Uncovering Your First Blind SQLi

Bugbounty Article : https://bugbountyguide.org/2022/12/08/uncovering-your-first-blind-sql-injection-vulnerability/

#bugbounty #infosec #hacking #cybersecurity

Studying Active Directory?

Here are 5 blogs you should definitely check out.
1. lnkd.in/geyHTm_8
2. lnkd.in/g87pewRe
3. adsecurity.org
4. dirkjanm.io
5. lnkd.in/gcwsw-Nf

#Pentesting #CyberSec #bugbounty #infosec #ActiveDirectory

Ak bar jarur dekhna

#Red_Team_Tactics
1. Hijacking service workers via DOM Clobbering
https://portswigger.net/research/hijacking-service-workers-via-dom-clobbering
2. Abusing Reddit API to host the C2 traffic
https://github.com/kleiton0x00/RedditC2
3. Abusing JSON-Based SQL to Bypass WAF
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf

#Research
"COVID-bit: Keep a Distance of (at least) 2m From My Air-Gap Computer", Dec. 2022.

#tools
#Offensive_security
1. smsgate - open source SMS gateway for pentest projects
https://github.com/pentagridsec/smsgate
]-> https://www.pentagrid.ch/en/blog/open-source-sms-gateway-for-pentest-projects
2. r4ven - Track IP and GPS Location
https://github.com/spyboy-productions/r4ven

#WLAN_Security
"Non-Cooperative Wi-Fi Localization & its Privacy Implications", 2022.

// A new location revealing privacy attack on non-cooperative Wi-Fi devices

#exploit
1. CVE-2022-23475:
daloRADIUS Vulnerablity
https://securityonline.info/cve-2022-23475-account-take-over-flaw-in-open-source-radius-web-management-app

2. Django RCE(DJRCE) exploitation with leaked SECRET_KEY variable
https://github.com/0xuf/DJRCE

3. Exploit collection for some Service DCOM Object LPE vulnerability (by SeImpersonatePrivilege abuse)
https://github.com/zcgonvh/DCOMPotato

#Threat_Research
BlackHat Europe 2022:
"Turning EDRs to malicious wipers using 0-day exploits".
]-> https://github.com/SafeBreach-Labs/aikido_wiper

Hacking the Furbo Dog Camera: Part III
https://ift.tt/Lt4OqH7

Submitted December 09, 2022 at 02:29AM by somersetrecon
via reddit https://ift.tt/1RVGUd7

Using ChatGPT to Generate Phishing Campaigns
https://ift.tt/jg86Dzk

Submitted December 09, 2022 at 08:32AM by rickyrockslide
via reddit https://ift.tt/cNmWALR

Testing a mobile app using a device you don’t have
https://ift.tt/pJE7iLC

Submitted December 09, 2022 at 08:43PM by Necessary-Reality-80
via reddit https://ift.tt/lT8Pn6A

USEFULL HACK GROUPS AND CHANNELS ON TG

https://t.me/+H_2Y38W2Q8I1NDVk

https://t.me/offensj

https://t.me/+2074PlVwTiI4NzE1

https://t.me/Hackerss_chat

https://t.me/+kBVQdJUqr3tiOTQ0

https://t.me/netpainbackup

https://t.me/+YDkGOspEKl1mYzdl

https://t.me/+mfnNjuiTTt5jMTI1

https://t.me/crackcodes

SIGTRAN - SS7 Over IP from Beginner to Expert level
Become Expert in SIGTRAN - Signaling Transport over IP Networks

SIGTRAN is the name of a group of telecommunications protocols designed to interoperate between traditional telephony and VoIP. The name is formed from the words signaling and transport and was given by the Internet Engineering Task Force (IETF), which develops specifications for a family of protocols that provide reliable datagram services and user level adaptation for Shared Channel System No. 7 (SS7) and ISDN. SIGTRAN protocols are an extension of the SS7 family of protocols. They support the same applications and call control paradigms as SS7, but use the Internet Protocol (IP) for addressing and are transmitted over SCTP. The working group in the IETF closed in March 2009 as having served its purpose.

What you'll learn
Sigtran Signaling Networks
Sigtran Network Protocols
Signaling messages
Sigtran Protocol Stack

◽️ SIGTRAN Introduction & Giving a reminder about SS7 Networks.
◽️ A Brief about TCP & UDP Protocols.
◽️ SIGTRAN Network Architecture
◽️ SIGTRAN vs SS7 Stack
◽️ IP Layer
◽️ SCTP Layer
◽️ Adaptation Layer (SUA , M3UA , M2PA , M2UA )
◽️ SIGTRAN newly introduced protocols identifying their messages.

👇#1_Introduction_to_Sigtran

1. Introduction to Signaling Sigtran

2. SS7 Signaling System No.7 Revise