Эффект пентестера

Reversing and exploiting books https://github.com/hdbreaker/ExploitingBooks #reverse

#tools Fhex - A Fucking HexEditor https://github.com/echo-devim/fhex

Awesome https://github.com/sindresorhus/awesome Awesome lists for hackers https://github.com/Hack-with-Github/Awesome-Hacking RAT And C&C Resources https://github.com/alphaSeclab/awesome-rat Collection of burpsuite plugins https://github.com/Mr-xn/BurpSuite-collections #tools

Red Team Tactics: Advanced process monitoring techniques in offensive operations https://outflank.nl/blog/2020/03/11/red-team-tactics-advanced-process-monitoring-techniques-in-offensive-operations/ #RedTeam

#inside

Bug Bounty Reference https://github.com/ngalongc/bug-bounty-reference Bug Bounty Cheat Sheet https://github.com/EdOverflow/bugbounty-cheatsheet Awesome Bug Bounty https://github.com/djadmin/awesome-bug-bounty Resources for Beginner Bug Bounty Hunters https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters #bugbounty

Архитектура операционной системы (на примере Linux) ▪️ Лекция 1. Генезис операционных систем. Назначение ОС. Базовые принципы организации ОС - Смотреть ▪️ Лекция 2. Обзор архитектуры x86. Основы программирования - Смотреть ▪️ Лекция 3. x86 Protected mode overview - Смотреть ▪️ Лекция 4. Создание первого процесса. Инициализация операционной системы - Смотреть ▪️ Лекция 5. Filesystems internals - Смотреть ▪️ Лекция 6. IPC overview - Смотреть ▪️ Лекция 7. Многопоточность: добро и зло - Смотреть @itlecture

https://hakin9.org/thefatrat-a-massive-exploiting-tool/ #tools

CVE-2020-9371/9372: WordPress Appointment Booking Calendar 1.3.34 CSV Injection https://packetstormsecurity.com/files/156694/wpbookingcalendar1334-csvinject.txt #CVE

Поиск имен пользователей в более чем 75 социальных сетях. Это полезно, если вы проводите расследование, для определения использования одного и того же имени пользователя в разных социальных сетях. Установка: git clone https://github.com/thelinuxchoice/userrecon cd userrecon/ ls ./userrecon.sh #tools

https://book.hacktricks.xyz/ #links

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more. https://github.com/trimstray/the-book-of-secret-knowledge

https://alltopguide.com/?id=3352 #guides

How to prepare for OSCP complete guide Below are 5 skills which you have to improve before registering for OSCP > Learn basic of Computer Network, Web application, and Linux > Learn Bash and Python scripting > Enumeration is key in OSCP lab, I repeat Enumeration is key in OSCP Lab and in real world too > Download vulnerable VM machines from vulnhub > Buffer Overflow (BOF) exploitation Below are the free reference before registration of OSCP > https://www.cybrary.it/course/ethical-hacking/ > https://www.cybrary.it/course/web-application-pen-testing/ > https://www.cybrary.it/course/advanced-penetration-testing/ > https://www.offensive-security.com/metasploit-unleashed/ > https://www.cybrary.it/course/python/ Below are the reference for Buffer overflow and exploit developmet for OSCP > http://www.fuzzysecurity.com/tutorials/expDev/1.html > https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ For Bash Scripting > http://www.tldp.org/LDP/Bash-Beginners-Guide/html/ Transferring Files from Linux to Windows & post-exploitation > https://blog.ropnop.com/transferring-files-from-kali-to-windows/ > https://www.cybrary.it/course/post-exploitation-hacking/ Privilege Escalation: > http://www.greyhathacker.net/?p=738 > http://www.fuzzysecurity.com/tutorials/16.html > https://github.com/GDSSecurity/Windows-Exploit-Suggester > http://pwnwiki.io/#!privesc/windows/index.md > https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ > https://github.com/rebootuser/LinEnum > https://www.youtube.com/watch?v=PC_iMqiuIRQ > https://www.adampalmer.me/iodigitalsec/2013/08/13/mysql-root-to-system-root-with-udf-for-windows-and-linux/ Port redirection/tunneling > https://chamibuddhika.wordpress.com/2012/03/21/ssh-tunnelling-explained/ > http://www.abatchy.com/search/label/Networking Practise Lab online & offline --- Most of this lab help you to understand different attack and (privilege escaltion very very important for OSCP ) > http://overthewire.org/wargames/bandit/ > https://www.explainshell.com/ > https://www.vulnhub.com/?q=kioptrix&sort=date-asc&type=vm > https://www.vulnhub.com/entry/fristileaks-13,133/ > https://www.vulnhub.com/entry/brainpan-1,51/ (Buffer overflow vm) > https://www.vulnhub.com/entry/mr-robot-1,151/ > https://www.vulnhub.com/entry/hacklab-vulnix,48/ > https://www.vulnhub.com/entry/vulnos-2,147/ > https://www.vulnhub.com/entry/sickos-12,144/ > https://www.vulnhub.com/entry/devrandom-scream,47/ > https://www.vulnhub.com/entry/skytower-1,96/ > https://github.com/rapid7/metasploitable3/wiki #course

https://github.com/pgaijin66/XSS-Payloads/blob/master/payload.txt #payload #XSS