Эффект пентестера

HTTP Request Smuggling + IDOR https://hipotermia.pw/bb/http-desync-idor

AppSec Ezine - 303rd Edition https://pathonproject.com/zb/?4826d30d6266e82f#ZTUOgXR3Ntbb481BS1idu6zWHK1T643idEYa5kY4I4k= #AppSec #Security

Transparency Builds Trust https://www.hackerone.com/blog/transparency-builds-trust Someone called it a “breach,” and the world took notice. Here is the story.

Burp Suite Secret Finder - Burp Suite Extension To Discover Apikeys/Tokens From HTTP Response https://ift.tt/34LHNwt

Несколько полезных советов как практиковаться в Python https://habr.com/ru/post/478900/

Exposed Log Files - https://t.co/Kft6p37wJM Exposed Firebase DB - https://t.co/WGzatNLO3C Exposed Github Passwords- https://t.co/sGVY9UloQQ Hacking GraphQL - https://t.co/Z4ZBm3bN82 XSS SVG - https://t.co/5k3dGwkaGA #BugBounty #bugbountytips #bugbountytip #infosec #osint

Collection of public security audits grouped by programming language - https://github.com/pomerium/awesome-security-audits

Creating a Rootkit to Learn https://h0mbre.github.io/Learn-C-By-Creating-A-Rootkit/

Evading WinDefender ATP credential-theft: a hit after a hit-and-miss start https://www.matteomalvica.com/blog/2019/12/02/win-defender-atp-cred-bypass/

Little .Net payload on-disk payload injection into existing .Net assemblies (EXE/DLL) Useful if you have write access to a .Net assembly and don't have a shell on the box yet etc. Not sure if Donut & TikiTorch supports this yet, I needed something quick https://github.com/ashr/netrefject

Microsoft OAuth Flaw Opens Azure Accounts to Takeover https://threatpost.com/microsoft-oauth-flaw-azure-takeover/150737/

Trend Micro Security 16 - DLL Search-Order Hijacking and Potential Abuses (CVE-2019-15628) https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628

https://cloud.mail.ru/public/4Enn/4R1mmsMD7 #codeby

Size: 670 GB - Books - Course Videos - Software https://mega.nz/#F!avQQwQAQ!2Kib1xFG07oj0Ugn7kq4mg

#python #learn

https://drive.google.com/file/d/1s00ZQ9SMTeRVBZNZ0e7gUlLxyjvW07Ye #python

https://mega.nz/#F!Q5JCHQgQ!jqgeFdj61Mg1Xs1kksonrQ #cybersec

Java Deserialization Tool Gadgetinspector First Glimpse #infosec #pentest #bugbounty https://medium.com/@knownsec404team/java-deserialization-tool-gadgetinspector-first-glimpse-74e99e493649