1 660
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-47 روز
+130 روز
در حال بارگیری داده...
کانالهای مشابه
هیچ دادهای
مشکلی وجود دارد؟ لطفاً صفحه را تازه کنید یا با مدیر پشتیبانی ما تماس بگیرید.
ابر برچسبها
هیچ دادهای
مشکلی وجود دارد؟ لطفاً صفحه را تازه کنید یا با مدیر پشتیبانی ما تماس بگیرید.
اشارات ورودی و خروجی
---
---
---
---
---
---
جذب مشترکین
سپتامبر '25
سپتامبر '250
در 0 کانالها
اوت '25
+21
در 0 کانالها
Get PRO
ژوئیه '25
+13
در 0 کانالها
Get PRO
ژوئن '25
+24
در 0 کانالها
Get PRO
مه '25
+17
در 0 کانالها
Get PRO
آوریل '25
+16
در 0 کانالها
Get PRO
مارس '25
+74
در 0 کانالها
Get PRO
فوریه '25
+82
در 0 کانالها
Get PRO
ژانویه '25
+64
در 0 کانالها
Get PRO
دسامبر '24
+85
در 0 کانالها
Get PRO
نوامبر '24
+92
در 0 کانالها
Get PRO
اکتبر '24
+53
در 0 کانالها
Get PRO
سپتامبر '24
+48
در 0 کانالها
Get PRO
اوت '24
+58
در 0 کانالها
Get PRO
ژوئیه '24
+70
در 0 کانالها
Get PRO
ژوئن '24
+100
در 2 کانالها
Get PRO
مه '24
+87
در 0 کانالها
Get PRO
آوریل '24
+125
در 3 کانالها
Get PRO
مارس '24
+82
در 3 کانالها
Get PRO
فوریه '24
+162
در 3 کانالها
Get PRO
ژانویه '24
+124
در 3 کانالها
Get PRO
دسامبر '23
+107
در 2 کانالها
Get PRO
نوامبر '23
+82
در 2 کانالها
Get PRO
اکتبر '23
+494
در 4 کانالها
| تاریخ | رشد مشترکین | اشارات | کانالها | |
| 07 سپتامبر | 0 | |||
| 06 سپتامبر | 0 | |||
| 05 سپتامبر | 0 | |||
| 04 سپتامبر | 0 | |||
| 03 سپتامبر | 0 | |||
| 02 سپتامبر | 0 | |||
| 01 سپتامبر | 0 |
پستهای کانال
GODAP
A complete TUI for LDAP
Features:
• Supports authentication with password, NTLM hash, Kerberos ticket or PEM/PKCS#12 certificate
• Formats date/time, boolean and other categorical attributes into readable text
• Pretty colors & cool emojis
• LDAPS & StartTLS support
• Fast explorer that loads objects on demand
• Recursive object search bundled with useful saved searches
• Flexible group members & user groups lookups
• Supports creation, editing and removal of objects and attributes
• Supports moving and renaming objects
• Supports searching deleted & recycled objects
• Supports exporting specific subtrees of the directory into JSON files
• Interactive userAccountControl editor
• Interactive DACL viewer + editor
• Interactive ADIDNS viewer + editor (basic)
• GPO Viewer
• SOCKS support
https://github.com/Macmod/godap
Thanks to: @hybgl
| 2 | #ldap #enum #shell #go
[ godap ]
TUI for LDAP written in Golang
Features:
- Formats date/time, boolean and other categorical attributes into readable text
- Supports changing the search filter & base DN for the query
- LDAPS & StartTLS support
- Pretty colors & cool emojis
- Quick explorer that loads objects on demand
- Recursive object search bundled with useful saved searches
- Group members & user groups lookup
- Supports basic attribute editing
- Basic DACL viewer
Thanks to: @zimnyaatishina
https://github.com/Macmod/godap | 1 |
| 3 | https://github.com/Macmod/godap | 1 |
| 4 | A script that exploits the SeTcbPrivilege to achieve local privilege escalation on Windows.
Note: The privilege must be enabled before running the script.
https://gist.github.com/antonioCoco/19563adef860614b56d010d92e67d178 | 613 |
| 5 | LLC (Linux Log Cleaner)
A convenient tool for modifying or deleting information in Linux log files, includes:
- /var/log/lastlog: Contains the last login of each user. Command to view: lastlog
- /var/run/utmp: Contains information about currently active login sessions. Command to view: who, w
- /var/log/wtmp: Stores the history of logins and logouts. Command to view: last
- /var/log/btmp: Records failed login attempts. Command to view: lastb
https://github.com/Macr0phag3/LLC | 607 |
| 6 | Tool to extract Kerberos tickets from Linux kernel keys.
https://github.com/TarlogicSecurity/tickey | 832 |
| 7 | A platform that provides intentionally vulnerable applications for learning source code review. Currently, 25 challenges are available.
It looks very interesting and promising
https://vulnerable.codes/
Thanks to: "Руслан 😎😎😎😎😎" | 999 |
| 8 | ScriptSentry is a powerful tool for automating the detection of unsafe configurations in logon scripts. It can identify issues such as:
- Unsafe UNC Folder Permissions
- Unsafe UNC File Permissions
- Unsafe Logon Script Permissions
- Unsafe GPO Logon Script Permissions
- Unsafe NETLOGON/SYSVOL Permissions
- Plaintext Credentials
This tool is described in detail in the blog post Hidde Menace: How to Identify Misconfigured and Dangerous Logon Scriptsn
https://github.com/techspence/ScriptSentry | 1 095 |
| 9 | https://github.com/CICADA8-Research/Spyndicapped/tree/main | 19 |
| 10 | З новим роком, далі - більше!
Happy New Year! The best is yet to come! | 1 191 |
| 11 | https://x.com/anyrun_app/status/1861024182210900357
Креативно! | 1 008 |
| 12 | Introduction to the Exploitation of Xamarin Apps
TL;DR: This article covers methods of analyzing Xamarin applications for beginners. It explains the differences between Xamarin and native applications, provides a step-by-step guide for static analysis, and demonstrates app modification techniques.
https://www.justmobilesec.com/en/blog/introduction-to-the-exploitation-of-xamarin-apps | 1 211 |
| 13 | Ways to use templates in SQL-map to bypass WAFs from vendors like FortiWAF, F5, Barracuda, Akamai, Cloudflare, and Imperva
https://redteamrecipe.com/awesome-sqlmap-tampers | 1 095 |
| 14 | Gotta cache 'em all: bending the rules of web cache exploitation
This article examines the behavior of different HTTP servers and proxies when parsing specially crafted URLs. It also introduces techniques that exploit parser discrepancies, enabling arbitrary web cache poisoning and deception across numerous websites and CDN providers.
https://portswigger.net/research/gotta-cache-em-all | 796 |
| 15 | Listen to the whispers: web timing attacks that actually work
The article considers ways of conducting web timing attacks in real conditions by reducing network and server noise
This method of detecting hidden parameters and headers is already implemented in Param Miner.
https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work | 897 |
| 16 | Source Code Review Bug Patterns
This repository contains Regex patterns to look for while performing manual application source code analysis.
https://github.com/va1da5/manual-source-code-review | 1 000 |
| 17 | JJS to find endpoints on a site in HTML code, in the developer console, execute:
javascript:(function(){var scripts=document.getElementsByTagName("script"),regex=/(?<=(\"|\'|\`))\/[a-zA-Z0-9_?&=\/\-\#\.]*(?=(\"|\'|\`))/g;const results=new Set;for(var i=0;i<scripts.length;i++){var t=scripts[i].src;""!=t&&fetch(t).then(function(t){return t.text()}).then(function(t){var e=t.matchAll(regex);for(let r of e)results.add(r[0])}).catch(function(t){console.log("An error occurred: ",t)})}var pageContent=document.documentElement.outerHTML,matches=pageContent.matchAll(regex);for(const match of matches)results.add(match[0]);function writeResults(){results.forEach(function(t){document.write(t+"<br>")})}setTimeout(writeResults,3e3);})();
from:
https://www.youtube.com/@criticalthinkingpodcast | 1 268 |
| 18 | Реквізити Охматдит. Думаю, не треба пояснювати, чому вони тут з'явились.
Можливо, скоро буде збір від DC8044. Тачка, яку ми купували спільнотою - приїхала на то, і рамі повна пизда...
https://www.ohmatdytfund.org/donate?fbclid=PAZXh0bgNhZW0CMTEAAaYWu24k4BrghTfey5q64dBXnLk9Wd25oUVdh7jIY9HgYn4ybXthXVIkz-8_aem_kbb-zZtAqdqfp5A_2OYpFQ | 946 |
| 19 | WiFi Exploitation Framework
Nothing new. Just a pretty shell for convenient work
Supported attacks:
- Deauthentication attack
- WIDS Confusion attack
- Authentication attack
- Beacon Flood attack
- TKIP attack (Michael Shutdown Exploitation)
- Pixie Dust attack
- Null Pin attack
- PIN Bruteforce attack
- ARP Replay attack
- HIRTE attack
- Caffe Latte attack
- Fake Authentication attack
- WPA/WPA2 handshake capture attack
- PMKID attack
- EvilTwin attack
https://github.com/D3Ext/WEF | 1 010 |
| 20 | [ Bypassing SSRF Filters Using r3dir ]
r3dir: redirection service designed to help bypass SSRF filters that do not validate the redirect location. It allows you to:
- Set the redirection target via URL parameters or subdomains;
- Control HTTP response codes;
- Obfuscate the target URL with Base32 encoding;
- Bypass some allowlist filters.
Author: Senior Security Consultant Vladyslav H.
Blog: https://www.leviathansecurity.com/blog/bypassing-ssrf-filters-using-r3dir
Tool itself: https://github.com/Horlad/r3dir | 846 |
