https://github.com/onlytoxi/CVE-2025-8088-Winrar-Tool

⭐️ @ZeroSec_team

The Great Firewall of China (GFW) has leaked

Good morning — around 600 GB of data has leaked. The ones to blame are Geedge Networks and the MESA Laboratory at the Institute of Information Engineering, Chinese Academy of Sciences.

These same guys, grinning slyly (like Shang Tsung), supply censorship technologies to Myanmar, Pakistan, Ethiopia, Kazakhstan, etc. (look up the “One Belt, One Road” initiative).

What leaked:
Source code, internal communication structures, work logs, technical documentation from groups involved in building and maintaining the system, plus a pile of project denoscriptions and technical proposals, and so on.

In general, if you start googling/reading about MESA and Geedge, it gets insanely interesting — not only how censorship was imposed inside China, but also how they exported it abroad for surveillance. Clever stuff.

Download :
https://cloud.proxy-bar.org/s/bOicFtWWj875DZi

⭐️ @ZeroSec_team

فایروال بزرگ چین (GFW) لو رفت

صبح بخیر حدود ۶۰۰ گیگابایت داده نشت کرده. مقصرها: Geedge Networks و آزمایشگاه MESA در مؤسسه مهندسی اطلاعاتِ آکادمی علوم چین.

همین افراد با خنده‌ای موذیانه (مثل Shang Tsung 😅) فناوری‌های سانسور را به میانمار، پاکستان، اتیوپی، قزاقستان و غیره هم صادر کرده‌اند (کافیه ابتکار «یک کمربند، یک جاده» رو سرچ کنید).

چه چیزهایی لو رفته:
کد منبع، ساختار ارتباطات داخلی، گزارش‌های کاری، مستندات فنی مربوط به گروه‌هایی که در ساخت و نگهداری سیستم نقش داشتند، به‌علاوه کلی توضیحات پروژه‌ها و پیشنهادهای فنی و ...

به‌طور کلی اگر شروع کنید به سرچ کردن یا خوندن درباره‌ی MESA و Geedge، ماجرا خیلی جالب می‌شه نه فقط اینکه چطور سانسور رو داخل کشور اعمال می‌کردن، بلکه اینکه چطور این سیستم‌ها رو برای نظارت در خارج از کشور هم صادر کردن. خیلی زیرکانه ‌ست.

دانلود تورنت‌:‌

https://cloud.proxy-bar.org/s/bOicFtWWj875DZi

⭐️ @ZeroSec_team

#Tech_book
#WebApp_Security
"Essential Node.js Security for Express Web Applications", 2023.

// This book aims to equip existing Node.js developers, both beginners and experienced, with expertise and skills in security best practices. The book takes a practical hands-on approach to the Node.js ecosystem by using a good deal of source code examples, as well as leveraging and reviewing well tested and commonly used libraries and industry security standards

⭐️ @Zerosec_team

https://medusa0xf.medium.com/bypassing-2fa-in-graphql-apis-a-step-by-step-guide-4b73816bd4c3

⭐️ @Zerosec_team

Hi everyone, I’ve set up the watcher to run about 6 times a day, roughly every 4 hours, so you’ll get the most effective coverage possible

سلام بچه ها واچر رو تنظیم کردم روزی 6 بار ران میشه حدودا هر 4 ساعت یکبار تا بتونید موثر ترین حالت ممکن رو پوشش بدید

Watcher Report : @ZeroSec_group

⭐️ @ZeroSec_team

⭐️ @ZeroSec_team

اینو یه هندی گذاشته بود گفتم براتون بزارم 🤣🤣

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 0 new item
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

Daily dorking on LLMs can provide you with good bugs, especially from the data disclosures of these AI models

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 90 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 91 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

⚡Bug Bounty Reports Extractor - CLI tool that fetches resolved & disclosed HackerOne reports by vulnerability and exports them to CSV.

✅ https://github.com/newstartlikenoneanthor-pixel/report-extractor

⭐️ @Zerosec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 91 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 1 new item
🔹 HACKERONE: 92 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 1 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

Evolution of Tycoon 2FA Defense Evasion Mechanisms: Analysis and Timeline

Blog : https://any.run/cybersecurity-blog/tycoon2fa-evasion-analysis/

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 1 new item
🔹 HACKERONE: 96 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 1 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

In this video, we solve the PortSwigger Web LLM Attack lab step by step.
🔹 Learn what Web LLM Attack is
🔹 See how to exploit it on the PortSwigger lab
🔹 Understand how this vulnerability can be applied in real-world scenarios

This video is perfect for anyone looking to improve their skills in web hacking, bug bounty, and penetration testing.

📌 Topics & Tags:
#WebLLMAttack #PortSwigger #WebSecurity #BugBounty #Hacking

💡 Tip: Don’t forget to like, comment, and subscribe for more web security tutorials!

https://www.youtube.com/watch?v=-UdUgl0pv4w

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 11 new items
🔹 INTIGRITI: 0 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team