Termux All Command [Telegram Group]

Malware Analysis

Blue Teaming[Malware Analysis] https://www.youtube.com/watch?v=G9vaWiC4L0w https://www.youtube.com/watch?v=G9vaWiC4L0w https://www.youtube.com/watch?v=xaIzf6kXHTI

MITRE ATT&CK Framework: https://www.youtube.com/watch?v=3QbzY9FIeVs https://www.youtube.com/watch?v=UxmYRyeyM74

𝗚𝗲𝘁 𝗦𝗵𝗼𝗱𝗮𝗻 𝗜𝗣𝘀 𝗳𝗼𝗿 𝗳𝗿𝗲𝗲 𝘄𝗶𝘁𝗵𝗼𝘂𝘁 𝗮𝗻 𝗔𝗣𝗜 𝗸𝗲𝘆 Shodan’s $5 API key gives 10k results for 1 month. But 𝗶𝗽𝗳𝗶𝗻𝗱𝗲𝗿 has no limit and works without an API key — you can scan all of your private program wildcards. ⚠️ 𝗜𝗺𝗽𝗼𝗿𝘁𝗮𝗻𝘁 𝗡𝗼𝘁𝗲: This tool uses facets, so it only returns IPs (no ports). I considered querying for ports, but it wasn’t a good idea — it would take too much time and could trigger rate limits. Instead, you can use other tools like 𝗻𝗮𝗮𝗯𝘂, 𝗽𝗼𝗿𝘁𝗺𝗮𝗽, 𝗿𝘂𝘀𝘁𝘀𝗰𝗮𝗻, which is even faster. You can use ipfinder like this (it supports all Shodan filters): ``` ``` 𝗨𝘀𝗶𝗻𝗴 𝗳𝘂𝗹𝗹 𝗦𝗵𝗼𝗱𝗮𝗻 𝗾𝘂𝗲𝗿𝘆 𝗳𝗼𝗿𝗺𝗮𝘁 (𝗮𝗱𝘃𝗮𝗻𝗰𝗲𝗱) echo 'ssl:"nvidia.com"' | ipfinder --silent echo 'hostname:"sqrx.com"' | ipfinder --silent echo 'ssl.cert.subject.cn:"sqrx.com"' | ipfinder --silent echo 'org:"FIDELITY NATIONAL INFORMATION SERVICES"' | ipfinder --silent echo 'asn:"AS3614"' | ipfinder --silent echo 'ip:"173.0.84.0/24"' | ipfinder --silent echo 'http.favicon.hash:"816615992"' | ipfinder --silent cat subs.txt | ipfinder --silent 𝗨𝘀𝗶𝗻𝗴 --𝗳𝗶𝗹𝘁𝗲𝗿 𝗳𝗹𝗮𝗴 (𝗯𝗲𝗴𝗶𝗻𝗻𝗲𝗿-𝗳𝗿𝗶𝗲𝗻𝗱𝗹𝘆) echo "nvidia.com" | ipfinder --silent --filter ssl echo "sqrx.com" | ipfinder --silent --filter hostname echo "example.com" | ipfinder --silent --filter ssl.cert.subject.cn 𝗣𝗼𝗿𝘁 𝗦𝗰𝗮𝗻𝗻𝗶𝗻𝗴, 𝘆𝗼𝘂 𝗰𝗮𝗻 𝘂𝘀𝗲 𝗮𝗻𝘆 𝘁𝗼𝗼𝗹 𝗳𝗼𝗿 𝘁𝗵𝗶𝘀 echo "nvidia.com" | ipfinder --silent | portmap internetdb --silent echo "nvidia.com" | ipfinder --silent | naabu -duc -silent -passive

🚀 Excited to share my latest project: BBHelp Chrome Extension! As a cybersecurity professional, I often found myself repeating the same manual tasks during security assessments. So I built a Chrome extension to automate these workflows. 🔧 What BBHelp does: • Automatically scans websites for sensitive files (like .env, config files) • Checks common web ports to find running services • Provides quick access to Google search techniques for security research • Extracts JavaScript files and analyzes them for API endpoints and secrets • Offers ready-to-use penetration testing commands 🎯 Why I built this: Security testing involves a lot of repetitive reconnaissance work. Instead of manually checking each website for common vulnerabilities, BBHelp automates these initial checks, saving hours of work. 💡 Perfect for: • Security researchers and penetration testers • Bug bounty hunters • Anyone learning cybersecurity • IT professionals conducting security assessments The extension is completely free and open-source. I believe in sharing knowledge and tools that can help the cybersecurity community work more efficiently. 🔗 Check it out: https://lnkd.in/g-GDzRuR

Bug Bounty Methodology Link : https://lnkd.in/dsQXx_pt Credit : Tuhin Bose

Paid Medium for Free : https://freedium-mirror.cfd/

𝟰𝟬𝟯𝗝𝗨𝗠𝗣 🥷🏼 It's a tool designed for pentesters and bug bounty hunters to audit the security of web applications. Its objective is to bypass HTTP 403 (Forbidden) pages using various techniques. TOOL Github Link: https://lnkd.in/dQ52cC-2

Use NextJS? Recon ✨ A quick way to find "all" paths for Next.js websites: DevTools->Console console.log(__BUILD_MANIFEST.sortedPages) javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));