Эффект пентестера

https://mega.nz/folder/GPhFBYRA#6h96SpmebvZEh1TVHOoowQ #course #OSWE #AWAE

https://www.udemy.com/course/php-mysql-certification-course-for-beginners/?couponCode=A4BC9AFF4472DC6BBFAE #course

XSS Cheat Sheet #xss #bugbounty #exploit #BugBountyTips #BugBountyTip

If a web application allow you to upload a .zip file, zip:// is an interesting PHP wrapper to turn a LFI into a RCE. #BugBounty #BugBountyTips #InfoSec

GUYS bypassed cloud flare using this payload "><x/Onpointerrawupdate=confirm(document.cookie)>kira_deathnote #cloudflare #bypass

[DC7495] Атаки сетевого уровня - Dangerous Headers & Firewall Bypass Докладчик: @N3M351DA "В докладе рассматриваются существовавшие и существующие проблемы безопасности сетевых протоколов. Пристальное внимание уделено IPv6 — протоколу на который уже несколько лет планируется перевести весь Интернет. Автором достаточно подробно рассмотрен ряд слабых мест протокола и показаны способы неочевидного использования некоторых служебный полей для организации передачи информации по стороннему каналу." - Анонимный рецензент. "Живо, резво и понятно." - Слава "Perfect." - дядя Фокс https://youtu.be/l9iUYttmowE Материалы: https://github.com/n3m351d4/IPv6-Attacks-and-Covert-Channels

https://mega.nz/folder/WQNGUQRC#DGPBMjHPwEdMCK2MJRoXzQ #links #course

The Best website to download course and Ebooks ➖https://certcollection.org/forum/ ➖https://vminhsang.name.vn ➖https://scnlog.me ➖https://sanet.st ➖https://technet24.ir ➖https://ebookee.org ➖https://myfreecourses.com ➖https://www.cybrary.it/catalog/ #links

From Zero to Lateral Movement in 36 Minutes #infosec #pentest #redteam #blueteam https://www.wilbursecurity.com/2019/12/from-zero-to-lateral-movement-in-36-minutes/

XXE 1. change password func -> JSON 2. converted to XML -> 200 OK 3. created dtd file on my ec2 and started webserver on port 80 4. crafted a XXE payload! 5. bounty! Always convert POST/PUT/PATCH body to xml and resend req, don't forget to change the content-type. #bugbountytips

Using ParamSpider + GF Releasing some GF profiles(.json files) to be used with ParamSpider(https://github.com/devanshbatham/ParamSpider/tree/master/gf_profiles) potential.json/xss.json/redirect.json/wordpress.json (will add more soon) #tools

Vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of CMS https://hakin9.org/vulnx-is-an-intelligent-bot-auto-shell-injector-that-detect-vulnerabilities/ #infosec #hacking #programming #pentest #opensource #CyberSecurity #vulnerability #CMS

LFI to RCE 1. ffuf on "/" -> "redacted-api" -> 302 2. ffuf on "redacted-api/" -> "application.wadl" -> 200 3. all operations were auth protected 4. didn't give up and tested ~200 operations 5. fount LFI, no auth 6. admin creds in plaintext, logged in and got RCE #bugbountytips

Have a SQLi on a WordPress site? Can't crack a user or admin's hash? Just request a password reset and then dump the "user_activation_key" from wp_users. Then navigate to the URL in the second img :) #redteam #security #bugbounty #bugbountytip #mysql #sql #wordpress #exploit

#msf #tips

https://github.com/bt3gl/Pentesting_Toolkit #pentest #toolkit