NEW BOT Телеграм, страница

@Phantasm_Lab

3 Ways to Exploit Misconfigured Cross-Origin Resource Sharing (CORS)

https://www.we45.com/blog/3-ways-to-exploit-misconfigured-cross-origin-resource-sharing-cors

1.03K views19:03

@Phantasm_Lab

Forwarded from DARKNET BR

0:11

This media is not supported in your browser

VIEW IN TELEGRAM

🎬 #Video
~ Israel impede ciberataque e explode prédio com hackers

https://www.tecmundo.com.br/seguranca/140964-israel-impede-ciberataque-explodindo-predio-hackers.htm

51 views19:33

@Phantasm_Lab

2.42K views03:41

@Phantasm_Lab

Forwarded from Hunter X Hunter

Advanced Penetration Testing - Hacking the World's Most Secure Networks | PDF/EPUB | 6/6 MB | https://drive.google.com/open?id=0B-OpLAp8EyTfMy05SjhEaWpGODQ

43 views03:41

@Phantasm_Lab

https://www.udemy.com/ethical-hacking-sac/?couponCode=MOTHERSDAYFREE135631

1.39K views21:35

@Phantasm_Lab

The new ultimate Hacking Toolkit

https://youtu.be/MZ0nSO0WOJg

YouTube

CQTools: The New Ultimate Hacking Toolkit

*Voted Best of Black Hat Asia 2019 Briefings*

CQURE Team has written over 200 hacking tools during penetration testing. We decided to choose the top 39 tools and pack them in a toolkit called CQTools. We are going to announce 5 new tools at Black Hat Asia…

1.63K views17:37

@Phantasm_Lab

Practical JSONP Injection

JSONP injection is a lesser known but quite widespread and dangerous vulnerability and it surfaced in the last years due to the high rate of adoption of JSON, web APIs and the urging need for cross-domain communications.

https://securitycafe.ro/2017/01/18/practical-jsonp-injection/

🕴🏽 @Phantasm_Lab

Security Café

Practical JSONP Injection

JSONP injection is a lesser known but quite widespread and dangerous vulnerability and it surfaced in the last years due to the high rate of adoption of JSON, web APIs and the urging need for cross…

2.55K viewsedited 13:30

@Phantasm_Lab

https://www.udemy.com/certified-ethical-hacker-v10-preparation-practice-yourself/?couponCode=CEHV10_FREE1000

1.02K views06:34

@Phantasm_Lab

Tricking blind Java deserialization for a treat

During a black-box penetration test we encountered a Java web application which presented us with a login screen. Even though we managed to bypass the authentication mechanism, there was not much we could do. The attack surface was still pretty small, there were only a few things we could tamper with.

https://securitycafe.ro/2017/11/03/tricking-java-serialization-for-a-treat/#more-1839

🕴🏽 @Phantasm_Lab

Security Café

Tricking blind Java deserialization for a treat

During a black-box penetration test we encountered a Java web application which presented us with a login screen. Even though we managed to bypass the authentication mechanism, there was not much w…

1.14K views21:10

@Phantasm_Lab

Insufficient sanitizing can lead to arbitrary commands execution

Notepad++ is vulnerable to a command injection attack. Let's look at this command execution for example in NppCommand.cpp

https://hackerone.com/reports/494979

🕴🏽 @Phantasm_Lab

HackerOne

Notepad++ disclosed on HackerOne: Insufficient sanitizing can lead...

##Information:

**Summary:**
Notepad++ is vulnerable to a command injection attack.

**Debug Info:**
Notepad++ v7.6.3 (32-bit)
Build time : Jan 27 2019 - 17:20:30
Path : C:\Program Files...

2.57K views04:06

@Phantasm_Lab

OWASP - Cookie Security

https://www.owasp.org/images/a/a0/OWASPLondon20171130_Cookie_Security_Myths_Misconceptions_David_Johansson.pdf

🕴🏽 @Phantasm_Lab

1.92K views05:29

@Phantasm_Lab

H2HC - Hackers to Hackers Conference

Foi Anunciado os keynotes desse ano galera... chequem o site
Site: www.h2hc.com.br
Twitter: @h2hconference
Grupo do Telegram: https://news.1rj.ru/str/h2hconference

1.4K views09:02

@Phantasm_Lab

1.46K views09:04

@Phantasm_Lab

The Intercept - As Mensagens Secretas da Lava Jato

Uma enorme coleção de materiais nunca revelados fornece o olhar sem precedentes sobre as operações da força-tarefa anticorrupção que transformou a política brasileira e conquistou a atenção mundial.

Part 1 - Como e por que o Intercept está publicando chats privados sobre a Lava Jato e Sergio Moro

Part 2 - Exclusivo: Procuradores da Lava Jato tramaram em segredo para impedir entrevista de Lula antes das eleições por medo de que ajudasse a eleger o Haddad

Part 3 - Exclusivo: Deltan Dallagnol duvidava das provas contra Lula e de propina da Petrobras horas antes da denúncia do triplex

Part 4 - Exclusivo: chats privados revelam colaboração proibida de Sergio Moro com Deltan Dallagnol na Lava Jato

https://theintercept.com/series/mensagens-lava-jato/

🕴🏽 @Phantasm_Lab

Intercept Brasil

Tudo sobre as mensagens secretas da Lava Jato

Comportamentos antiéticos e transgressões da força-tarefa da Lava Jato, coordenada Deltan Dallagnol em colaboração com o ex-juiz Sergio Moro.

1.13K viewsedited 11:08

@Phantasm_Lab

Forwarded from O Antagonista

🔗 Hacker invade celular de Holiday e grupo do MBL no Telegram 06.06.19 18:03
Além de Danilo Gentili e Sergio Moro, o vereador Fernando Holiday também teve o celular invadido por hackers...

Telegraph

Hacker invade celular de Holiday e grupo do MBL no Telegram

Além de Danilo Gentili e Sergio Moro, o vereador Fernando Holiday também teve o celular invadido por hackers.

52 views17:27

@Phantasm_Lab

Forwarded from @Phantasm_Lab ([L]uth1er)

Bug Bounty Hunter Methodology

@Phantasm_Lab

49 views05:59

@Phantasm_Lab

https://www.udemy.com/xss-attack-most-widespread-hacking-technique/?couponCode=SECURITYB

975 views18:52

@Phantasm_Lab

Forwarded from burpsuite (not official)

https://github.com/InitRoot/BurpJSLinkFinder

GitHub

GitHub - InitRoot/BurpJSLinkFinder: Burp Extension for a passive scanning JS files for endpoint links.

Burp Extension for a passive scanning JS files for endpoint links. - InitRoot/BurpJSLinkFinder

61 views20:05

@Phantasm_Lab

Forwarded from DARKNET BR

🌐 #Linux | #Vim | #Exploit

▪️ Vulnerabilidade em Editores Vim/Neovim do Linux Permitem Execução de Codigo Arbitrário.

~ O pesquisador de segurança Armin Razmjou descobriu recentemente uma vulnerabilidade arbitrária (CVE-2019-12735) em editores Vim e Neovim.
Como o Neovim é apenas uma versão bifurcada estendida do Vim, com melhor experiência de usuário, plugins e GUIs, a vulnerabilidade de execução de código também reside nele.

60 views21:40

@Phantasm_Lab

Forwarded from DARKNET BR

This media is not supported in your browser

VIEW IN TELEGRAM

🎬 #Linux | #Vim | #Exploit

52 views21:40

@Phantasm_Lab

Forwarded from DARKNET BR

Como nota do pesquisador Razmjou, a vulnerabilidade reside na maneira que o Vim “gerencia modelines [linhas de configuração]” - um recurso que é habilitado por padrão.

Para mais informações:
https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md

GitHub

security/doc/2019-06-04_ace-vim-neovim.md at master · numirias/security

Some of my security stuff and vulnerabilities. Nothing advanced. More to come. - numirias/security

53 views21:40

About

Blog

Apps

Platform