🦇Advance Search Engine For Hacker 🦇
http://shodan.io —> (🌐 Server, 🛠 Vulnerabilities)
http://google.com —> (💁♀️ Dorks)
http://wigle.net —> (☁️ Wifi Networks)
http://grep.app —> (😀 Code Search)
http://app.binaryedge.io —> (💗 Threat Intelligence)
http://onyphe.io —> (🌐 Server)
http://viz.greynoise.io —> (⚡️ Threat Intelligence)
http://censys.io —> (✅ Server)
http://hunter.io —> (✅ Email Addresses)
http://fofa.info —> (✅ Threat Intelligence)
http://zoomeye.org —> (✅ Threat Intelligence)
http://leakix.net —> (✅ Threat Intelligence)
http://intelx.io —> (✅ OSINT)
http://app.netlas.io —> (✅ Attack Surface)
http://searchcode.com —> (💻 Code Search)
http://urlscan.io —> (🤔 Threat Intelligence)
http://publicwww.com —> (🖥 Code Search)
http://fullhunt.io —> (🔒 Attack Surface)
http://socradar.io —> (✅ Threat Intelligence)
http://binaryedge.io —> (🎀 Attack Surface)
http://ivre.rocks —> (🦋 Server)
http://crt.sh —> (💓 Certificate Search)
http://vulners.com —> (👑Vulnerabilities)
http://pulsedive.com —> (🥘 Threat Intelligence)
http://hybrid-analysis.com —> (⭐️ Malware Analysis)
http://threatcrowd.org —> (🕺Threat Intelligence)
http://cve.mitre.org —> (⭐️ Vulnerability Database)
http://haveibeenpwned.com —> (💗 Data Breaches)
http://spyonweb.com —> (❤️ Website Ownership)
http://dnsdumpster.com —> (🌐 DNS Reconnaissance)
http://archive.org —> (🤗 Historical Website Data)
http://certstream.calidog.io —> (🐳 Real-time Certificates)
http://passivetotal.org —> (🪽 Passive DNS Data)
http://wigle.net —> (🌸 Wi-Fi Network Mapping)
http://malshare.com —> (✅ Malware Repository)
http://threatminer.org —> (😍 Threat Intelligence)
http://binaryedge.io —> (🙂 Attack Surface)
http://vuldb.com —> (😳 Vulnerability Database)
http://bgpview.io —> (❌ BGP Information)
http://onionsearchengine.com —> (😳 Dark Web Search)
http://shodan.io —> (🌐 Server, 🛠 Vulnerabilities)
http://google.com —> (💁♀️ Dorks)
http://wigle.net —> (☁️ Wifi Networks)
http://grep.app —> (😀 Code Search)
http://app.binaryedge.io —> (💗 Threat Intelligence)
http://onyphe.io —> (🌐 Server)
http://viz.greynoise.io —> (⚡️ Threat Intelligence)
http://censys.io —> (✅ Server)
http://hunter.io —> (✅ Email Addresses)
http://fofa.info —> (✅ Threat Intelligence)
http://zoomeye.org —> (✅ Threat Intelligence)
http://leakix.net —> (✅ Threat Intelligence)
http://intelx.io —> (✅ OSINT)
http://app.netlas.io —> (✅ Attack Surface)
http://searchcode.com —> (💻 Code Search)
http://urlscan.io —> (🤔 Threat Intelligence)
http://publicwww.com —> (🖥 Code Search)
http://fullhunt.io —> (🔒 Attack Surface)
http://socradar.io —> (✅ Threat Intelligence)
http://binaryedge.io —> (🎀 Attack Surface)
http://ivre.rocks —> (🦋 Server)
http://crt.sh —> (💓 Certificate Search)
http://vulners.com —> (👑Vulnerabilities)
http://pulsedive.com —> (🥘 Threat Intelligence)
http://hybrid-analysis.com —> (⭐️ Malware Analysis)
http://threatcrowd.org —> (🕺Threat Intelligence)
http://cve.mitre.org —> (⭐️ Vulnerability Database)
http://haveibeenpwned.com —> (💗 Data Breaches)
http://spyonweb.com —> (❤️ Website Ownership)
http://dnsdumpster.com —> (🌐 DNS Reconnaissance)
http://archive.org —> (🤗 Historical Website Data)
http://certstream.calidog.io —> (🐳 Real-time Certificates)
http://passivetotal.org —> (🪽 Passive DNS Data)
http://wigle.net —> (🌸 Wi-Fi Network Mapping)
http://malshare.com —> (✅ Malware Repository)
http://threatminer.org —> (😍 Threat Intelligence)
http://binaryedge.io —> (🙂 Attack Surface)
http://vuldb.com —> (😳 Vulnerability Database)
http://bgpview.io —> (❌ BGP Information)
http://onionsearchengine.com —> (😳 Dark Web Search)
Shodan
Search engine of Internet-connected devices. Create a free account to get started.
👍4✍1
CyberPythonUZ
Hammaga qiziqmi
Ingliz tilida 3000 ga yaqin vdio darslik bor hacking 0 Dan oʻrgatilgan qonuniy no qonuniy usulari ingiliz tilida
👍6🔥1🤯1
GIT O'RNATISH LINUX
GITHUB-CLI WEB CONFIG LINUX UCHUN ZARUR
KALI/UBUNTU/DEBIAN/MINT
ARCH LINUX
FEDORA
GIT ORQALI YANGI PROYEKT YARATISH VA PUSH QILISH
!!BARCHA KOMANDALAR WINDOWS VA LINUX UCHUN BIR XIL!!
-global konfiguratsiyalarini sozlash(birinchi marta o'rantish uchun-
-yangi bo'sh proyekt-
-fayllarni jamlash-
-O'zgarishlarni saqlash-
KODNI GITHUB REPOGA ULASH
-asosiy tarmoqni nomlash(standart main)
-github reponi havola orqali bog'lash-
-Kodni githubga yuklash-
!!!USHBU ISH WINDOWSDA AVTOMATIK WEB INTERFACE ORQALI GITHUB AKKAUNTGA ULASH TIZIMINI ISHGA TUSHIRADI AGAR LINUX ISHLATSANGIZ QUYIDAGI AMALNI BAJARISH KERAK
-github akkauntni qurilmaga ulash-
MAVJUD REPODAN CLON OLIB YANGILASH
REPO MA'LUMOTLARINI QURILMA KODI BILAN SINXRONLASH
O'ZGARISH AMALGA OSHGACH YANGILANISHNI REPOGA PUSH QILISH
sudo apt install git #debian ubuntu kali
sudo pacman -S git #arch linux
sudo dnf install git #fedora
GITHUB-CLI WEB CONFIG LINUX UCHUN ZARUR
KALI/UBUNTU/DEBIAN/MINT
(type -p wget >/dev/null || (sudo apt update && sudo apt install wget -y)) \
&& sudo mkdir -p -m 755 /etc/apt/keyrings \
&& out=$(mktemp) && wget -nv -O$out https://cli.github.com/packages/githubcli-archive-keyring.gpg \
&& cat $out | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
&& sudo mkdir -p -m 755 /etc/apt/sources.list.d \
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
&& sudo apt update \
&& sudo apt install gh -y
ARCH LINUX
sudo pacman -S github-cli
FEDORA
sudo dnf install 'dnf-command(config-manager)'
sudo dnf config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo
sudo dnf install gh
GIT ORQALI YANGI PROYEKT YARATISH VA PUSH QILISH
!!BARCHA KOMANDALAR WINDOWS VA LINUX UCHUN BIR XIL!!
-global konfiguratsiyalarini sozlash(birinchi marta o'rantish uchun-
git config --global user.name "Sizning Ismingiz"
git config --global user.email "sizningemailingiz@example.com"
-yangi bo'sh proyekt-
git init
-fayllarni jamlash-
git add .
-O'zgarishlarni saqlash-
git commit -m "Ilk commit: Loyiha strukturasi yaratildi"
KODNI GITHUB REPOGA ULASH
-asosiy tarmoqni nomlash(standart main)
git branch -M main
-github reponi havola orqali bog'lash-
git remote add origin https://github.com/foydalanuvchi_nomi/repo_nomi.git
-Kodni githubga yuklash-
git push -u origin main
!!!USHBU ISH WINDOWSDA AVTOMATIK WEB INTERFACE ORQALI GITHUB AKKAUNTGA ULASH TIZIMINI ISHGA TUSHIRADI AGAR LINUX ISHLATSANGIZ QUYIDAGI AMALNI BAJARISH KERAK
-github akkauntni qurilmaga ulash-
gh auth login
#ulanish amalga oshgach push
git push -u origin main
MAVJUD REPODAN CLON OLIB YANGILASH
git clone https://github.com/foydalanuvchi_nomi/repo_nomi.git
REPO MA'LUMOTLARINI QURILMA KODI BILAN SINXRONLASH
git pull origin main
O'ZGARISH AMALGA OSHGACH YANGILANISHNI REPOGA PUSH QILISH
git add .
git commit -m "Yangilanish: yangi funksiya qo'shildi"
git push
👍4❤1🤩1
Chatgpt plus 1 oy free olish mumkin lekin karta manda ishlamadi boshqalarda ishlash extimoli katta vido chiqsin mi ?
👍6🔥1🎉1💯1
Kanalda Subdomain Takeover 2 CSFR yani Cross-Site Request Forgery bilmaydigan odamlar bormi
👍6❤1🗿1
CyberPythonUZ
Kanalda Subdomain Takeover 2 CSFR yani Cross-Site Request Forgery bilmaydigan odamlar bormi
Buni ancha muncha oq hacker qila olmaydi kiber havfsizlik dagilar XAM bu zaiflikdan berkina olishmaydi buni chinakam hacker ishlata oladi desa XAM boladi chunki bu zaiflik bilan kirish hali muammo tolqi yopilmagan
👍4❤1
This media is not supported in your browser
VIEW IN TELEGRAM
👉[Cross-Site Request Forgery] Bilmaydigan lar uchun
👍4
CyberPythonUZ
👉[Cross-Site Request Forgery] Bilmaydigan lar uchun
Hakerlar orasida ancha mashhur boʻlgan bu zayiflik
👍4
[Owasp Zap] tushuntirish beraymi
Yozma qisqacha vazifasi koʻp lekin uzun boʻlib ketar ekan
Yozma qisqacha vazifasi koʻp lekin uzun boʻlib ketar ekan
👍5😇1
CyberPythonUZ
[Owasp Zap] tushuntirish beraymi Yozma qisqacha vazifasi koʻp lekin uzun boʻlib ketar ekan
To‘liq nomi: OWASP Zed Attack Proxy
· Ishlab chiqaruvchi: OWASP (Open Web Application Security Project)
· Turi: Veb-ilovalar xavfsizligini tekshirish (penetration testing) vositasi
· Litsenziya: Bepul va ochiq kod (Apache 2.0)
· Maqsadi: Veb-saytlar va API lardagi zaifliklarni avtomatik va qo‘lda topish
· Ishlab chiqaruvchi: OWASP (Open Web Application Security Project)
· Turi: Veb-ilovalar xavfsizligini tekshirish (penetration testing) vositasi
· Litsenziya: Bepul va ochiq kod (Apache 2.0)
· Maqsadi: Veb-saytlar va API lardagi zaifliklarni avtomatik va qo‘lda topish
👍4👏1
CyberPythonUZ
To‘liq nomi: OWASP Zed Attack Proxy · Ishlab chiqaruvchi: OWASP (Open Web Application Security Project) · Turi: Veb-ilovalar xavfsizligini tekshirish (penetration testing) vositasi · Litsenziya: Bepul va ochiq kod (Apache 2.0) · Maqsadi: Veb-saytlar va API…
Komp boʻlganda qonday ishlaydi oʻzim terminal da koʻrsatgan boʻlardim vdio qilib
👍4
CyberPythonUZ
To‘liq nomi: OWASP Zed Attack Proxy · Ishlab chiqaruvchi: OWASP (Open Web Application Security Project) · Turi: Veb-ilovalar xavfsizligini tekshirish (penetration testing) vositasi · Litsenziya: Bepul va ochiq kod (Apache 2.0) · Maqsadi: Veb-saytlar va API…
Proxy (interceptor) Brauzer va server orasidagi trafikni ushlab, o‘zgartirib, qayta yuborish
Avtomatik skaner Saytni avtomatik “o‘rmalab” (crawl) chiqib, barcha sahifalardagi zaifliklarni tekshiradi
Passiv skaner Trafikni tinglab, hech qanday o‘zgartirish kiritmasdan zaifliklarni aniqlaydi
Fuzzer Formalar va parametrlarga turli xil xavfli maʼlumotlarni (SQL, XSS) yuborib, xatoliklarni kuzatadi
Breakpoint So‘rovni to‘xtatib, uni qo‘lda tahrirlash imkoniyati
Spider (o‘rmalovchi) Saytdagi barcha havolalarni avtomatik yig‘ib, xaritani tuzadi
API tekshirish REST, SOAP, GraphQL larni skanerlaydi
HUD (Heads-Up Display) Brauzer ichida ishlaydigan vizual interfeys (tajriba uchun qulay)
Authentication support Forma va SSO orqali kirishni qo‘llab-quvvatlab, sessiyani saqlaydi
Script yozish JavaScript, Python, Groovy da o‘z skriptlaringizni qo‘shishingiz mumkin
Avtomatik skaner Saytni avtomatik “o‘rmalab” (crawl) chiqib, barcha sahifalardagi zaifliklarni tekshiradi
Passiv skaner Trafikni tinglab, hech qanday o‘zgartirish kiritmasdan zaifliklarni aniqlaydi
Fuzzer Formalar va parametrlarga turli xil xavfli maʼlumotlarni (SQL, XSS) yuborib, xatoliklarni kuzatadi
Breakpoint So‘rovni to‘xtatib, uni qo‘lda tahrirlash imkoniyati
Spider (o‘rmalovchi) Saytdagi barcha havolalarni avtomatik yig‘ib, xaritani tuzadi
API tekshirish REST, SOAP, GraphQL larni skanerlaydi
HUD (Heads-Up Display) Brauzer ichida ishlaydigan vizual interfeys (tajriba uchun qulay)
Authentication support Forma va SSO orqali kirishni qo‘llab-quvvatlab, sessiyani saqlaydi
Script yozish JavaScript, Python, Groovy da o‘z skriptlaringizni qo‘shishingiz mumkin
👍4😱1
CyberPythonUZ
Proxy (interceptor) Brauzer va server orasidagi trafikni ushlab, o‘zgartirib, qayta yuborish Avtomatik skaner Saytni avtomatik “o‘rmalab” (crawl) chiqib, barcha sahifalardagi zaifliklarni tekshiradi Passiv skaner Trafikni tinglab, hech qanday o‘zgartirish…
ZAP NI QAYERDAN O‘RNATISH MUMKIN?
· Rasmiy sayt: https://www.zaproxy.org/download/
· Kali Linux: apt install zaproxy
· Windows/Mac: Yuklab olish va o‘rnatish
· Rasmiy sayt: https://www.zaproxy.org/download/
· Kali Linux: apt install zaproxy
· Windows/Mac: Yuklab olish va o‘rnatish
www.zaproxy.org
ZAP – Download
The world’s most widely used web app scanner. Free and open source. ZAP is a community project actively maintained by a dedicated international team, and a GitHub Top 1000 project.
👍4
CyberPythonUZ
ZAP NI QAYERDAN O‘RNATISH MUMKIN? · Rasmiy sayt: https://www.zaproxy.org/download/ · Kali Linux: apt install zaproxy · Windows/Mac: Yuklab olish va o‘rnatish
OWASP ZAP BILAN ISHLASHDA MUHIM QOIDALAR
· FAQAT O‘ZINGIZGA TEGISHLI YOKI RUXSAT OLINGAN SAYTLARDA ISHLATING!
· “Active Scan” xavfli so‘rovlar yuboradi – maʼlumotlar bazasiga zarar yetkazishi mumkin.
· Passiv skaner xavfsizroq, lekin kamroq zaiflik topadi.
· Har doim hisobotni saqlang – dalil sifatida ishlatish mumkin.
· FAQAT O‘ZINGIZGA TEGISHLI YOKI RUXSAT OLINGAN SAYTLARDA ISHLATING!
· “Active Scan” xavfli so‘rovlar yuboradi – maʼlumotlar bazasiga zarar yetkazishi mumkin.
· Passiv skaner xavfsizroq, lekin kamroq zaiflik topadi.
· Har doim hisobotni saqlang – dalil sifatida ishlatish mumkin.
👍4