A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities - preempt/ntlm-scanner

Regular expression to find URLs within a string 1.This is the 1 I use Works for me (http|ftp|https)://([\w_-]+(?:(?:\.[\w_-]+)+))([\w.,@?^=%&:/~+#-]*[\w@?^=%&/~+#-])? 2. "(?:(?:https?|ftp):\\/\\/)?[\\w/\\-?=%.]+\\.[\\w/\\-?=%.]+" 3.((http|ftp|https):\/\/)?(([\w.…

A curated list of awesome reversing resources. Contribute to tylerha97/awesome-reversing development by creating an account on GitHub.

Introduction Intelligent dishwashers, smart factories, connected sensors and Wi-Fi fridges, these are only a few examples of everyday ...

Vulnerability Summary The Horde project comprises of several standalone applications and libraries. The Horde Groupware Webmail Edition suite bundles several of them by default, among those, Data is a library used to manager data import/export in several…

Penetration tests guide based on OWASP including test cases, resources and examples. - Voorivex/pentest-guide

A vulnerability in the handling of CSV data import allows authenticated users to inject arbitrary PHP code thus achieving RCE on the server hosting the web application.

There is a lot of excellent public research on attacking Azure, however, most research tends to focus on tactics that assume you have first obtained some form of access, such as compromised credentials. This post will focus on one example of obtaining those…

Understanding the proper URL structure is important to every Bug bounty hunter. So lets go deep dive into the URL structure.

Privacy Violation issue Instagram

Reverse proxies cheatsheet. Contribute to GrrrDog/weird_proxies development by creating an account on GitHub.

We demonstrate how one can recover mt_rand()'s seed with only two outputs and without any bruteforce.

C2 Powershell Command & Control Framework with BuiltIn Commands (Modules) - r00t-3xp10it/meterpeter

Identify past, current, and possible future locations through the geolocation and chronolocation of media provided by a specific user.

Hi guys! My name is Ali Tütüncü and I am a security researcher. When I started to bug bounty, I said “I will find a vulnerability on…