Pentester

CVE-2023-49070/51467 - Attacking & Defending Apache OFBiz https://www.prio-n.com/blog/cve-2023-49070-51467-attacking-defending-Apache-OFBiz

GreyNoise Labs - Panic!! At the YAML https://www.labs.greynoise.io/grimoire/2024-01-03-snakeyaml-deserialization/

The Art of Shodan https://astro0x00.medium.com/the-art-of-shodan-ee83bfa96105

Subfinder Unleashed https://dhiyaneshgeek.github.io/research,bug/bounty/2024/01/03/subfinder-securitytrails/

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery. https://github.com/MegaManSec/SSH-Snake

Bot helps to keep up to date with new CVEs and search new POC's @pocfather_bot

From Google Dorking to Unauthorized AWS Account Access and Account Takeover https://medium.com/@ar_hawk/from-google-dorking-to-unauthorized-aws-account-access-and-account-takeover-89eb2b9d284f

Scheduled Task Tampering https://ipurple.team/2024/01/03/scheduled-task-tampering/ https://github.com/netero1010/GhostTask

Fuzz Everything, Everywhere, All at Once - Advanced QEMU-based fuzzing https://media.ccc.de/v/37c3-12102-fuzz_everything_everywhere_all_at_once

Path traversal to RCE in Android — Mobile Hacking Lab ‘Document Viewer’ write-up https://ajmal-moochingal.medium.com/path-traversal-to-rce-in-android-mobile-hacking-lab-document-viewer-write-up-ef9226aea1ac

Bypass SSL Pinning for Flutter https://medium.com/@prasad508/bypass-ssl-pinning-for-flutter-a2f9ae85762e

Android Deep Links exploitation https://z4ki.medium.com/android-deep-links-exploitation-4abade4d45b4

Fuzzing the TCP/IP stack https://media.ccc.de/v/37c3-12235-fuzzing_the_tcp_ip_stack

Breaking Fortinet Firmware Encryption https://bishopfox.com/blog/breaking-fortinet-firmware-encryption

Amass: New Config File Update https://medium.com/@hackerassociate/amass-new-config-file-update-e95d09b6eb70

Ghidriff: Ghidra Binary Diffing Engine https://clearbluejar.github.io/posts/ghidriff-ghidra-binary-diffing-engine/

By combining Frida with an enhanced version of Tenet, Frinet facilitates the study of large programs, vulnerability research and root-cause analysis on iOS, Android, Windows and most architectures. https://www.synacktiv.com/publications/frinet-reverse-engineering-made-easier

Ghidra tutorials https://embee-research.ghost.io/tag/ghidra/

SMTP Smuggling - Spoofing E-Mails Worldwide https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/

The art of subdomain monitoring https://medium.com/@muhannadahmed042/the-art-of-subdomain-monitoring