Crimson Walrus #Ransomware
ncpbxzcgdeprrbba7dgodmymdewy57yokkebuwhmuywiuz5kqjwepbad.onion

More than 13,500 files hacked from the Sberbank of Russia translation agency provide a unique insight into the interests of the bank and its clients. Translations include political analysis, military sales and open source reporting.

​How to open a safe

A vulnerability allows opening electronic safes from the Sentry Safe and Master Lock company without any pin code.

https://github.com/H4ckd4ddy/bypass-sentry-safe

​raptor_waf

Raptor is a Web application firewall made in C that uses DFA to block SQL injection, Cross-site scripting, and path traversal.

https://github.com/CoolerVoid/raptor_waf

Research:
http://funguscodes.blogspot.com.br/

​HopLa

All the power of PayloadsAllTheThings, without the overhead. This extension adds autocompletion support and useful payloads in #Burp Suite to make your intrusion easier.

Feel free to improve with your payloads ! ❤️

https://github.com/synacktiv/HopLa

XPath Injection WriteUp | Bug Bounty
https://youtu.be/z_-2Y2PX1jY

Top 8 Github Repos to Learn Data Science and Python

1. All algorithms implemented in Python
By: The Algorithms
Stars ⭐️: 135K
Fork: 35.3K
Repo: https://github.com/TheAlgorithms/Python

2. DataScienceResources
By: jJonathan Bower
Stars ⭐️: 3K
Fork: 1.3K
Repo: https://github.com/jonathan-bower/DataScienceResources

3. Playground and Cheatsheet for Learning Python
By: Oleksii Trekhleb ( Also the Image)
Stars ⭐️: 12.5K
Fork: 2K
Repo: https://github.com/trekhleb/learn-python


4. Learn Python 3
By: Jerry Pussinen
Stars ⭐️: 4,8K
Fork: 1,4K
Repo: https://github.com/jerry-git/learn-python3


5. Awesome Data Science
By: Fatih Aktürk, Hüseyin Mert & Osman Ungur, Recep Erol.
Stars ⭐️: 18.4K
Fork: 5K
Repo: https://github.com/academic/awesome-datascience

6. data-scientist-roadmap
By: MrMimic
Stars ⭐️: 5K
Fork: 1.5K
Repo: https://github.com/MrMimic/data-scientist-roadmap


7. Data Science Best Resources
By: Tirthajyoti Sarkar
Stars ⭐️: 1.8K
Fork: 717
Repo: https://github.com/tirthajyoti/Data-science-best-resources/blob/master/README.md


8. Ds-cheatsheets
By: Favio André Vázquez
Stars ⭐️: 10.4K
Fork: 3.1K
Repo: https://github.com/FavioVazquez/ds-cheatsheets

https://github.com/v4d1/Dome

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

BEGINNER'S
GUIDE TO
OPENBULLET

Couple.uk Database

https://anonfiles.com/34W2y764ub/members_csv

#cheatsheet

Cheatsheet Resources

Command-Line-Cheatsheet - Interactive command-line cheatsheet tool.

Python-Cheatsheet - A comprehensive Python cheatsheet.

Kali-Linux-Cheetsheet - Kali Linux cheatsheet.

PayloadAllTheThings - Payloads and cheatsheet for PT.

Awesome-RedTeam-Cheatsheet - AD and pentesting cheatsheet

Reverse-Proxies-Cheatsheet - Reverse proxies cheatsheet.

Reverse Shell-Cheatsheet - Reverse shell cheatsheet

SQL-Injection-Cheatsheet - SQL Injection cheatsheet.

Simulating attacks with Sysmon

Research:
https://rootdse.org/posts/understanding-sysmon-events/

Tool:
https://github.com/ScarredMonk/SysmonSimulator

#sysmon #simulator #blueteam #lab

​CVE-2022-23642

PoC for Sourcegraph Gitserver 3.37.0 RCE

Sourcegraph prior to 3.37.0 has a remote code execution vulnerability on its gitserver service. This is due to lack of restriction on git config execution thus "core.sshCommand" can be passed on the HTTP arguments which can contain arbitrary bash commands. Note that this is only possible if gitserver is exposed to the attacker.

https://github.com/Altelus1/CVE-2022-23642

Research:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23642

#exploit #cve

COFFInjector

A Proof of Concept code - loading and injecting MSVC object file.

https://github.com/0xpat/COFFInjector

Research:
https://0xpat.github.io/Malware_development_part_8/

𝗪𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗧𝗖𝗣/𝗜𝗣 𝗠𝗼𝗱𝗲𝗹?

Introduction to TCP/IP Model. 🧵👇🏻

It is a standardization model for computer networking. The OSI model, while widely referenced, is not used in practice. The TCP/IP model, on the other hand, is the real deal. Fortunately, it's not all that different.


https://twitter.com/xtremepentest/status/1535919885586513920?t=CYsB6fjYnnnxarfpZ3pEUw&s=19