Forwarded from Full Python Alchemist
Security Weekly #416 - Python for Pentesters
https://www.youtube.com/watch?v=nukEMdt5ehs
🐍 @FullPythonAlchemist
Dan joins us in-studio for a tech segment on some python noscripts he has written. https://www.youtube.com/watch?v=nukEMdt5ehs
🐍 @FullPythonAlchemist
YouTube
Security Weekly #416 - Python for Pentesters
Dan joins us in-studio for a tech segment on some python noscripts he has written.
Check out the wiki for links to his github and Twitter.
http://wiki.securityweekly.com/wiki/index.php/Episode416#Tech_Segment:_Dan_McInerney_-_6:05PM-6:35PM
Check out the wiki for links to his github and Twitter.
http://wiki.securityweekly.com/wiki/index.php/Episode416#Tech_Segment:_Dan_McInerney_-_6:05PM-6:35PM
Linux Privilege Escalation - Tradecraft
https://www.youtube.com/watch?v=oYHAi0cgur4
After getting a shell on a server you may or may not have root access. To gain privileged access to a Linux system it may take performing more analysis of the system to find escalation issues. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) provides a methodology for performing various privilege escalation techniques against Linux-based systems. https://www.youtube.com/watch?v=oYHAi0cgur4
YouTube
Linux Privilege Escalation - Tradecraft Security Weekly #22
After getting a shell on a server you may or may not have root access. To gain privileged access to a Linux system it may take performing more analysis of the system to find escalation issues. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack)…
Three different priv escalation methods - Pentest Limited's BSides Edinburgh
https://www.youtube.com/watch?v=VglowrbEnCI
Abusing cron, mysql, and previous breach to gain root privileges. BSides Edinburgh boot2root.https://www.youtube.com/watch?v=VglowrbEnCI
YouTube
Three different priv escalation methods - Pentest Limited's BSides Edinburgh
Abusing cron, mysql, and previous breach to gain root privileges.
BSides Edinburgh boot2root.
https://maze.pentest-challenge.co.uk/
https://maze.pentest-challenge.co.uk/downloads/bsidesedi17.ova
BSides Edinburgh boot2root.
https://maze.pentest-challenge.co.uk/
https://maze.pentest-challenge.co.uk/downloads/bsidesedi17.ova
Intelbras Telefone IP TIP200 LITE - Local File Disclosure
https://www.exploit-db.com/exploits/44317/
🕴🏽 @Phantasm_Lab
https://www.exploit-db.com/exploits/44317/
🕴🏽 @Phantasm_Lab
DNS hijacking using cloud providers - Frans Rosén
https://www.youtube.com/watch?v=HhJv8CU-RIk
🕴🏽 @Phantasm_Lab
A few years ago, Frans and his team posted an article on Detectify Labs regarding domain hijacking using services like AWS, Heroku and GitHub. These issues still remains and are still affecting a lot of companies. Jonathan Claudius from Mozilla even calls “Subdomain takeover” “the new XSS”. Since then, many tools have popped up to spot these sorts of vulnerabilities. Frans will go through both the currently disclosed and the non-disclosed ways to take control over domains and will share the specific techniques involved.https://www.youtube.com/watch?v=HhJv8CU-RIk
🕴🏽 @Phantasm_Lab
18 Extensions For Turning Firefox Into a Penetration Testing Tool
http://resources.infosecinstitute.com/use-firefox-browser-as-a-penetration-testing-tool-with-these-add-ons/
🕴 @Phantasm_Lab
Firefox is a popular web browser from Mozilla. Popularity of Firefox is not only because it’s a good web browser, it also supports add-ons to enhance the functionality. Mozilla has a website add-on section that has thousands of useful add-ons in different categories. Some of these add-ons are useful for penetration testers and security analysts. These penetration testing add-ons helps in performing different kinds of attacks, and modify request headers direct from the browser. This way, it reduces the use of a separate tool for most of the penetration testing related tasks.http://resources.infosecinstitute.com/use-firefox-browser-as-a-penetration-testing-tool-with-these-add-ons/
🕴 @Phantasm_Lab
Infosecinstitute
18 extensions for turning Firefox into a Penetration testing tool | Infosec
Firefox is a popular web browser from Mozilla. Popularity of Firefox is not only because it's a good web browser, it also supports add-ons to enhance the fun
Intel, Slack, Spectre, & NASA - Application Security Weekly #11
https://youtu.be/FCg_90E66OU
🕴 @Phantasm_Lab
https://youtu.be/FCg_90E66OU
🕴 @Phantasm_Lab
YouTube
Intel, Slack, Spectre, & NASA - Application Security Weekly #11
In the news, Microsoft rushes out fix for major hole caused by previous Meltdown patch, Intel admits a load of its CPUs have Spectre v2 flaw that can't be fi...
Our Favorite XSS Filters/IDS
and how to Attack Them
https://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf
🕴 @Phantasm_Lab
and how to Attack Them
https://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf
🕴 @Phantasm_Lab
#Perfil #HackerOne #Series
Denis Kolegov (alpha)
https://hackerone.com/alpha
🕴🏽 @Phantasm_Lab
Denis Kolegov (alpha)
Reputation: 2827 Rank: - https://hackerone.com/alpha
🕴🏽 @Phantasm_Lab
HackerOne
HackerOne profile - alpha
- http://twitter.com/dnkolegov
Forwarded from Garcez
Pra documentar os projetos: https://docusaurus.io
docusaurus.io
Build optimized websites quickly, focus on your content | Docusaurus
An optimized site generator in React. Docusaurus helps you to move fast and write content. Build documentation websites, blogs, marketing pages, and more.
#Vladivostok #Russia #Kaspersky
Rússia: A multinacional Kaspersky e a cidade Vladivostok
https://www.youtube.com/watch?v=muBrH83_WBw&feature=youtu.be
🕴🏽 @Phantasm_Lab
Rússia: A multinacional Kaspersky e a cidade Vladivostok
vamos conhecer a multinacional de cibersegurança Kaspersky, e a cidade portuária de Vladivostok, muito importante geopoliticamente, pela proximidade com a Ásia. O medo das pessoas dessa cidade pela sua proximidade com a Coreia do Norte. Na "Praia de Vidro", uma fábrica de garrafas que despejou por anos os seus dejetos na natureza. E ainda: um submarino, um cassino de luxo e a maior ponte estaiada do mundo.https://www.youtube.com/watch?v=muBrH83_WBw&feature=youtu.be
🕴🏽 @Phantasm_Lab
YouTube
Que Mundo é Esse? Rússia: A multinacional Kaspersky e a cidade Vladivostok
Nesse episódio, vamos conhecer a multinacional de cibersegurança Kaspersky, e a cidade portuária de Vladivostok, muito importante geopoliticamente, pela prox...
Stack Exchange
https://security.stackexchange.com/
Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minutehttps://security.stackexchange.com/
Information Security Stack Exchange
Q&A for information security professionals