HackerOne
@HackerOne
11.4K subscribers
647 photos
31 videos
79 files
2.77K links
Community : @Sec0x01
@Bug0x
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
11.4K subscribers
HackerOne
https://github.com/realgam3/pymultitor
GitHub
GitHub - realgam3/pymultitor: PyMultitor - Python Multi Threaded Tor Proxy
PyMultitor - Python Multi Threaded Tor Proxy. Contribute to realgam3/pymultitor development by creating an account on GitHub.
1.76K viewsMir Saman Tajbakhsh, 
HackerOne
Forwarded from Mir Saman Tajbakhsh
📀 Santoku Linux for mobile security researchers.
* Mobile Malware Analysis
* Mobile Forensics
* Mobile Security Testing

More info and download:
https://santoku-linux.com
115 viewsMir Saman Tajbakhsh, 
HackerOne
http://martin.uy/blog/projects/reverse-engineering/
1.22K viewsB14CK SPID3R, 
HackerOne
HackerOne
http://martin.uy/blog/projects/reverse-engineering/
Reverse Engineering open course! This course is a journey into executable binaries and operating systems from 3 different angles:
1) Malware analysis
2) Bug hunting
3) Exploit writing
Both Windows and Linux x86/x86_64 platforms are under scope.
1.24K viewsB14CK SPID3R, edited  
HackerOne
Android Applications Reversing 101
https://www.evilsocket.net/2017/04/27/Android-Applications-Reversing-101/
evilsocket
Android Applications Reversing 101
Every day we see a bunch of new Android applications being published on the Google Play Store, from games, to utilities, to IoT devices clients and so forth, al
1.24K viewsB14CK SPID3R, 
HackerOne
https://github.com/Quitten/Autorize
GitHub
GitHub - Quitten/Autorize: Automatic authorization enforcement detection extension for burp suite written in Jython developed by…
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa...
1.05K viewsB14CK SPID3R, 
HackerOne
https://github.com/a0xnirudh/kurukshetra
GitHub
GitHub - a0xnirudh/kurukshetra: Kurukshetra - A framework for teaching secure coding by means of interactive problem solving.
Kurukshetra - A framework for teaching secure coding by means of interactive problem solving. - a0xnirudh/kurukshetra
1.25K viewsMir Saman Tajbakhsh, 
HackerOne
FireShodanMap is a Realtime map that integrates Firebase, Google Maps and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All data updated in Firebase are Realtime.

https://github.com/Warflop/FireShodanMap
GitHub
GitHub - Warflop/FireShodanMap: FireShodanMap is a Realtime map that integrates Firebase, Google Maps and Shodan. A search is carried…
FireShodanMap is a Realtime map that integrates Firebase, Google Maps and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All ...
1.26K viewsMir Saman Tajbakhsh, 
HackerOne
https://nimuxsec.com/language/en/2018/06/make-jupyter-more-secure
1.18K viewsMir Saman Tajbakhsh, 
HackerOne
https://github.com/berzerk0/Probable-Wordlists
GitHub
GitHub - berzerk0/Probable-Wordlists: Version 2 is live! Wordlists sorted by probability originally created for password generation…
Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular! - berzerk0/Probable-Wordlists
988 viewsB14CK SPID3R, 
HackerOne
ret2libc without function calls (x86)
https://hovav.net/ucsd/dist/geometry.pdf
1K viewsB14CK SPID3R, 
HackerOne
https://github.com/0x00-0x00/ShellPop
GitHub
GitHub - 0x00-0x00/ShellPop: Pop shells like a master.
Pop shells like a master. Contribute to 0x00-0x00/ShellPop development by creating an account on GitHub.
1.03K viewsB14CK SPID3R, 
HackerOne
http://www.hackingarticles.in/multiple-ways-to-get-root-through-writable-file/
Hacking Articles
Multiple Ways to Get root through Writable File
In Linux, everything is a file, including directories and devices that have permissions to allow or restricted three operations i.e. read/write/execute. When admin set permission
1.09K viewsB14CK SPID3R, 
HackerOne
https://blog.rapid7.com/2018/05/03/hiding-metasploit-shellcode-to-evade-windows-defender/
Rapid7
Hiding Metasploit Shellcode to Evade Windows Defender | Rapid7 Blog
If malware development is a cat-and-mouse game, then I would say that the industry creates some of the most terrifying hunters. Learn more.
1.19K viewsB14CK SPID3R, 
HackerOne
https://posts.specterops.io/the-tale-of-settingcontent-ms-files-f1ea253e4d39
Medium
The Tale of SettingContent-ms Files
As an attacker, initial access can prove to be quite the challenge against a hardened target. When selecting a payload for initial access…
1.1K viewsB14CK SPID3R, 
HackerOne
https://www.rotlogix.com/blog/2018/6/10/reverse-engineering-android-unity-games-part-one
1.26K viewsMir Saman Tajbakhsh, 
HackerOne
https://m.youtube.com/watch?v=8yFAkuZJ3tI
1.28K viewsAwdel, 
HackerOne
https://github.com/ekultek/zeus-scanner
GitHub
GitHub - Ekultek/Zeus-Scanner: Advanced reconnaissance utility
Advanced reconnaissance utility. Contribute to Ekultek/Zeus-Scanner development by creating an account on GitHub.
1.45K viewsMir Saman Tajbakhsh, 
HackerOne
Forwarded from Rayanfam (Sina)
Blog post about anti-anti-vm techniques 😊

https://rayanfam.com/topics/defeating-malware-anti-vm-techniques-cpuid-based-instructions/
Rayanfam Blog
Defeating malware’s Anti-VM techniques (CPUID-Based Instructions)
We write about Windows Internals, Hypervisors, Linux, and Networks.
77 viewsAwdel, 
HackerOne
New 'Lazy FP State Restore' Vulnerability Found in All Modern Intel CPUs
https://thehackernews.com/2018/06/intel-processor-vulnerability.html
The Hacker News
New 'Lazy FP State Restore' Vulnerability Found in All Modern Intel CPUs
New 'Lazy FP State Restore' vulnerability (CVE-2018-3665) has been discovered in Sandy Bridge and newer Intel processors
1.36K viewsAwdel, 
HackerOne
Proposed Security Patch: Replacement of use of SHA-1 in the SRP Client Proof with SHA-256
http://tracker.firebirdsql.org/browse/CORE-5788
1.11K viewsAwdel,