ExploitHub – Telegram

ExploitHub

6.35K subscribers

18 photos

1 video

15 files

350 links

Download Telegram

About

Blog

Apps

Platform

6.35K subscribers

Resources:

[+] CTF Calender:
http://ctftime.org

[+] Write-ups to learn CTF
https://github.com/ctfs/

[+] How to start CTF
https://trailofbits.github.io/ctf/

[+] Starter CTF
https://picoctf.com
https://ctf.tamu.edu
https://www.easyctf.com/

[+] Hard CTF
http://plaidctf.com
https://ctf.hitcon.org
https://ctf.csaw.io/
http://dragonsector.pl/

[+] PHP Challenge (Real World CTF)
https://hackmd.io/s/rJlfZva0m

[+] Networking / Linux Challenges
http://overthewire.org/wargames/

[+] VPS (Virtual Private Server)
https://digitalocean.com

[+] Hack The Box (Pentesting style CTF)
http://hackthebox.eu

[+] Web Application CTF
http://websec.fr

[+] Binary Exploitation CTF
https://pwnable.kr
https://pwnable.tw

[+] Reverse Engineering CTF
https://reversing.kr

[+] Cryptography
https://cryptopals.com
https://www.coursera.org/learn/crypto

[+] InfoSec Youtube Channels:
https://www.youtube.com/user/GynvaelE...
https://www.youtube.com/channel/UClcE...
https://www.youtube.com/user/OpenSecu...
https://www.youtube.com/channel/UC--D...
https://www.youtube.com/channel/UCSLl...

[+] For Security News:
https://www.reddit.com/r/netsec
https://www.reddit.com/r/securityCTF

CTFtime.org / All about CTF (Capture The Flag)

Capture The Flag, CTF teams, CTF ratings, CTF archive, CTF writeups

6.92K viewsedited 03:03

https://github.com/ghsec/webHunt

GitHub - ghsec/webHunt: Web App bug hunting

Web App bug hunting . Contribute to ghsec/webHunt development by creating an account on GitHub.

3.93K views12:55

[ Talks (Bug Bounty) ] :
1. Bug Bounty Field Manual (Adam Bacchus) =
https://www.youtube.com/watch?v=aNyK1yVLLRI
2. Tales of a Bug Bounty Hunter (Arne Swinnen) =
https://www.youtube.com/watch?v=Ehq6ofUbslI
3. Doing Recon Like a Boss (Ben Sadeghipour) : https://www.youtube.com/watch?v=1Kg0_53ZEq8
4. Bug Bounty Hunters Lessons From Darth Vader = https://www.youtube.com/watch?v=DB42tvvJhHw
5. Attacking Modern Web Technologies (Frans Rosén) = https://www.youtube.com/watch?v=vRqcUS4CPFs
6. How to Win Over Security Teams and Gain Influence (Frans Rosén) = https://www.youtube.com/watch?v=Uyjkgsu-mrU
7. Bug Bounty Hunting Methodology V3 (Jason Haddix) = https://www.youtube.com/watch?v=Qw1nNPiH_Go
8. Bug Bounty Hunting Methodology V2 (Jason Haddix) =
https://www.youtube.com/watch?v=C4ZHAdI8o1w
9. How to Shot Web V2 (Jason Haddix) = https://www.youtube.com/watch?v=-FAjxUOKbdI
10. How to Differentiate Yourself as a Bug Hunter (Mathias Karlsson) = https://www.youtube.com/watch?v=WTH6f0R7uzo
11. Screw Becoming A Pentester I Want To Be A Bug Bounty Hunter! = https://www.youtube.com/watch?v=ceJG4k27dcQ
12. Hunting for Top Bounties (Nicolas Grégoire) = https://www.youtube.com/watch?v=mQjTgDuLsp4

Bug Bounty Field Manual - Cliff Notes from the Author Adam Bacchus

Download the guide now! https://www.hackerone.com/resources/bug-bounty-field-manual

The Bug Bounty Field Manual is the most comprehensive, educational, practical, and valuable resource ever about the ins and outs of running a successful bug bounty program.…

6.03K views14:13

All ONLINE WEBSITE LINK FIR TEST XSS HERE:

https://alf.nu/alert1
http://prompt.ml/0
https://xss-quiz.int21h.jp/
http://sudo.co.il/xss/
https://web.archive.org/web/20190617111911/https://polyglot.innerht.ml/
http://vulnweb.com/
https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project
https://hack.me/t/XSS
https://github.com/cure53/XSSChallengeWiki/wiki

4.28K viewsedited 17:59

Pentest Tips & Tricks:

https://jivoi.github.io/2015/07/01/pentest-tips-and-tricks/

Pentest Tips and Tricks

Pentest Handy Tips and Tricks.

3.99K views05:14

https://clickjacker.io/clickjacking-tutorial

3.9K views05:26

Confused by DNS Records? A, CNAME, ALIAS...
https://twitter.com/chrisachard/status/1188870256971915265

Confused by DNS Records? A, CNAME, ALIAS... Me too 😬 Let's change that! (cheatsheet at the end) 🔥 DNS Record crash course for web developers 👇

4.01K views05:56

BURP Extensions:

https://github.com/alphaSeclab/awesome-burp-suite/blob/master/Readme_en.md

awesome-burp-suite/Readme_en.md at master · alphaSeclab/awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos. - alphaSeclab/awesome-burp-suite

4.68K views04:02

https://medium.com/@int0x33/upload-htaccess-as-image-to-bypass-filters-71dfcf797a86

Day 22: Upload .htaccess as image to bypass filters

Changing file headers for upload and changing values with intercepting proxies is at the core of most remote web hacking, there are so…

3.86K views18:25

https://medium.com/@sudhanshur705/bug-hunting-journey-of-2019-95e5190aca7c?

Bug Hunting Journey of 2019

Heyyy Everyoneee,

3.59K views02:18

3.62K views04:21

https://community.turgensec.com/ssh-hacking-guide

3.88K views04:21

https://medium.com/cyberverse/earn-bounty-with-http-request-smuggling-attack-c68b4f2db363

Earn Bounty !! with HTTP request smuggling attack.

HTTP request smuggling is an attack in which an attacker interferes with the processing of a sequence of HTTP requests that a web…

3.68K views10:09

https://brutelogic.com.br/blog/testing-for-xss-like-a-knoxss/

Testing for XSS (Like a KNOXSS)

Testing for Cross-Site Scripting (XSS) might seem easy at first sight, with several hacking tools automating this process. But regardless of how tests to find a XSS are performed, automated or manually, here we will see a step-by-step procedure to try to…

3.75K views10:15

https://rafiem.github.io/bugbounty/tokopedia/site-wide-csrf-graphql/

3.84K views05:03

12 Ways to Hack 2FA

https://youtu.be/QJL63_LO6c8

💉 @ExploitHub

12 Ways to Hack 2FA

Roger Grimes, Data-Driven Defense Evangelist, KnowBe4, Inc.

Passwords are finally being left behind in favor of two-factor (2FA) and multifactor (MFA) authentication. Some vendors are promoting “unhackable” 5FA solutions. It’s all a lie. All authentication…

3.94K views17:56

Very cool XXE bug in a Web Service
https://medium.com/@soyelmago/very-cool-xxe-bug-in-a-web-service-85bfaa5b035c

Very cool XXE bug in a Web Service

XXE offers a great attack avenue for reading files from a vulnerable Web Apps. I found an XXE bug in a SOAP Web Service during a pentest…

3.82K views07:38

Huge repo for all security collections - https://github.com/SecOpsTeam

SecOpsTeam - Overview

https://t.me/SecOpsTeam. SecOpsTeam has 38 repositories available. Follow their code on GitHub.

3.38K viewsedited 05:29

Bug Bounty Platform:

https://www.hackerone.com/
https://www.bugcrowd.com/
https://www.openbugbounty.org/
https://www.cesppa.com/

https://www.yeswehack.com/
https://www.intigriti.com/
https://hackenproof.com/
https://safehats.com/
https://bugbounty.jp/

https://www.synack.com/
https://www.antihack.me/
https://Cobalt.io

https://www.bountysource.com
https://cs.detectify.com/

HackerOne | Global leader in offensive security | Security for AI | Crowdsourced Security

HackerOne combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the SDLC. HackerOne offers AI red teaming, crowdsourced security, bug bounty, vulnerability disclosure…

6.2K viewsedited 05:32

https://www.youtube.com/watch?v=QV80pD0wZsE&feature=youtu.be

Bounty: $1000

Bumble account takeover PoC

https://hackerone.com/reports/743545

3.4K viewsedited 07:51

Search Query:
language for reverse engineering

Results:
Is Assembly the only language for Reverse engineering and cracking ...

Jun 3, 2016 - To answer your question, we need first to understand why almost all software reverse engineering are done to the executable's assembly instruction, why not in ...

Programming language for reverse engineering - Stack Overflow

Feb 7, 2016 - No, you will not be a sensible reverse engineer without programming knowledge. Learn the assembly language of the target system running ...

CamSec - Basic Assembly for Reverse Engineering - YouTube
A talk from the CamSec meeting at The Centre for Computing History about the basics of Assembly Language ...

Reverse-Engineering | Computerworld

Nov 12, 2001 - Reverse-engineering is especially important with computer hardware and software. Programs are written in a language, say C++ or Java, that's ...

Reverse Engineering for Beginners [pdf]

5 days ago - The language statistics is available right here: https://beginners.re/. ... Reverse engineers can encounter either version, simply because some ...

Programming languages for reverse engineering? - NextGenUpdate

Hello there, I am a new member and I want to know what programming languages are essential for someone who wants to learn reverse ...

Reverse Engineering Resources-Beginners to intermediate ...

Jan 2, 2019 - While i wanted to learn up reverse engineering , I started hunting up for blogs, I wish to ... Detecting programming language from a snippet.

The Power of Reverse Engineering - The Software Guild

Nov 21, 2016 - The Power of Reverse Engineering will explore how reverse ... how programming languages are often used and how a developer can use ...

x86 Assembly Language Applicable To Reverse Engineering ...

Oct 15, 2012 - x86 Assembly Language Applicable To Reverse Engineering: The ... The x86 Assembly language or ASM is the lowest-level programming ...

Basic help for reverse engineering for a newbie - Reverse ...

Mar 7, 2016 - I am familier to x86 asm language ,linux internasl,and c language . ... Also the book Practical Reverse Engineering has some really nice reviews but I didn't have a ... Download and read Reverse Engineering for Beginners.

Is Assembly the only language for Reverse engineering and cracking ?

Answer (1 of 2): To answer your question, we need first to understand why almost all software reverse engineering are done to the executable’s assembly instruction, why not in any other high level language.

Any High Level Language software, when compiled…

4.1K views16:07