Pentester

Windows PowerShell Logging Cheat Sheet

https://t.co/hUd1aFos7W

119 views04:23

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! More than 3000 tools and about 600 posts. https://t.co/D5c2Hm1LG4

GitHub

alphaSeclab/awesome-reverse-engineering

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! - alphaSeclab/awesome-reverse-engineering

149 views04:23

Pentester

SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4

https://t.co/ZI88clj5DC

Blogspot

SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4

Posted by Ned Williamson, 20% on Project Zero Introduction I have a somewhat unique opportunity in this writeup to highlight my experie...

143 views04:25

Pentester

What’s Up with WhatsApp - a detailed walk through of Reverse Engineering CVE-2019-3568

SLIDES: https://t.co/TeVPZl3QCi
VIDEO: https://t.co/J1eIRrfuTu

140 views12:27

Pentester

https://enigma0x3.net/2019/12/10/cve-2019-19248-local-privilege-escalation-in-eas-origin-client/amp/?__twitter_impression=true

159 views12:30

Pentester

https://www.microsoft.com/security/blog/2019/12/11/the-quiet-evolution-of-phishing/

Microsoft News

The quiet evolution of phishing

In 2019, we saw phishing attacks reach new levels of creativity and sophistication. Read about the most notable phishing techniques we spotted in the past year.

144 views21:01

Pentester

Gold-Nuggeting : Open-source tool to find outstanding network devices using machine learning on nmap scan report : https://t.co/8db0NtPC9H

GitHub

delvelabs/batea

AI-based, context-driven network device ranking. Contribute to delvelabs/batea development by creating an account on GitHub.

139 views21:03

Pentester

https://www.bleepingcomputer.com/news/security/phishing-attack-hijacks-office-365-accounts-using-oauth-apps/#.XfGl4d-dKa0.twitter

BleepingComputer

Phishing Attack Hijacks Office 365 Accounts Using OAuth Apps

A phishing campaign has been discovered that doesn't target a recipient's username and password, but rather uses the novel approach of gaining access to a recipient's Office 365 account and its data through the Microsoft OAuth API.

141 views21:06

Pentester

143 views03:54

Pentester

an-introduction-to-the-router-exploit-kits.pdf

14 MB

255 views03:55

Pentester

Learn how to exploit Symantec Endpoint Protection on all versions of Windows (CVE-2019-12750). Part 2 of this series by kyREcon delves into a more advanced method of exploitation! https://t.co/1LBcHOkQT7

LRQA

CVE-2019-12750: Symantec Endpoint Protection Local Privilege Escalation – Part 2

In this post we will walk you through a more sophisticated method of exploiting CVE-2019-12750. This is a local privilege escalation vulnerability that affects Symantec Endpoint Protection. The method of exploitation described in this post works, at the…

155 viewsedited 04:16

Pentester

Bash one liner to take screenshot of web services running on an IP range.

IP="192.168.0"; for p in '80' '443'; do for i in $(seq 0 5); do TAKE_SS=$(cutycapt --url=$IP.$i:$p --out=$IP.$i:$p.png); done; done

144 views20:20

Pentester

Running libFuzzer in a browser, via WASM.
We need to go deeper (?)

https://t.co/FcuQXt2pvP

GitHub

jonathanmetzman/wasm-fuzzing-demo

Demos of and walkthroughs on in-browser fuzzing using WebAssembly - jonathanmetzman/wasm-fuzzing-demo

129 views20:21

Pentester

OpenBSD Local Privilege Escalation Vulnerability (CVE-2019-19726) | Qualys Blog
https://blog.qualys.com/laws-of-vulnerabilities/2019/12/11/openbsd-local-privilege-escalation-vulnerability-cve-2019-19726

Qualys

OpenBSD Local Privilege Escalation Vulnerability (CVE-2019-19726) | Qualys

Qualys Research Labs discovered a local privilege escalation vulnerability in OpenBSD’s dynamic loader. The vulnerability could allow local users or malicious software to gain full root privileges.

131 views04:09

Pentester

https://medium.com/@SofianeHamlaoui/use-telegram-bot-as-a-penetration-testing-framework-a309c41dbc40

Medium

✈️Use Telegram bot as a Penetration Testing Framework

The idea ? :Using Telegram for Penetration Testing and Cyber Security

143 views04:49

Pentester

https://nex.sx/blog/2019/12/15/the-year-of-the-phish.html

129 views06:10

Pentester

I made Silver public, mass vulnerability scanner 🔥

Github: https://t.co/jGZSPSFqnT

- Scans are resumable by default
- Get notified on Slack if a vulnerability is found
- Designed for large volume scans
- Caches vuln. data to improve performance over time
- Shodan integration

GitHub

s0md3v/Silver

Mass scan IPs for vulnerable services. Contribute to s0md3v/Silver development by creating an account on GitHub.

135 views19:28

Pentester

https://research.checkpoint.com/2019/breakingapp-whatsapp-crash-data-loss-bug/

Check Point Research

BreakingApp – WhatsApp Crash & Data Loss Bug - Check Point Research

The bug will crash the app and it will continue to crash even after we reopen WhatsApp, resulting in a crash loop. Moreover, the user will not be able to return to thegroup and all the data that was written and shared in the group is now gone for good. The…

140 views04:42

Pentester

https://www.hackingarticles.in/manual-sql-injection-exploitation-step-step/