NEW BOT Телеграм, страница - 485765012

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://twitter.com/ESETresearch/status/1458438155149922312?s=20

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

3.14K viewsAmir Kiani, 00:39

https://github.com/0xCGonzalo/Golden-Guide-for-Pentesting

GitHub - 0xCGonzalo/Golden-Guide-for-Pentesting: Golden Guide

Golden Guide. Contribute to 0xCGonzalo/Golden-Guide-for-Pentesting development by creating an account on GitHub.

3.18K viewsAmir Kiani, 00:15

https://youtu.be/Wlr1VQCo_5g

django sql injection | The D is silent

CVE-2021-35042: Potential SQL injection via unsanitized QuerySet.order_by() input. Unsanitized user input passed to QuerySet.order_by() could bypass intended column reference validation in path marked for deprecation resulting in a potential SQL injection…

3.35K viewsAdel, 09:48

sample ransomware mail

3.59K viewsAmir Kiani, 05:11

https://hide01.ir

ＨｉｄｅＺｅｒｏＯｎｅ

مرجع دانلود دوره های تست نفوذ و امنیت

3.65K viewsMmD, 16:12

4.28K viewsAmir Kiani, 17:28

Forwarded from Security Analysis

CVE-2021-42321POC.py

⭕️PoC of MS Exchange RCE via mspaint.exe

@securation

3.75K viewsAdel, 12:52

https://certitude.consulting/blog/en/invisible-backdoor/

3.62K viewsAmir Kiani, 17:46

http://blog.howdays.kr/index.php/2021/11/26/virtualbox-6-1-18-0-day/

3.49K viewsAdel, 08:35

https://hackerone.com/reports/1363672

Shopify disclosed on HackerOne: Bypass a fix for report #708013

## Summary:
`customerAccessTokenCreate` mutation in the Storefront API does not correctly throttle login attempts. An issue in similar report https://hackerone.com/reports/708013 was already fixed,...

2.82K viewsAmir Kiani, 17:53

https://youtu.be/EwEABCBI3-g

HackTheBox Cyber Santa CTF 2021 - Naughty or Nice - Web Challenge - Day5

Video walk-through for the Web Challenge called "Naughty or Nice" from Day 5 of the HTB "Cyber Santa is Coming to Town" Capture The Flag event that was going on from December 1st to December 5th 2021.
#hackthebox #CTF #SANTA #santa #cyber #web #challenges…

3.1K viewsAdel, 07:02

https://twitter.com/1rpwn/status/1469240466071859213

sudo grep -r '${jndi:ldap://' /var/log sudo egrep -i -r '\$\{jndi:(ldap[s]?|rmi)://' /var/log #log4j #log_4jrce #RCE #apache

2.83K viewsAdel, 09:40

patched code

https://github.com/apache/logging-log4j2/pull/608/files/5f81dd218aab36bf1c6a7410c88c29594bb1a0e7#diff-271353c1076e53f6893261e4420de27d34588bfd782806b5c66a3465c43b7f51

Restrict LDAP access via JNDI by rgoers · Pull Request #608 · apache/logging-log4j2

Restricts access to LDAP via JNDI.

3.07K viewsAdel, 09:46

https://twitter.com/80vul/status/1470272820571963392

[Bad news] Ransomware has landed on #log4j2 RCE

2.89K viewsAdel, 12:48

https://jfrog.com/blog/tensorflow-python-code-injection-more-eval-woes/

TensorFlow Python Code Injection: More eval() Woes

Background JFrog security research team (formerly Vdoo) has recently disclosed a code injection issue in one of the utilities shipped with TensorFlow, a popular Machine Learning platform that’s widely used in the industry. The issue has been assigned to CVE…

2.97K viewsAdel, 07:43

3.39K viewsMmD, 19:28

https://github.com/icyguider/DumpNParse

GitHub - icyguider/DumpNParse: A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0. - icyguider/DumpNParse

3.18K viewsAdel, 08:03

In this video, would like to showcase another challenge from Snyk capture the flag event that was going on from October 5th to October 7th of 2021. My video showcase #premieres at 9:00 PM IRST (12 PM EST)

https://youtu.be/xCdqK84bngg

Steganography Challenges (2/4)

This is the second episode of the Steganography challenges video series.In this video I would like to showcase another challenge from SNYK capture the flag e...

2.78K viewsAdel, 11:09

https://github.com/wishihab/Android-RATList

GitHub - wishihab/Android-RATList: Android - Remote Access Trojan List

Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.

2.93K viewsMmD, 00:34

https://twitter.com/1rpwn/status/1474699501575327745

Microsoft fixes the vulnerability. did not give an Bounty Anything that is discovered next time, i will sell to ZDI/Black Market @msftsecresponse @msftsecurity

3.04K viewsAdel, 11:15

3.34K viewsAdel, edited 16:26