HackerOne
@hackerone
9.8K subscribers
633 photos
30 videos
76 files
2.69K links
Community : @Sec0x01
@Bug0x
Admin : @Offensive
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
9.8K subscribers
HackerOne
Forwarded from bZp
What is bZp ?

bZp (black ZERO project) is a penetration testing platform for android devices

bZp - Kernel:

Your device's kernel plus added many feature such as: external Wi-Fi support for wireless attacks and...

bZp - rootFS:

A Ubuntu 18.04 (bionic) chroot which haves many penetration testing tools such as: Metasploit, Burpsuite and...
139 viewsAmir Kiani, 
HackerOne
https://medium.com/yarden-shafir/yes-more-callbacks-the-kernel-extension-mechanism-c7300119a37a
Medium
Yes, More Callbacks — The Kernel Extension Mechanism
Recently I had to write a kernel-mode driver. This has made a lot of people very angry and been widely regarded as a bad move. (Douglas…
1.38K viewsAmir Kiani, 
HackerOne
https://medium.com/@N0_M3ga_Hacks/a-curious-case-from-little-to-complete-email-verification-bypass-2c7570040e7e
Medium
A Curious Case From Little To Complete Email Verification Bypass
Implementing a secure email verification mechanism is easy to mess up. A slight mistake in validation can lead to minor issues or…
1.6K viewsAmir Kiani, 
HackerOne
bZp is now available for S7/S7 EDGE:

https://t.me/black_ZERO_project/11
1.7K viewsMmD, 
HackerOne
https://cturt.github.io/ps4.html
1.43K viewsAmir Kiani, 
HackerOne
https://portswigger.net/blog/top-10-web-hacking-techniques-of-2018-nominations-open
PortSwigger Research
Top 10 web hacking techniques of 2018 - nominations open
Update: voting is now live. Please head over and place your vote. Nominations are now open for the top 10 new web hacking techniques of 2018. Every year countless security researchers share their find
1.6K viewsAmir Kiani, 
HackerOne
The Last Word : http://webscene.ir
GoodBye, @moonshaker 😭
webscene.ir
webscene | webscene is alive 🔞 ‼
The official RCE Webscene website. Download Free tools, relases,tutorials
1.67K viewsxDD, 
HackerOne
https://player.oreilly.com/videos/9781771373654
Oreilly
O'Reilly Media - Technology and Business Training
Gain technology and business knowledge and hone your skills with learning resources created and curated by O'Reilly's experts: live online training, video, books, our platform has content from 200+ of the world's best publishers.
2.63K viewsMmD, 
HackerOne
HackerOne
https://player.oreilly.com/videos/9781771373654
Reverse-engineering-and-exploit-development.torrent
9.5 KB
3.72K viewsMmD, 
HackerOne
https://wunderwuzzi23.github.io/blog/passthecookie.html#CheatSheet
2.11K viewsAmir Kiani, 
HackerOne
https://codenvy.com
Red Hat Developer
Red Hat OpenShift Dev Spaces | Red Hat Developer
Kubernetes-based Cloud Development Environments for enterprise teams
1.9K viewsMmD, 
HackerOne
https://medium.com/@MKahsari/stuxnet-was-a-weapon-not-a-binary-340ef6bf6ede
Medium
Part1: Stuxnet was a Weapon, not a Binary — Whole Story!
Yes. Stuxnet, the strange creature of the most advanced and frightening Intelligence services of the world. I mean Mossad, CIA, and MI5.
2.45K viewsAmir, 
HackerOne
2.29K viewsAmir, 
HackerOne
https://zetc0de.github.io/bugbounty/2019/01/09/Antihack.me-CSRF-File-Upload-Vulnerability.html
1.97K viewsAmir, 
HackerOne
https://www.qurium.org/alerts/iran/fake-mobile-apps-in-iran-when-spyware-and-click-fraud-can-put-millions-of-unaware-users-at-risk/
www.qurium.org
Fake Mobile Apps in Iran (Part II)
How Spyware and Click-fraud can put millions of users at risk Background During our initial forensic investigation of the distribution of fake Android applications in Iran in January 2018, we identified the actor "APD" with the e-mail apd_1379@yahoo.com to…
1.66K viewsAmir, 
HackerOne
Using TOR cause some sites such as Google or Cloudflare make some restrictions. Using OpenVPN with built-in #Socks #Proxy support helps to access the sites without having banned and stayed #Anonymous

https://mstajbakhsh.ir/socks-rocks-again/
1.97K viewsMir Saman Tajbakhsh, 
HackerOne
Forwarded from درج زیرنویس
HiP2k13-Burp_Pro_Tips_and_Tricks.pdf
2.7 MB
Burp Suite Pro Real-life tips & tricks
@Hackerone
2.63K viewsAmir, 
HackerOne
Forwarded from Mir Saman Tajbakhsh
Configuring a Hidden Email Server

Many people may not trust messaging services such as Telegram or WhatsApp but want to have their own private communication system. In this tutorial, you can run your own mail server in your home LAN and access it through Internet without spending money for public IP or VPS.

https://mstajbakhsh.ir/configuring-a-hidden-email-server/
187 viewsMir Saman Tajbakhsh, 
HackerOne
https://www.nc-lp.com/blog/reverse-engineering-games-for-fun-and-ssrf-part-1
Nc-Lp
Reverse engineering games for fun and SSRF - part 1
Let's find out how to proxy an application that doesn't want to be proxied and how to decompile a Unity3D game
1.56K viewsAmir, 
HackerOne
https://blog.checkpoint.com/2019/01/16/fortnite-vulnerability-where-only-the-secure-survive/
Check Point Blog
Fortnite's Vulnerability: Only the Secure Survive - Check Point Blog
Check Point discovered security vulnerabilities in Fortnite's login process that could have allowed a threat actor to take over the account of any user, view their personal account information, purchase virtual in-game currency and eavesdrop on in-game chatter…
1.58K viewsAmir,