Forwarded from Punt4n0
Windows Privilege Escalation for OSCP Beyond.zip
556.1 MB
Pass: WithLove2023
Linux Privilege Escalation For OSCP & Beyond.zip
1.8 GB
Pass: WithLove2023
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from SHADOW:Group
This media is not supported in your browser
VIEW IN TELEGRAM
В прикрепленном видео вы узнаете как была найдена хранимая XSS в Google Books, а по данной ссылке можете ознакомиться с полным рассказом от исследователя.
P.S. шутки про XSS на главной гугла, перестают быть таким уж и шутками…
Ссылка на статью
Ссылка на видео
#web #xss
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from white2hack 📚
Source Code Management Platform Configuration Best Practices
Collaborative source code management platforms (such as GitHub and GitLab) play a critical role in modern software development, providing a central repository for storing, managing, and versioning source code as well as collaborating with a community of developers. However, they also represent a potential security risk if not properly configured. In this guide, we will explore the best practices for securing these platforms, covering topics that include user authentication, access control, permissions, monitoring, and logging.
Source
#docs
Collaborative source code management platforms (such as GitHub and GitLab) play a critical role in modern software development, providing a central repository for storing, managing, and versioning source code as well as collaborating with a community of developers. However, they also represent a potential security risk if not properly configured. In this guide, we will explore the best practices for securing these platforms, covering topics that include user authentication, access control, permissions, monitoring, and logging.
Source
#docs
👍1
Forwarded from CyberSecurityTechnologies (-CST-)
Docker_sec.pdf
3.4 MB
Forwarded from CyberSecBastion 📖
Developers Guide to OWASP TOP 10 API Vulnerabilities & MITRE ATT&CK Framework Relation, 2023
The OWASP API Security Top 10 is a list of the most common and critical risks that organizations face when developing and exposing APIs (Application Programming Interfaces). APIs allow different systems and applications to communicate with each other, and are often used to expose data and functionality to external parties. However, exposing APIs can also introduce a variety of security risks if not properly secured. The OWASP API Security Top 10 aims to provide guidance on the most important security risks to consider when developing and exposing APIs.
#API
The OWASP API Security Top 10 is a list of the most common and critical risks that organizations face when developing and exposing APIs (Application Programming Interfaces). APIs allow different systems and applications to communicate with each other, and are often used to expose data and functionality to external parties. However, exposing APIs can also introduce a variety of security risks if not properly secured. The OWASP API Security Top 10 aims to provide guidance on the most important security risks to consider when developing and exposing APIs.
#API
Forwarded from CyberSecBastion 📖
Developers_Guide_to_OWASP_TOP_10_API_Vulnerabilities_&_MITRE_ATT&CK.pdf
5.6 MB
Developers Guide to OWASP TOP 10 API Vulnerabilities & MITRE ATT&CK Framework Relation, 2023
Forwarded from CyberSecurityTechnologies (-CST-)
#tools
#hardening
Kernel-hardening-checker - tool for checking the security hardening options of the Linux kernel
https://github.com/a13xp0p0v/kernel-hardening-checker
#hardening
Kernel-hardening-checker - tool for checking the security hardening options of the Linux kernel
https://github.com/a13xp0p0v/kernel-hardening-checker
Forwarded from CyberSecurityTechnologies (-CST-)
#info
AI Vulnerability Database:
An open-source, extensible knowledge base of AI failures
https://avidml.org
AI Vulnerability Database:
An open-source, extensible knowledge base of AI failures
https://avidml.org
Forwarded from Order of Six Angles
преза по фазингу от quarkslab
https://github.com/quarkslab/conf-presentations/blob/master/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf
https://github.com/quarkslab/conf-presentations/blob/master/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf
GitHub
conf-presentations/Confs/ntopconf-2023/ntopconf-2023-fuzzing-ntop-rmori.pdf at master · quarkslab/conf-presentations
Quarkslab conference talks. Contribute to quarkslab/conf-presentations development by creating an account on GitHub.
Forwarded from Волосатый бублик
#golang #grpc #c2 #reverse #socks
[ GRPCSSH ]
https://github.com/zimnyaa/grpcssh
https://tishina.in/ops/grpcssh
[ GRPCSSH ]
grpc-ssh-socks is a primitive, but easy-to-understand implementation of reverse SOCKS over gRPC-encapsulated SSH. in grpcssh, this is used to create a PoC *nix implant with a full-pty reverse shell and a reverse proxy.Thanks to: @zimnyaatishina
https://github.com/zimnyaa/grpcssh
https://tishina.in/ops/grpcssh
👍1
BugXplorer
wstg-v4.2.pdf
OWASP WSTG v5.0 in development phase.
https://github.com/OWASP/wstg/blob/master/document/README.md
https://owasp.org/www-project-web-security-testing-guide/latest/
https://github.com/OWASP/wstg/blob/master/document/README.md
https://owasp.org/www-project-web-security-testing-guide/latest/
GitHub
wstg/document/README.md at master · OWASP/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services. - OWASP/wstg
Forwarded from Offensive Xwitter
Не проксичейнсом едины!
Так-так-так, други. Вангую, вы уже давно искали переносимую альтернативупидорский Golang?.. На удивление, такая альтернатива есть – вот чему сегодня научили коллеги:
🔗 https://github.com/hmgle/graftcp
Выше пример с неработавшим ранее (через проксичейнс) go-windapsearch ⏫
Так-так-так, други. Вангую, вы уже давно искали переносимую альтернативу
proxychains[-ng], да которая бы еще и работала не на LD_PRELOAD-хуках, чтобы уметь редиректить 🔗 https://github.com/hmgle/graftcp
Выше пример с неработавшим ранее (через проксичейнс) go-windapsearch ⏫