@Phantasm_Lab – Telegram
@Phantasm_Lab
@Phantasm_Lab
2.56K subscribers
712 photos
34 videos
671 files
2.71K links
- Red x Blue Security
- Bug Bounty 💷 💵
- Exploitable tools
- Programming Languages
- Malware Analysis

🇺🇸 🇧🇷 🇪🇸

since 2017 ©


Parceiros:
@TIdaDepressaoOficial @acervoprivado @ReneGadesx @G4t3w4y
Download Telegram
About
Blog
Apps
Platform
Join
@Phantasm_Lab
2.56K subscribers
@Phantasm_Lab
Security Talks

A place to agroup and organize lectures from security conferences around the world

https://news.1rj.ru/str/SecTalks
876 views[L]uth1er, 
@Phantasm_Lab
How i got easy $$$ for SQL Injection Bug

https://rafipiun.medium.com/how-i-got-easy-for-sql-injection-bug-7ff622236e4c
Medium
How i got easy $$$ for SQL Injection Bug
S
893 views[L]uth1er, 
@Phantasm_Lab
Bypassing Web Application Firewall Part 1
https://medium.com/@iratoon/bypassing-web-application-firewall-part-1-3cfd7a1b1159

Bypassing Web Application Firewall Part 2
https://medium.com/@iratoon/bypassing-web-application-firewall-part-2-269470e0c40b

Bypassing Web Application Firewall Part 3
https://medium.com/@iratoon/bypassing-web-application-firewall-part-3-521fd66a6422

Bypassing Web Application Firewall Part 4
https://medium.com/@iratoon/bypassing-web-application-firewall-part-4-862e9929e350
Medium
Bypassing Web Application Firewall Part — 1
As many of you may know, a Web Application Firewall is a firewall that sits in front of our web applications, and filters, analyzes and…
2.58K views[L]uth1er, 
@Phantasm_Lab
Forwarded from The Channel has been removed (Zero Day Windows)
⚡⚡ Ccobalt Strike 4.3 [bug fix] + Toolkits 2021⚡⚡

SHA256 hash of cobaltstrike.jar:

c3c243e6218f7fbaaefb916943f500722644ec396cf91f31a30c777c2d559465 Cobalt Strike 4.3 Licensed


📩 DM If you are interested to Cobalt Strike 4.3 @anoneghost

🎥 Watch Video Demo :
https://vimeo.com/526671360
Vimeo
Cobalt Strike 4.3 + Toolkits 2021 | 0Day Priv8 Tools
For More Detail : https://t.me
882 views[L]uth1er, 
@Phantasm_Lab
Most Popular Burp Extensions Explained: Request Smuggler, Logger++ and others

https://www.youtube.com/watch?v=BZTvfqn2NMQ
YouTube
Most Popular Burp Extensions Explained: Request Smuggler, Logger++ and others #burpsuite #hacking
In this video, I will explain the 3 or 4 most popular BurpSuite extensions.

- Download your FREE Web hacking LAB: https://thehackerish.com/owasp-top-10-lab-vm-free
- Read more on the blog: https://thehackerish.com
- Support this work: https://thehackerish.com/how…
1.02K views[L]uth1er, 
@Phantasm_Lab
Ferramentas para Hardware Hacking - 1º Ethical Hacking Summit - #01 - Julio Della Flora

https://www.youtube.com/watch?v=cHy0vUC2wzg
YouTube
Ferramentas para Hardware Hacking - 1º Ethical Hacking Summit - #01 - Julio Della Flora
#uniciv #ethical #hacking

☑️Receba o Certificado Digital do evento:
https://materiais.estudeti.com.br/hacker-summit-01-uniciv

☑️ Desconto em certificações de Ethical Hacking: http://bit.ly/EXIN_UNICIV

☑️ Curso de Hardware Hacking, IoT Pentest e Red Team…
873 views[L]uth1er, 
@Phantasm_Lab
GraphQL abuse: Bypass account level permissions through parameter smuggling

https://labs.detectify.com/2018/03/14/graphql-abuse/
Labs Detectify
GraphQL abuse: Bypass account level permissions through parameter smuggling - Labs Detectify
Jon Bottarini writes about the interesting bugs he discovered when he took a closer look at Facebook’s popular GraphQL.
897 views[L]uth1er, 
@Phantasm_Lab
Ataques contra servidores Microsoft Exchange crescem 1028% em uma semana

Depois do descobrimento de quatro vulnerabilidades de dia zero no Microsoft Exchange, no começo deste mês, o número de tentativas de ataques às empresas clientes da ferramenta aumentou 1028%, indo de 700 na primeira semana, para 7.200 na segunda semana de março, informa a equipe de pesquisa da Check Point, fornecedora israelense de segurança da informação.

https://thehack.com.br/ataques-contra-servidores-microsoft-exchange-crescem-1028-em-uma-semana/
The Hack
Ataques contra servidores Microsoft Exchange crescem 1028% em uma semana
Atualização de correção deve ser feita manualmente. No Brasil, ameaça pode ser ainda mais séria, já que muitas empresas utilizam servidores internos desatualizados
1.11K views[L]uth1er, 
@Phantasm_Lab
$12,000 Grafana SSRF in Gitlab - Bug Bounty Reports Explained

https://www.youtube.com/watch?v=Uklsk1WZ2EU
YouTube
$12,000 Grafana SSRF in Gitlab - Bug Bounty Reports Explained
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw


This video is about Grafana SSRF vulnerability that was reported to Gitlab bug bounty program on Hackerone.…
990 views[L]uth1er, 
@Phantasm_Lab
Forwarded from Android Security & Malware
WhatsApp scam messages - what happens when you click on them
https://youtu.be/Dc7Y1fiZGuA
YouTube
What happens when you click on that WhatsApp scam message | Huawei Mate 40 Pro giveaway | Amazon
Beware of recent WhatsApp scam message that instead of winning Huawei Mate 40 Pro 5G, might get user into troubles.


In the video I will show you:

1) What happens when you click on that link
2) I will go through whole scam and redirections process
3) How…
928 views[L]uth1er, 
@Phantasm_Lab
Forwarded from @Phantasm_Lab
#Documentario #CyberCrime #Hackerville

Assista o documentário sobre cibercrime que apresenta a cidade romena chamada “Hackerville” ou a “Cidade mais perigosa da Internet”. Hackers blackhat condenados, como Guccifer (nome real), falam sobre worms, vírus, engenharia social, roubo de identidade e até sobre invadir o e-mail de Hillary Clinton.

https://m.youtube.com/watch?v=mJ0bN6Nq0PE

🕴 @Phantasm_Lab
YouTube
A Cidade Mais Perigosa da Internet
Em breve: http://mostdangeroustown.com
Assista o documentário sobre cibercrime que apresenta a cidade romena chamada “Hackerville” ou a “Cidade mais perigosa da Internet”. Hackers blackhat condenados, como Guccifer (nome real), falam sobre worms, vírus, engenharia…
940 views[L]uth1er, 
@Phantasm_Lab
Forwarded from w0rk3r's Blue team Library (Jonhnathan Jonhnathan Jonhnathan)
Mapeando na prática a visibilidade e detecção do seu ambiente com ATT&CK usando DeTT&CT

*Toda a renda do evento será convertida em Cestas Básicas para caridade*

https://www.sympla.com.br/mapeando-na-pratica-a-visibilidade-e-deteccao-do-seu-ambiente-com--attck-usando-dettct__1171217

@BlueTeamLibrary #temp
www.sympla.com.br
Mapeando na prática a visibilidade e detecção do seu ambiente com ATT&CK usando DeTT&CT
<p dir="ltr" style="line-height:1.38;text-indent: 36pt;margin-top:0pt;margin-bottom:0pt;" id="docs-internal-guid-6777275f-7fff-76ad-15af-350b99ebcec3"><b><span style="font-size: 14px;">Toda a renda do evento será convertida em Cestas Básicas para caridad…
860 views[L]uth1er, 
@Phantasm_Lab
Bug Hunting and Exploit Development 4: Writing Metasploit Framework MSF Exploit Modules

This video is part of the computer/information/cyber security and ethical hacking lecture series; by Z. Cliffe Schreuders at Leeds Beckett University.

https://youtu.be/KGr655p6FpA
YouTube
Bug Hunting and Exploit Development 4: Writing Metasploit Framework MSF Exploit Modules
This video is part of the computer/information/cyber security and ethical hacking lecture series; by Z. Cliffe Schreuders at Leeds Beckett University. Laboratory work sheets, slides, and other open educational resources are available at http://z.cliffe.schreuders.org.…
1.02K views[L]uth1er, 
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/master-en-un-solo-curso-iso-27001/?couponCode=935774EF49B0097ED07D
Udemy
Preparación para Auditor Lider e Interno ISO/IEC 27001
Masterclass ISO 27001
822 viewsS4fh1R, 
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/android-bug-bounty-hunting-hunt-like-a-rat
Udemy
Free Ethical Hacking Tutorial - Android Bug Bounty Hunting: Hunt like a rat
From setting up a lab to setting you up for attacking a real target - Free Course
791 viewsS4fh1R, 
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/uncle-rats-bug-bounty-guide/?couponCode=BF68C8CBB53B31540334
Udemy
Uncle Rat's Web Application Hacking And Bug Bounty Guide
Take the leap from practice platform to bug bounty target
781 viewsS4fh1R, 
@Phantasm_Lab
[CVE-2017-18345] Joomla Joomanager 2.0.0 Joomanager Arbitrary File Download Exploit

Collecting databases in mass with plugin : COM_JOOMANAGER, From CMS: Joomla, Project developed in python 2.x, more information, access the youtube video.

https://youtu.be/CIvDzwxaZxM
1.06K views[L]uth1er, 
@Phantasm_Lab
Forwarded from @Phantasm_Lab ([L]uth1er)
Bypassing Web Application Firewall Part 1
https://medium.com/@iratoon/bypassing-web-application-firewall-part-1-3cfd7a1b1159

Bypassing Web Application Firewall Part 2
https://medium.com/@iratoon/bypassing-web-application-firewall-part-2-269470e0c40b

Bypassing Web Application Firewall Part 3
https://medium.com/@iratoon/bypassing-web-application-firewall-part-3-521fd66a6422

Bypassing Web Application Firewall Part 4
https://medium.com/@iratoon/bypassing-web-application-firewall-part-4-862e9929e350
Medium
Bypassing Web Application Firewall Part — 1
As many of you may know, a Web Application Firewall is a firewall that sits in front of our web applications, and filters, analyzes and…
740 views[L]uth1er, 
@Phantasm_Lab
Forwarded from SHELL SHOCK
https://www.udemy.com/course/advance-bug-bounty-hunting-penetration-testing-course-2021/?couponCode=TIMEPASSKATTA
Udemy
Online Courses - Learn Anything, On Your Schedule | Udemy
Udemy is an online learning and teaching marketplace with over 250,000 courses and 73 million students. Learn programming, marketing, data science and more.
829 viewsS4fh1R, 
@Phantasm_Lab
MY BUG BOUNTY JOURNEY!

I'm a bug bounty hunter who's learning everyday and sharing useful resources as I move along.

https://youtu.be/ug7FzoByLFc
YouTube
MY BUG BOUNTY JOURNEY!
I'm a bug bounty hunter who's learning everyday and sharing useful resources as I move along. Subscribe to my channel because I'll be sharing my knowledge in new videos regularly.

BUY ME A COFFEE:
https://www.buymeacoffee.com/farahhawa

SOCIAL MEDIA:
Connect…
815 views[L]uth1er, edited  
@Phantasm_Lab
How to Crush Bug Bounties in the first 12 Months

This talk is perfect for anyone who has just started, or is about to start bug bounties. More seasoned hackers will also glean some tips to improve their workflow. I'll lay out a roadmap for a new bug bounty hunter that can be applied to boost their knowledge and success in their first 12 months. Join @hakluke​ in todays awesome bug bounty for beginners talk!

https://youtu.be/AbebbJ3cRLI
YouTube
How to Crush Bug Bounties in the first 12 Months
This talk is perfect for anyone who has just started, or is about to start bug bounties. More seasoned hackers will also glean some tips to improve their workflow. I'll lay out a roadmap for a new bug bounty hunter that can be applied to boost their knowledge…
1K views[L]uth1er,