#blogsite on #Tor

http://en.deepweb4wt3m4dhutpxpe7d7wxdftfdf4hhag4sizgon6th5lcefloid.onion/blog

if you need to find the POC for a specific CVE

1. Just a list of CVEs and links to POCs for them https://raw.githubusercontent.com/tg12/PoC_CVEs/main/cve_links.txt

2. There is also a method: specify the CVE you need in the cve_id parameter (the result in the screenshots cve_id

curl 'https://poc-in-github.motikan2010.net/api/v1/?cve_id=cve-2021-44228' | jq | grep html_url

👁 OSINT. Коллекция коллекций. Тысячи инструментов и ресурсов для изучения. Часть 1.

• Не буду подробно расписывать про OSINT, Вы и так все знаете сами. Сегодня поделюсь с тобой ссылками на различные ресурсы по данной тематике. Можно найти любую информацию, от блогов и полезных статей до уникальных инструментов:

ASINT by JK;
Search by Jlitz88;
OSINT Collection;
OSINT by Themis;
Hungarian OSINT;
WebNoser OSINT;
Crypto Resources;
OSINT by Mercure;
SecAno Resources;
Various Resources;
OSINT by Azule Onyx;
Toolset by Julia Bayer;
Mappy/Maps by Zook;
Jake Crep's Resources;
OSINT by Adam Visnic;
Media Map (US media;
OSINT4ALL by Socmint;
OSINT Tools by t0ch13;
Australian OSINT by HZ;
Add-ons by Technisette;
Resources by Joe Garza;
Tutorials by Technisette;
Social Media Resources;
IMINT by Bruno Mortier;
OSINT by Bruno Mortier;
Toolkit by Bruno Mortier;
Geoint by Bruno Mortier;
PC Sec by Bruno Mortier;
Canada OSINT by Slickbit;

Photo Investigation Toolkit

Search by photo
Extracting metadata
Photoforensic tools
Fact-checking tools

▫️https://start.me/p/0PgzqO/photo-osint

A very good tool for collecting information from open sources. You can search documents, photos, social media, leaks, cars, cryptocurrencies and more.

https://inteltechniques.com/tools/

⚠️Don't forget to use a VPN when accessing these sites.

CVE-2022-30136 explained.
Windows Network File System flaw results in arbitrary code execution as SYSTEM.
https://www.theregister.com/AMP/2022/07/15/windows_nfs_patch/

Week in OSINT #2022-28 - sector035 - Geolocation with Mountains
https://www.linkedin.com/posts/eyran-millis_mountain-geolocating-tutorial-activity-6941996317795565568-JYvf
A few weeks ago Eyran Millis shared a tutorial on LinkedIn about using mountain ridges in geolocation tasks. He goes over several use cases, and shows how one can use different sites to look for mountains and hills. Sites like PeakVisor, Peakery and Peakfinder are all included, and he gives some valuable tips on each of these. Thank you Eyran, for putting this guide together!

​​Дорки для различных инструментов поиска

Практически каждый из вас слышал про Google Dorks, но гораздо менее известны дорки для Yandex, DuckDuckGo, Bing, VirusTotal, Github, Shodan и тд

Вот вам небольшая коллекция утилит и ссылок на списки дорков для различных инструментов поиска.

Google, Bing, Ecosia, Yahoo или Yandex
https://github.com/Zarcolio/sitedorks

Google dorks
https://github.com/BullsEye0/google_dork_list
https://github.com/sushiwushi/bug-bounty-dorks
https://github.com/rootac355/SQL-injection-dorks-list
https://github.com/unexpectedBy/SQLi-Dork-Repository
https://github.com/thomasdesr/Google-dorks
https://github.com/arimogi/Google-Dorks
https://github.com/aleedhillon/7000-Google-Dork-List

DuckDuckGo dorks
https://github.com/d34dfr4m3/goDuck

Github dorks
https://github.com/techgaun/github-dorks
https://github.com/jcesarstef/ghhdb-Github-Hacking-Database
https://github.com/H4CK3RT3CH/github-dorks

Shodan dorks
https://github.com/humblelad/Shodan-Dorks
https://github.com/AustrianEnergyCERT/ICS_IoT_Shodan_Dorks
https://github.com/lothos612/shodan
https://github.com/jakejarvis/awesome-shodan-queries
https://github.com/IFLinfosec/shodan-dorks

Virus Total dorks
https://github.com/Neo23x0/vti-dorks

Binary Edge + Shodan + Google
https://github.com/iGotRootSRC/Dorkers

#web #recon #dork #osint #infosec

Malware Analysis Tools

A collection of links to utilities and programs designed for malware analysis. Structured and intuitive resource, a large number of tools - these are the main advantages of the resource.

Encoding and decoding, analysis of pdf and word files, online scanners, utilities for working with memory, programs for decompilation

https://malwareanalysis.tools/

#CISSP Preparation

https://mega.nz/folder/081wyCiT#T1j-cqnAMJalkTkc0h_s1A

#mega