Эффект пентестера

Dutch Govt Explains the Risks Behind DNS-Over-HTTPS Move https://www.bleepingcomputer.com/news/security/dutch-govt-explains-the-risks-behind-dns-over-https-move/

Marked owned CME hosts and users owned in Bloodhound https://github.com/NinjaStyle82/cme2bh

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools. https://github.com/trustedsec/ptf

double-free bug in #WhatsApp exploit poc https://github.com/dorkerdevil/CVE-2019-11932

A Red Team Guide for a Hardware Penetration Test: Part 1 #redteam https://medium.com/@adam.toscher/a-red-team-guide-for-a-hardware-penetration-test-part-1-2d14692da9a1

==WiFi Router Security For Everyone Else== --> Turn off UPnP --> Turn off remote access --> Turn off WPS --> Use WPA --> Use a different login password for your router then your WiFi password. #cybersecurityawarenessmonth

#Meterpreter + #Donut = Reflectively and Interactively Executing Arbitrary Executables via #Shellcode Injection https://iwantmore.pizza/posts/meterpreter-shellcode-inject.html

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters https://github.com/TheWover/donut

Tools to play around #JavaScript files + extracting URLs https://github.com/cablej/FileChangeMonitor https://github.com/003random/getJS https://github.com/nahamsec/JSParser https://github.com/zseano/JS-Scan https://github.com/Lopseg/Jsdir https://github.com/jobertabma/relative-url-extractor https://github.com/GerbenJavado/LinkFinder please add, if I had missed. #BugBounty

Attacking Exchange with MailSniper #infosec #pentest #redteam https://www.blackhillsinfosec.com/attacking-exchange-with-mailsniper

Webshell Manager https://guillac.github.io/wsManager/

Cyberdelia, a Collection of Command and Control frameworks https://github.com/ProfessionallyEvil/C4

First look at use Google API Places: Place Search. Module (python) -https://t.co/zsaPcyBaJb (for Lampyre(https://t.co/kkCIQXNwCK). Need you Google key for use API(https://t.co/yqQQqEvpyB) For example: search FBI USA, and FSS Saint-Petersburg(RU) (ФСБ в Петербурге :) )

Huge #osint directory: https://t.co/zd51lAOcWW #security #pentesting #malware

Set of tools for creating/injecting payload into images. https://github.com/chinarulezzz/pixload

CompleteFTP Server Local Privilege Escalation CVE-2019-16116 https://rhinosecuritylabs.com/application-security/completeftp-server-local-privesc-cve-2019-16116/