@Phantasm_Lab – Telegram
@Phantasm_Lab
@Phantasm_Lab
2.56K subscribers
712 photos
34 videos
671 files
2.71K links
- Red x Blue Security
- Bug Bounty 💷 💵
- Exploitable tools
- Programming Languages
- Malware Analysis

🇺🇸 🇧🇷 🇪🇸

since 2017 ©


Parceiros:
@TIdaDepressaoOficial @acervoprivado @ReneGadesx @G4t3w4y
Download Telegram
About
Blog
Apps
Platform
Join
@Phantasm_Lab
2.56K subscribers
@Phantasm_Lab
CVE-2020-0601 | Windows CryptoAPI Spoofing Vulnerability

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601

🐉 @Phantasm_Lab
979 viewsedited  
@Phantasm_Lab
StackOverflow 101

https://youtu.be/VY4tOs4UPhQ
YouTube
Como funciona o StackOverflow? #HipstersPontoTube
Como funciona um dos maiores fóruns de dúvidas de tecnologia? Conheça o Stack Overflow com a Roberta e descubra se pode ou não colocar emoji na sua pergunta e muito mais!

🔗 Acesse o StackOverflow: https://pt.stackoverflow.com/

🔗 Entre no fórum brasileiro…
1.07K viewsedited  
@Phantasm_Lab
CS453 - Heap Overflows

https://youtu.be/lqxDWJ7TC4U
YouTube
CS453 - Heap overflows
Part 1 of 2 on heap exploitation, specifically about how the malloc() memory works and how it can be hacked.
Part of Emory University's CS453 taught by Prof. Ymir Vigfusson.
948 viewsedited  
@Phantasm_Lab
Modern Vulnerability Exploitation: The Heap Overflow

https://www.youtube.com/watch?v=2LSL_vRyCKY

🐉 @Phantasm_Lab
YouTube
Modern Vulnerability Exploitation: The Heap Overflow
A look at the less infamous heap overflow vulnerability.

This video is for educational purposes only.

I did not create this video.
1.14K viewsedited  
@Phantasm_Lab
Forwarded from Cyber Threat Intelligence
New Ransomware Strain Halts Toll Group Deliveries - by @serghei
https://t.co/n70sVeu5fM http://twitter.com/BleepinComputer/status/1225093601790693376
BleepingComputer
New Ransomware Strain Halts Toll Group Deliveries
Australian transportation and logistics company Toll Group confirmed today that systems across multiple sites and business units were encrypted by a new variant of the Mailto ransomware.
78 views
@Phantasm_Lab
The Absolute AppSec Secure Code Review Framework by Seth Law

https://www.youtube.com/watch?v=Kepd1HsoE8o

🐉 @Phantasm_Lab
YouTube
[2019] The Absolute AppSec Secure Code Review Framework by Seth Law
Let’s face it, performing a manual review of someone else’s source code is hard. It takes time, effort, expertise, and grit to actually figure out what the application does, how the developer implemented it, and if there should be any changes. From an application…
1.23K viewsedited  
@Phantasm_Lab
Spot the vuln - Identifying security problems in source code by Eldar Marcussen

https://www.youtube.com/watch?v=85Yx4pNSkkY

🧬 @Phantasm_Lab
YouTube
[2019] Spot the vuln - Identifying security problems in source code by Eldar Marcussen
Do you know source code? or perhaps you know vulnerabilities? See where they intersect and how most vulnerabilities are created. This talk will present a ple...
1.24K viewsedited  
@Phantasm_Lab
SDLC - Understand the Software Development Life Cycle

SDLC or the Software Development Life Cycle is a process that produces software with the highest quality and lowest cost in the shortest time. SDLC includes a detailed plan for how to develop, alter, maintain, and replace a software system.

https://stackify.com/what-is-sdlc/

🧬 @Phantasm_Lab
Stackify
What Is SDLC? Understand the Software Development Life Cycle - Stackify
In this post, we'll diver deeper into how SDLC works, examine each of the phases, and how to choose an SDLC Model.
1.17K views
@Phantasm_Lab
Git Feature Branch Workflow

The core idea behind the Feature Branch Workflow is that all feature development should take place in a dedicated branch instead of the master branch. This encapsulation makes it easy for multiple developers to work on a particular feature without disturbing the main codebase.

https://www.atlassian.com/git/tutorials/comparing-workflows/feature-branch-workflow

🧬 @Phantasm_Lab
Atlassian
Git Feature Branch Workflow | Atlassian Git Tutorial
A feature branch is a temporary branch used for development or testing purposes. Learn about the best way to manage them using this guide!
871 views
@Phantasm_Lab
Gitflow Workflow

Gitflow Workflow is a Git workflow design that was first published and made popular by Vincent Driessen at nvie. The Gitflow Workflow defines a strict branching model designed around the project release. This provides a robust framework for managing larger projects.

https://www.atlassian.com/git/tutorials/comparing-workflows/gitflow-workflow

🧬 @Phantasm_Lab
Atlassian
Gitflow Workflow | Atlassian Git Tutorial
A deep dive into the Gitflow Workflow. Learn if this Git workflow is right for you and your team with this comprehensive tutorial.
891 views
@Phantasm_Lab
Barq: The AWS Cloud Post Exploitation framework!

barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to perform enumeration and extraction of stored Secrets and Parameters in AWS.

https://github.com/Voulnet/barq

🧬 @Phantasm_Lab
GitHub
GitHub - Voulnet/barq: barq: The AWS Cloud Post Exploitation framework!
barq: The AWS Cloud Post Exploitation framework! Contribute to Voulnet/barq development by creating an account on GitHub.
930 views
@Phantasm_Lab
Esp32 DNS Hijacking

how to implement simple DNS Hijacking server on the Esp32 chip. For this purpose I've written C library, packaged as a ESP-IDF component. This technique can be used to open Captive Portal on the Esp32.

https://www.youtube.com/watch?v=d228X5A_bG4

🧬 @Phantasm_Lab
YouTube
Esp32 DNS Hijacking
In this video I've shown how to implement simple DNS Hijacking server on the Esp32 chip. For this purpose I've written C library, packaged as a ESP-IDF component. This technique can be used to open Captive Portal on the Esp32.

"Domain Name Server (DNS) hijacking…
1.71K views
@Phantasm_Lab
Caso Jumpshot: entenda a polêmica da controversa subsidiária da Avast

Uma bomba caiu no colo dos internautas que utilizam o antivírus tcheco Avast na última semana. Uma investigação conjunta da VICE e da PCMag revelou com exclusividade que a companhia europeia estaria comercializando dados altamente sensíveis de alguns de seus usuários através da Jumpshot, sua subsidiária especializada em marketing digital e inteligência de mercado. Entre os clientes de tal empresa secundária, encontram-se marcas como Google, Yelp, Microsoft, McKinsey, Pepsi e Condé Nast.

https://thehack.com.br/caso-jumpshot-entenda-a-polemica-da-controversa-subsidiaria-da-avast/

🏴‍☠️ @Phantasm_Lab
The Hack
Caso Jumpshot: entenda a polêmica da controversa subsidiária da Avast
Empresa “obscura” vendia dados detalhados sobre hábitos de navegação web de usuários do antivírus tcheco.
947 views
@Phantasm_Lab
Rede de lojas dos EUA deixa vazar 30 milhões de cartões de crédito de clientes

Criminosos cibernéticos já estão comercializando dados roubados da Wawa, rede de lojas de conveniência norte-americana, através de fóruns e marketplaces online. A companhia revelou, em dezembro do ano passado, ter sofrido um vazamento de dados após ter seu sistema de pagamento comprometido em 850 estabelecimentos ao redor dos Estados Unidos; porém, na época, nem a própria cadeia de lojas conseguiu estipular a real gravidade do incidente.

https://thehack.com.br/rede-de-lojas-dos-eua-deixa-vazar-30-milhoes-de-cartoes-de-credito-de-clientes/

🏴‍☠️ @Phantasm_Lab
The Hack
Rede de lojas dos EUA deixa vazar 30 milhões de cartões de crédito de clientes
Criminosos já estão comercializando dados roubados da Wawa, que sofreu um incidente em dezembro de 2019.
1.04K views
@Phantasm_Lab
Awesome GitHub Repos

1. Book of Secret Knowledge = https://lnkd.in/fWKCdi4
2. Awesome Hacking = https://lnkd.in/f7VPTEX
3. Awesome Bug Bounty = https://lnkd.in/fPrQiVD
4. Awesome Penetration Testing = https://lnkd.in/fAUZgu5
5. Awesome Web Hacking = https://lnkd.in/f5n2hSd
6. Awesome Hacking Resources = https://lnkd.in/fcJ6wFH
7. Awesome Pentest = https://lnkd.in/fNNSFeN
8. Awesome Red Teaming = https://lnkd.in/fGpievF
9. Awesome Web Security = https://lnkd.in/ffG73u2
10. Penetration Test Guide based on OWASP = https://lnkd.in/ffyBwzG
11. Pentest Compilation = https://lnkd.in/f5JwJTD
12. Infosec Reference = https://lnkd.in/fY6wNmX

🧪 @Phantasm_Lab
📬 @tani0m
lnkd.in
LinkedIn
This link will take you to a page that’s not on LinkedIn
4.81K views
@Phantasm_Lab
Forwarded from DARKNET BR
🌐 #Cyberattack | #FBI | #Leaks

Wu Zhiyong, Wang Qian, Xu Ke e Liu Lei são supostamente responsáveis   pela invasão dos sistemas de computador Equifax e dos dados pessoais roubados dos segredos comerciais americanos e Equifax. Eles são acusados pelo FBI de fraude informática, espionagem econômica e fraude eletrônica.

Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei are allegedly responsible for the invasion of Equifax computer systems and personal data stolen from American and Equifax trade secrets. They are accused by the FBI of computer fraud, economic espionage and electronic fraud.
76 views
@Phantasm_Lab
China-backed hackers charged in massive Equifax data breach

The Justice Department has charged four Chinese military officials in the massive 2017 Equifax data breach. Nearly 150 million people were affected as the hackers stole names, addresses, credit card and Social Security numbers. CBS News chief Justice and Homeland Security correspondent Jeff Pegues joins CBSN with the latest.

https://www.youtube.com/watch?v=MpTpUO9qSU0

🏴‍☠️ @Phantasm_Lab
YouTube
China-backed hackers charged in massive Equifax data breach
The Justice Department has charged four Chinese military officials in the massive 2017 Equifax data breach. Nearly 150 million people were affected as the ha...
948 views
@Phantasm_Lab
Forwarded from DARKNET BR
📚 #Ebook | #OSINT | #Researchers

OSINT Open Source Intelligence Glossary: Guide to Keywords, Phrases for Improved Internet Research Results
86 views
@Phantasm_Lab
Forwarded from DARKNET BR
OSINT Glossary, Vol I is a serialized publication, designed for those conducting internet or document research to obtain better and more relevant search results.
86 views
@Phantasm_Lab
Forwarded from DARKNET BR
OSINT_Open_Source_Intelligence_Glossary.epub
185.4 KB
139 views
@Phantasm_Lab
O Brasil não está preparado para o Open Source?!

LinkAPI Founder startou um debate no linkedin que atraiu muitos comentários acídos..até o criador do PyJobs apareceu por la.. qual a sua opinião em relação ao tópico ?


https://www.linkedin.com/posts/thiagolimabr_o-brasil-não-está-preparado-para-o-open-source-activity-6635285389877747713-8a2k

🧬 @Phantasm_Lab
Linkedin
Thiago Lima on LinkedIn: O Brasil não está preparado para o Open Source!

Quando fundei o LinkApi | 96 comments
O Brasil não está preparado para o Open Source!

Quando fundei o LinkApi, meu sonho era que nossa plataforma fosse Open Source, entretanto, comecei a estudar... 96 comments on LinkedIn
1.07K viewsedited