HackerOne – Telegram

HackerOne

11.1K subscribers

644 photos

31 videos

79 files

2.75K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11.1K subscribers

https://www.hackingarticles.in/burp-suite-for-pentester-web-scanner-crawler/

Hacking Articles

Burp Suite for Pentester: Web Scanner & Crawler

Learn how to use Burp Suite's web scanner and crawler tools for identifying vulnerabilities and mapping web applications now.

3.05K viewsAmir Kiani, 00:31

https://www.youtube.com/watch?v=oe11Q-3Akuk

Reflective C# Assembly loading && Reflective PE-Injection

In this stream I went through the process of C# source code modification, and reflective loading of C# Assemblies from Powershell. Afterwards, two public reflective PE-Loaders and the use-case with examples were shown. In the very end unhooking + ETW patching…

2.7K viewsAdel, edited 08:41

https://twitter.com/ESETresearch/status/1458438155149922312?s=20

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

3.14K viewsAmir Kiani, 00:39

https://github.com/0xCGonzalo/Golden-Guide-for-Pentesting

GitHub - 0xCGonzalo/Golden-Guide-for-Pentesting: Golden Guide

Golden Guide. Contribute to 0xCGonzalo/Golden-Guide-for-Pentesting development by creating an account on GitHub.

3.18K viewsAmir Kiani, 00:15

https://youtu.be/Wlr1VQCo_5g

django sql injection | The D is silent

CVE-2021-35042: Potential SQL injection via unsanitized QuerySet.order_by() input. Unsanitized user input passed to QuerySet.order_by() could bypass intended column reference validation in path marked for deprecation resulting in a potential SQL injection…

3.35K viewsAdel, 09:48

sample ransomware mail

3.59K viewsAmir Kiani, 05:11

https://hide01.ir

3.65K viewsMmD, 16:12

4.29K viewsAmir Kiani, 17:28

Forwarded from Security Analysis

CVE-2021-42321POC.py

⭕️PoC of MS Exchange RCE via mspaint.exe

@securation

3.75K viewsAdel, 12:52

https://certitude.consulting/blog/en/invisible-backdoor/

3.63K viewsAmir Kiani, 17:46

https://blog.howdays.kr/index.php/2021/11/26/virtualbox-6-1-18-0-day/

3.49K viewsAdel, 08:35

https://hackerone.com/reports/1363672

Shopify disclosed on HackerOne: Bypass a fix for report #708013

## Summary:
`customerAccessTokenCreate` mutation in the Storefront API does not correctly throttle login attempts. An issue in similar report https://hackerone.com/reports/708013 was already fixed,...

2.82K viewsAmir Kiani, 17:53

https://youtu.be/EwEABCBI3-g

HackTheBox Cyber Santa CTF 2021 - Naughty or Nice - Web Challenge - Day5

Video walk-through for the Web Challenge called "Naughty or Nice" from Day 5 of the HTB "Cyber Santa is Coming to Town" Capture The Flag event that was going on from December 1st to December 5th 2021.
#hackthebox #CTF #SANTA #santa #cyber #web #challenges…

3.11K viewsAdel, 07:02

https://twitter.com/1rpwn/status/1469240466071859213

sudo grep -r '${jndi:ldap://' /var/log sudo egrep -i -r '\$\{jndi:(ldap[s]?|rmi)://' /var/log #log4j #log_4jrce #RCE #apache

2.83K viewsAdel, 09:40

patched code

https://github.com/apache/logging-log4j2/pull/608/files/5f81dd218aab36bf1c6a7410c88c29594bb1a0e7#diff-271353c1076e53f6893261e4420de27d34588bfd782806b5c66a3465c43b7f51

Restrict LDAP access via JNDI by rgoers · Pull Request #608 · apache/logging-log4j2

Restricts access to LDAP via JNDI.

3.07K viewsAdel, 09:46

https://twitter.com/80vul/status/1470272820571963392

[Bad news] Ransomware has landed on #log4j2 RCE

2.89K viewsAdel, 12:48

https://jfrog.com/blog/tensorflow-python-code-injection-more-eval-woes/

TensorFlow Python Code Injection: More eval() Woes

Background JFrog security research team (formerly Vdoo) has recently disclosed a code injection issue in one of the utilities shipped with TensorFlow, a popular Machine Learning platform that’s widely used in the industry. The issue has been assigned to CVE…

2.97K viewsAdel, 07:43

3.39K viewsMmD, 19:28

https://github.com/icyguider/DumpNParse

GitHub - icyguider/DumpNParse: A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0. - icyguider/DumpNParse

3.18K viewsAdel, 08:03

In this video, would like to showcase another challenge from Snyk capture the flag event that was going on from October 5th to October 7th of 2021. My video showcase #premieres at 9:00 PM IRST (12 PM EST)

https://youtu.be/xCdqK84bngg

Steganography Challenges (2/4)

This is the second episode of the Steganography challenges video series.In this video I would like to showcase another challenge from SNYK capture the flag e...

2.78K viewsAdel, 11:09

https://github.com/wishihab/Android-RATList

GitHub - wishihab/Android-RATList: Android - Remote Access Trojan List

Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.

2.93K viewsMmD, 00:34