NEW BOT Телеграм, страница - 384912388

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

2.4K viewsAmir Kiani, 04:17

Rules from Fireeye's capa-rules converted to YARA

https://github.com/ruppde/yara_rules/tree/main/capa2yara

yara_rules/capa2yara at main · ruppde/yara_rules

Yara rules. Contribute to ruppde/yara_rules development by creating an account on GitHub.

2.4K viewsAdeL, 11:07

https://hackerone.com/reports/727330

Slack disclosed on HackerOne: Header modification results in...

I found *files.slack.com* domain will honor the **X-Forwarded-Host** header, instead of host header. Although file.slack.com has host validation to return 500 Internal server error when host is not...

2.3K viewsAmir Kiani, 09:51

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf

https://github.com/BC-SECURITY/Invoke-ZeroLogon

GitHub - BC-SECURITY/Invoke-ZeroLogon: Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller…

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf. - BC-SECURITY/Invoke-ZeroLogon

2.6K viewsAdeL, 11:35

https://medium.com/r3d-buck3t/bypass-ip-restrictions-with-burp-suite-fb4c72ec8e9c

Bypass IP Restrictions with Burp Suite

Automatically add headers to all Burp requests to bypass basic WAF rules

3.09K viewsAmir Kiani, 22:29

https://alpaca-attack.com/

2.93K viewsAmir Kiani, 08:08

http://www.diva-portal.org/smash/record.jsf?pid=diva2%3A757354&dswid=-4085

Evaluation of Current Practical Attacks Against RFID Technology

DiVA portal is a finding tool for research publications and student theses written at the following 50 universities and research institutions.

2.56K viewsAmir Kiani, 10:43

2.79K viewsMmD, 18:56

CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys
https://www.zerodayinitiative.com/blog/2021/5/17/cve-2021-31166-a-wormable-code-execution-bug-in-httpsys

Zero Day Initiative

Zero Day Initiative — CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys

In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Kc Udonsi and Yazhi Wang of the Trend Micro Research Team detail a recent code execution vulnerability in the Microsoft Internet Information Services (IIS) for Windows.…

2.69K viewsAdeL, 09:15

2.17K viewsAmir Kiani, 08:11

https://github.com/bee-san/pyWhat

GitHub - bee-san/pyWhat: 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap…

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️ - bee-san/pyWhat

2.25K viewsAmir Kiani, 10:55

How I was able to bypass the admin portal by using the default credentials in BBC Corporation.

https://infosecwriteups.com/how-i-was-able-to-bypass-the-admin-portal-by-using-the-default-credentials-52bfb13e6f3

How I was able to bypass the admin portal by using the default credentials in BBC Corporation.

Hello everyone, today I will be talking about one of the critical bug which I found on the BBC website which is bypassing the admin portal…

2.09K viewsDmitriy, 02:50

FalconEye - Real-time detection software for Windows process injections.

https://github.com/rajiv2790/FalconEye

GitHub - rajiv2790/FalconEye

Contribute to rajiv2790/FalconEye development by creating an account on GitHub.

2.04K viewsAdeL, 08:03

https://blog.chichou.me/2021/06/20/quick-analysis-wifid/

Quick Analysis for the SSID Format String Bug | CodeColorist

A rogue Wi-Fi hotspot can crash your phone.

1.94K viewsAmir Kiani, 21:43

https://payatu.com/blog/hariprasad/Write-Your-Burp-Suite-Extensions

1.96K viewsAmir Kiani, 22:18

https://infosecwriteups.com/my-bug-bounty-journey-ranking-1st-in-u-s-dod-achieving-top-100-hackers-in-1-year-f208c10144fc

My Bug Bounty Journey & Ranking 1st in U.S. DoD & Achieving top 100 hackers in 1 year

I am sharing some of my methodology, recourses, tips and advices to become a better bug bounty hunter.

2.12K viewsAmir Kiani, 10:37

Hacker's guide to deep-learning side-channel attacks: the theory https://elie.net/blog/security/hacker-guide-to-deep-learning-side-channel-attacks-the-theory

Hacker's guide to deep-learning side-channel attacks: the theory | blog post

Learn the concepts behind deep-learning side-channels attack, a powerful cryptanalysis technique, by using it to recover AES cryptographic keys from a hardware device.

2.13K viewsAdeL, 11:54

MITRE adds D3FEND defensive cybersecurity techniques to ATT&CK Framework

https://ift.tt/2TWawxU

Security Affairs

MITRE adds D3FEND defensive techniques to ATT&CK Framework

D3FEND is a new project promoted by MITRE Corporation to add defensive cybersecurity techniques to the ATT&CK Framework.

2.28K viewsAdeL, 10:32

https://portswigger.net/research/talks?talkid=19

portswigger.net

Upcoming Conference Talks - PortSwigger Research

Find details of upcoming talks from the PortSwigger Research team. We also have research papers and recordings available from previous conferences and events.

2.12K viewsAmir Kiani, 15:35

Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions
https://thehackernews.com/2021/06/malware-can-use-this-trick-to-bypass.html

The Hacker News

Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions

Malware Can Use This New Trick to Bypass Ransomware Defense in Popular Antivirus Solutions

1.91K viewsAdeL, 10:29

https://cyberxplore.medium.com/how-we-are-able-to-hack-any-company-by-sending-message-including-facebook-google-microsoft-b7773626e447

How We Are Able To Hack Any Company By Sending Message - $20,000 Bounty [CVE-2021–34506]

Hello Folks , I hope everyone is doing well in this pandemic & making full use of it for learning new stuff in their daily life . so this a…

1.92K viewsAmir Kiani, 11:51