@Phantasm_Lab – Telegram
@Phantasm_Lab
2.56K subscribers
712 photos
34 videos
671 files
2.71K links
- Red x Blue Security
- Bug Bounty 💷 💵
- Exploitable tools
- Programming Languages
- Malware Analysis

🇺🇸 🇧🇷 🇪🇸

since 2017 ©


Parceiros:
@TIdaDepressaoOficial @acervoprivado @ReneGadesx @G4t3w4y
Download Telegram
QRLJacking - A New Social Engineering Attack Vector

QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on the “Login with QR code” feature as a secure way to login into accounts. In a nutshell, the victim scans the attacker’s QR code which results in session hijacking.

https://github.com/OWASP/QRLJacking

🕴🏼 @PhantasmLab
Forwarded from CryptoRave 2025
Mais do que nunca é hora de falar da importância da CryptoRave. Mais do que nunca é hora de compartilhar em todos os grupos que você faz parte.

A CryptoRave é um evento de muita resistência: voluntário, sem publicidade, sem terno, gravata e pão de queijo murcho. Financiada por todos nós. Construída por nós, com uma programação coletiva.

Ano passado 600 pessoas acreditaram e ajudaram a realizar o evento. Esse é um evento único no Brasil e que precisa continuar existindo.

É por esse motivo que nós agradecemos a cada um de vocês que, de alguma forma, em algum momento desses cinco anos apoiou a CryptoRave. Nem sempre dá para apoiar com dinheiro, mas divulgar para os/as amigos/as é sempre possível e muito importante.

Divulguem! <3

https://www.catarse.me/cryptorave2018
#Perfil #HackerOne #Series

Dr.Jones (sp1d3rs)

Reputation: 3875 Rank: 78th

Spiders are the only web developers that enjoy finding bugs

https://hackerone.com/sp1d3rs
How Russia Hacked America—And Why It Will Happen Again

During the 2016 presidential campaign, Russian hackers attacked the U.S. on two fronts: the psychological and the technical. And it won't be the last time it happens. This psychological cyber warfare will only get better, and its methods more sophisticated.

https://www.youtube.com/watch?v=GYIgmua-J7o
How Russian Bots Invade Our Elections

How do bots and trolls work to infiltrate social media platforms and influence U.S. elections? We take a closer look at these insidious online pests to explain how they work.

https://www.youtube.com/watch?v=sZmrIkRDMsU
How Russian Trolls Collected Americans' Personal Information

The Kremlin-backed Internet Research Agency, a.k.a. the Troll Factory, ​used fake social media accounts before and after the 2016 U.S. election to collect sensitive personal information on Americans, a Wall Street Journal investigation has found. Shelby Holliday explains how the Russian schemes worked.​

https://www.youtube.com/watch?v=heXp2tyDl6k
Linux Privilege Escalation - Tradecraft

After getting a shell on a server you may or may not have root access. To gain privileged access to a Linux system it may take performing more analysis of the system to find escalation issues. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) provides a methodology for performing various privilege escalation techniques against Linux-based systems.

https://www.youtube.com/watch?v=oYHAi0cgur4
Forwarded from Crypto links (One Time Pad ⊕)