruder style

Tired of proving you're not a robot? In this post, I'll show how you can partially bypass Google reCAPTCHA by using a new Turbo Intruder feature to trigger a race condition. This vulnerability was rep

2.21K viewsAmir Kiani, 09:28