@Phantasm_Lab – Telegram
@Phantasm_Lab
@Phantasm_Lab
2.56K subscribers
712 photos
34 videos
671 files
2.71K links
- Red x Blue Security
- Bug Bounty 💷 💵
- Exploitable tools
- Programming Languages
- Malware Analysis

🇺🇸 🇧🇷 🇪🇸

since 2017 ©


Parceiros:
@TIdaDepressaoOficial @acervoprivado @ReneGadesx @G4t3w4y
Download Telegram
About
Blog
Apps
Platform
Join
@Phantasm_Lab
2.56K subscribers
@Phantasm_Lab
DEF CON Safe Mode - Jack Baker - Finding and Exploiting Bugs in Multiplayer Game Engines

Unreal Engine 4 and Unity3D dominate the multiplayer gaming landscape. They're also complicated pieces of software written in C and C++. In this talk, Jack will share the results of months of bug hunting in multiplayer game networking protocols. Be prepared for memory disclosures, speedhacks, and WONTFIX vulnerabilities.

https://youtu.be/4weoWSzuCxs

🧬 @Phantasm_Lab
YouTube
DEF CON Safe Mode - Jack Baker - Finding and Exploiting Bugs in Multiplayer Game Engines
Unreal Engine 4 and Unity3D dominate the multiplayer gaming landscape. They're also complicated pieces of software written in C and C++. In this talk, Jack will share the results of months of bug hunting in multiplayer game networking protocols. Be prepared…
1.42K views
@Phantasm_Lab
Detectify Crowdsource

150+ white-hat hackers with superior combined automation & crowdsourcing. Detectify’s vulnerability scanner, founded by some of the worlds best white-hat hackers!

https://detectify.com/crowdsource
Detectify
What is Crowdsource?
Crowdsource is a community of ethical hackers who submit vulnerability research to Detectify. Detectify then integrates these vulnerabilities into its products.
1.16K viewsedited  
@Phantasm_Lab
Reciclagem de linhas telefônicas: uma ameaça à privacidade dos brasileiros?

Já deve ter acontecido contigo: ao comprar um novo chip de telefonia pré-pago, você começa a receber mensagens de texto sobre cartões que você não tem e dívidas que você não registrou. Isso acontece por um motivo simples — a operadora em questão resolveu te presentear com uma linha reciclada, ou seja, um número que já pertenceu a outro indivíduo e foi encerrado por algum motivo (geralmente, por falta de inserção de créditos ou por solicitação do próprio dono original).

https://thehack.com.br/reciclagem-de-linhas-telefonicas-uma-ameaca-a-privacidade-dos-brasileiros/
The Hack
Reciclagem de linhas telefônicas: uma ameaça à privacidade dos brasileiros?
Prática de reutilizar um número para um novo cliente é permitida pela Anatel, mas pode gerar dores de cabeça e causar exposição de informações sensíveis.
1.44K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/practical-buffer-overflows-for-oscp/?couponCode=FREEMYBUFFER
1.12K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/fullstack-js-en-espanol/?couponCode=NODECOSEPTIEMBRE
1.2K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/google-hacking-course-for-cyber-security/?couponCode=MINA-Q-1
971 views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/kali-linux-basics-course-for-cyber-security/?couponCode=918-PP
1.04K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/penetration-testing-course-2020/?couponCode=ERA-11
1.21K views
@Phantasm_Lab
Forwarded from DARKNET BR
👁 #NSA | #Vigilance | #EdwardSnowden

A decisão foi tomada por três magistrados do Tribunal de Apelações do 9º Circuito e considerou que este órgão ligado à CIA, a partir das informações apresentadas pelo seu ex-funcionário, realmente realizou atividades ilegais.

O resultado foi fruto de processo que surgiu de uma iniciativa da ACLU a favor de Snowden.


https://telegra.ph/Sete-anos-depois-Tribunal-dos-EUA-reconhece-ilegalidade-da-NSA-denunciada-por-Snowden-09-03
Telegraph
Sete anos depois, Tribunal dos EUA reconhece ilegalidade da NSA denunciada por Snowden
Juízes consideraram que fatos denunciados pelo ex-espião, relatados em série de reportagens de Glenn Greenwald em 2013, configuram violação das leis de vigilância dos Estados Unidos. A decisão foi tomada por três magistrados do Tribunal de Apelações do 9º…
969 views
@Phantasm_Lab
Forwarded from DARKNET BR
"Sete anos atrás, quando o noticiário declarou que eu estava sendo acusado de criminoso por falar a verdade, nunca imaginei que viveria para ver nossos tribunais condenarem as atividades da NSA como ilícitas e, na mesma decisão, me darem crédito por expô-las. E ainda assim esse dia chegou."
995 views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/sql-server-2017-fundamentos-profissionais-em-t-sql/?couponCode=FREESETEMBRO04
998 views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/sqlserverjobsandalerts/?couponCode=FREESETEMBRO01
1.15K views
@Phantasm_Lab
Forwarded from Ziraldo Cardoso
Foto de Ziraldo Cardoso
1.14K views
@Phantasm_Lab
Algumas tools de osint

https://github.com/instant-username-search/instant-username-search
https://github.com/khast3x/h8mail
https://github.com/jofpin/trape
https://github.com/s0md3v/Photon
https://github.com/thewhiteh4t/FinalRecon
https://github.com/ex0dus-0x/doxbox
https://github.com/laramies/theHarvester
https://github.com/Cignoraptor-ita/cignotrack
https://github.com/sundowndev/PhoneInfoga
https://github.com/thewhiteh4t/seeker
https://github.com/initstring/linkedin2username
https://github.com/Ekultek/WhatBreach
https://github.com/m4ll0k/Infoga
GitHub
GitHub - instantusername/instant-username-search: ⚡ Instantly search for the availability of your username on more than 100 social…
⚡ Instantly search for the availability of your username on more than 100 social media sites. - instantusername/instant-username-search
1.55K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/programacion-en-c-para-principiantes/?couponCode=9D3F5DA57DB9B6D4F9EF
Udemy
programacion en c++ para principiantes
Aprende a programar de 0 a 100 en una semana
1.24K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/python-sin-fronteras-html-css-mysql/?couponCode=BFAA28AF1A69E7250DCA
1.05K views
@Phantasm_Lab
Forwarded from Programmer Humor
AI based on if / else statements 😂
https://redd.it/85kh9t

by @programmer_humor
1.12K views
@Phantasm_Lab
from alert(1) to uid=0(root) | Chaining XSS & command injection for root on Lenovo NAS

Embedded device researchers often come across traditionally valuable vulnerabilities, such as command injection, whose exploitation is limited to authenticated, LAN-side users. From an attacker’s point of view, these restrictions are less than ideal for remote compromise. How can such bugs be weaponized for use in actual exploits? For the Lenovo ix4-300d NAS, the key to a successful attack lies in the victim’s web browser. In this livestream, ISE Labs will demonstrate the chaining of two unrelated vulnerabilities against the ix4-300d—cross-site noscripting and command injection—to show how remote, unauthenticated adversaries can abuse the browser to gain root access to LAN targets.

https://youtu.be/ixO7D1-B-aY

🦠 @Phantasm_Lab
YouTube
LIVESTREAM: from alert(1) to uid=0(root) | Chaining XSS & command injection for root on Lenovo NAS
Follow us on:
https://twitter.com/ISEsecurity
https://twitter.com/iotvillage

Website:
https://www.securityevaluators.com
https://blog.securityevaluators.com

Embedded device researchers often come across traditionally valuable vulnerabilities, such as…
1.89K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/desarrollo-de-aplicaciones-web-con-javanoscript-2020/?couponCode=COM2020
1.32K views
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/complete-webapplication-penetration-testing-practical-cwapt/?couponCode=WELCOMEWITHDEB
1.17K views
@Phantasm_Lab
Top 20 Latin America Tech Companies 2020

https://latin-america.cioreview.com/vendors/top-latin-america-tech-companies.html

🦠 @Phantasm_Lab
1.24K views