Pentester world 2.0

We Hacked GitHub for a Month: Here’s What We Found https://cyberxplore.medium.com/we-hacked-github-for-a-month-8c7da41fb614

𝙎𝘼𝙍𝙀𝙉𝙆𝘼 is an Open Source Intelligence (OSINT) tool that helps you in obtaining and understanding Attack Surface Link 🔗:- https://github.com/pawlaczyk/sarenka

Hey everyone! Check out our another blog on SQL Injection. SQL Injection attack | Prevention| Cyber Security Professionals Let's learn and grow together https://techofide.com/blogs/sql-injection-attack-sqli-sql-injection-prevention-sql-injection-cheat-sheet-practical-demo/

Neo4jection: Secrets, Data, and Cloud Exploits https://www.varonis.com/blog/neo4jection-secrets-data-and-cloud-exploits

Money Lover App Vulnerability Exposed Personal Info The exposed data included email addresses, wallet names, and limited transaction data. https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/money-lover-app-vulnerability-exposes-personal-info/

0Day Avalanche Blockchain API DoS https://g.livejournal.com/15852.html

secpat2gf convert secret patterns to gf compatible https://github.com/dwisiswant0/secpat2gf

Android Pentest 101 A list of Android Security materials and resources for pentesters and bug hunters https://github.com/dn0m1n8tor/AndroidPentest101

Where are tool for car hacking ? here is it https://github.com/jgamblin/CarHackingTools enjoy 🫡❤️

​​Sandman Sandman is a backdoor that meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP (protocol to sync time & date) to download an arbitrary shellcode from a pre defined server. Since NTP is a protocol that is overlooked by many defenders resulting wide network accessability. https://github.com/Idov31/Sandman #redteam

​​Warbird Hook Using Microsoft WARBIRD to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard. https://github.com/KiFilterFiberContext/warbird-hook

⭐️ Privileger Privilger allows you to work with privileges in Windows as easily as possible. There are three modes: — Add privileges to an account; — Start a process by adding a specific privilege to its token; — Remove privilege from the user. https://github.com/MzHmO/Privileger #ad #windows #privilege

Blue Team / Incident Respornse 👨‍💻 This github repository contains a collection of 35+ tools and resources that can be useful for blue teaming activities. https://github.com/A-poc/BlueTeam-Tools #Cybersecurity #BlueTeam #Infosec

Cybersec Windows Resources https://lnkd.in/gGRPF2ih https://lnkd.in/gJjBUyf7 https://lnkd.in/g32Wb8eR https://lnkd.in/gVPzfpNy https://lnkd.in/g5TcrJKi https://lnkd.in/gB6NvHUB https://lnkd.in/g8F_fkTA https://lnkd.in/eWBMbPEK https://lnkd.in/g8TvXwTV https://lnkd.in/g3s-mgy8 OffensiveNim - https://lnkd.in/gUKYa7DP Constrained Language Mode - https://lnkd.in/ecPAWPby Generic Applocker bypass - https://lnkd.in/gjQxPnhV Verified Applocker bypass - https://lnkd.in/gT7p2vbF Find writable PATH Environment variable locations - https://lnkd.in/gK47fRd3 https://lnkd.in/gmUZfJjf https://lnkd.in/gA3VNVkB Windows Server 2008R2 - 2019 NetMan DLL Hijacking https://lnkd.in/e4QXZZm7 UsoDllLoader - https://lnkd.in/eBipMDpX WerTrigger - https://lnkd.in/eDqRKb-w Faxhell - https://lnkd.in/ev75TJB5 FileWrite2System - https://lnkd.in/eNNUCeqK IlSpy - https://lnkd.in/eihcZJ8X dnSpy - https://lnkd.in/eYijBxgn Ida Pro - https://lnkd.in/eUe_h4ut Ghidra - https://ghidra-sre.org/ https://lnkd.in/e4uaGeAp Rubeus - https://lnkd.in/e9W_Rk3K https://lnkd.in/guwbfXDd https://lnkd.in/gwtpRH-T https://lnkd.in/ex6mPBKY https://lnkd.in/gBDyb66Q Active directory https://lnkd.in/gEyms5CF https://lnkd.in/gKBmCyCY https://lnkd.in/gb3x-FXR https://lnkd.in/ge8kNw7x https://lnkd.in/gWmc2ZMv https://lnkd.in/ge8kNw7x https://lnkd.in/gCDS-T8p https://lnkd.in/giAUuqq3 https://lnkd.in/ghXPz_Sm #windows

+ A Collection for IoT Security Resources https://github.com/V33RU/IoTSecurity101#Books-For-IoT-Pentesting + A Virtual environment for Pentesting IoT Devices https://github.com/IoT-PTv/IoT-PT #IoT #Pentest

#pentest #learning #Bugbounty An in-depth introduction to JWT (JSON Web Token) security, from understanding the basics to phases and more. 🔗 Part 1 🔗 Part 2 🔗 Part 3