⚫️100 Useful shortcut keys in ZAP (OWASP Zed Attack Proxy):

1. Ctrl+O: Open file
2. Ctrl+S: Save file
3. Ctrl+N: New session
4. Ctrl+Q: Quit ZAP
5. Ctrl+R: Refresh
6. Ctrl+Shift+N: New tab
7. Ctrl+Tab: Switch to next tab
8. Ctrl+Shift+Tab: Switch to previous tab
9. Ctrl+W: Close tab
10. Ctrl+Shift+W: Close all tabs
11. Ctrl+T: Start/Stop scanning
12. Ctrl+G: Generate report
13. Ctrl+Shift+G: Generate report with parameters
14. Ctrl+H: Show/hide the attack panel
15. Ctrl+Shift+H: Show/hide the HTTP panel
16. Ctrl+P: Show/hide the parameters panel
17. Ctrl+Shift+P: Show/hide the parameters panel and reset the parameters
18. Ctrl+U: Show/hide the user interface panel
19. Ctrl+B: Show/hide the breakpoints panel
20. Ctrl+F: Find text
21. Ctrl+Shift+F: Find next occurrence
22. Ctrl+Alt+F: Find previous occurrence
23. Ctrl+Z: Undo
24. Ctrl+Y: Redo
25. Ctrl+A: Select all
26. Ctrl+X: Cut
27. Ctrl+C: Copy
28. Ctrl+V: Paste
29. Ctrl+Shift+V: Paste special
30. Ctrl+D: Duplicate
31. Ctrl+K: Delete
32. Ctrl+Shift+K: Delete all
33. Ctrl+I: Intercept on/off
34. Ctrl+Shift+I: Reissue last request
35. Ctrl+L: Spider
36. Ctrl+Shift+L: Spider and attack
37. Ctrl+J: Forced browsing
38. Ctrl+Shift+J: Forced browsing and attack
39. Ctrl+M: Active scan
40. Ctrl+Shift+M: Active scan and attack
41. Ctrl+X: Exclude from scan
42. Ctrl+E: Exclude from spider
43. Ctrl+R: Reenable selected items
44. Ctrl+Shift+X: Reenable all items
45. Ctrl+Shift+E: Reenable all excluded items
46. Ctrl+Shift+R: Reset session
47. F1: Show help
48. F5: View/fuzz last request/URL
49. F6: View/fuzz history URLs
50. F7: View/fuzz URLs in sitemap
51. F8: View/fuzz site map URLs
52. F9: View/fuzz site tree URLs
53. F10: View/fuzz sites URLs
54. F11: View/fuzz context URLs
55. F12: View/fuzz include URLs
56. Alt+F4: Close ZAP
57. Alt+F: File menu
58. Alt+E: Edit menu
59. Alt+V: View Menu
60. Alt+S: Session menu
61. Alt+H: Tools menu
62. Alt+T: Reports menu
63. Alt+O: Options menu
64. Alt+H: Help menu
65. Alt+1: Switch to Home tab
66. Alt+2: Switch to Alerts tab
67. Alt+3: Switch to Sites tab
68. Alt+4: Switch to History tab
69. Alt+5: Switch to Scope tab
70. Alt+6: Switch to Proxy tab
71. Alt+7: Switch to Spider tab
72. Alt+8: Switch to Active Scan tab
73. Alt+9: Switch to Fuzzer tab
74. Alt+0: Switch to Scripts tab
75. Alt+Shift+1: Switch to Filters tab
76. Alt+Shift+2: Switch to Find tab
77. Alt+Shift+3: Switch to Breakpoints tab
78. Alt+Shift+4: Switch to Output tab
79. Alt+Shift+5: Switch to Parameters tab
80. Alt+Shift+6: Switch to Request tab
81. Alt+Shift+7: Switch to Response tab
82. Alt+Shift+8: Switch to Break tab
83. Alt+Shift+9: Switch to Attack tab
84. Alt+Shift+0: Switch to Note tab
85. Shift+F5: View/fuzz in scope URLs
86. Shift+F6: View/fuzz out of scope URLs
87. Shift+F7: View/fuzz fuzz URLs
88. Shift+F8: View/fuzz hidden URLs
89. Shift+F9: View/fuzz wildcard URLs
90. Shift+F10: View/fuzz regexp URLs
91. Shift+F11: View/fuzz HTTP URLs
92. Shift+F12: View/fuzz AJAX URLs
93. Shift+Ctrl+S: Save session
94. Shift+Ctrl+A: Open recent session
95. Shift+Ctrl+Q: Quit ZAP with prompt
96. Shift+Ctrl+R: Reopen last closed tab
97. Shift+Ctrl+C: Close current tab
98. Shift+Ctrl+P: View in browser
99. Shift+Ctrl+E: Export to context menu
100. Shift+Ctrl+U: Import from context menu

🎩 https://t.me/DevCyberSecurity

https://drive.google.com/file/d/1KrrbLl-99uFg0KS6DpHEhjdzUseDRvfx/view?usp=drive_link

Blackwin OS LINK Here👆🏾

by https://t.me/DevCyberSecurity

whatsapp_hacking_qrl:

🔰 HACK WHATSAPP WITH QRL JACKING 🔰

🔲 QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers. 🔲


🔶 Installation 🔷

apt update && apt install git

apt install python && apt install python3

pip install --upgrade pip

git clone https://github.com/OWASP/QRLJacking.git

cd QRLJacking

cd QRLJacker

chmod +x *

pip install -r requirements.txt

python3 QrlJacker.py

━━━━━━━━━━━━━━━━━━━━━━━━

`•....


YouTube channel 👉



https://www.youtube.com/channel/UCTscVHNT4BjfsnuG_t9KMOg?sub_confirmation=1

Here's the list of bug hunting tools:

1. Burp Suite 🐛
2. OWASP ZAP (Zed Attack Proxy) 🛡
3. Nmap 🌐
4. Metasploit 🛠
5. Wireshark 🖥
6. Nikto 🕵️‍♂️
7. SQLMap 🗺
8. Acunetix 🕷
9. Nessus 🚀
10. OpenVAS 🚪
11. BeEF (Browser Exploitation Framework) 🐄
12. Shodan 🔍
13. Wfuzz 🌀
14. DirBuster 🚪
15. XSStrike 💥
16. SQLMate 🤝
17. Sublist3r 🎯
18. Hydra 🐍
19. Skipfish 🐟
20. Recon-ng 🕵️‍♂️
21. Masscan 🛰
22. Wappalyzer 📊
23. Gitrob 🕵️‍♂️
24. Gobuster 🔦
25. XSSer 💢
26. Joomscan 🕵️‍♂️
27. WPScan 🔍
28. EyeWitness 👀
29. Fiddler 🎻
30. sqlninja 🥷
31. Vega 🌟
32. Arachni 🕷
33. DirSearch 🔍
34. httrack 🏃‍♂️
35. CMSmap 🗺
36. DVWA (Damn Vulnerable Web Application) 😈
37. Docker Bench for Security 🐋
38. Amass 📈
39. WPScan 🔍
40. Zed Attack Proxy 🛡
41. SonarQube 🛡
42. ClamAV 🦪
43. OSSEC 🔐
44. Tripwire 🛡
45. AIDE (Advanced Intrusion Detection Environment) 🛡
46. Fail2Ban 🚫
47. Lynis 🐧
48. Snort 🐽
49. Suricata 🦈
50. Security Onion 🧅

Happy bug hunting!

https://t.me/DevCyberSecurity

🔰 Hydra
━━━━━━━━━━━━━━━━━━
hackethics138
━━━━━━━━━━━━━━━━━━
Hydra: Password-cracking tool for brute-force attacks on login systems.
━━━━━━━━━━━━━━━━━━
Installation:

apt install proot-distro

proot-distro list

proot-distro install ubuntu

proot-distro login ubuntu

apt update

apt upgrade -y

apt install hydra -y

hydra -h
━━━━━━━━━━━━━━━━━━━━━━━━
Always log in to Ubuntu if you want to use Hydra.

proot-distro login ubuntu

hydra -h
━━━━━━━━━━━━━━━━━━━━━━━
Usage:

./hydra -l admin -p password ftp://localhost/

./hydra -L adminlist.txt -p test ftp://localhost/ 

hydra -l admin -P passwords.txt ftp://localhost/

hydra -L logins.txt -P passwords.txt ftp://localhost/

In Hydra, lowercase (-L) for usernames, uppercase (-p) for wordlists. Example:
hydra -L login.txt -p adminlogin ftp://example/
━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  ♥️  Telegram Channel - ♥️

https://t.me/DevCyberSecurity

How To Make Fud Metasploit Payload; 2023 Method

Today We are Going To Learn How To Make Full Undetected Payload of metasploit payload, and we will try to bypass Antivirus So, First we need to create Metasploit payload then we will make fud. read more

⚜️Covered in contents
1. Why we need to make fud?
2. Why hackers make fud malware
3. Antivirus bypass
4. Easy Steps
5. Available Free Requirements
6. Demo Practically Video available

🙏 Learn Now
https://www.xploitpoison.com/2022/11/make-fud-metasploit-payload.html

❤️ Created by ❤️ -:

https://t.me/DevCyberSecurity

اداة اختراق كاميرة اي هاتف بالطريقة الصحيحة عبر اداة WishFish علي تطبيق Termux

• لتثبيت الاداة ❤️✨

apt update

apt upgrade

apt install php

apt install wget

apt install openssh

git clone https://github.com/kinghacker0/WishFish

• لفتح الاداة ❤️✨

cd Wishfish

bash wishfish.sh

🔖#SEARCH ENGINES FOR PENTESTERS

01. shodan.io —> (Server , Vulnerabilities)
02. google.com —> (Dorks)
03. wigle.net —> (Wifi Networks)
04. grep.app —> (Codes Search)
05. app.binaryedge.io —> (Threat Intelligence)
06. onyphe.io —> (Server)
07. viz.greynoise.io —> (Threat Intelligence)
08. censys.io —> (Server)
09. hunter.io —> (Email Addresses)
10. fofa.info —> (Threat Intelligence)
11. zoomeye.org —> (Threat Intelligence)
12. leakix.net —> (Threat Intelligence)
13. intelx.io —> (OSINT)
14. app.netlas.io —> (Attack Surface)
15. searchcode.com —> (Code Search)
16. urlscan.io —> (Threat Intelligence)
17. publicwww.com —> (Code Search)
18. fullhunt.io —> (Attack Surface)
19. socradar.io —> (Threat Intelligence)
20. binaryedge.io —> (Attack Surface)
21. ivre.rocks —> (Server)
22. crt.sh —> (Certificate Search)
23. vulners.com —> (Vulnerabilities)
24. pulsedive.com —> (Threat Intelligence)

— Share & Support Us —

https://t.me/DevCyberSecurity

⚙️Some Useful Website Collection⚙️

1. www.codecademy.com 
2. www.lynda.com 
3. www.udemy.com 
4. www.udacity.com 
5. www.coursera.org 
6. www.w3schools.com 
7. www.thenewboston.org 
8. www.programmr.com 
9. www.codeavengers.com 
10. www.codeschool.com 
12. www.teamtreehouse.com 
13. www.sqlzoo.net 
14. www.codehs.com 
15. www.teamtreehouse.com 
16. www.html5rocks.com 
17. www.codepen.io 
18. www.sitepoint.com 
19. www.tutorialspoint.com 
20. www.javatpoint.com 
21. www.cplusplus.com 
22. www.learncpp.com 
23. www.tutorialspoint.com 
24. www.cprogramming.com 
25. www.stackoverflow.com 
26. www.learncodethehardway.org 
27. www.bloc.io 
28. www.howtocode.io 
29. www.edx.org 
30. www.instructables.com 
31. www.developer.apple.com 
32. www.developer.android.com 
33. www.developers.google.com 
34. www.developer.mozilla.org 
35. www.msdn.microsoft.com 
36. www.decompera.com 
37. www.www.developphp.com 
38. www.quackit.com 
39. www.htmlite.com 
40. www.siteduzero.com 
41. www.dreamincode.net 
42. www.phpbuddy.com 
43. www.php.net 
44. www.microsoftvirtualacademy.com
45. www.professormesser.com

The Complete Job Search

Download Link :-
https://mega.nz/folder/8rNmkDDb#pG5KUjhZYY_pNFsDiF3UOA

Posted by 👉https://t.me/DevCyberSecurity

Hacking e-Books

Download :
https://mega.nz/folder/RmtD2SoK#fG34YOkwFPRh1la2qlNafA




Posted by 👉 Hacking e-Books

Download :
https://mega.nz/folder/RmtD2SoK#fG34YOkwFPRh1la2qlNafA

https://t.me/DevCyberSecurity

Email & Username OSINT have many crossovers due to the methodology of say, using the first part of an email as an username. It is fair to say that this is a lucrative business and some resources start of as free but then bring in a payment structure. Some of the below may need you to sign up for a free account, some platforms offer a free trial. Don't forget Google advanced searching is another option, websites can be searched by simply manipulating the URL structure to include the username in the domain. Also don't forget to manipulate the username itself, replace O with a 0 for example.



👉https://github.com/cqcore/Email-Username-OSINT?tab=readme-ov-file