I have created a group for you to chat in. This group contains different topics that you should chat in the desired topic.
Join : https://t.me/+AZEeHzKKCKwxNWZk
Join : https://t.me/+AZEeHzKKCKwxNWZk
π Getting Started with Software-Defined Radio
β by David Clark and Paul Clark
π Info https://nostarch.com/practical-sdr
π° @BackupLSO
π @LibrarySecOfficial
β by David Clark and Paul Clark
π Info https://nostarch.com/practical-sdr
π° @BackupLSO
π @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
π How is Google Dorking Used By Hackers?
π Info : Hacker utilizes Google Dorks to uncover exposed data for example log files with usernames and passwords or cameras, etc.
π° @BackupLSO
π @LibrarySecOfficial
π Info : Hacker utilizes Google Dorks to uncover exposed data for example log files with usernames and passwords or cameras, etc.
π° @BackupLSO
π @LibrarySecOfficial
Parameters where you can try Command Injection.
?cmd={payload}
?exec={payload}
?command={payload}
?execute{payload}
?ping={payload}
?query={payload}
?jump={payload}
?code={payload}
?reg={payload}
?do={payload}
?func={payload}
?arg={payload}
?option={payload}
?load={payload}
?process={payload}
?step={payload}
?read={payload}
?function={payload}
?req={payload}
?feature={payload}
?exe={payload}
?module={payload}
?payload={payload}
?run={payload}
?print={payload}
π° @BackupLSO
π @LibrarySecOfficial
?cmd={payload}
?exec={payload}
?command={payload}
?execute{payload}
?ping={payload}
?query={payload}
?jump={payload}
?code={payload}
?reg={payload}
?do={payload}
?func={payload}
?arg={payload}
?option={payload}
?load={payload}
?process={payload}
?step={payload}
?read={payload}
?function={payload}
?req={payload}
?feature={payload}
?exe={payload}
?module={payload}
?payload={payload}
?run={payload}
?print={payload}
π° @BackupLSO
π @LibrarySecOfficial
How to Use Metasploit in Termux?
Once you have installed and run Metasploit in Termux, you can explore the available Metasploit modules and payloads by using this command:
Replace {keyword} with the type of module that you are interested in or want to use. For example, if you are interested in Android modules, then type search Android, and it will show you all the available modules and exploits for Android.
After finding your interested module, type the following command to use that module:
Replace the module name with the actual module name that you want to use. For example:
After selecting your desired module, you need to set options like the target IP address, port, or payload. To set IP address and port, you need to run commands like this:
Rhost means target IP address, and replace {target IP} with the actual IP address of your target. Rport means port number that you can set any 4 digit number like 4444.
You can simply run show options command to see the required options for the selected module.
Once you have selected the module and set its required options, you are ready to exploit your module by running the following command:
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
Once you have installed and run Metasploit in Termux, you can explore the available Metasploit modules and payloads by using this command:
search {keyword}Replace {keyword} with the type of module that you are interested in or want to use. For example, if you are interested in Android modules, then type search Android, and it will show you all the available modules and exploits for Android.
After finding your interested module, type the following command to use that module:
use {module_name}Replace the module name with the actual module name that you want to use. For example:
use payload/android/meterpreter_reverse_tcp
After selecting your desired module, you need to set options like the target IP address, port, or payload. To set IP address and port, you need to run commands like this:
set RHOSTS {target_ip}
set RPORT {target_port}Rhost means target IP address, and replace {target IP} with the actual IP address of your target. Rport means port number that you can set any 4 digit number like 4444.
You can simply run show options command to see the required options for the selected module.
show options
Once you have selected the module and set its required options, you are ready to exploit your module by running the following command:
exploit
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
βοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈ
π Cyber ββSecurity books and sources
π @LibrarySecOfficial
π Blueteam sources:
βοΈ @BlueTeamKit
π Osint tools and courses:
βοΈ @OsintGit
π Cyber ββSecurity Courses and Resources & Learn Bug bounty:
β @BackupLso
π All Red Team resources are here!
β @RedTeamVillageRtv
π To add to the message list:
π€ @LibrarySecOfficialBot
βοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈ
π Cyber ββSecurity books and sources
π @LibrarySecOfficial
π Blueteam sources:
βοΈ @BlueTeamKit
π Osint tools and courses:
βοΈ @OsintGit
π Cyber ββSecurity Courses and Resources & Learn Bug bounty:
β @BackupLso
π All Red Team resources are here!
β @RedTeamVillageRtv
π To add to the message list:
π€ @LibrarySecOfficialBot
βοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈβοΈ
A list of Awesome Security for IoT and Embedded Systems:
https://github.com/phodal/awesome-iot
https://github.com/nebgnahz/awesome-iot-hacks
https://github.com/nutc4k3/amazing-iot-security
https://github.com/fkie-cad/awesome-embedded-and-iot-security
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
https://github.com/phodal/awesome-iot
https://github.com/nebgnahz/awesome-iot-hacks
https://github.com/nutc4k3/amazing-iot-security
https://github.com/fkie-cad/awesome-embedded-and-iot-security
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
GitHub
GitHub - phodal/awesome-iot: Awesome IoT. A collaborative list of great resources about IoT Framework, Library, OS, Platform
Awesome IoT. A collaborative list of great resources about IoT Framework, Library, OS, Platform - phodal/awesome-iot
πafrogπΈ - A Security Tool for Bug Bounty, Pentest and Red Teaming.
Installation
π±Github: πLink
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
afrog is a high-performance vulnerability scanner that is fast and stable. It supports user-defined PoC and comes with several built-in types, such as CVE, CNVD, default passwords, information disclosure, fingerprint identification, unauthorized access, arbitrary file reading, and command execution. With afrog, network security professionals can quickly validate and remediate vulnerabilities, which helps to enhance their security defense capabilities.
Installation
go install -v github.com/zan8in/afrog/v3/cmd/afrog@latest
π±Github: πLink
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
β΅The Art of Disappearing Online: as Someone Is Watching youβ΅
Get Real VPN (Not That Free Shit)
First things first Get VPNβand not the free garbage If youβre using a free VPN youβre basically paying in privacy use
no-log VPNs like Mullvad NordVPN and express or any vpn that really gives priority to your privacy and dont leak shit and
Use Residential Rotating Proxies as Datacenter proxies are trash
Pro Tip Pay with cryptocurrency for even more anonymity
Burn Your Digital Footprintβ―
Delete everything Iβm talking about your cringe 2016 Facebook even that LinkedIn profile you forgot about and not using
Facebook: Deactivate it? No. Delete it. Fully.
Instagram: Burn it unless youβre using it from fake identity to watch hot reels.
Twitter: If Elon knows your thoughts, so do the feds
Bonus: use sites like AccountKiller to make nuking faster.
Use Disposable Everything (Burner emails, burner numbers, burner devices.)β―
For emails: use Tutanota, or any temp email service not gmail as Google is watching you harder than your exπ
For numbers: use Hushed, Burner or some other cheap service If a site asks for your phone number Give them fake
Encrypted Messagingβ―
Forget SMS WhatsApp, and yes, even Telegramπ₯²
Hereβs the truth Telegram is no longer as safe as you thinkπ₯Ή.
It process you data now and if youβre not using secret chats
anyone with access to Telegramβs servers can see your messages.
Better Alternativesβ―
Signal: End-to-end encryption, trusted by privacy nerds everywhere.
Session: No phone number required more anonymous.
Threema: ultra-private.
warning Never trust any messaging app with your life.
Encrypted doesnβt mean invincible.
start using Virtual Machines and Tails OSβ―
If youβre serious about privacy:
Use a Virtual Machine (VM) for anything sensitive. Run your shady tasks in the VM and
nuke it afterward.
stat using Use Tails Os as It is extreme privacy-focused os you can get tails os or qubes os complete tutorial on my channel in my bio
Encrypt Everything
Use full-disk encryption on your laptop with
veraCrypt or BitLocker
Android users can use GrapheneOS or CalyxOS
iPhone users use latest ios
Browser Hygiene Matters alotβ―π ππ
as you know Your browser is leaking more info than a middle school gossip. Fix it:
Donβt Use Google as google is not your friends and it still no more about you then your family
and thatβs not a compliment.
Block Trackers: Install uBlock Origin and Privacy Badger.
Use Private Search Engines
better use anti detect browser
Donβt Trust Anyone Online - Not even your e-girl or your e-bro coz
when things go south, theyβll throw you under the bus faster than you can think
Use Fake Names and Passwords Like Itβs a Religionβ―
For every account, use a different name,
burner email, and a random password.
Why? Because one breach and your whole identity goes on sale
to the highest bidder and cracker
you can also use password managers like lastPass, Bitwarden, whatever
Burner device and phoneβ―
if you work is too extreme then you can buy device purchased on other people identiy
and use fΓ₯ke sim fake bΓ£nk
Go Dark When Necessaryβ―
When things get worst, vanish completely. Disable accounts, log off everything, and go radio silent. Silence is power.
Keep Learningβ―
OPSEC is an evolving game. Stay sharp.
you can follow my channel from my bio for more tutorial and learnings
and remember trust no one, question everything, and always stay one step ahead.
What NOT to Doβ―
Donβt Post Pictures With EXIF Data
Donβt Use Easy Passwords
Donβt Overshare online
Donβt Click Random Links
Donβt Get too Comfortable( moment you think youβre untouchable is the moment of downfall.)
Donβt Trust Free Stuff control you emotions as i was once hacked in 2021 using session hijacking
The best way to disappear is to never exist in the first place but if you do exist be a ghost
as the less they know, the better you sleep --The AlphaSec
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
Get Real VPN (Not That Free Shit)
First things first Get VPNβand not the free garbage If youβre using a free VPN youβre basically paying in privacy use
no-log VPNs like Mullvad NordVPN and express or any vpn that really gives priority to your privacy and dont leak shit and
Use Residential Rotating Proxies as Datacenter proxies are trash
Pro Tip Pay with cryptocurrency for even more anonymity
Burn Your Digital Footprintβ―
Delete everything Iβm talking about your cringe 2016 Facebook even that LinkedIn profile you forgot about and not using
Facebook: Deactivate it? No. Delete it. Fully.
Instagram: Burn it unless youβre using it from fake identity to watch hot reels.
Twitter: If Elon knows your thoughts, so do the feds
Bonus: use sites like AccountKiller to make nuking faster.
Use Disposable Everything (Burner emails, burner numbers, burner devices.)β―
For emails: use Tutanota, or any temp email service not gmail as Google is watching you harder than your exπ
For numbers: use Hushed, Burner or some other cheap service If a site asks for your phone number Give them fake
Encrypted Messagingβ―
Forget SMS WhatsApp, and yes, even Telegramπ₯²
Hereβs the truth Telegram is no longer as safe as you thinkπ₯Ή.
It process you data now and if youβre not using secret chats
anyone with access to Telegramβs servers can see your messages.
Better Alternativesβ―
Signal: End-to-end encryption, trusted by privacy nerds everywhere.
Session: No phone number required more anonymous.
Threema: ultra-private.
warning Never trust any messaging app with your life.
Encrypted doesnβt mean invincible.
start using Virtual Machines and Tails OSβ―
If youβre serious about privacy:
Use a Virtual Machine (VM) for anything sensitive. Run your shady tasks in the VM and
nuke it afterward.
stat using Use Tails Os as It is extreme privacy-focused os you can get tails os or qubes os complete tutorial on my channel in my bio
Encrypt Everything
Use full-disk encryption on your laptop with
veraCrypt or BitLocker
Android users can use GrapheneOS or CalyxOS
iPhone users use latest ios
Browser Hygiene Matters alotβ―π ππ
as you know Your browser is leaking more info than a middle school gossip. Fix it:
Donβt Use Google as google is not your friends and it still no more about you then your family
and thatβs not a compliment.
Block Trackers: Install uBlock Origin and Privacy Badger.
Use Private Search Engines
better use anti detect browser
Donβt Trust Anyone Online - Not even your e-girl or your e-bro coz
when things go south, theyβll throw you under the bus faster than you can think
Use Fake Names and Passwords Like Itβs a Religionβ―
For every account, use a different name,
burner email, and a random password.
Why? Because one breach and your whole identity goes on sale
to the highest bidder and cracker
you can also use password managers like lastPass, Bitwarden, whatever
Burner device and phoneβ―
if you work is too extreme then you can buy device purchased on other people identiy
and use fΓ₯ke sim fake bΓ£nk
Go Dark When Necessaryβ―
When things get worst, vanish completely. Disable accounts, log off everything, and go radio silent. Silence is power.
Keep Learningβ―
OPSEC is an evolving game. Stay sharp.
you can follow my channel from my bio for more tutorial and learnings
and remember trust no one, question everything, and always stay one step ahead.
What NOT to Doβ―
Donβt Post Pictures With EXIF Data
Donβt Use Easy Passwords
Donβt Overshare online
Donβt Click Random Links
Donβt Get too Comfortable( moment you think youβre untouchable is the moment of downfall.)
Donβt Trust Free Stuff control you emotions as i was once hacked in 2021 using session hijacking
The best way to disappear is to never exist in the first place but if you do exist be a ghost
as the less they know, the better you sleep --The AlphaSec
β€ Share our content with your friends
π° @BackupLSO
π @LibrarySecOfficial
Awesome Bug Bounty Tools.
β’ Recon:
- Subdomain Enumeration;
- Port Scanning;
- Screenshots;
- Technologies;
- Content Discovery;
- Links;
- Parameters;
- Fuzzing.
β’ Exploitation:
- Command Injection;
- CORS Misconfiguration;
- CRLF Injection;
- CSRF Injection;
- Directory Traversal;
- File Inclusion;
- GraphQL Injection;
- Header Injection;
- Insecure Deserialization;
- Insecure Direct Object References;
- Open Redirect;
- Race Condition;
- Request Smuggling;
- Server Side Request Forgery;
- SQL Injection;
- XSS Injection;
- XXE Injection.
β’ Miscellaneous:
- Passwords;
- Secrets;
- Git;
- Buckets;
- CMS;
- JSON Web Token;
- postMessage;
- Subdomain Takeover;
- Uncategorized.
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial
β’ Recon:
- Subdomain Enumeration;
- Port Scanning;
- Screenshots;
- Technologies;
- Content Discovery;
- Links;
- Parameters;
- Fuzzing.
β’ Exploitation:
- Command Injection;
- CORS Misconfiguration;
- CRLF Injection;
- CSRF Injection;
- Directory Traversal;
- File Inclusion;
- GraphQL Injection;
- Header Injection;
- Insecure Deserialization;
- Insecure Direct Object References;
- Open Redirect;
- Race Condition;
- Request Smuggling;
- Server Side Request Forgery;
- SQL Injection;
- XSS Injection;
- XXE Injection.
β’ Miscellaneous:
- Passwords;
- Secrets;
- Git;
- Buckets;
- CMS;
- JSON Web Token;
- postMessage;
- Subdomain Takeover;
- Uncategorized.
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial
GitHub
GitHub - vavkamil/awesome-bugbounty-tools: A curated list of various bug bounty tools
A curated list of various bug bounty tools. Contribute to vavkamil/awesome-bugbounty-tools development by creating an account on GitHub.
πHere are some cool Threat Intelligence tools to use for bug bounty.
certstream.calidog.io
app.any.run
virustotal.com
phishtank.org
urlhaus.abuse.ch/browse/
urlscan.io
shodan.io
search.censys.io
maltego.com
ipinfo.io
domaintools.com
projectdiscovery.io
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial
certstream.calidog.io
app.any.run
virustotal.com
phishtank.org
urlhaus.abuse.ch/browse/
urlscan.io
shodan.io
search.censys.io
maltego.com
ipinfo.io
domaintools.com
projectdiscovery.io
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial
urlhaus.abuse.ch
URLhaus - Browse
Hunt for malware distribution sites with URLhaus
Media is too big
VIEW IN TELEGRAM
SQL Injection Complete Guide
β€ Share & Support & Reaction Us
𧩠#SqlInjection
π° @BackupLSO
π @LibrarySecOfficial
β€ Share & Support & Reaction Us
𧩠#SqlInjection
π° @BackupLSO
π @LibrarySecOfficial
15 BEST INFOMATION GATHERING TOOLS
β’ Network Map (nmap) - https://github.com/nmap/nmap
β’Dracnmap - https://github.com/Screetsec/Dracnmap
β’Xerosploit - https://github.com/LionSec/xerosploit
β’RED HAWK (All In One Scanning) - https://github.com/Tuhinshubhra/RED_HAWK
β’ReconSpider(For All Scaning) - https://github.com/bhavsec/reconspider
β’IsItDown (Check Website Down/Up)
Infoga - Email OSINT - https://github.com/m4ll0k/Infoga
β’ReconDog - https://github.com/s0md3v/ReconDog
β’Striker - https://github.com/s0md3v/Striker
β’SecretFinder (like API & etc) - https://github.com/m4ll0k/SecretFinder
β’Find Info Using Shodan - https://github.com/m4ll0k/Shodanfy.py
β’Port Scanner - rang3r - https://github.com/floriankunushevci/rang3r
β’Breacher - https://github.com/s0md3v/Breacher
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
β’ Network Map (nmap) - https://github.com/nmap/nmap
β’Dracnmap - https://github.com/Screetsec/Dracnmap
β’Xerosploit - https://github.com/LionSec/xerosploit
β’RED HAWK (All In One Scanning) - https://github.com/Tuhinshubhra/RED_HAWK
β’ReconSpider(For All Scaning) - https://github.com/bhavsec/reconspider
β’IsItDown (Check Website Down/Up)
Infoga - Email OSINT - https://github.com/m4ll0k/Infoga
β’ReconDog - https://github.com/s0md3v/ReconDog
β’Striker - https://github.com/s0md3v/Striker
β’SecretFinder (like API & etc) - https://github.com/m4ll0k/SecretFinder
β’Find Info Using Shodan - https://github.com/m4ll0k/Shodanfy.py
β’Port Scanner - rang3r - https://github.com/floriankunushevci/rang3r
β’Breacher - https://github.com/s0md3v/Breacher
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
GitHub
GitHub - nmap/nmap: Nmap - the Network Mapper. Github mirror of official SVN repository.
Nmap - the Network Mapper. Github mirror of official SVN repository. - nmap/nmap
Media is too big
VIEW IN TELEGRAM
How to set up a Proxy Server for Traffic Monitoring
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
8 hour full complete Cyber Security Course
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
β€ Share & Support & Reaction Us
π° @BackupLSO
π @LibrarySecOfficial
Forwarded from TryHackBox
SANS Training Roadmap.pdf
59.9 KB
Media is too big
VIEW IN TELEGRAM
β Hackgyan Advanced Bug Bounty Hunting Full Course
π³ππΎ π§πΊπΌππππΊπ π‘ππ π‘πππππ π§ππππππ π₯ππ π π’πππππΎ ππ πΏππ πΊπππππΎ πππ ππΊπππ ππ π πΎπΊππ πΎππππΌπΊπ ππΊπΌππππ. πΈππ πππ π π πΎπΊππ πππ ππ πΏπππ½ πΊππ½ πΏππ ππππ»π πΎππ ππ πππΏπππΊππΎ. π³ππΎ πΌπππππΎ πΌπππΎππ πππππππΊππ πππππΌπ π πππΎ ππΎπΊππΌππππ πΏππ ππΎπΊπππΎπππΎπ, ππΎπππππ ππΎπΌπππππ, πΊππ½ πππΊπΌπππΌπΊπ πΎππΎππΌπππΎπ. πΈππ πππ π πΊπ ππ π πΎπΊππ πΊπ»πππ π»ππ π»πππππ ππΎπ»ππππΎπ πΊππ½ πππΎ πππ πΎπ ππΏ ππΊπΌππππ. π©πππ ππ ππ πππππππΎ ππππ ππππ π π πΊππ½ ππΎπ π ππΊππΎ πππΎ ππππΎπππΎπ ππΊπΏπΎπ
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial
π³ππΎ π§πΊπΌππππΊπ π‘ππ π‘πππππ π§ππππππ π₯ππ π π’πππππΎ ππ πΏππ πΊπππππΎ πππ ππΊπππ ππ π πΎπΊππ πΎππππΌπΊπ ππΊπΌππππ. πΈππ πππ π π πΎπΊππ πππ ππ πΏπππ½ πΊππ½ πΏππ ππππ»π πΎππ ππ πππΏπππΊππΎ. π³ππΎ πΌπππππΎ πΌπππΎππ πππππππΊππ πππππΌπ π πππΎ ππΎπΊππΌππππ πΏππ ππΎπΊπππΎπππΎπ, ππΎπππππ ππΎπΌπππππ, πΊππ½ πππΊπΌπππΌπΊπ πΎππΎππΌπππΎπ. πΈππ πππ π πΊπ ππ π πΎπΊππ πΊπ»πππ π»ππ π»πππππ ππΎπ»ππππΎπ πΊππ½ πππΎ πππ πΎπ ππΏ ππΊπΌππππ. π©πππ ππ ππ πππππππΎ ππππ ππππ π π πΊππ½ ππΎπ π ππΊππΎ πππΎ ππππΎπππΎπ ππΊπΏπΎπ
β€ Share & Support & Reaction Us
𧩠#bugbounty
π° @BackupLSO
π @LibrarySecOfficial