Эффект пентестера

14 Cybersecurity Metrics + KPIs to Track https://www.upguard.com/blog/cybersecurity-metrics via UpGuard Blog

https://anonfile.com/TcLcn9L3n7/dlh-500k-dehashed_csv #database_leak

А вот и модуль под Metasploit для CVE-2019-19781 aka Shitrix выкатили. https://github.com/rapid7/metasploit-framework/blob/a64b0fa9e75befc3ffdb6129e88a6f6dd4c31208/modules/exploits/unix/webapp/citrix_dir_trasversal_rce.rb

Взлом для начинающих. Слив курса от Hacker's Academy. После прохождения курса вы сможете: Определять 4 основные компонента, которые необходимы для взлома Находить уязвимости вашей цели Взламывать ее, получать над ней полный контроль. https://cloud.mail.ru/public/2HN6/2zdLKAvCS

Stealing NTLMv2 hash by abusing SQL injection in File download functionality http://www.mannulinux.org/2020/01/stealing-ntlmv2-hash-by-abusing-sqlInjection.html

AWS Report - a tool for analyzing amazon resources https://hakin9.org/aws-report-a-tool-for-analyzing-amazon-resources/ via Hakin9 – IT Security Magazine

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware https://github.com/ucsb-seclab/karonte

Reverse engineering and modifying an Android game (.apk) — CTF https://medium.com/@sebnemK/reverse-engineering-and-modifying-an-android-game-apk-ctf-c617151b874c

4w4k3/KnockMail https://github.com/4w4k3/KnockMail

BlueChecker will help you audit PowerShell and check for any suspicious activity. https://github.com/securethelogs/Bluechecker

Mail Security - SPF - WTF https://blog.zsec.uk/mail-tech-spf-pt1/amp/?__twitter_impression=true

CVE-2019-19781 Citrix NetScaler Directory Traversal is on heavy 🔥 curl -vk –path-as-is https://$TARGET/vpn/../vpns/ 2>&1 | grep “You don’t have permission to access /vpns/” >/dev/null && echo “VULNERABLE: $TARGET” || echo “MITIGATED: $TARGET”

Bypass SameSite Cookies Default to Lax and get CSRF https://medium.com/@renwa/bypass-samesite-cookies-default-to-lax-and-get-csrf-343ba09b9f2b

The Basics of Packed Malware: Manually Unpacking UPX Executables https://kindredsec.com/2020/01/07/the-basics-of-packed-malware-manually-unpacking-upx-executables/amp/?__twitter_impression=true

DefenderCheck Quick tool to help make evasion work a little bit easier. https://github.com/matterpreter/DefenderCheck

Ethical Hacking Lessons — Building Free Active Directory Lab in Azure https://medium.com/@kamran.bilgrami/ethical-hacking-lessons-building-free-active-directory-lab-in-azure-6c67a7eddd7f

A backdoor module for #Apache2 https://github.com/VladRico/apache2_BackdoorMod

Ребята, мы знаем что, почти, везде копипаст контента. Но мой знакомый недавно завел канал где он рассказывает о разном из мира интернета. Авторский контент, никакой заезженной фигни. Подписывайтесь на @cyberstalker . Чел знает своё дело