Forwarded from Sysadmin Tools 🇺🇦
Forwarded from infosecurity
Burp Automation | Automating Burp Scanning Via Rest API & Robot Framework Using Python3
https://infosecwriteups.com/burp-automation-automating-burp-scanning-via-rest-api-robot-framework-using-python3-78aebdd35c53
https://infosecwriteups.com/burp-automation-automating-burp-scanning-via-rest-api-robot-framework-using-python3-78aebdd35c53
Medium
Burp Automation | Automating Burp Scanning Via Rest API & Robot Framework Using Python3
Manual security scanning is very time consuming and we can leverage headless Burp Suite to perform the scanning and get the results…
Forwarded from #Beacon
Prototype Pollution leads to XSS & Tools for finding this vulnerability
Article in Russian: https://habr.com/ru/company/huawei/blog/547178/
Article in English: https://labs.detectify.com/2021/06/08/what-is-a-prototype-pollution-vulnerability-and-how-does-page-fetch-help/
Tools:
[1] https://github.com/Raywando/ppscanner
[2] https://github.com/KathanP19/protoscan
[3] https://github.com/kleiton0x00/ppmap
[4] https://github.com/dwisiswant0/ppfuzz
Article in Russian: https://habr.com/ru/company/huawei/blog/547178/
Article in English: https://labs.detectify.com/2021/06/08/what-is-a-prototype-pollution-vulnerability-and-how-does-page-fetch-help/
Tools:
[1] https://github.com/Raywando/ppscanner
[2] https://github.com/KathanP19/protoscan
[3] https://github.com/kleiton0x00/ppmap
[4] https://github.com/dwisiswant0/ppfuzz
Forwarded from #Beacon
HTTP/H2C/WS/H2 Smuggling tools
[1] https://github.com/BishopFox/h2csmuggler
[2] https://github.com/defparam/smuggler
[3] https://github.com/hahwul/websocket-connection-smuggler
[4] https://github.com/hahwul/ws-smuggler
[5] https://github.com/neex/http2smugl
[6] https://github.com/anshumanpattnaik/http-request-smuggling
[7] https://github.com/PortSwigger/http-request-smuggler
[8] DEFCON 2020 TOOL - https://github.com/SafeBreach-Labs/HRS
[1] https://github.com/BishopFox/h2csmuggler
[2] https://github.com/defparam/smuggler
[3] https://github.com/hahwul/websocket-connection-smuggler
[4] https://github.com/hahwul/ws-smuggler
[5] https://github.com/neex/http2smugl
[6] https://github.com/anshumanpattnaik/http-request-smuggling
[7] https://github.com/PortSwigger/http-request-smuggler
[8] DEFCON 2020 TOOL - https://github.com/SafeBreach-Labs/HRS
GitHub
GitHub - BishopFox/h2csmuggler: HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
HTTP Request Smuggling over HTTP/2 Cleartext (h2c) - BishopFox/h2csmuggler
Forwarded from Заметки Хакер
📜 Шаг за шагом
✏️ Автоматизируем многоходовые атаки в Burp Suite
#CoverStory
Архив всех отобранных статей
✏️ Автоматизируем многоходовые атаки в Burp Suite
#CoverStory
Архив всех отобранных статей
Forwarded from Заметки Хакер
Шаг за шагом (Xakep, 266, 8-9).pdf
1.4 MB
Forwarded from RedBlueTM Hit (./TaK.FaNaR)
ChefSecure-The-Ultimate-XSS-Training-Course.23.10.rar
1.7 GB
ChefSecure Ultimate XSS training
info: chefsecure.com/courses/xss
Password: @redbluehit
@RedBlueHit 💀👀
@RedBlueTM 🔒
info: chefsecure.com/courses/xss
Password: @redbluehit
@RedBlueHit 💀👀
@RedBlueTM 🔒
Forwarded from Поросёнок Пётр
Батя XSS начал обкашливать SSRF и привносить интересные кейсы к привычным вордлистам. Мне кажется можно даже пойти взять публичные дисклоузнутые репорты. И что-то из этого обязательно байпаснет 🙂
https://medium.com/@rodoassis/on-ssrf-server-side-request-forgery-or-simple-stuff-rodolfo-found-part-i-4edf7ee75389
https://medium.com/@rodoassis/on-ssrf-server-side-request-forgery-or-simple-stuff-rodolfo-found-part-i-4edf7ee75389
Medium
On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found — Part I
I think the most we have to test against an application the better. But as you can see by yourself (correct me if I’m wrong please) the…
Forwarded from Поросёнок Пётр
Впервые вижу баг-баунти программу где "можно всё!". Респект таким компаниям, которые понимаю что секьюрити это не только <script>alert('Where is my bounty sir?');</scritp>