Pentester

144 views06:28

SpiderFoot 3.0 is now out! Major changes include:
- Fully Python 3
- Target usernames
- Run scans by CLI or web UI

https://t.co/oJmtjO05rv

One minute DNS recon tutorial with the CLI: https://t.co/c6LltRCd4I

SpiderFoot

SpiderFoot 3.0 Open Source Release - SpiderFoot

It’s been a long time in the making but SpiderFoot 3.0 is finally tagged and released. With the last official release (2.12) being almost two years ago and active development since then, you can imagine how much has changed, so let’s walk through the major…

138 views18:57

Pentester

https://medium.com/@alexa.pavliuc/watch-six-decade-long-disinformation-operations-unfold-in-six-minutes-5f69a7e75fb3

Medium

Watch six decade-long disinformation operations unfold in six minutes

Here’s a bird’s eye view of six state-backed information operations on Twitter, and how they evolved over the last decade. This research…

153 views19:03

Pentester

hacker-roadmap : A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security : https://t.co/XwPgthH0Kj

GitHub

sundowndev/hacker-roadmap

:pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security. - sundowndev/hacker-roadmap

156 views11:02

Pentester

Adversary Tactics: PowerShell
https://github.com/specterops/at-ps

GitHub

GitHub - SpecterOps/at-ps: Adversary Tactics - PowerShell Training

Adversary Tactics - PowerShell Training. Contribute to SpecterOps/at-ps development by creating an account on GitHub.

158 views18:05

Pentester

Kali 2020.1 is up for download!

Big changes yet again, with non-root user by default, a single installer image for multiple desktop enviroments, updates to themes, and more! Not to mention Rootless NetHunter!

https://t.co/IrUnqyoHjM

www.kali.org

Kali Linux 2020.1 Release

We are here to kick off our first release of the decade, with Kali Linux 2020.1! Available for immediate download.

158 views18:07

Pentester

Added a mimikatz MemSSP style hook to Fermion, you can check out the code here => https://t.co/iNSBeH8wvi This is based on the great write-ups by https://t.co/8Ny4lsc2Bj

GitHub

FuzzySecurity/Fermion

Fermion, an electron wrapper for Frida & Monaco. Contribute to FuzzySecurity/Fermion development by creating an account on GitHub.

154 views03:59

Pentester

Windows Server 2019 securekernel live debugging demo
https://t.co/5b4YEQjqa1

YouTube

Windows securekernel live debugging

Microsoft Windows Server 2019 securekernel live debugging using WinDBG EXDi LiveCloudKd plugin.

172 views04:00

Pentester

https://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/

RET2 Systems Blog

A Methodical Approach to Browser Exploitation

Pwn2Own is an industry-level security competition organized annually by Trend Micro’s Zero Day Initiative. Pwn2Own invites top security researchers to showca...

163 views05:09

Pentester

OpenSMTPD RCE Vulnerability
https://www.openwall.com/lists/oss-security/2020/01/28/3

154 views05:12

Pentester

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
https://github.com/koutto/jok3r

GitHub

GitHub - koutto/jok3r: Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework - koutto/jok3r

150 views04:04

Pentester

https://medium.com/bugbountywriteup/linux-reverse-engineering-ctfs-for-beginners-4cf03ff2cfb4

Medium

Linux Reverse Engineering CTFs for Beginners

After a while, I decided a write a short blog post about Linux binary reversing CTFs in general. How to approach a binary and solving for…

158 views04:20

Pentester

PlaystoreDownloader : A command line tool to download Android applications directly from the Google Play Store : https://t.co/7nktghElgx (not affiliated with Google in any way)

GitHub

ClaudiuGeorgiu/PlaystoreDownloader

A command line tool to download Android applications directly from the Google Play Store - ClaudiuGeorgiu/PlaystoreDownloader

163 views04:22

155 views15:48

286 views15:49

Regex cheatsheet for the haters : https://t.co/ybC0A6e1wV

GitHub

geongeorge/i-hate-regex

The code for iHateregex.io. Contribute to geongeorge/i-hate-regex development by creating an account on GitHub.

159 views08:31

Pentester

Load encrypted PE from XML Attribute.

MSBuild is still the best.😅

https://t.co/wRSkFjFAt2

MSBuild sets Property then calls Execute.

Use this example to decouple payloads & prove that all security products have a "Single File Bias".

Decouple payloads to subvert detection.

GitHub

XwingAngel/PELoader

Load PE via XML Attribute. Contribute to XwingAngel/PELoader development by creating an account on GitHub.

154 views03:59

Pentester

https://www.trustedsec.com/blog/targeted-active-directory-host-enumeration/

TrustedSec

Targeted Active Directory Host Enumeration

165 views04:02

Pentester

FakeLogonScreen is a C# utility to steal a user's password using a fake Windows logon screen. This password will then be validated and saved to disk. Useful in combination with CobaltStrike's execute-assembly command.
https://t.co/o7AH6KBb79

GitHub

bitsadmin/fakelogonscreen

Fake Windows logon screen to steal passwords. Contribute to bitsadmin/fakelogonscreen development by creating an account on GitHub.

172 views04:13

Pentester

Scope control, scope scanner and progress tracker for easier working on a bug bounty or pentest project
https://github.com/c0rvax/project-black

GitHub

GitHub - c0rv4x/project-black: Pentest/BugBounty progress control with scanning modules

Pentest/BugBounty progress control with scanning modules - c0rv4x/project-black

148 views04:38

Pentester

TeamViewer stored user passwords encrypted, not hashed, and the key is now public
https://t.co/Z715ky0Pa3