Pentester – Telegram

Pentester

2.96K subscribers

120 photos

3 videos

163 files

2.77K links

- Offensive Security (Red Teaming / PenTesting)
- BlueTeam (OperationSec, TreatHunting, DFIR)
- Reverse Engineering / Malware Analisys
- Web Security

Download Telegram

About

Blog

Apps

Platform

2.96K subscribers

https://medium.com/@terjanq/blind-sql-injection-without-an-in-1e14ba1d4952

Blind SQL Injection without an “in”

Alternative ways to retrieve table names in MySQL — without information_schema.

137 views09:33

How-to-exit-Vim — A comprehensive guide to exiting Vim.

It’s 11x more glorious than you’re thinking right now.

https://t.co/7CHolSSBGx

hakluke/how-to-exit-vim

Below are some simple methods for exiting vim. Contribute to hakluke/how-to-exit-vim development by creating an account on GitHub.

130 views04:06

https://medium.com/@alex.birsan/the-bug-that-exposed-your-paypal-password-539fc2896da9

The Bug That Exposed Your PayPal Password

And Credit Card Number Too

129 views04:22

https://medium.com/@iSecMax/two-factor-authentication-security-testing-and-possible-bypasses-f65650412b35

Two-factor authentication security testing and possible bypasses

Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…

124 views04:39

https://medium.com/@sebnemK/reverse-engineering-and-modifying-an-android-game-apk-ctf-c617151b874c

Reverse engineering and modifying an Android game (.apk) — CTF

Recently I solved a CTF style challenge where the user was given an .apk file with the goal to find the flag. It turned out that it was a…

118 views04:44

https://amp.kitploit.com/2020/01/stowaway-multi-hop-proxy-tool-for.html?amp=1&m=1

Stowaway - Multi-hop Proxy Tool For Pentesters

130 views05:17

https://medium.com/bugbountywriteup/antivirus-evasion-with-python-49185295caf1

Antivirus Evasion with Python

Malware research developed at Spark 1 Cybersecurity Solutions.

124 views14:48

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

https://github.com/projectzeroindia/CVE-2019-19781/

https://github.com/trustedsec/cve-2019-19781

https://www.reddit.com/r/blueteamsec/comments/en4m7j/multiple_exploits_for_cve201919781_citrix/

GitHub - projectzeroindia/CVE-2019-19781: Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway…

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ] - projectzeroindia/CVE-2019-19781

128 views10:42

https://medium.com/@know.0nix/hunting-good-bugs-with-only-html-d8fd40d17b38

Hunting Good Bugs with only <HTML>

Hey hunters! being a while of my last post! so let’s get deep on this right now!

139 views14:40

https://github.com/0xZ0F/Z0FCourse_ReverseEngineering

GitHub - 0xZ0F/Z0FCourse_ReverseEngineering: Reverse engineering focusing on x64 Windows.

Reverse engineering focusing on x64 Windows. Contribute to 0xZ0F/Z0FCourse_ReverseEngineering development by creating an account on GitHub.

144 views07:37

136 views14:08

250 views14:09

https://spaceraccoon.dev/remote-code-execution-in-three-acts-chaining-exposed-actuators-and-h2-database

spaceraccoon.dev

Remote Code Execution in Three Acts: Chaining Exposed Actuators and H2 Database Aliases in Spring Boot 2

The Spring Boot framework is one of the most popular Java-based microservice frameworks that helps developers quickly and easily deploy Java applications. With its focus on developer-friendly tools and configurations, Spring Boot accelerates the development…

147 views04:04

Released a little tool to perform lateral movement that hide the command you are executing by registering a protocol handler. The protocol handler is executed over WMI by simply running

start customhandler://

https://t.co/r2YnDOBPLg

Mr-Un1k0d3r/PoisonHandler

lateral movement techniques that can be used during red team exercises - Mr-Un1k0d3r/PoisonHandler

140 views03:55

https://medium.com/@cc1h2e1/bug-bounty-check-list-by-c1-2beb7ae3c116

BUG BOUNTY CHECK LIST BY C1

I just want to write a check list for myself. This article includes various vulnerability discovery method bypass methods. I hope you can…

157 views03:59

https://www.routerpasswords.com/

Router Passwords

Router Passwords Community Database - The Wireless Router Experts

We are the largest router passwords community database in the world. Our expert reviews on the best wireless routers and the best wifi routers out there

176 views05:16

Google Dorks to Find Public Cameras

inurl:currenttime inurl:top.htm
inurl:/view.shtml

inurl:"lvappl.htm"
inurl:”CgiStart?page=”
inurl:/view.shtml
intitle:”Live View/ — AXIS”
inurl:iview/view.shtml
inurl:ViewerFrame?M0de=
inurl:ViewerFrame?M0de=Refresh
inurl:axis-cgi/jpg

176 views05:04

Discovering & exploiting multiple critical vulnerabilities in Cisco's DCNM.

Busting Cisco's Beans :: Hardcoding Your Way to Hell https://t.co/EkwwJ2u195

PoC exploit code:
https://t.co/Xsae7j8xkl
https://t.co/5LxxCEtnRE
https://t.co/8i5u1kLcEi

Busting Cisco's Beans :: Hardcoding Your Way to Hell

After the somewhat dismay of reporting to Cisco some other vulnerabilities in their Prime Infrastructure product, I decided to perform an audit on the Cisco ...

139 views05:05

Hiding malicious code with “Module Stomping”: Part 1 : https://t.co/fZV8W7u86R

Part 2 : https://t.co/n4AgncHQUm

Part 3 : https://t.co/2MGGWjJqgs

ModuleStomping : https://t.co/FrFgX1U3CS

Hiding malicious code with “Module Stomping”: Part 1 - F-Secure Blog

In this blog post about hiding malicious code, the first of a three-part series, we will explore module stomping and implement a simple PoC injector.

151 views05:14

CVE-2020-0601
https://gist.github.com/SwitHak/62fa7f8df378cae3a459670e3a18742d#file-20200114-tlp-white_cve-2020-0601-md

BlueTeam CheatSheet * CVE-2020-0601 * crypt32.dll | Last updated: 2020-01-21 1817 UTC

BlueTeam CheatSheet * CVE-2020-0601 * crypt32.dll | Last updated: 2020-01-21 1817 UTC - 20200114-TLP-WHITE_CVE-2020-0601.md

158 views10:49

https://www.r00tpgp.com/2020/01/subdomain-recon-using-certificate.html?m=1

Subdomain Recon Using Certificate Search Technique

Offensive Security, Penetration Testing, Exploit Development, Linux and Open Source.

151 views05:19