P.F.K 0Day

🎓 مرجع تخصصی آموزش تست نفوذ و رد تیم TryHackBox  و Ai Security 📌 در اینجا، آموزش‌ های خودمون رو همراه با سناریوها و تمرین‌ های واقعی در اختیارتون قرار میدهیم. 📌 شما میتونید در کنار آموزش‌ های تئوری و عملی‌ محور ما، مستقیماً در محیط‌ های کاری ازشون استفاده کنید. 📌 علاوه بر این، نکته‌ های باگ بانتی و مطالب مرتبط دیگه هم همیشه در اختیارتون قرار میگیرد. ✍ از اولین پست های کانال ما شروع کنید به خوندن . اگر دنبال CTF هستید، اینجا برای شماست. CTFها و چالش‌ های امنیتی مختلف منتشر می‌ کنیم تا بتوانید در کنار یادگیری، مهارت تحلیل و حل مسئله‌ تان را هم محک بزنید. از آموزش و سناریو تا CTF و چالش‌های واقعی‌تر، همه را در یک مسیر دنبال کنید. اگر می‌خواهید از چالش‌های بعدی جا نمانید، از همین حالا همراه باشید. ⚠️ پس این فرصت رو از دست ندید!  ➖➖➖➖➖➖➖➖➖ 🆔 @TryHackBox

درود بدلیل مشغله کاری از تمامی دوستان فعال در حوزه های سایبری دعوت میشود به آیدی زیر پیام داده و در صورت تایید به عنوان مدیر و ویراستار جدید کانال انتخاب شوند @Offensive01Bot

​​pdtm ProjectDiscovery's Open Source Tool Manager A simple and easy-to-use golang based tool for managing open source projects from ProjectDiscovery. https://github.com/projectdiscovery/pdtm

​​CreateRemoteThreadPlus CreateRemoteThread: how to pass multiple parameters to the remote thread function without shellcode. https://github.com/lem0nSec/CreateRemoteThreadPlus

​​Gold Digger Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. https://github.com/ustayready/golddigger

​​Hunting-Queries-Detection-Rules Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules. https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules

​​Conjur CyberArk Conjur automatically secures secrets used by privileged users and machine identities https://github.com/cyberark/conjur

​​Fuzztruction Prototype of a fuzzer that does not directly mutate inputs but instead uses a so-called generator application to produce an input for our fuzzing target https://github.com/fuzztruction/fuzztruction

​​REST-Attacker Automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control handling, and report generation - with minimal configuration effort. Additionally, REST-Attacker is designed to be flexible and extensible with support for both large-scale testing and fine-grained analysis. https://github.com/RUB-NDS/REST-Attacker

​​CVE-2022-39073 Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit. https://github.com/v0lp3/CVE-2022-39073 #cve #exploit @Pfk_0Day

https://github.com/Liuergouzi/kefu #sqlinjection @pfk_0day

sql injection An online customer service system based on vue+node+socket+vant+mysql, front and back ends are separated, browser fingerprint is used as the unique id of visitors, built-in chatGPT intelligent reply, uses RSA to encrypt and decrypt data, prevents sql injection, xss, and can send pictures Emoticons, query history messages, leave messages, kick people, etc., more functions are waiting for subsequent updates. Simple and fast deployment, basically I have written notes every few lines, strong readability, currently there are not many functions, welcome for secondary development https://github.com/Liuergouzi/- #sqlinjection @Pfk_0day

If you have reverse engineering and Crypto and pwn skills, send us a message: @NetPwn

Some useful Telegram channels @OsintBlackBox If you are interested in OSINT, the content here will be useful for you. @BlackBoxOsint If you are interested in OSINT, the content here will be useful for you. @PfkGit If you are looking for penetration testing tools, find them here. @pfk_git If you are looking for penetration testing tools, find them here. @Netpentesters ( English ) If you want to become a Pinterester, join this channel. @Netpentester (Iranian) If you want to become a Pinterester, join this channel. @BlueTeamKit Blue Team and Blue Team specialized reference.( GitHub ) @BlueRedTeam Red Team and Blue Team specialized reference.( GitHub ) @Pfk_0Day ( we channel ) Learn Cyber Security( Free ) @pfkSecurity Refrence Pentest & Red Team @iotpenetrationTesting IoT Hacking @Gray1986 Music :)

CVE-2022-34718: IPv6 RCE exploit sample https://github.com/SecLabResearchBV/CVE-2022-34718-PoC @Pfk_0day