NEW BOT Телеграм, страница - 668688163

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

This media is not supported in your browser

VIEW IN TELEGRAM

3.81K viewsEhsan, 09:21

https://youtu.be/3AxSFqX4WCs

#log4j reverse shell poc on cloud

What is #Log4j?
Log4j is a java-based logging framework that is fast, dependable, and flexible. It is a Java logging API that is open source. Simply put, logging is a method of indicating the state of the system at runtime. Logs are used to capture and store…

2.57K viewsAdel, 14:04

https://youtu.be/Y4SnKBZmHJ4

Find my location - Prototype Pollution - E02

In this video I would like to showcase "find my location" challenge from the "Foorbar CTF 2022 Web Category"
#foobarCTF #prototype #pollution #bugbounty #hacking #whitebox #analyzing #walkthrough #foobar #2022 #challenge #episode #web #category #ctftime #event…

2.49K viewsAdel, 08:16

https://github.com/samratashok/nishang

GitHub - samratashok/nishang: Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security. - GitHub - samratashok/nishang: Nishang - Offensive PowerShell for red team, penetration testing and offens...

3.04K viewsAmir Kiani, 17:06

https://github.com/TROUBLE-1/Vajra

GitHub - TROUBLE-1/Vajra: Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure…

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the P...

2.51K viewsAmir Kiani, 11:26

https://www.virusbulletin.com/virusbulletin/2013/10/same-zeus-different-features

Virus Bulletin :: Same Zeus, different features

We have seen hundreds, if not thousands, of variations of Zeus in the wild. The main goal of the malware does not vary, yet different functionalities have been added over time. Raul Alvarez takes a detailed look at some of those functionalities and shows…

2.54K viewsAmir Kiani, 11:51

https://github.com/rinetd/BurpSuite-1/blob/master/CheatSheet.md

Burp Suite Hot Key

BurpSuite-1/CheatSheet.md at master · rinetd/BurpSuite-1

BurpSuite using the document and some extensions. Contribute to rinetd/BurpSuite-1 development by creating an account on GitHub.

2.74K viewsAmir Kiani, edited 08:45

https://github.com/0xsp-SRD/mortar

GitHub - 0xsp-SRD/mortar: evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR) - 0xsp-SRD/mortar

3.09K viewsEhsan, 16:58

https://positive.security/blog/dompdf-rce

positive.security

From XSS to RCE (dompdf 0day) | Positive Security

Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.

3.14K viewsEhsan, 21:25

https://github.com/rinetd/BurpSuite-1/blob/master/CheatSheet.md

Burp Suite Hot Keyhttps://github.com/0x4D31/awesome-threat-detection

BurpSuite-1/CheatSheet.md at master · rinetd/BurpSuite-1

BurpSuite using the document and some extensions. Contribute to rinetd/BurpSuite-1 development by creating an account on GitHub.

3.11K viewsAmir Kiani, 06:01

https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/

s3cur3th1ssh1t.github.io

A tale of EDR bypass methods | S3cur3Th1sSh1t

In a time full of ransomware as well as Advanced persistent Thread (APT) incidents the importance of detecting those attacking groups has become increasingly...

3.3K viewsEhsan, 10:47

3.57K viewsAmir Kiani, 05:52

https://ayberk.ninja/aws-exploitation

Bulutlara Dokunmak ☁️ - AWS/Exploitation

The purpose of this blog is to publish articles in Turkish and English on application security.

3.49K viewsAmir Kiani, 03:26

Dump of hashes for LGE.com employee's and service accounts

By LAPSUS$

3.77K viewsMmD, 10:04

Microsoft Source Code Leak:

- Bing
- Bing Maps
- Cortana

By LAPSUS$

4.15K viewsMmD, 10:04

https://www.bbc.com/news/technology-60864283

Lapsus$: Oxford teen accused of being multi-millionaire cyber-criminal

Police say they've arrested seven teenagers as part of their investigation into a hacking group.

3.53K viewsAmir Kiani, edited 03:22

4.08K viewsAmir Kiani, 23:45

https://youtu.be/NKOpUvEytnI

Side Channel Walkthrough - PicoCTF 2022 - Timing Attack

In this video, I would like to showcase "side-channel" challenge from the forensics category of #picoCTF2022.
#picoctf2022 #sidechannel #timingattack #forensics #challenge #walkthrough #timeing #based #caprutetheflag
python noscript :
https://github.com/ay…

3.06K viewsAdel, 14:14

Forwarded from CTF Community | Hints

⭕️ Automated RE of Kernel Configurations

Brandon Miller published an article about his Binary Ninja plugin that analyzes Linux kernel binaries to recover kernel configuration options.
This tool is called bn-kconfig-recover. It can help when a kernel binary has CONFIG_IKCONFIG disabled.
#kernel #linux #binary
@ctfplay

3.14K viewsAdel, 08:57

https://www.coresecurity.com/core-labs/articles/proof-concept-cve-2022-21907-http-protocol-stack-remote-code-execution

Proof of Concept: CVE-2022-21907 HTTP Protocol Stack Remote Code Execution Vulnerability | Core Security

In this blogpost, we’ll briefly describe how we developed a DoS module for CVE-2022-21907. Instead of viewing it in a result-oriented way, we’ll approach it from a research standpoint, describing the process of developing this module for Core Impact.

2.87K viewsTinx, 10:13

https://youtu.be/JrwbXOlZrMY

1337UPCTF | Intigriti | MailMan Cloud Challenge

In this video, I would like to showcase "#mailman" challenge from the Cloud category of 1337UPCTF intigriti CTF event of 2022.
#1337UPCTF #intigriti #kubernetes #mailman #cloud #challenge #walkthrough #kubernetes #lfi #ssrf #linux #encode #caprutetheflag

2.86K viewsAdel, 18:29