Эффект пентестера

XORpass - Encoder To Bypass WAF Filters Using XOR Operations https://github.com/devploit/XORpass

r/t "Details for 1.3 million Indian payment cards available on the dark web, its the biggest single card database ever" https://securityaffairs.co/wordpress/93139/deep-web/card-database-sale-dark-web.html

Android Pentesting CheatSheet https://blog.dixitaditya.com/android-pentesting-cheatsheet/amp/#click=https://t.co/SKlIlxUu7v

Postgres SQL Injection Cheat Sheet: Some useful syntax reminders for #SQL #Injection into PostgreSQL databases… http://pentestmonkey.net/cheat-sheet/sql-injection/postgres-sql-injection-cheat-sheet

#malware #threathunting #cybersecurity #opendir #infosec hxxp://enkaypastri.com/

Docker image for CVE-2019-11043 PHP-FPM exploit https://github.com/akamajoris/CVE-2019-11043-Docker

CVE-2019-9491 : Trend Micro Anti-Threat Toolkit (ATTK) Remote Code Execution ver 1.62.0.1218 and below https://0day.life/exploit/0day-1100.html

[webapps] Part-DB 0.4 - Authentication Bypass Part-DB 0.4 - Authentication Bypass https://www.exploit-db.com/exploits/47547

CVE-2019-3010 : Solaris 11 xscreensaver Local Privilege Escalation PoC/Metasploit https://0day.life/exploit/0day-1120.html

A natural evolution of Burp Suite's Repeater tool https://github.com/portswigger/stepper

AppSec Ezine - 297th Edition https://pathonproject.com/zb/?43ef845debe78ec1#E+I7BLPxrUOwVtBMpToH9j1UZOPZl11JYz2Eq71PBMk= #AppSec #Security

Aleph is a tool for indexing large amounts of both documents (PDF, Word, HTML) and structured (CSV, XLS, SQL) data for easy browsing and search. It is built with investigative reporting as a primary use case. https://github.com/alephdata/aleph

Attacking and defending web and VPN session hijacking in Pulse Secure Connect https://github.com/gquere/PulseSecure_session_hijacking/

(1/7) #OSINT Site #Search Thread 1. https://xinit.ru/ — full scan 2. https://hunter.io/ — find email 3.https://www.riskiq.com/ — automated search in all directions 4. https://github.com/guelfoweb/knock — find subdomains and FTP

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. https://github.com/Raikia/UhOh365

Fully automated offensive security framework for reconnaissance and vulnerability scanning. https://github.com/j3ssie/Osmedeus