Эффект пентестера

OWASP Mobile security testing guide in French https://www.randorisec.fr/publications/HACKITN-OWASP_Mobile_Security_Testing_Guide.pdf

#tips https://pulsesecurity.co.nz/articles/TPM-sniffing

#news https://www.zdnet.com/article/heres-what-will-happen-to-your-windows-7-pc-on-january-15-2020/?ftag=COS-05-10aaa0h&utm_campaign=trueAnthem%3A+Trending+Content&utm_medium=trueAnthem&utm_source=facebook&fbclid=IwAR2kPTbSTyO58bKrFAPAQyiqH1KXapOESZv5AVbZvF6eVCqioCKS9X3ifr4

#AppSec #Security AppSec Ezine 304th edition https://pathonproject.com/zb/?26809cada096fcc7#+okOY6Di/VMq16PiOntAXtpQ0ZcVIarUiHVQh4vuxsY=

Netsparker Professional 5.2.0.22027 [Cracked] Ⓜ Netsparker is an easy to use yet advanced web security solution that can easily scale up and automatically find vulnerabilities in hundreds and thousands of web applications. https://mega.nz/#!mvxH0K6I!8BGY89yScHbuDMOp4IRjCgiPVY5MilI1GrznRohj6dY

https://mega.nz/#!d4kyHIzS!KNw46IerEgKueWV33w4FufVG2c0orI5G3Ap9YkL_Ijc #tools #combo_list

#opendir #books http://intersci.ss.uci.edu/wiki/eBooks/BOOKS/

Bootstrap XSS Collection https://gist.github.com/BlackFan/e968b5209637952cca1580dc8ffdfde6

PENETRATION TESTING PRACTICE LAB - VULNERABLE APPS / SYSTEMS https://www.amanhardikar.com/mindmaps/Practice.html

Chasing the Joker https://docs.google.com/presentation/d/1sFGAERaNRuEORaH06MmZKeFRqpJo1ol1xFieUa1X_OA/edit#slide=id.p1

BlueMaster: Bypassing and Fixing Bluetooth-based Proximity Authentication https://i.blackhat.com/eu-19/Thursday/eu-19-Jung-BlueMaster-Bypassing-And-Fixing-Bluetooth-Based-Proximity-Authentication.pdf

Hacktivity from chj2934 XSS on product comments in transfers https://hackerone.com/reports/738072 Disclosed at: 2019-12-09 19:55:32 UTC+0 Created at: 2019-11-15 06:24:31 UTC+0

MFA Bypass https://medium.com/@thehunterrico/mfa-bypass-af997bae4935

Here is an exploit chain I wrote for Firefox that gets RCE via CVE-2019-9810 and escape the sandbox with CVE-2019-11708/CVE-2019-9810. Once compromised, it drops a payload and injects privileged JS code in already/newly created tabs. https://github.com/0vercl0k/CVE-2019-11708

UAC Bypass - Windows 10 UAC bypass for all executable files which are autoelevate true https://github.com/sailay1996/UAC_Bypass_In_The_Wild

List of "only yours" cloud services for everyday needs https://github.com/Atarity/deploy-your-own-saas