Эффект пентестера

http://repository.root-me.org/Virologie/EN%20-%20DEFCON%20a%20different%20approach%20to%20JavaScript%20obfuscation.pdf http://www.utilities-online.info/urlencode/#.Xbsrr-gzaUk https://www.branah.com/unicode-converter

Ghidra ver 9.1 RE tool is out https://ghidra-sre.org/releaseNotes_9.1_final.html

AppSec Ezine - 298th Edition https://pathonproject.com/zb/?6505ae7a32fecfe0#ceNUt2e0SxUmJzryNn+PmsYsRZbrGRNzKFvf4Edjo/k=#AppSec #Security

Two New Tools that Tame the Treachery of Files https://blog.trailofbits.com/2019/11/01/two-new-tools-that-tame-the-treachery-of-files/

Chromium с поддержкой алгоритмов ГОСТ https://github.com/deemru/chromium-gost

https://mega.nz/#F!PJoR0LjD!SiNo4g78sKAIhoTWO-7xgQ Чекеры

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. https://github.com/zigoo0/JSONBee

Updated links for SSRF posts :) https://medium.com/swlh/intro-to-ssrf-beb35857771f https://medium.com/@vickieli/exploiting-ssrfs-b3a29dd7437 https://medium.com/@vickieli/bypassing-ssrf-protection-e111ae70727b https://medium.com/swlh/ssrf-in-the-wild-e2c598900434

CVE-2019-11932 Whatsapp 2.19.216 Remote Code Execution 1. set the listner ip (nc -lvp 5555) 2. run ./exploit and save the content to .gif 3. exploit.gif file and send it as Document with WhatsApp to another WhatsApp user https://github.com/dorkerdevil/CVE-2019-11932 https://github.com/awakened1712/CVE-2019-11932

#Астра #linux magnet:?xt=urn:btih:835AA4C24A499534978C271A594E8DFEF1450BE4&tr=http%3A%2F%2Fbt2.t-ru.org%2Fann%3Fmagnet

NTFS 0day in MFT(Master File Table) parsing about a recently discovered vulnerability: an integer overflow that may be triggered by an USB key and provoking a BSOD. The vulnerability concerns NTFS and more specifically its heart, the MFT.

ADRecon is a tool which gathers information about the #ActiveDirectory and generates a report which can provide a holistic picture of the current state of the target AD environment https://github.com/sense-of-security/ADRecon