Эффект пентестера

Enumerate and decrypt TeamViewer settings from registry https://github.com/V1V1/DecryptTeamViewer

Functional exploit for CVE-2019-18634, a heap buffer overflow that leads to privilege escalation on sudo <=1.8.30 if pwfeedback is enabled. https://github.com/Plazmaz/CVE-2019-18634 #CVE

#AppSec #Ezine 312th edition https://pathonproject.com/zb/?445cb500741d4c70#+ZEJ8PE6ZhudT9uTwqMCatXqkgaHzi45EQoF3NOF5cA= https://github.com/Simpsonpt/AppSecEzine

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4 https://github.com/mufeedvh/CVE-2019-8449/ #CVE

#tools

sans & offensive-security video and pdf tutorials free download List of course : SANS 401 - Security Essentials Bootcamp Style.tar.gz SANS 408 - Windows Forensic Analysis.tar.gz SANS 410 - ICS & SCADA Security Essentials.tar.gz SANS 414 - Training Program for CISSP Certification.tar.gz SANS 502 - Perimeter Protection In-Depth.tar.gz SANS 503 - Intrusion Detection In-Depth.tar.gz SANS 504 - Hacker Tools, Techniques, Exploits, and Incident Handling.tar.gz SANS 505 - Sans Securing Windows with PowerShell.tar.gz SANS 506 - Securing Linux & UNIX.tar.gz SANS 507 - Auditing & Monitoring Networks, Perimeters & Systems.tar.gz SANS 508 - Advanced Digital Forensics and Incident Response.tar.gz SANS 509 - Securing Oracle Database.tar.gz SANS 511 - Continuous Monitoring and Security Operations.tar.gz SANS 512 - Security Leadership Essentials for Managers.tar.gz SANS 517 - Cutting Edge Hacking Techniques.tar.gz SANS 518 - Mac Forensic Analysis.tar.gz SANS 524 - Cloud Security Fundamentals.tar.gz SANS 526 - Memory Forensics In-Depth.tar.gz SANS 531 - Windows Command Line Kung Fu.tar.gz SANS 542 - Web App Penetration Testing and Ethical Hacking.tar.gz SANS 560 - Network Penetration Testing and Ethical Hacking.tar.gz SANS 566 - Implementing and Auditing the Critical Security Controls - In-Depth .tar.gz SANS 572 - Advanced Network Forensics and Analysis.tar.gz SANS 577 - Virtualization Security Fundamentals.tar.gz SANS 580 - Metasploit Kung Fu for Enterprise Pen Testing.tar.gz SANS 610 - Reverse-Engineering Malware: Malware Analysis Tools and Techniques.tar.gz SANS 617 - Wireless Ethical Hacking, Penetration Testing, and Defenses.tar.gz SANS 642 - Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques.tar.gz SANS 660- Advanced Penetration Testing, Exploit Writing, and Ethical Hacking.tar.gz SANS 710 - Advanced Exploit Development.tar.gz SANS 760 - Advanced Exploit Development.tar.gz Offensive-Security - 101.tar.gz Offensive-Security - AWE - Advanced Windows Exploitation 1.1.tar.gz Offensive-Security - AWE - Advanced Windows Exploitation 2.0.tar.gz Offensive-Security - CTP - Cracking the Perimeter 1.0.tar.gz Offensive-Security - OSWP - WiFu.tar.gz Offensive-Security - PWB - Penetration Testing with Backtrack.tar.gz Offensive-Security - PWK - Penetration Testing with Kali.tar.gz magnet:?xt=urn:btih:f91feb6d2ea93f1c3c03b6be52051c2df72da1b7&dn=CERTCOLLECTION+-+BASELINE+-+SANS+%26+Offensive-Security&tr=udp%3A//tracker.coppersurfer.tk%3A6969&tr=udp%3A//tracker.zer0day.to%3A1337&tr=udp%3A//public.popcorn-tracker.org%3A6969&tr=udp%3A//tracker.leechers-paradise.org%3A6969&tr=udp%3A//explodie.org%3A6969 #course

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS) https://github.com/EBWi11/AgentSmith-HIDS #HIDS

Tracking Down REvil’s “Lalartu” by utilizing multiple #OSINT methods https://medium.com/@underthebreach/tracking-down-revils-lalartu-by-utilizing-multiple-osint-methods-2bf3a6c65a80

AppSec Ezine - 311th Edition #AppSec #Security https://pathonproject.com/zb/?ca7553edfb480e1b#hSuMtqU/ywOIf+X+cDkbQ58e6d6mlaBWRBzw+iOAi2g=

https://mega.nz/?fbclid=IwAR2FM_Ltv7unLgB6mcxLTnTRmQCsIDlZYQTRvfNlYyAk3ObM8Ov5KIxD0Ds#F!zMN00AKJ!V9ZTkIgJiE03YJDDwHe9Jw #course

Cobalt Strike kit for Lateral Movement https://github.com/0xthirteen/MoveKit #cobaltstrike

https://nullsweep.com/subdomain-recon-a-subdomain-reconnaissance-tool/ #python #tools #subdomain

Top Android hacking application 1. SpoofApp:- SpoofApp is a Caller ID Spoofing, Voice Changing and Call Recording mobile app for your iPhone, BlackBerry and Android phone. It’s a decent mobile app to help protect your privacy on the phone. However, it has been banned from the Play Store for allegedly being in conflict with The Truth in Caller ID Act of 2009. 2. Andosid:- The DOS tool for Android Phones allows security professionals to simulate a DOS attack (an http post flood attack to be exact) and of course a dDOS on a web server, from mobile phones. 3. Faceniff:- Allows you to sniff and intercept web session profiles over the WiFi that your mobile is connected to. It is possible to hijack sessions only when WiFi is not using EAP, but it should work over any private networks. 4. Nmapper:- (Network Mapper) is a security scanner originally written by Gordon Lyon used to discover hosts and services on a computer network, thus creating a “map” of the network. To accomplish its goal, Nmapper sends specially crafted packets to the target host and then analyses the responses. 5. Anti-Android Network Toolkit:-zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety. 6. SSHDroid:- SSHDroid is a SSH server implementation for Android. This application will let you connect to your device from a PC and execute commands (like “terminal” and “adb shell”) or edit files (through SFTP, WinSCP, Cyberduck, etc). 7. WiFi Analyser:- Turns your android phone into a Wi-Fi analyser. Shows the Wi-Fi channels around you. Helps you to find a less crowded channel for your wireless router. 8. Network Discovery:- Discover hosts and scan their ports in your Wifi network. A great tool for testing your network security. 9. ConnectBot:- ConnectBot is a powerful open-source Secure Shell (SSH) client. It can manage simultaneous SSH sessions, create secure tunnels, and copy/paste between other applications. This client allows you to connect to Secure Shell servers that typically run on UNIX-based servers. 10. dSploit:-Android network analysis and penetration suite offering the most complete and advanced professional toolkit to perform network security assesments on a mobile device. 11. Hackode:- The hacker’s Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like reconnaissance, scanning performing exploits etc. 12.Androrat:- Remote Administration Tool for Android. Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. 13.APKInspector:- APKinspector is a powerful GUI tool for analysts to analyse the Android applications. The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. 14.DroidBox:- DroidBox is developed to offer dynamic analysis of Android applications. 15.Burp Suite:- Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. 16. Droid Sheep:- DroidSheep can be easily used by anybody who has an Android device and only the provider of the web service can protect the users. So Anybody can test the security of his account by himself and can decide whether to keep on using the web service. #android #tools

Powershells are amazing and useful for pentesters, But can also can used for viruses!