Pentester world 2.0

🔥🔥Collection of methodology and test case for various web vulnerabilities😎🔥 🔗https://github.com/KathanP19/HowToHunt

⚜️Awesome Malware Analysis 🌐https://github.com/rshipp/awesome-malware-analysis

🧨Awesome-Red-Team-Operation 🟥https://github.com/CyberSecurityUP/Awesome-Red-Team-Operations 🔴https://github.com/yeyintminthuhtut/Awesome-Red-Teaming ♦️https://0x1.gitlab.io/pentesting/Red-Teaming-Toolkit/ #RedTeam

✊ OSINT Virtual machines and distributions for Practice ❤️ • Osintux : http://www.osintux.org/ • BackBox : https://www.backbox.org/ • osintBOX : https://github.com/Dimaslg/osintBOX • CSI Linux : https://csilinux.com/ • Kali Linux : https://www.kali.org/get-kali/ • ArchStrike : https://archstrike.org/ • Offen Osint : https://github.com/Double2Sky/OffenOsint • Huron Osint : https://github.com/HuronOsint/OsintDistro • Septor Linux : https://septor.sourceforge.io/ • Pentoo Linux : https://www.pentoo.ch/ • Tsurugi Linux : https://tsurugi-linux.org/downloads.php • BlackArch Linux : https://www.blackarch.org/ • Falcon Arch Linux : https://sourceforge.net/projects/falcon-archlinux/ • Fedora Security Lab : https://labs.fedoraproject.org/security/download/index.html • TraceLabs OSINT VM. : https://www.tracelabs.org/initiatives/osint-vm #osint

📚Modern C++ Programming Course (C++11/14/17/20) 🌐 GitHub

🔰Vulnerable REST API - OWASP 2023     API1:2023 - Broken Object Level Authorization     API2:2023 - Broken Authentication     API3:2023 - Broken Object Property Level Authorization     API4:2023 - Unrestricted Resource Consumption     API5:2023 - Broken Function Level Authorization     API6:2023 - Unrestricted Access to Sensitive Business Flows     API7:2023 - Server Side Request Forgery     API8:2023 - Security Misconfiguration     API9:2023 - Improper Inventory Management     API10:2023 - Unsafe Consumption of APIs     Bonus         Injection         Web Cache Deception         Weak Implementation of Reset Password (Account Takeover) 🌐https://github.com/bnematzadeh/vulnerable-rest-api

📚Pentration Testing, Beginners To Expert! https://github.com/xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes.git #web #pentest

Docker Remote API Scanner and Exploit 🔹 https://github.com/justakazh/DockerExploit

Find all DNS records for a domain name using this online tool. https://www.nslookup.io/

🔍 Penetration-List Penetration-List: The Penetration List is a comprehensive resource designed to supplement the work of testers. git clone https://github.com/AlbusSec/Penetration-List cd Penetration-List ▪️Github

𝐌𝐚𝐥𝐰𝐚𝐫𝐞 𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐫𝐬𝐞 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐂𝐨𝐧𝐭𝐞𝐧𝐭𝐬 Awesome Malware and Reverse Engineering https://lnkd.in/dZFy_k6d https://lnkd.in/dZh9hbpq Awesome Reverse Engineering https://lnkd.in/etvePWr https://lnkd.in/dh25YEkn https://lnkd.in/daEcJEJ9 https://lnkd.in/ds88s46R Awesome Malware Analysis https://lnkd.in/dh_tMmyY https://lnkd.in/e3KJ7rC https://lnkd.in/dbn94MUW Malware API https://malapi.io/ https://lnkd.in/djqeN7RS Malware Analysis and Reverse Engineering https://lnkd.in/dXjFkZ7a Retoolkit https://lnkd.in/dwn8bRi3 Malware Bazar https://bazaar.abuse.ch/ Malware Analysis Journey https://lnkd.in/d9B6UGQ8 Malware Analysis Playlist https://lnkd.in/dUd2xrj2 https://lnkd.in/ddkHVxeJ https://lnkd.in/dmsCaUZz Malware Analysis by Malwaretech https://malwaretech.com/ Malware Analysis Series https://lnkd.in/du6g7WbT Zero2Auto Malware Analysis https://lnkd.in/dN7v2zNj Sektor7 Malware Development https://lnkd.in/dfbgq-WV Dissecting and Comparing Different Binaries to Malware Analysis https://lnkd.in/dpD2Pfju

Damn Vulnerabilities List Lab #AWSGoat : A Damn Vulnerable AWS Infrastructure https://lnkd.in/dq2cYPG2 #AzureGoat : A Damn Vulnerable Azure Infrastructure https://lnkd.in/dKMMrESA #Webpentest: A Damn Vulnerable Web Application https://lnkd.in/dNJxX-Fe #API: A Damn Vulnerable Web Sockets https://lnkd.in/dMbJgP5h #Mobile: Damn Vulnerable Hybrid Mobile App https://lnkd.in/dSMZMuzZ #CICD: Deliberately vulnerable CI/CD environment https://lnkd.in/dCxZb88q #GraphQL: Damn Vulnerable GraphQL Application https://lnkd.in/d5V6P9HA #Webservice: Damn Vulnerable Web Services https://lnkd.in/dAu8HAyd #VamPI: Vulnerable API https://lnkd.in/dRPpBNjj #DVSA: Damn Vulnerable Serverless Application https://lnkd.in/dnvdNcfq #DVTA: DVTA is a Vulnerable Thick Client Application https://lnkd.in/dDhEDgdx #DVJA: Damn Vulnerable Java Application https://lnkd.in/dqFyjYWP #DVID: Damn Vulnerable IoT Device https://lnkd.in/dNV2RjUj #DVPWA: Damn Vulnerable Python Web Application https://lnkd.in/diDvsz8u #DVAS: Damn Vulnerable Application Scanner https://lnkd.in/dq_aC4pX #DVB: Damn Vulnerable Bank https://lnkd.in/dyGWJzxD #DVWPS: Damn Vulnerable WordPress Site https://lnkd.in/dkY-tXHe #DVNA: Damn Vulnerable NodeJS Application https://lnkd.in/ds3JReM5 #DVRA: Damn Vulnerable Ruby on Rails https://lnkd.in/djQ_ehzi #DVGM: Damn Vulnerable Grade Management https://lnkd.in/dAepn4K7 #Tiredful https://lnkd.in/d3NjivMu #DVCSharp: Damn Vulnerable C# Application https://lnkd.in/d8cZxdnr #DVHMA: Damn Vulnerable Hybrid Mobile App https://lnkd.in/dSMZMuzZ #DVIA: Damn Vulnerable iOS App https://lnkd.in/dJqPp-d9 #DVIA2: Damn Vulnerable iOS App 2 https://lnkd.in/dhGUXurv #DVRF: Damn Vulnerable Router Firmware https://lnkd.in/dUda_XsF #DVFaaS: Damn Vulnerable Functions as a Service https://lnkd.in/drVpszwD #DVCA: Damn Vulnerable Cloud Application https://lnkd.in/dPyKYKw4

👁‍🗨OSINT Tools for Analyzing Suspicious Emails👁‍🗨 https://www.thunderbird.net/en-US/ https://www.browserling.com/ https://mxtoolbox.com/ https://phishtank.org/ https://www.phishtool.com/ https://centralops.net/co/ https://www.virustotal.com/gui/ https://www.talosintelligence.com/ https://www.abuseipdb.com/ https://urlscan.io/ https://any.run/ https://www.hybrid-analysis.com/

New security page and independent audit completed by Cure53 https://obsidian.md/blog/cure53-security-audit/

Exploiting QUIC's Path Validation https://seemann.io/posts/2023-12-18-exploiting-quics-path-validation/

Top 10 web hacking techniques of 2023 - nominations open https://portswigger.net/research/top-10-web-hacking-techniques-of-2023-nominations-open

How Coordinated Vulnerability Disclosure Can Boost Election Integrity and Public Perception https://www.hackerone.com/security-compliance/election-integrity-coordinated-vulnerability-disclosure

500$ Access Control Bug: Performed Restricted Actions in Developer Settings by low level user. https://medium.com/@a13h1/500-access-control-bug-performed-restricted-actions-in-developer-settings-by-low-level-user-b4ecaa6d1aa1

233 - Spoofing Emails, PandoraFMS, and Keycloak https://dayzerosec.com/podcast/233.html