#Beacon – Telegram

#Beacon

1.19K subscribers

272 photos

26 videos

130 files

1.83K links

Прожаренный цуберпохек

[educational channel/white hat only] - do not try the knowledge from here on your home or other people's microwaves

Download Telegram

About

Blog

Apps

Platform

1.19K subscribers

О prototype pollution, полный гайд в том числе о сохраненной на сервере, когда полюшен вызывается даже если пользователь посетил ссылку без наших действий(stored prototype pollution).
https://habr.com/ru/companies/huawei/articles/547178/

JavaScript prototype pollution: практика поиска и эксплуатации

Если вы следите за отчетами исследователей, которые участвуют в bug bounty программах, то наверняка знаете про категорию уязвимостей JavaScript prototype pollution. А если не следите и встречаете это...

331 viewsDp3 #Beacon, edited 16:51

https://labs.detectify.com/security-guidance/10-types-of-web-vulnerabilities-that-are-often-missed/

10 Types of Web Vulnerabilities that are Often Missed - Labs Detectify

Crowdsource hackers Hakluke and Farah Hawa share the top web vulnerabilities that are often missed during security testing. When hunting for bugs, especially on competitive bug bounty ...

274 viewsDp3 #Beacon, 08:52

Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis

https://www.mdpi.com/1424-8220/23/18/7978

#Beacon

Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis

The increasing complexity of web applications and systems, driven by ongoing digitalization, has made software security testing a necessary and critical activity in the software development lifecycle. This article compares the performance of open-source tools…

282 viewsDp3 #Beacon, edited 21:12

https://chpk.medium.com/top-10-open-source-sast-tools-bc860e9dfb2e

TOP 10 open source SAST tools for DevSecOps

290 viewsDp3 #Beacon, 21:40

Forwarded from CyberSecurityTechnologies (-CST-)

AI_vuln_fixes.pdf

#Sec_code_review
"AI-powered patching: the future of automated vulnerability fixes", 2024.

238 viewsDp3 #Beacon, 21:57

https://www.researchgate.net/publication/370061049_Machine_Learning-Based_Run-Time_DevSecOps_ChatGPT_Against_Traditional_Approach?clckid=ca4642d1

(PDF) Machine Learning-Based Run-Time DevSecOps: ChatGPT Against Traditional Approach

PDF | DevSecOps paradigm strives to provide the extension of the already approved DevOps practice by tackling the issues related to security in both... | Find, read and cite all the research you need on ResearchGate

255 viewsDp3 #Beacon, 22:14

https://dev.to/aws-builders/find-source-code-vulnerabilities-with-codeql-before-you-commit-2hof

Find Source Code Vulnerabilities with CodeQL Before You Commit

You have a plethora of Python code to commit for your new Django API. STOP! Before you commit and...

259 viewsDp3 #Beacon, 22:30

Огромный список базовых инструментов - от багбаунти и ханипотов до различных репорт билдеров, бинарной эксплуатации

https://inventory.raw.pm/tools.html

#Beacon

inventory.raw.pm

Rawsec's CyberSecurity Inventory

An inventory of tools and resources about CyberSecurity

278 viewsDp3 #Beacon, edited 23:18

K9M-01-K-9-Mail-Mobile-Audit.pdf

K9M-01-K-9-Mail-Mobile-Audit.pdf

Репорт об аудите аутсорсовой компанией соурс кода mozilla с помощью semgrep(pdf файл)

274 viewsDp3 #Beacon, edited 23:21

Forwarded from CYBER-SEC ™️

248 viewsDp3 #Beacon, 07:36

Forwarded from CYBER-SEC ™️

Binary_Offensive_Modern_Initial_Access_and_Evasion_Tactics_hide01.001

246 viewsDp3 #Beacon, 07:36

Forwarded from CYBER-SEC ™️

Binary_Offensive_Modern_Initial_Access_and_Evasion_Tactics_hide01.002

251 viewsDp3 #Beacon, 07:36

Forwarded from CYBER-SEC ™️

Binary_Offensive_Modern_Initial_Access_and_Evasion_Tactics_hide01.003

258 viewsDp3 #Beacon, 07:36

Forwarded from CYBER-SEC ™️

Binary_Offensive_Modern_Initial_Access_and_Evasion_Tactics_hide01.004

266 viewsDp3 #Beacon, 07:36

Forwarded from CYBER-SEC ™️

Binary_Offensive_Modern_Initial_Access_and_Evasion_Tactics_hide01.005

268 viewsDp3 #Beacon, 07:36

CYBER-SEC ™️

#redteam
#Beacon

283 viewsDp3 #Beacon, edited 07:36

Forwarded from kintal mulin

Binary Offensive - Initial Access and Evasion Tactics.torrent

Modern Initial Access and Evasion Tactics Sep13

319 viewsDp3 #Beacon, 07:39

Binary Offensive - Initial Access and Evasion Tactics.torrent

Еще торрентик нашел с этим курсом

280 viewsDp3 #Beacon, edited 07:40

x33fcon23_Mariusz_Banach_Modern_Initial_Access_and_Evasion_Tactics.pdf

x33fcon23_Mariusz_Banach_Modern_Initial_Access_and_Evasion_Tactics.pdf

🔥1

278 viewsDp3 #Beacon, 07:42

https://m.youtube.com/watch?v=HJmSsXGBTgQ

BUG BOUNTY: FINDING DANGEROUS METHODS & ENDPOINTS IN JS | 2023

Note: This video is only for educational purpose.

Hi everyone! This video demonstrates the method to find dangerous methods and endpoints in java script.

Tweet: https://twitter.com/divyansh2401/status/1689256591298813952
Jython Download: https://www.j…

👍1

328 viewsDp3 #Beacon, 07:48