HackerOne – Telegram

HackerOne

9.79K subscribers

633 photos

30 videos

76 files

2.69K links

Community : @Sec0x01
@Bug0x
Admin : @Offensive

Download Telegram

About

Blog

Apps

Platform

9.79K subscribers

1.83K viewsAmir, 22:26

https://medium.com/bugbountywriteup/uutcf-2019-writeups-6c11ea3f9d22

UUTCF 2019 WriteUps

In this post I am going to walk you through 3 CTF challenges from UUTCTF 2019, 2 Forensics and 1 Misc. I was so excited to solve these…

2.83K viewsAmir, 17:02

2.06K viewsMmD, 13:20

به محقق امنیتی افشا کرده که اکسپلویت‌های Shadow Brokers یک سال قبل توسط یک گروه هکری چینی استفاده میشدن. واقعا قدرت هک لذت بخش.
https://twitter.com/TheHackersNews/status/1125683411627139072?s=19

2.52K viewsYasho, 22:06

https://blog.ripstech.com/2019/wordpress-csrf-to-rce/

1.93K viewsAmir, 21:22

https://portswigger.net/blog/xss-without-parentheses-and-semi-colons

PortSwigger Research

XSS without parentheses and semi-colons

A few years ago I discovered a technique to call functions in JavaScript without parentheses using onerror and the throw statement. It works by setting the onerror handler to the function you want to

1.93K viewsAmir, 18:18

https://www.cyberus-technology.de/posts/2019-05-14-zombieload.html

www.cyberus-technology.de

Cyberus Technology: ZombieLoad: Cross Privilege-Boundary Data Leakage

Cyberus Technology - Where Virtualization Meets German Engineering

1.97K viewsAmir, 07:13

https://www.youtube.com/watch?v=xU9m4RlyqNc

Clone Credit Card With A Cassette Tape

Ever wonder how a credit card works? Well it is just a magnetic strip like a cassette tape. There have been pocket sized credit sized card cloners forever but I just wanted to point out how basic the technology is. I don’t really care if they upgrade the…

2.39K viewsAmir, 20:19

https://medium.com/tenable-techblog/stealing-downloads-from-slack-users-be6829a55f63

Stealing Downloads from Slack Users

I’m going to go over an interesting feature abuse that could have been used to steal and even manipulate downloads from Slack users using the Slack desktop app on Windows. The vulnerability was…

2.78K viewsAmir, 08:50

6.52K viewsAmir, 09:02

https://www.ambionics.io/blog/drupal8-rce

Exploiting Drupal8's REST RCE

Exploitation and mitigation bypasses for the new Drupal 8 RCE (SA-CORE-2019-003, CVE-2019-6340), targeting the REST module.

2.15K viewsAmir, 22:46

https://www.hackerone.com/zerodaily/2019-05-29

2019-05-29 | OSINT 101, SnapLion, XSS Hunter gone postal | HackerOne

Wednesday, May 29 TOP STORY One simple IDOR. Krebs First American Financial Corp. breach bomb last Friday smartly dropped before a long holiday weekend as all other journalists were probably on vacay for the weekend or at least not in the state of mind to…

1.91K viewsAmir, 16:55

2K viewsAmir, 16:57

Proof of concept for CVE-2019-0708
https://github.com/Ekultek/BlueKeep

GitHub - Ekultek/BlueKeep: Proof of concept for CVE-2019-0708

Proof of concept for CVE-2019-0708. Contribute to Ekultek/BlueKeep development by creating an account on GitHub.

2.3K viewsAmir, 14:53

DPI technique in action:

https://github.com/SadeghHayeri/GreenTunnel

GitHub - SadeghHayeri/GreenTunnel: GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place…

GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites. - SadeghHayeri/GreenTunnel

2.89K viewsMir Saman Tajbakhsh, 07:22

Watch Live Video from Android's Spy Camera.

https://github.com/mirsamantajbakhsh/LiveHiddenCamera/

GitHub - mirsamantajbakhsh/LiveHiddenCamera: Live Hidden Camera is a library which record live video and audio from Android device…

Live Hidden Camera is a library which record live video and audio from Android device without displaying a preview. - mirsamantajbakhsh/LiveHiddenCamera

2.47K viewsMir Saman Tajbakhsh, 14:30

Forwarded from Mir Saman Tajbakhsh

https://darksearch.io/

https://twitter.com/binitamshah/status/1137751379655692288?s=09

189 viewsMir Saman Tajbakhsh, 03:50

https://telegra.ph/Cisco-RV130W-10344-Remote-Stack-Overflow---udalyonnoe-perepolnenie-steka-i-vypolnenie-komand-na-routere-06-10

Cisco RV130W 1.0.3.44 Remote Stack Overflow - удалённое переполнение стека и выполнение команд на роутере

t.me/webware Доброго времени суток, форумчане. Сегодня мы разберём свежий эксплойт для переполнения буфера Cisco rv130w версии 1.0.3.44. Кто не знает что такое переполнение буфера: переполнение буфера - явление, возникающее, когда компьютерная программа записывает…

2.08K viewsپدرخوانده, 10:23

Mobile phishing toolkit remotely controlled by an app
https://github.com/UndeadSec/SocialFishMobile

GitHub - UndeadSec/SocialFishMobile: :iphone: An app to remote control SocialFish.

:iphone: :fish: An app to remote control SocialFish. - GitHub - UndeadSec/SocialFishMobile: :iphone: An app to remote control SocialFish.

2.32K viewsپدرخوانده, 10:41

https://medium.com/intigriti/how-spending-our-saturday-hacking-earned-us-20k-60990c4678d4

How spending our Saturday hacking earned us €20.000

Intigriti organised a hacking event in which we found an oracle bug worth more than €20.000 in bounties.

2.24K viewsAmir, 22:24