After you have your TikTok account ready, open your selfie on you PC, make a

new video on TikTok and select “Dynamic Photo” filter.



After you selected your filter, point your camera to the selfie that's on you PC and

you will see that the selfie is moving, smiling, rotating their eyes, etc.

Record a small video and upload it to TikTok (Make sure its public)

After its uploaded, go to: https://ssstik.io/en (ticktock video downloader ) and paste your video link to



Download your video without the TikTok tag.

After that its easy, go to OBS, under “Sources” select “Media” and select your

TikTok video that you just downloaded.





My targeted website requires me to verify thru my phone.



This part if you service only serve through Apps



For this, you would need a few tools:

● LDplayer (Android Emulator)

● Logitech capture software

After you downloaded those 2 tools, create a new LDplayer android emulator

window and select 640x640 resolution

Then, open Logitech capture software, open you selfie/docs photo, select

resolution to 1080p and then in “Source 1” select your opened photo title. Then

head to ManyCams, select camera source as “Logi Capture”.

Then, head back to your android emulator, go do your kyc and when emulator ask

if you want to use webcam or screen crop, select webcam and you should see

your uploaded photo right there, go on resize or change position of the photo of

your needs and take the picture.



Thats it! This should be enough to bypass a lot of kyc providers and will allow you

to easily verify your account!



Download links:

OBS: https://obsproject.com/

LDplayer: https://www.ldplayer.net/

Logitech capture: https://www.logitech.com/en-gb/software/capture.htm

Some internal IPs from pak

#tools
#Blue_Team_Techniques
1. MIMEDefang - e-mail filtering tool that works with the Sendmail "Milter" library
https://github.com/The-McGrail-Foundation/MIMEDefang
2. Automated Penetration Testing Reporting System
https://github.com/Anof-cyber/APTRS

#Whitepaper
"Everything About the Secure Software Development Process", 12.2022.

#exploit
1. CVE-2023-0179:
Linux kernel stack buffer overflow in nftables
https://seclists.org/oss-sec/2023/q1/20

2. Security Audit of Git:
CVE-2022-23521:
Truncated Allocation Leading to Out of Bounds Write Via Large Number of Attributes
CVE-2022-41903:
Out of Bounds Memory Write in Log Formatting
https://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif

#Research
"ML-FEED: Machine Learning Framework for Efficient Exploit Detection", 2023.

#Cloud_Security
1. Azure AD Pass-Through Authentication Flaws
https://www.secureworks.com/research/azure-active-directory-pass-through-authentication-flaws
]-> PTAAgentDump tool: https://github.com/secureworks/PTAAgentDump
2. Red Teaming Microsoft Azure
https://improsec.com/tech-blog/read2own

#Threat_Research
1. SSH Key Injection Vulnerability in Google Cloud Compute Engine
https://blog.stazot.com/ssh-key-injection-google-cloud
2. Network Security Trends: August-October 2022
https://unit42.paloaltonetworks.com/network-security-trends-aug-oct-2022
3. Learn EVM Attacks: A collection of Foundry tests reproducing exploits, bug bounty reports, and theoretical vulnerabilities on EVM chains
https://github.com/coinspect/learn-evm-attacks

#Offensive_security
1. Exploiting Distroless Images
https://www.form3.tech/engineering/content/exploiting-distroless-images
2. Exploiting CVE-2021-3490 for Container Escapes
https://www.crowdstrike.com/blog/exploiting-cve-2021-3490-for-container-escapes

#Threat_Research
1. Java XML security issues and how to address them
https://semgrep.dev/blog/2022/xml-security-in-java
2. QT QML Vulnerability
https://blog.talosintelligence.com/vulnerability-spotlight-integer-and-buffer-overflow-vulnerabilities-found-in-qt-qml

#Cloud_Security
AWS CloudTrail vulnerability: Undocumented API allows CloudTrail bypass
https://securitylabs.datadoghq.com/articles/iamadmin-cloudtrail-bypass

#exploit
CVE-2023-22809:
Sudo Sudoedit Vulnerability

#Malware_analysis
StrongPity espionage campaign
https://www.welivesecurity.com/2023/01/10/strongpity-espionage-campaign-targeting-android-users

#Research
"Ultraverse: Efficient Retroactive Operation for Attack Recovery in Database Systems and Web Frameworks", 2023.