INFILTRA

🐞 Learn SSRF 🐜 [+] https://portswigger.net/web-security/ssrf [X] https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery [*] https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ssrf [-] https://www.youtube.com/watch?v=1pyoYa79ejs ✅Tryhackme Lab:- 👉 1. https://tryhackme.com/r/room/ssrfqi 2. https://tryhackme.com/r/room/ssrfhr ✅A New Era Of SSRF - Exploiting Url Parsers:- 👉 https://www.youtube.com/watch?v=D1S-G8rJrEk ✅ Hackerone report :- 👉 1. https://github.com/reddelexc/hackerone-reports/blob/master/tops_by_bug_type/TOPSSRF.md ✅ Medium report :-👉 1. https://medium.com/techfenix/ssrf-server-side-request-forgery-worth-4913-my-highest-bounty-ever-7d733bb368cb 2. https://raymondlind.medium.com/ssrf-lfi-in-uploads-feature-a134aa467abf 3. Read And Add More ✅ 6-7 year old ssrf poc video :- 👉 poc :- https://www.youtube.com/playlist?list=PL9VLN4DOjAsjjAZiPf_vbGp9eGufX7lKY ✅ Automate :-👉 https://medium.com/@a1bi/ssrf-get-notified-on-discord-whenever-you-have-an-ssrf-5162a6daf8a3 ✅ All SSRF In One :- 👉 1. https://github.com/jdonsec/AllThingsSSRF 2. https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/ssrf ✅ Tools :- 👉 1. https://github.com/zmap/zgrab 2. Collaborator Everywhere 3. SSRFmap ✅ SSRF EndPoint:- 👉 dest= path= window= next= site= reference= data= load= html= validate= page= return= callback= domain= feed= view= dir= request-baskets= dict= pdf= file= imageuri= url= key= .json oauth redirect= api= dashboard = config.= ✅ Bypass :- 👉 1. https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Server%20Side%20Request%20Forgery 2. Collect All bypass Techniques from twitter, medium or others sources and note down #bugbounty #ssrf #bugbountytips

🪴Darkweb Drug Dealers OSINT🪴

📡The dark web provides a platform for drug dealers to operate anonymously and carry out illicit transactions without fear of detection.📡

💌Key points to consider in such an analysis: 🪴Background:

Provide background information on the dark web, explaining how it operates as a hidden part of the internet

🪴Investigation Scope:

Detail the extent of the investigation, such as the duration, resources involved, and specific objectives related to identifying and apprehending

🪴Marketplaces:

Describe the dark web marketplaces where drug transactions took place, highlighting the challenges law enforcement faces in monitoring and shutting down these platforms due to encryption and anonymity feature

🪴Cryptocurrencie

s: Discuss the use of cryptocurrencies like Bitcoin for transactions on the dark web, which adds another layer of complexity to identifying individuals involved in drug trafficking .

❤️‍🔥For Training https://t.me/imkreviews/173 Regards : @MajorKali

📧Email OSINT Guide📧 Email OSINT, or Open Source Intelligence, is a way to gather information about someone using their email address and publicly available sources like social media, websites, and online databases. 📝Points to be check📝 💌Reverse Email Lookup 💌Social Media Sleuthing 💌Google Dork Search 💌Email Header Analysis 💌Data Breach Check 📡Tools📡 🪴Email Search 1 https://osint.lolarchiver.com 🪴Email Search 2 https://epieos.com/ 🪴Email Meta Info https://github.com/gr33nm0nk2802/mailMeta?tab=readme-ov-file&s=35 🪴Hunter.io https://hunter.io/ 🪴Phonebook.cz https://phonebook.cz 🪴VoilaNorbert https://www.voilanorbert.com   🪴Email-Hippo https://tools.verifyemailaddress.io 🪴Email-Checker https://email-checker.net/validate 🪴Clearbit-Connect https://chrome.google.com/webstore/detail/clearbit-connect-supercha/pmnhcgfcafcnkbengdcanjablaabjplo?hl=en ♡ ㅤ    ❍ㅤ    ⎙ㅤ  ⌲           ˡᶦᵏᵉ  ᶜᵒᵐᵐᵉⁿᵗ  ˢᵃᵛᵉ  ˢʰᵃʳᵉ

📧Email OSINT Guide📧 Email OSINT, or Open Source Intelligence, is a way to gather information about someone using their email address and publicly available sources like social media, websites, and online databases. 📝Points to be check📝 💌Reverse Email Lookup 💌Social Media Sleuthing 💌Google Dork Search 💌Email Header Analysis 💌Data Breach Check 📡Tools📡 🪴Email Search 1 https://osint.lolarchiver.com 🪴Email Search 2 https://epieos.com/ 🪴Email Meta Info https://github.com/gr33nm0nk2802/mailMeta?tab=readme-ov-file&s=35 🪴Hunter.io https://hunter.io/ 🪴Phonebook.cz https://phonebook.cz 🪴VoilaNorbert https://www.voilanorbert.com   🪴Email-Hippo https://tools.verifyemailaddress.io 🪴Email-Checker https://email-checker.net/validate 🪴Clearbit-Connect https://chrome.google.com/webstore/detail/clearbit-connect-supercha/pmnhcgfcafcnkbengdcanjablaabjplo?hl=en ☘Regards : @its_me_kali ♡ ㅤ    ❍ㅤ    ⎙ㅤ  ⌲           ˡᶦᵏᵉ  ᶜᵒᵐᵐᵉⁿᵗ  ˢᵃᵛᵉ  ˢʰᵃʳᵉ

📱SIM Swap Scam A SIM swap scam is when someone pretends to be you and gets your phone number from your phone company. Then they can use your phone number to get into your online accounts, like your bank, email, or social media. They can take your money, data, or identity. In 2021, a woman from New York lost $22,000 after a hacker swapped her SIM card and got into her online banking account. The hacker also locked her out of her email and social media accounts, and tried to get more money from her contacts. ⚠️How a SIM swap scam works 1. The scammer finds out your personal information from public websites, social media, social engineering... 2. The scammer calls your phone company and acts like you. They ask to move your phone number to a new SIM card that they have. 3. The phone company asks some questions to check your identity. The scammer answers them using the information they learned about you. 4. The phone company moves your phone number to the scammer’s SIM card. You lose service on your phone and the scammer gets your calls, texts, and codes. 5. The scammer uses your phone number to sign into your online accounts, such as your bank, email, or social media. They can steal your money, data, or identity.

🛠️Best Hacking Tools by Category 🔰 Exploitation 1-Metasploit 2-Sqlmap 3-Core Imact 4-W3af 5-BeEF 6-Dradis 🔰 Phone_Hacking 1-Metasploit 2-Apktool 3-Droidjack 4-AndroRAT 5-Spynote 🔰 Server_Hacking 1-SQLmap 2-Jsql 3-Havij 4-Hydra 5-Metasploit 6-Armitage 7-Brupsuite 8-Owasp-ZAP 9-Netsparker 10-Acunetix 11-OpenVAS 🔰 DDoS 1-MDK3 2-LOIC 3-HULK 4-DDOSIM 5-Ufonet 6-Hping3 7-Xerxes 8-Hammer 9-Slowloris 10-Websploit 11-GoldenEye 12-Metasploit 13-Aireplay-ng 🔰 Forensics 1-COFEE 2-Volafox 3-Autopsy 4-Foremost 5-Hashdeep 6-Binwalk 🔰 Client_Hacking 1-Darkcomet 2-FatRat 3-Veil-Evasion 4-Shallter 5-Unicorn 6-Setoolkit 7-Armitage 8-BeEF-Framework 9-EmPyre 10-FakeImageExploiter 11-Pupy 12-DFU-Programmer 13-Cobalt Strike 14-Exploitpack 15-Gcat 16-Crowbar 🔰 Website_Hacking 1-Sn1per 2-Owasp-ZAP 3-Brupsuite 4-Netsparker 5-Acunetix 6-SQLmap 7-Xsser 8-WPScan 9-Joomrra 10-Joomscan 11-WPSeku 12-XSStrike 13-Kadimus 14-jexboss 15-CMSmap 16-brut3k1t 17-0d1n 18-CloudFail 19-Arachni 20-Nikto 21-Webscarab 22-Nmap 23-Vbscan 24-Sentry MBA 🔰 Network_Hacking 1-MITMf 2-Bettercap 3-Ettercap 4-Tcpdump 5-Wireshark 6-Driftnet 7-SSLstrip 8-Armitage 9-Metasploit 10-Xerosploit 11-Sparta 12-Hydra 🔰 Wireless_Hacking 1-Wifite 2-Airodump-ng 3-Aireplay-ng 4-Wash 5-WiFi Pumpkin 6-Wifiphisher 7-Fluxion 8-Infernal Twin 9-WPSpin 🔰 Reverse_Engeenering 1-OWASP-ZSC 2-OllyDBG 3-Apktool 🔰 Information_Gathering 1-Enum 2-Recon 3-Whois 4-Email Contact 5-Phone Contact 6-Service Status 7-Protocol Analysis

1 year free hosting atozserver.com Coupon: - FREEHOSTING Coupon use for 449 plan

🩸Top Digital Forensics Tools 🧬Network Forensic Tools - Nmap - Wireshark - Xplico - Snort - TCPDump - The Slueth Kit 📱Mobile Forensics Tools - Elcomspoft iOS Forensic Toolkit - Mobile Verification Toolkit - Oxygen Forensic - MOBILedit - Cellebrite UFED - MSAB XRY ☢️Malware Analysis Tools - Wireshark - YARA - Malwarebytes - VirusTotal - Cuckoo Sandbox - IDA Pro 🗃️Data Recovery Tools - Recuva - EaseUS Data Recovery - TestDisk - Stellar Data Recovery - PhotoRec - Disk Drill ✉️Email Forensic Tools - MailXaminer - MailPro+ - Xtraxtor - Aid4Mail - eMailTrackerPro - Autopsy 🔍OSINT Tools - Maltego - Nmap - OSINT Framework - Shodan - Recon-ng - TheHavester ⚠️Live Forensics Tools - OS Forensics - Encase Live - CAINE - F-Response - Kali Linux Forensic Mode 📥Memory Forensics Tools - Volatility - DumpIt - memDump - Access data FTK Imager - Hibernation Recon - WindowSCOPE ☁️Cloud Forensic Tools - Magnet AXIOM - MSAB XRY Cloud - Azure CLI 🔖#infosec #cybersecurity #hacking #pentesting #security

🔰 Create Unlimited Accounts on Discord and Many Other Platforms with a Single Gmail Legally 🔰 📢 Simple and a rare trick known by very few. Many times we get into a need to create more than one accounts on a particular platform such as Discord. And to do so many people create a new Gmail account each time when needed. Why am taking the example of Discord here? Of course because of Midjourney, the moment Midjourney has arrived, millions of people are creating accounts again and again becuase Midjourney allows limited trial period. Just like the example above, sometimes we need to create multiple accounts on a particular platform, but to do so it doesn't required to create a new Gmail account each time. By using today's trick you can create unlimited accounts on many platforms such as Discord with just a single Gmail. All you have to do is, while creating a new account on a platform, let's take example of Discord, in the block of "Email" where you must enter your unique email address, just enter the already existing Gmail address but before "@" enter "+" and anything after it. Example: youremail.com - youremail+1.com. This is already existing one "encrypteddj33.com". And here is the way to modify it and create unlimited accounts with it "encrypteddj33+1234.com". The chatacters you enter after "+" can be anything, and hence with a single Gmail account you can create many legally. All the notifications and tranmission will remain with the original Gmail itself. ⭕️Note: I have tested this method by my own, but just on Discord, still I believe it works or many other platforms as well. Give it a try and if you found any other platform where this trick works, comment here so others will get benefited too.

😒 How To Hack Android Phone By Its IP Address Using Phone SpolitPro  😒 All The Requirements Are Given In The Video ✌️ 😈 Commands For Linux ➡️ git clone https://github.com/AzeemIdrisi/PhoneSploit-Pro.git ➡️ cd PhoneSploit-Pro/ ➡️ pip install -r requirements.txt ➡️ python3 phonesploitpro.py Hacking Learning Paid Private Channel

🔰How to recover hacked YouTube channel? If your YouTube channel has been hacked, you should take the following steps to try to recover it: Change your Google account password immediately. Make sure to use a strong, unique password that you haven't used on any other accounts. Visit the YouTube account recovery page (https://www.youtube.com/account_recovery) and follow the instructions provided. You may be asked to provide information such as the email address or phone number associated with your account. If you are unable to recover your account through the account recovery page, contact YouTube support for further assistance. They may be able to help you regain access to your channel. Additionally you should also check your recovery email and phone number to make sure they are still under your control. If you are unable to recover your account, you may need to create a new YouTube channel and start over. Lastly, ensure that you keep your account secure by using a strong password and enabling 2-step verification. The best way to contact YouTube is through their support page, which can be found at https://support.google.com/youtube. From there, you can browse through their help center to find answers to common questions, or submit a request for assistance. You can also contact YouTube through their social media accounts, such as Twitter and Facebook. You can also contact YouTube via email, but it's not recommended as it's not the most efficient way, their official email is youtube-support@google.com. It's important to keep in mind that YouTube is a subsidiary of Google and you can also contact Google support for further assistance. Share our channel for more

3. Enabling monitor mode on WiFi card

2. What is the Mac address and how you can change it

1. Network Basics explain