CTF Training
前往频道在 Telegram
🏁 HTB & CTF Training. 🛒 Products: https://ZishanHack.com 🗃 Folder: https://t.me/addlist/Bqw26iGfReYyMGZl 🔗 All Links: https://zishanhack.com/links/ 👤 by @ZishanHack ⚠️ Disclaimer: For educational purposes only. Follow local laws.
显示更多6 811
订阅者
无数据24 小时
+447 天
+26330 天
数据加载中...
吸引订阅者
十月 '2610月 '26
十月 '26
+104
在0个频道中
九月 '26
+350
在0个频道中
Get PRO
八月 '26
+155
在0个频道中
Get PRO
七月 '26
+66
在0个频道中
Get PRO
六月 '26
+416
在0个频道中
Get PRO
五月 '26
+494
在0个频道中
Get PRO
四月 '26
+386
在0个频道中
Get PRO
三月 '26
+250
在1个频道中
Get PRO
二月 '26
+33
在1个频道中
Get PRO
一月 '26
+28
在0个频道中
Get PRO
十二月 '25
+28
在0个频道中
Get PRO
十一月 '25
+176
在1个频道中
Get PRO
十月 '25
+331
在1个频道中
Get PRO
九月 '25
+4 632
在0个频道中
Get PRO
八月 '250
在0个频道中
Get PRO
七月 '25
+5
在0个频道中
Get PRO
六月 '25
+46
在0个频道中
Get PRO
五月 '25
+50
在0个频道中
Get PRO
四月 '25
+45
在0个频道中
Get PRO
三月 '25
+53
在0个频道中
Get PRO
二月 '25
+65
在0个频道中
Get PRO
一月 '25
+55
在0个频道中
Get PRO
十二月 '24
+273
在1个频道中
Get PRO
十一月 '24
+354
在0个频道中
Get PRO
十月 '24
+548
在0个频道中
Get PRO
九月 '24
+450
在0个频道中
Get PRO
八月 '24
+468
在1个频道中
Get PRO
七月 '24
+336
在0个频道中
Get PRO
六月 '24
+248
在0个频道中
Get PRO
五月 '24
+234
在0个频道中
Get PRO
四月 '24
+236
在0个频道中
Get PRO
三月 '24
+390
在1个频道中
Get PRO
二月 '24
+405
在1个频道中
Get PRO
一月 '24
+506
在0个频道中
Get PRO
十二月 '23
+665
在1个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 10 十月 | +11 | |||
| 09 十月 | +6 | |||
| 08 十月 | +9 | |||
| 07 十月 | +11 | |||
| 06 十月 | +8 | |||
| 05 十月 | +8 | |||
| 04 十月 | +17 | |||
| 03 十月 | +13 | |||
| 02 十月 | +12 | |||
| 01 十月 | +9 |
频道帖子
Repost from ZishanHack
CPENT Obsidian Notes & Tools Vault
By ZishanHack
The notes I used during my CPENT preparation are now available to help other penetration testers.
📚 What's included?
• 130+ Markdown notes
• 40+ tool cheat sheets
• 18 organized sections
• Lifetime updates
Covers Active Directory, Web/API security, pivoting, binary exploitation, IoT, and more.
🔗 Get your copy:
https://zishanhack.com/products/cpent
Independent resource. Not official EC-Council material.
#CPENT #PenetrationTesting #CyberSecurity
| 2 | 📌 Official Announcement from ZishanHack
If you're preparing for OSCP / OSCP+, this is important.
After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on:
👉 https://zishanhack.com
It is a professional, exam-focused Obsidian vault built to give learners:
- A clean command-first structure
- Fast workflow navigation
- Practical enumeration to exploitation flow
- Realistic privilege escalation patterns
- Pivoting & tunneling references
- Zero clutter
- Pure exam-ready efficiency
- Many OSCP learners waste months building their notes from scratch.
This vault removes that burden entirely.
I created it because the OSCP journey becomes significantly easier when your notes are:
- Organized
- Searchable
- Linked
- Structured
- Built for high-speed execution
- Designed for exam pressure
If you want a cleaner, faster, more reliable OSCP workflow, the download is available here:
👉 https://zishanhack.com
This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder.
Feel free to share this with anyone preparing for OSCP.
- Zishan Ahamed Thandar | 572 |
| 3 | 🚨 New Bug Bounty Breakdown is Live! 🚨
I just opened the vault on a 2019 SQL Injection (SQLi) I found on EC-Council's infrastructure.
In this video, I walk through:
🔹 The original PoC and vulnerable search parameter
🔹 How it exposed backend MySQL databases
🔹 The Zendesk disclosure timeline & remediation
🔹 Landing a spot on the Bug Bounty Hall of Fame! 🏆
Watch the full walkthrough here 👇
🔗 https://youtu.be/hwGjbeEOIwM | 1 549 |
| 4 | Your Firefox deserves a better terminal.
CyberTerminus: a dark, cyber-inspired Firefox theme built for people who live in terminals, browsers, and security labs.
If that sounds like your setup, give it a try:
https://addons.mozilla.org/en-US/firefox/addon/zishanadthandar-cyberterminus/
Firefox Add-ons | 2 156 |
| 5 | https://t.me/addlist/Bqw26iGfReYyMGZl | 1 919 |
| 6 | 📌 Official Announcement from ZishanHack
If you're preparing for OSCP / OSCP+, this is important.
After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on:
👉 https://zishanhack.com
It is a professional, exam-focused Obsidian vault built to give learners:
- A clean command-first structure
- Fast workflow navigation
- Practical enumeration to exploitation flow
- Realistic privilege escalation patterns
- Pivoting & tunneling references
- Zero clutter
- Pure exam-ready efficiency
- Many OSCP learners waste months building their notes from scratch.
This vault removes that burden entirely.
I created it because the OSCP journey becomes significantly easier when your notes are:
- Organized
- Searchable
- Linked
- Structured
- Built for high-speed execution
- Designed for exam pressure
If you want a cleaner, faster, more reliable OSCP workflow, the download is available here:
👉 https://zishanhack.com
This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder.
Feel free to share this with anyone preparing for OSCP.
- Zishan Ahamed Thandar | 1 729 |
| 7 | 🚀 OSCP COMMANDS – OBSIDIAN VAULT
Save Hours in the Exam. Instant Command Recall.
OSCP isn't about knowing what tool exists.
It's about recalling the right command instantly — under pressure, without panic.
📦 What's Inside:
• Enumeration – FTP, SSH, SMB, HTTP, DNS, LDAP, RDP
• Privilege Escalation – Linux & Windows decision trees
• Web Exploitation – SQLi, file upload, LFI/RFI bypass
• Active Directory – Domain enum, lateral movement
• Post-Exploitation – Cred dumping, persistence
⚡️ Why Obsidian:
🔗 Internal links between techniques
🔍 Instant search across commands
🧠 Knowledge graph for connections
✏️ Easy to extend with your notes
🎁 What You Get:
• OSCP Commands Obsidian Vault
• Categorized command notes
• Linked attack flows
• Lifetime updates · Instant access
🚀 LIMITED-TIME OFFER
$997 $97 (90% OFF)
👉 https://zishanhack.com/blog/blog/2025/12/24/oscp-commands-obsidian/
One-time payment. No subscriptions. Lifetime updates. | 1 633 |
| 8 | ## 🚀 Ultimate Web Security Checklist — Now Available
If you’re into bug bounty, pentesting, or structured web app testing, this will save you serious time.
The Ultimate Web Security Checklist is a professionally organized reference guide built to help you test applications methodically — without missing important areas.
Inside you’ll get:
✅ 300+ structured security test points
✅ Coverage across major vulnerability categories
✅ Clear, organized testing flow
✅ Practical tool references
✅ Clean, easy-to-use PDF format
This is not a course.
It’s a disciplined testing framework for those who already understand web security and want a repeatable, professional approach.
Stop relying on memory.
Start relying on structure.
👉 Get access here:
https://zishanhack.com/products/web-security-checklist | 3 486 |
| 9 | 📌 Official Announcement from ZishanHack
If you're preparing for OSCP / OSCP+, this is important.
After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on:
👉 https://zishanhack.com
It is a professional, exam-focused Obsidian vault built to give learners:
- A clean command-first structure
- Fast workflow navigation
- Practical enumeration to exploitation flow
- Realistic privilege escalation patterns
- Pivoting & tunneling references
- Zero clutter
- Pure exam-ready efficiency
- Many OSCP learners waste months building their notes from scratch.
This vault removes that burden entirely.
I created it because the OSCP journey becomes significantly easier when your notes are:
- Organized
- Searchable
- Linked
- Structured
- Built for high-speed execution
- Designed for exam pressure
If you want a cleaner, faster, more reliable OSCP workflow, the download is available here:
👉 https://zishanhack.com
This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder.
Feel free to share this with anyone preparing for OSCP.
- Zishan Ahamed Thandar | 766 |
| 10 | 📌 Official Announcement from ZishanHack
If you're preparing for OSCP / OSCP+, this is important.
After months of refining, testing, and personally using it across multiple labs and real exam environments, I’ve released a premium OSCP Command Cheatsheet (Obsidian Edition) on:
👉 https://zishanhack.com
It is a professional, exam-focused Obsidian vault built to give learners:
- A clean command-first structure
- Fast workflow navigation
- Practical enumeration to exploitation flow
- Realistic privilege escalation patterns
- Pivoting & tunneling references
- Zero clutter
- Pure exam-ready efficiency
- Many OSCP learners waste months building their notes from scratch.
This vault removes that burden entirely.
I created it because the OSCP journey becomes significantly easier when your notes are:
- Organized
- Searchable
- Linked
- Structured
- Built for high-speed execution
- Designed for exam pressure
If you want a cleaner, faster, more reliable OSCP workflow, the download is available here:
👉 https://zishanhack.com
This is the same structure I personally rely on, and it's now available for others who want to prepare smarter, not harder.
Feel free to share this with anyone preparing for OSCP.
- Zishan Ahamed Thandar | 2 964 |
| 11 |  🔐 Ultimate Web Security Checklist for Bug Bounty Hunter
Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content.
You’ll get:
✅ Tactical recon to exploitation flow
✅ Field-tested tools, payloads, and scripts
✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more
✅ Made to level up hunters, pentesters, and CTF players
🧠 Used by security professionals worldwide.
🚀 Perfect for live hacking prep, client audits, and fast bug validation.
📥 Get instant access now →
👉 https://zishanhack.com
⚠️ Limited-Time Deal Active — Almost 90% OFF
This discount will expire without warning. Don't miss it. | 976 |
| 12 | 🔐 Ultimate Web Security Checklist for Bug Bounty Hunter
Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content.
You’ll get:
✅ Tactical recon to exploitation flow
✅ Field-tested tools, payloads, and scripts
✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more
✅ Made to level up hunters, pentesters, and CTF players
🧠 Used by security professionals worldwide.
🚀 Perfect for live hacking prep, client audits, and fast bug validation.
📥 Get instant access now →
👉 https://zishanhack.com
⚠️ Limited-Time Deal Active — Almost 90% OFF
This discount will expire without warning. Don't miss it. | 3 |
| 13 | 🚀 New Tool for Pentesters & Bug Bounty Hunters
I’ve released a Firefox addon that makes proxy switching instant.
Burp → Tor → Direct in ONE click ⚡️
No manual proxy setup. No repeated configuration. Just pure speed.
Demo Video: https://youtu.be/lu_f-74wVME
Addon Download: https://addons.mozilla.org/en-US/firefox/addon/hackerproxypro/
Source Code: https://github.com/ZishanAdThandar/HackerProxyPro
If you use Burp Suite or Tor regularly, this addon will save you serious time.
Give it a try and let me know your thoughts. | 929 |
| 14 | [ Try this firefox proxy addon ]
$ Features
- Burp Suite Proxy in one click
- TOR proxy in one click (when tor service is running on port 9050)
- Onion site access in firefox
- Lite on RAM
- Easy to understand
- Faster than all other similar
https://addons.mozilla.org/en-US/firefox/addon/hackerproxypro/ | 2 116 |
| 15 |  # Check Website Dorker Pro is now available for free as fully open source project
https://github.com/ZishanAdThandar/WebsiteDorkerPro
## Installation Command
python3 -m pip install website-dorker-pro
## Usage
### GUI Interface
websitedorkerpro --gui
# or
wdp --gui
### CLI Interface
# Quick reconnaissance scan
websitedorkerpro example.com --quick-scan
# Specific dork category
websitedorkerpro example.com --category subdomains
# Custom dork
websitedorkerpro example.com --dork "site:{domain} ext:pdf"
# List available categories
websitedorkerpro --list-categories | 1 310 |
| 16 |  🔐 Ultimate Web Security Checklist
Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content.
You’ll get:
✅ Tactical recon to exploitation flow
✅ Field-tested tools, payloads, and scripts
✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more
✅ Made to level up hunters, pentesters, and CTF players
🧠 Used by security professionals worldwide.
🚀 Perfect for live hacking prep, client audits, and fast bug validation.
📥 Get instant access now →
👉 https://topmate.io/zishanadthandar/1523473
⚠️ Limited-Time Deal Active — Almost 90% OFF
This discount will expire without warning. Don't miss it. | 1 707 |
| 17 | 🔐 Ultimate Web Security Checklist
Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content.
You’ll get:
✅ Tactical recon to exploitation flow
✅ Field-tested tools, payloads, and scripts
✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more
✅ Made to level up hunters, pentesters, and CTF players
🧠 Used by security professionals worldwide.
🚀 Perfect for live hacking prep, client audits, and fast bug validation.
📥 Get instant access now →
👉 https://topmate.io/zishanadthandar/1523473
⚠️ Limited-Time Deal Active — Almost 90% OFF
This discount will expire without warning. Don't miss it. | 731 |
| 18 | Beginner to Pentesting follow this,
https://zishanadthandar.github.io/pentest/ | 4 571 |
| 19 | JOIN Our Official Discord
https://discord.gg/T47v67eVT4 | 2 629 |
| 20 | 🔐 Ultimate Web Security Checklist
Built by an active bug bounty hunter for professionals who want real, practical results — not recycled blog content.
You’ll get:
✅ Tactical recon to exploitation flow
✅ Field-tested tools, payloads, and scripts
✅ Covers real-world XSS, IDOR, SSRF, APIs, Cloud, Business Logic, and more
✅ Made to level up hunters, pentesters, and CTF players
🧠 Used by security professionals worldwide.
🚀 Perfect for live hacking prep, client audits, and fast bug validation.
📥 Get instant access now →
👉 https://topmate.io/zishanadthandar/1523473
⚠️ Limited-Time Deal Active — Almost 90% OFF
This discount will expire without warning. Don't miss it. | 1 063 |
