#Whitepaper
"SSH Penetration Testing", 2022.

#hardening
"Hardening with Scapolite: a DevOps-based Approach for Improved Authoring and Testing of Security-Configuration Guides in Large Scale Organizations", 2022.

#Research
"UAV Traffic Management: A Survey On Communication Security", 2022.

#reversing
"TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering", 2022.
]-> https://github.com/vusec/tlbdr

Offensive Security Approved OSCP Notes

Link : https://oscpnotes.infosecsanyam.in/My_OSCP_Preparation_Notes.html

#bugbounty #OSCP #infosec #pentest

🔰 8000+ XSS Payloads
#bugbounty #Infosec

Git Ripo : https://github.com/Aacle/xss_payload

Check This Out : 👆

🔰All Google Dorks
#bugbounty #infosec

• Operators
• Purposes
• Can be Mixed with other operators ?
• Can be used alone ?
• Does Search Work in ? : Web, Image, Groups, News

Download In More Clarity : https://bugbountyguide.org/index.php/mindmaps-cheatsheets/

Check this Out : 👆

Awesome Hacker Search Engines
https://github.com/edoardottt/awesome-hacker-search-engines
// Repo containing search engines and online services useful for pentesting, general security, red team, bug bounty etc

●▬۩❁ credits:@geeekgirls ❁۩▬●

Wi-Fi Exploitation Framework
https://github.com/D3Ext/WEF
Stealer + Clipper + Keylogger
https://github.com/Stealerium/Stealerium
JavaScript file crawler and secret finder
https://github.com/oppsec/Pinkerton
Reveals invisible links within JavaScript files
https://github.com/riza/linx
A simple CLI for converting WARC to Parquet
https://github.com/maxcountryman/warc-parquet
Web-See is Tool For Checkout Status Of Urls in Mass Its For Bug Bounty Hunters And Black Hat Hackers
https://github.com/indiancybertroops/Web-See

#Python Ethical Hacking, published by Packt
https://github.com/PacktPublishing/Python-Ethical-Hacking

 A pure #Python Network Packet Sniffing tool
 https://github.com/EONRaider/Packet-Sniffer

#Python Script to access ATT&CK content available in STIX via a public TAXII server
https://github.com/OTRF/ATTACK-Python-Client

#Python Scripts for Hacking
https://github.com/Adastra-thw/pyHacks

#Red_Team_Tactics
1. Method of dumping LSASS by abusing the Windows Error Reporting service
https://github.com/deepinstinct/Lsass-Shtinkering
2. Bypass MS Graph API paging limitation and dump all user's objects using Graph API token (Illicit Grant Phishing Attack)
https://github.com/lutzenfried/OffensiveCloud/blob/4de3846faffa13d813872ffae6b990fa670dae6e/Azure/Tools/graphAPIDump.py

#Offensive_security
"Sandboxing V8", Dec 2022.

]-> High-Level Design: https://docs.google.com/document/u/0/d/1FM4fQmIhEqPG8uGp5o9A-mnPB5BOeScZYpkHjo0KKA8/mobilebasic
]-> V8 Sandbox - External Pointer Sandboxing: https://docs.google.com/document/u/0/d/1V3sxltuFjjhp_6grGHgfqZNK57qfzGzme0QTk0IXDHk/mobilebasic

#tools
#Cloud_Security
Kubeshark - API traffic viewer for Kubernetes providing deep visibility into all API traffic/payloads going in, out and across containers and pods inside a Kubernetes cluster
https://github.com/kubeshark/kubeshark