Termux All Command [Telegram Group]

RedTiger-Tools is a free multi-tool with many features in the areas of Cybersecurity, Pentesting, OSINT, Network Scanning, Discord and Hacking. https://lnkd.in/eJvSxVA4

📌 Modern Phishing Toolkit hashtag#IT hashtag#Cybersecurity hashtag#Developer hashtag#technician hashtag#Engineer hashtag#Cisco hashtag#IoT hashtag#Programmer hashtag#Coder hashtag#Hacking hashtag#Electronics hashtag#Technology hashtag#IBM hashtag#Microsoft hashtag#apple hashtag#Industrial hashtag#software hashtag#linux hashtag#infosec hashtag#science hashtag#cyber hashtag#mechanical hashtag#machines https://lnkd.in/emHT9Kra

⚡️xss0rRecon is a versatile bash script designed to facilitate domain enumeration, URL filtering, parameter discovery, and XSS detection. It is not mandatory to use xss0rRecon alongside xss0r, but doing so provides a significant boost to your scanning efficiency and accuracy. The tool is highly customizable and can be tailored to meet individual user requirements. Github:- https://lnkd.in/gpya3NkN

How I Personally Look For Information Disclosure Bugs cat urls.txt | grep -E "\.txt/\.log/\.cache/\.secret|\.db/\.backup/\.yml/\.json/\.gz|\.rar|\.zip/|\.tar/\.sql/\.env/\.config/\.conf/\.ini/\.htaccess/\.htpasswd/\.pem/\.key/\.crt/\.cer/\.pfx/\.p12/\.swp/\.bak/\.old/\.tmp/\.temp/\.dump/\.passwd/\.shadow/\.git/\.svn/\.DS_Store/\.idea/\.vscode/\.bash_history/\.zsh_history" #hackerone #bugcrowd #bugbounty

Link : github.com/ractiurd/SubScan

🔐 Network Security Resources 📍 Awesome Security 🖇️ github.com/sbilly/awesome-security 📍 Security Resources 🖇️ github.com/Johnson90512/Awesome-Security-Resources 📍 Cyber Security Resources 🖇️ github.com/Aksheet10/Cyber-Security-Resources 📍 Awesome Networking 🖇️ github.com/nyquist/awesome-networking 📍 Security Hardening 🖇️ github.com/decalage2/awesome-security-hardening 📍 Network Security Study Plan 🖇️ github.com/jassics/security-study-plan 📍 Main Security Testing Tools 🖇️ github.com/GoVanguard/main-security-testing-tools

🔰 PHISHING GOD 2024 | Bypass 2FA/MFA FEATURES: 50+ Pre-Made Phishing Templates (Gmail, Facebook, Instagram, etc.) Multi-Platform Support (Android, Windows, Linux, MacOS) Email Spoofing & SMS Phishing (SMSpish) Auto-Capture Cookies/Location/Device Info Built-in Ngrok Integration (No VPS Needed) Custom Domain Support + SSL Stealth Mode (Evades Basic Detection) https://github.com/Ignitetch/AdvPhishing

Static Testing Findings: >> Security Headers testing >> TLS >> Weak cipher >> vulnerable component(jQuery, Package) >> Hardcoded Information(API Key, Password, Username) >> Sensitive information via Directory listing Dynamic Testing Findings : >> SQL injection >> XSS >> Open redirect >> IDOR to ac takeover ---------------------- API testing --------------------- CRUD: C > Create --- POST R > Representation --- GET U> Update -- Put/PATCH D > Delete -- Delete Method

Best for Cheatsheet : https://github.com/The-Art-of-Hacking/h4cker/tree/master/cheat_sheets

#OSINT Tip: Real Google Satellite View 🌍🛰 Google’s 3D building views often appear as simplified, cartoon-like models—but did you know it’s possible to see the real satellite view instead? This tool gives you direct access to Google’s satellite imagery, allowing you to explore true, high-detail perspectives from around the world. 💡 Pro Tip: Use the adjustable controls to rotate and view areas from multiple angles. 🔗 Explore the tool: https://lnkd.in/gsgaCzeY

🔖JShunter JShunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for developers and security researchers. 📱Github: 🔗https://lnkd.in/g_yP_aar

WebCopilot An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, Ifi, ssrf and rce parameters and then scans for vulnerabilities. TOOL GITHUB LINK: https://lnkd.in/dXP38jXU

🚀 Pro Tip for Bug Hunters! Extract all API endpoints from AngularJS & Angular JavaScript files with this simple one-liner: curl -s URL | grep -Po "(\/)((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)*((?:[a-zA-Z\-_\:\.0-9\{\}]+))(\/)((?:[a-zA-Z\-_\/\:\.0-9\{\}]+))" | sort -u

Exposed Prometheus metrics nuclei -l subdomains.txt -s medium,high,critical