NEW BOT Телеграм, страница - 332126482

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://research.nccgroup.com/2021/10/11/the-challenges-of-fuzzing-5g-protocols/

2.35K viewsAdel, 18:21

Advanced MSSQL Injection Tricks

We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2.

https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/

#Injection #MSSQL

Advanced MSSQL Injection Tricks

We compiled a list of several techniques for improved exploition of MSSQL injections. All the vectors have been tested on at least three of the latest versions of Microsoft SQL Server: 2019, 2017, 2016SP2. DNS Out-of-Band If confronted with a fully blind…

3.66K viewsAdel, 18:22

https://github.com/FourCoreLabs/EDRHunt

GitHub - FourCoreLabs/EDRHunt: Scan installed EDRs and AVs on Windows

Scan installed EDRs and AVs on Windows. Contribute to FourCoreLabs/EDRHunt development by creating an account on GitHub.

2.56K viewsAdel, 10:17

#threatleak #APT

https://www.microsoft.com/security/blog/2021/10/11/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors/

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on United States and Israeli defense technology companies, Persian Gulf ports of entry, or global maritime transportation companies with…

3.09K viewsAdel, 10:24

Check out a new Internet scanner Netlas.io. It's similar to the well-known #Shodan, #Censys and #Zoomeye, but with some advantages. For example, you can search by full server response using regexp.

They are in the alpha-testing period. For this period the service is free. Developers promise some bonuses for active users (access to a paid account for several months after the alpha-testing). They have API and bulk data is also available (free and paid datasets).

The tool really deserves your attention and may be of interest to red team members, cybersecurity and OSINT professionals.

Go to the app and give your feedback!

Netlas: Comprehensive Internet-Wide Scanning & OSINT Platform

Netlas offers Internet scanners, DNS & WHOIS tools, and eASM services for reconnaissance and security assessment. Available as web, console, and API.

3.79K viewsAmir Kiani, 10:15

HackerOne pinned «Check out a new Internet scanner Netlas.io. It's similar to the well-known #Shodan, #Censys and #Zoomeye, but with some advantages. For example, you can search by full server response using regexp. They are in the alpha-testing period. For this period the…»

10:15

3.98K viewsMmD, 17:29

https://github.com/matamorphosis/Scrummage

GitHub - matamorphosis/Scrummage: A Holistic OSINT and Threat Hunting Platform

A Holistic OSINT and Threat Hunting Platform. Contribute to matamorphosis/Scrummage development by creating an account on GitHub.

3.11K viewsAmir Kiani, 17:47

https://www.kitploit.com/2021/10/peass-ng-privilege-escalation-awesome.html?utm_source=dlvr.it&utm_medium=twitter

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

2.59K viewsAmir Kiani, 21:42

https://github.com/MrH0wl/Cloudmare

GitHub - mrh0wl/Cloudmare: Cloudflare, Sucuri, Incapsula real IP tracker.

Cloudflare, Sucuri, Incapsula real IP tracker. Contribute to mrh0wl/Cloudmare development by creating an account on GitHub.

2.63K viewsAmir Kiani, 13:41

https://youtu.be/Ji1IesQ-7VA

Steganography Challenges - (1/4)

This is the first video about Steganography challenges in the Forensics Category.
#ctf #IceCTF #Forensics #QRCode #images #steganography #challenge #bugbounty #hackers #CTFtips #bugbountytips #IceCTF

2.4K viewsAmir Kiani, 13:51

https://youtu.be/RELDTT2I7Gk

apache skywalking sql injection | walking on sky lab solution

What is Apache Skywalking
Application performance monitor tool for distributed systems, especially designed for microservices, cloud native and container-based (Docker, Kubernetes, Mesos) architectures.

Vulnerability in Apache Skywalking
In GraphQL interfaces…

2.47K viewsAdel, 06:41

https://edwardsnowden.substack.com/p/cbdcs

Your Money AND Your Life

Central Bank Digital Currencies will ransom our future

2.46K viewsAmir Kiani, 15:55

Magisk, Riru, and LSPosed are now working on WSA

https://twitter.com/shanasaimoe/status/1451265487535435791

2.43K viewsMmD, 20:09

https://www-pub.iaea.org/MTCD/Publications/PDF/PUB1918_web.pdf

2.34K viewsAdel, 05:41

https://twitter.com/PythonResponder/status/1452820882657787911

It's been a few month since I released Responder DHCP 3.0.7.0 exclusively on @porchetta_ind. It's now free for everyone to use. Enjoy that module, and make sure to update Responder.conf as previously mentioned before using it (g-laurent.blogspot.com/2021/08/respon…).…

2.51K viewsAdel, 08:16

https://forum.reverse4you.org/t/cve-2021-30632-chrome-v8-rce-exploit-for-windows/17286

CVE-2021-30632 Chrome V8 RCE Exploit for Windows

On September 13, 2021, Google released version 93.0.4577.82 of Chrome. The release note specified that two of the security fixed bugs, CVE-2021-30632 and CVE-2021-30633, are being exploited in the wild (both reported by anonymous researchers). CVE-2021-30632…

2.55K viewsAmir Kiani, 16:10

https://twitter.com/d3c0der/status/1453127050965946375

It seems that Veeder-root products are popular in Iran. They are not secure by design and hacking into one of them is not very hard. Previously we warned about this kind of attack in one of our research papers. dl.acm.org/doi/10.1145/33… twitter.com/DarkReading/st…

2.79K viewsAdel, 22:46

https://twitter.com/vxunderground/status/1453398206507847680?s=21

Grief ransomware group has ransomed the National Rifle Association (NRA).

2.92K viewsAdel, 16:26

https://youtu.be/2ljVDZJUhFY
In this video, we dive in to #prototype #pollution vulnerability and going to solve recent CTFs Related to this bug. stay tuned! #Premieres 3.00 PM IRST

Prototype Pollution Vulnerability Walk Through

In this video, we dive into prototype pollution vulnerability and going to solve recent CTFs Related to this bug.
#prototype_pollution #snyk #snykcon2021 #redpwn2019 #Invisible #Ink #Invisible_Ink #prototypepollution #CTF #hacker #bugbounty #ctfplayer #Snyk2021…

3.05K viewsAdel, 07:23

https://www.youtube.com/watch?v=Rci5xiyMv7k

2.79K viewsAmir Kiani, 17:22