Эффект пентестера

-Brute forcing MySQL passwords: nmap -p3306 --script mysql-brute xx.xx.xx.xx -Brute forcing MS SQL passwords: nmap -p1433 --script ms-sql-brute xx.xx.xx.xx -Brute forcing Redis passwords: nmap -p6379 --script redis-brute xx.xx.xx.xx #nmap #hacking #Pentesting #BugBountyTip

AppSec Ezine - 300th Edition https://pathonproject.com/zb/?b8be8ca515c1b5d4#2Z+Gvd9VGZGxeTBnZhYc/qMqxKilgm4Rt5IpiifM98M= #AppSec #Security

DSA-4569 ghostscript - security update https://www.debian.org/security/2019/dsa-4569

#tips https://posts.specterops.io/when-kirbi-walks-the-bifrost-4c727807744f

The Bitlocker Password Cracker http://www.sicherheitsforschung-magdeburg.de/uploads/journal/MJS_068_Agostini_Bitlocker.pdf

#tips https://www.peerlyst.com/posts/the-practical-guide-to-radio-waves-hacking-aditya-gupta

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits. https://github.com/FSecureLABS/C3 https://labs.f-secure.com/tools/c3/

Search engines for Hackers: https://censys.io/ https://www.shodan.io/ https://viz.greynoise.io/table https://www.zoomeye.org/ https://wigle.net/ https://publicwww.com/ https://hunter.io/ https://haveibeenpwned.com/ https://thispersondoesnotexist.com https://osintframework.com/ #infosec

USN-4189-1: DPDK vulnerability https://usn.ubuntu.com/4189-1/

DSA-4567 dpdk - security update https://www.debian.org/security/2019/dsa-4567

#news #malware https://www.malware-traffic-analysis.net/2019/11/12/index.html

#tips https://www.kitploit.com/2019/11/adaudit-powershell-script-to-do-domain.html

User-level bind shell bypassing host-firewall restrictions https://0x00-0x00.github.io/research/2019/09/13/UserLevel-BindShell-Bypassing-HostFirewall-Restrictions.html

Hacktivity from muon4 LFI through the MySQL connection https://hackerone.com/reports/719875 Disclosed at: 2019-11-12 12:33:57 UTC+0 Created at: 2019-10-22 12:37:27 UTC+0

https://github.com/enaqx/awesome-pentest #pentest