white2hack 📚

Metasploit MS SQL Server Metasploit is an excellent framework developed by H. D. Moore. It is a free and lightweight tool for penetration testing. It is open-source and cross-platform and has a range of features. Its popularity rests primarily on the fact that it is a powerful tool for auditing security. While this is true, it also has many features that can help people protect themselves. Personally speaking, this is my go-to tool for testing as it encapsulates the exploit a pentester can ever need. Through this article, we will learn how to use Metasploit to exploit MSSQL. Therefore, we will go through every exploit Metasploit has to offer step by step, from finding the MSSQL server in the network to retrieving the sensitive information from the database and gaining control. Without any further ado, let us begin. #pentest

WEB APPLICATION PENTESTING CHECKLIST OWASP Based Checklist 🌟 500+ Test Cases 🚀 #web

Detect Tactics, Techniques & Combat Threats, Latest version: 1.8.0 DeTT&CT aims to assist blue teams in using ATT&CK to score and compare data log source quality, visibility coverage, detection coverage and threat actor behaviours. All of which can help, in different ways, to get more resilient against attacks targeting your organisation. The DeTT&CT framework consists of a Python tool (DeTT&CT CLI), YAML administration files, the DeTT&CT Editor (to create and edit the YAML administration files) and scoring tables for detections, data sources and visibility. GitHub #pentest

Burp Suite Intro Burp Suite, you might have heard about this great tool and even used it in a number of times in your bug hunting or the penetration testing projects. Though, after writing several articles on webapplication penetration testing, we’ve decided to write a few on the various options and methods provided by this amazing tool which thus could help our readers in their further penetration testing analyses. Today, in this publication, you will experience the complete installation and configuration of thismPort Swigger’s product from its different editions to setting up proxies for web and androidmapplications. #web

Red Teaming Toolkit #pentest

А ведь некоторые конторы так и нанимают) #fun

A Burp Suite extension that integrates OpenAI's GPT Released BurpGPT, a Burp Suite (PortSwigger) extension that uses OpenAI's GPT models to add an extra layer of security to your passive scan. With BurpGPT, you can easily interact with Open AI models to identify potential vulnerabilities in your web application using custom prompts. GitHub #web

Человек из телевизора сказал **"Своих не бросаем!"**. На днях, впервые года так за 3, сначала к одним потом к другим, далее к третьим, четвертым и везде вилы. Сначала, конечно, стало немного грустно, но потом осталась только улыбка! Ведь, эта ситуация как раз как лакмусовая бумажка показала кто есть кто, где п#здешь ради хайпа, а где деловой подход. Все кто отвалились никогда друзьями и партнерами по настоящему не были. Так что все только в благо, а мир полон возможностей и без "патриотов". А что скажешь ты? - был ли у тебя подобный опыт, попадал ли в схожие ситуации, правда ли что своих не бросают или все зассано п#ищдешом?

ChatGPT can fix your buggy code! Here’s how… 1. Install ChatGPT addon in VSCode. 2. Get an API key from OpenAI and input when prompted in VSCode. 3. Right click part or all of your code and select ChatGPT-Find Bugs. 4. Click insert from the ChatGPT window to fix your code. BONUS: ChatGPT will also explain the bug!! #AppSec

Where is my popcorn?.. 🍿 #fun

Have published new tool- DFIRT, Md. Abdullah Al Mamun It collects information of Windows PC to help incident response GitHub #forensic

Hackers use 'net' command to enumerate compromised system. This is why SOC analysts set alert for this command. But, hackers can use 'net1' command, which will work same as the 'net' command. So, when you're threat hunting, don't search only 'net' command rather, search '*net*' as regex to find malicious commands. #useful

CISSP Study GuideCISSP Study Guide, 2023 #docs #useful

OSINT CheatSheet, 2023 #OSINT