Эффект пентестера

Полезные ссылки к хакрфу. HackRF wiki https://github.com/mossmann/hackrf/wiki HackRF on WINDOWS Driver http://zadig.akeo.ie/ SDRSHARP https://github.com/zefie/sdrsharp_hackrf Mac http://gqrx.dk/download ANDROID http://www.rtl-sdr.com/rf-analyzer-android-app-hackrf/ #tech_inside

#tips https://medium.com/@d3f4u17/fasten-your-recon-process-using-shell-scripting-359800905d2a

DSA-4570 mosquitto - security update https://www.debian.org/security/2019/dsa-4570

XRay is a tool for recon, mapping and #OSINT gathering from public networks. https://github.com/evilsocket/xray

Лабораторные работы Cisco, Packet Tracer. http://gbq6k4ty32e5p325frxp3hgqwnuu7lw54tpsu2zkpafqxfacn26rhlid.onion/

Справочник по информационной безопасности. https://github.com/rmusser01/Infosec_Reference #infosec

[Перевод] Конференция BLACK HAT USA. Разбогатеть или умереть: зарабатываем в Интернете методами Black Hat. Часть 1 https://habr.com/ru/post/476088/?utm_campaign=476088&utm_source=habrahabr&utm_medium=rss

Tool aided persistence via Windows URI schemes abuse #backdoor #malware #APT https://github.com/giuliocomi/backoori

Slides for the Grehack's #radare2 workshop 2019 https://github.com/jvoisin/grehack_2019 #reverse #conference #dukeBarman

#news https://www.theregister.co.uk/2019/11/13/anwar_batson_national_lottery_accounts_court_case/

Cracking passwords to prevent credential stuffing https://datto.engineering/post/cracking-passwords-to-prevent-credential-stuffing

Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. https://github.com/redhuntlabs/BurpSuite-Asset_Discover

Don’t Get Kicked Out! A Tale of Rootkits and Other Backdoors https://capsule8.com/blog/dont-get-kicked-out-a-tale-of-rootkits-and-other-backdoors/

iOS Jailbreak via Sandbox Escape and Kernel R/W leading to RCE https://ssd-disclosure.com/archives/4066/ssd-advisory-via-ios-jailbreak-sandbox-escape-and-kernel-r-w-leading-to-rce

PowerShell wrapper around Python for .NET to invoke Python from PowerShell https://github.com/adamdriscoll/snek

Heap overflow in wolfssl CVE-2019–18840 https://medium.com/@social_62682/heap-overflow-in-wolfssl-cve-2019-18840-185d233c27de

Symantec Endpoint Protection - Self-Defense Bypass and Potential Usages (CVE-2019-12758) https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command. The beauty of this tool is that it doesn't perform authentication against SMB everything is performed over DCERPC. https://github.com/Mr-Un1k0d3r/SCShell