Insufficient verification over callback_data, XSS Telegram.org, Privacy of Profile Pictures, Sticker crash, issues on bugs.telegram.orgContinue reading on Medium » (https://davtur19.medium.com/telegram-bug-bounties-xss-privacy-issues-official-bot-exploitation-and-more-5277fa78435?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack The Box — Swagshop: Walkthrough (without Metasploit)
https://cdn-images-1.medium.com/max/600/1*YZrj61j0ihUJDCrsnQSPTg.png
Hack The Box — Swagshop: Walkthrough (without Metasploit) | Road to OSCP | Linux Medium Level | Magento RCE | scripting | trouble shotting
Continue reading on Medium »
Hack The Box — Swagshop: Walkthrough (without Metasploit)
https://cdn-images-1.medium.com/max/600/1*YZrj61j0ihUJDCrsnQSPTg.png
Hack The Box — Swagshop: Walkthrough (without Metasploit) | Road to OSCP | Linux Medium Level | Magento RCE | scripting | trouble shotting
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Privacy, WhatsApp and the Surveillance Universe
https://cdn-images-1.medium.com/max/2600/0*N5BVipzZ35DNY3E0
WhatsApp will start forcing users to share personal data with Facebook which is it’s parent company. It doesn’t come as a surprise since…
Continue reading on ILLUMINATION »
Privacy, WhatsApp and the Surveillance Universe
https://cdn-images-1.medium.com/max/2600/0*N5BVipzZ35DNY3E0
WhatsApp will start forcing users to share personal data with Facebook which is it’s parent company. It doesn’t come as a surprise since…
Continue reading on ILLUMINATION »
CVE 2020-14178 Story [Bounty 500$ for 3 Vulnerabilities]
Hi There !!!Continue reading on Medium »
Read more...
Hi There !!!Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Overlord - Overlord - Red Teaming Infrastructure Automation
https://1.bp.blogspot.com/-NqAgYSYhU40/YH5f1iur-4I/AAAAAAAAV58/-W4ZMaq10sk6QvP-x7iq83TxdsFeNEa1QCNcBGAsYHQ/w640-h561/logo.png
Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules (e.g. C2, Email Server, HTTP web delivery server, Phishing server etc.) and the full infra / modules and scripts will be generated automatically on a cloud provider of choice. Currently supports AWS and Digital Ocean. The tool is still under development and it was inspired and uses the Red-Baron Terraform implementation found on Github.
A demo infrastructure was set up in our blog post https://blog.qsecure.com.cy/posts/overlord/.
For the full documentation of the tool visit the Wiki tab at https://github.com/qsecure-labs/overlord/wiki.
Installation
Acknowledgments
This project could not be created without the awsome work for Marcello Salvati @byt3bl33d3r with the RedBaron Project. That is the reason why we are referencing the name of RedBaron on our project as well.
As Marcello stated on his acknowledgments, further thanks to:
1. @_RastaMouse's two serie's blogpost on 'Automated Red Team Infrastructure Deployment with Terraform' Part 1 and 2
2. @bluscreenofjeff's with his amazing Wiki on Read Team Infrastucture
3. @spotheplanet's blog post on Red team infrastructure
Disclaimer
Overlord comes without warranty and is meant to be used by penetration testers during approved red teaming assessments and/or social enigneering assessments. Overlord's developers and QSecure decline all responsibility in case the tool is used for malicious purposes or in any illegal context.
Download Overlord
Overlord - Overlord - Red Teaming Infrastructure Automation
https://1.bp.blogspot.com/-NqAgYSYhU40/YH5f1iur-4I/AAAAAAAAV58/-W4ZMaq10sk6QvP-x7iq83TxdsFeNEa1QCNcBGAsYHQ/w640-h561/logo.png
Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules (e.g. C2, Email Server, HTTP web delivery server, Phishing server etc.) and the full infra / modules and scripts will be generated automatically on a cloud provider of choice. Currently supports AWS and Digital Ocean. The tool is still under development and it was inspired and uses the Red-Baron Terraform implementation found on Github.
A demo infrastructure was set up in our blog post https://blog.qsecure.com.cy/posts/overlord/.
For the full documentation of the tool visit the Wiki tab at https://github.com/qsecure-labs/overlord/wiki.
Installation
git clone https://github.com/qsecure-labs/overlord.git
cd overlord/config
chmod +x install.sh
sudo ./install.shAcknowledgments
This project could not be created without the awsome work for Marcello Salvati @byt3bl33d3r with the RedBaron Project. That is the reason why we are referencing the name of RedBaron on our project as well.
As Marcello stated on his acknowledgments, further thanks to:
1. @_RastaMouse's two serie's blogpost on 'Automated Red Team Infrastructure Deployment with Terraform' Part 1 and 2
2. @bluscreenofjeff's with his amazing Wiki on Read Team Infrastucture
3. @spotheplanet's blog post on Red team infrastructure
Disclaimer
Overlord comes without warranty and is meant to be used by penetration testers during approved red teaming assessments and/or social enigneering assessments. Overlord's developers and QSecure decline all responsibility in case the tool is used for malicious purposes or in any illegal context.
Download Overlord
Hacking GraphQL for Fun and Profit — Part 1 — Understanding GraphQL Basics
Hello everyone!!Continue reading on Medium »
Read more...
Hello everyone!!Continue reading on Medium »
Read more...
DeFi Saver bug bounty is now live on Immunefi
The new DeFi Saver bug bounty is now live on Immunefi! Immunefi is a bug bounty platform for smart contracts and DeFi projects, where…Continue reading on DeFi Saver »
Read more...
The new DeFi Saver bug bounty is now live on Immunefi! Immunefi is a bug bounty platform for smart contracts and DeFi projects, where…Continue reading on DeFi Saver »
Read more...
Deep Web
Social networks
Hello.
Anyone know of any social networks? I remember blackbook a few years back. I haven't used tor and the deepweb in a while.
submitted by /u/ImTomThorne
[link] [comments]
Social networks
Hello.
Anyone know of any social networks? I remember blackbook a few years back. I haven't used tor and the deepweb in a while.
submitted by /u/ImTomThorne
[link] [comments]
reddit
Social networks
Hello. Anyone know of any social networks? I remember blackbook a few years back. I haven't used tor and the deepweb in a while.
CVE 2020-14178 Story [Bounty 500$ for 3 Vulnerabilities]
https://vaibhavgaikwad1712.medium.com/cve-2020-14178-story-bounty-500-for-3-vulnerabilities-587cd950eb38?source=rss------bug_bounty-5
Hi There !!!Continue reading on Medium » (https://vaibhavgaikwad1712.medium.com/cve-2020-14178-story-bounty-500-for-3-vulnerabilities-587cd950eb38?source=rss------bug_bounty-5)
https://vaibhavgaikwad1712.medium.com/cve-2020-14178-story-bounty-500-for-3-vulnerabilities-587cd950eb38?source=rss------bug_bounty-5
Hi There !!!Continue reading on Medium » (https://vaibhavgaikwad1712.medium.com/cve-2020-14178-story-bounty-500-for-3-vulnerabilities-587cd950eb38?source=rss------bug_bounty-5)
Hacking GraphQL for Fun and Profit — Part 1 — Understanding GraphQL Basics
https://busk3r.medium.com/hacking-graphql-for-fun-and-profit-part-1-understanding-graphql-basics-72bb3dd22efa?source=rss------bug_bounty-5
https://busk3r.medium.com/hacking-graphql-for-fun-and-profit-part-1-understanding-graphql-basics-72bb3dd22efa?source=rss------bug_bounty-5
Hello everyone!!Continue reading on Medium » (https://busk3r.medium.com/hacking-graphql-for-fun-and-profit-part-1-understanding-graphql-basics-72bb3dd22efa?source=rss------bug_bounty-5)
DeFi Saver bug bounty is now live on Immunefi
https://medium.com/defi-saver/defi-saver-bug-bounty-is-now-live-on-immunefi-56af32d0c220?source=rss------bug_bounty-5
https://medium.com/defi-saver/defi-saver-bug-bounty-is-now-live-on-immunefi-56af32d0c220?source=rss------bug_bounty-5
The new DeFi Saver bug bounty is now live on Immunefi! Immunefi is a bug bounty platform for smart contracts and DeFi projects, where…Continue reading on DeFi Saver » (https://medium.com/defi-saver/defi-saver-bug-bounty-is-now-live-on-immunefi-56af32d0c220?source=rss------bug_bounty-5)