Pentester world 2.0

Callisto - An Intelligent Binary Vulnerability Analysis Tool https://github.com/JetP1ane/Callisto

Admin Panel Bypass without the credentials https://medium.com/@sayim0x3105/admin-panel-bypass-without-the-credentials-e867eee7c81b

DNS Analyzer - Finding DNS vulnerabilities with Burp Suite https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite/

Exploiting Exposed Tokens and API Keys: Edition 2023 https://adityashende17.medium.com/exploiting-exposed-tokens-and-api-keys-edition-2023-e894a3af7dcd

ParaForge is a simple Burp Suite extension to extract the paramters and endpoints from the request to create custom wordlist for fuzzing and enumeration. https://github.com/Anof-cyber/ParaForge

CVE-2023-26258 – Remote Code Execution in ArcServe UDP Backup https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/

Find authentication (authn) and authorization (authz) security bugs in web application routes. https://github.com/mschwager/route-detect

Testing GraphQL APIs https://portswigger.net/web-security/graphql

Reversing Citrix Gateway for XSS https://blog.assetnote.io/2023/06/29/binary-reversing-citrix-xss/

Advisory: Citrix Gateway Open Redirect and XSS (CVE-2023-24488) https://blog.assetnote.io/2023/06/29/citrix-xss-advisory/

Gmail client-side encryption: A deep dive http://security.googleblog.com/2023/06/gmail-client-side-encryption-deep-dive.html

Find GraphQL API vulnerabilities, with Burp Suite Professional https://portswigger.net/blog/find-graphql-api-vulnerabilities-with-burp-suite-professional

GraphQL Portswigger Challenges Writeups https://axon-xerox.medium.com/graphql-portswigger-challenges-writeups-4ed15c832483

𝙎𝙏𝙍𝘼𝙏𝙊𝙎𝙋𝙃𝙀𝙍𝙀🍥 It is an open source OSINT framework that automatically collects information about every page you visit, creating a knowledge base that you can analyze with Jupyter Notebooks and an extensible set of web applications... Link 🔗:- https://github.com/elehcimd/stratosphere #osint #webint

𝙃4𝙓-𝙏𝙤𝙤𝙡𝙨 🐲 Open source toolkit for scraping, OSINT and more Link 🔗:- https://github.com/V1li/H4X-Tools #osint #scraping

𝘼𝙒𝙀𝙎𝙊𝙈𝙀 𝙊𝙎𝙄𝙉𝙏 🦚 A curated list of amazingly awesome open source intelligence tools and resources Link 🔗:- https://github.com/r3p3r/jivoi-awesome-osint #osint_resources

𝙋𝙔𝙊𝙎𝙄𝙉𝙏 🐍 Web scraping and finding usernames as automation scripts written in python Link 🔗:- https://github.com/syamsv/Pyosint #Osint #Search #Social_Media #username

𝙂𝙚𝙤𝙍𝙚𝙛𝙚𝙧𝙚𝙣𝙘𝙚𝙧 🌎 It is an online tool that allows you to overlay images on locations and combine multiple maps into one. Very comfortably Link 🔗:- https://www.georeferencer.com/ #geoint #geolocation_osint

𝙂𝙊𝙊𝙂𝙇𝙀-𝙎𝙀𝘼𝙍𝘾𝙃𝙀𝙍 🗿 A custom Google search (to bypass some limitations on google and VPNs) Link 🔗:- https://github.com/AssassinUKG/googleSearcher #dorking #google_search

How a Visualization and Monitoring Platform Can Expose Your Organization’s Data and File System to Attackers https://hadess.io/grafana-attack-surface/