HackerOne

H2SpaceX - HTTP/2 Single Packet Attack (Race Condition) low level library:
https://github.com/nxenon/h2spacex

Read More:
Portswigger Research: https://portswigger.net/research/smashing-the-state-machine#single-packet-attack

#single_packet_attack #http2 #race_condition #racecondition

GitHub

GitHub - nxenon/h2spacex: HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based…

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks - nxenon/h2spacex

4.1K viewsAmir Kiani, 11:28

HackerOne

😁7❤1

4.24K viewsAmir Kiani, 03:14

HackerOne

https://twitter.com/Amir0x01/status/1722661003089920145
#FA
#WorldSkills2023
#CyberSecurity

👍7👎3❤1👌1

3.72K viewsAmir Kiani, 17:07

HackerOne

HTTP/2 Rapid Reset Attack ( cve-2023-44487 )

Concept of the attack in code:
Https://github.com/nxenon/cve-2023-44487

#dos #ddos #http2 #cve_2023_44487

GitHub

GitHub - nxenon/cve-2023-44487: Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept

Examples for Implementing cve-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept - nxenon/cve-2023-44487

👎4👍1

4.03K viewsAmir Kiani, 09:15

HackerOne

ntdsutil “ac i ntds” “ifm” “create full c:\temp” q q

😁14❤1👍1

3.6K viewsEhsan, 10:05

HackerOne

https://github.com/0x90n/InfoSec-Black-Friday

GitHub

GitHub - 0x90n/InfoSec-Black-Friday: All the deals for InfoSec related software/tools this Black Friday

All the deals for InfoSec related software/tools this Black Friday - 0x90n/InfoSec-Black-Friday

👍1

3.97K viewsEhsan, 07:57

HackerOne

https://youtu.be/uz0YO-DHYXo

YouTube

🔒 Master the Art of Taking Over AWS Snapshots | Ultimate Guide to AWS Snapshot Takeover 🔒

Welcome to my channel! In this mind-blowing video, I will reveal the secrets of taking over AWS snapshots like a pro. 🔐💥

Are you ready to dive deep into the fascinating realm of AWS and learn how to seize complete control over snapshots? Look no further!…

👍1

4.55K viewsAdel, 11:25

HackerOne

https://certitude.consulting/blog/en/using-cloudflare-to-bypass-cloudflare/

3.87K viewsAmir Kiani, 13:21

HackerOne

Splunk RCE PoC

https://github.com/nathan31337/Splunk-RCE-poc

GitHub

GitHub - nathan31337/Splunk-RCE-poc

Contribute to nathan31337/Splunk-RCE-poc development by creating an account on GitHub.

4.32K viewsAmir Kiani, edited 12:20

HackerOne

🔥7👍3

4.01K viewsAmir Kiani, 09:58

HackerOne

https://medium.com/@harsh8v/ssl-search-a-tool-to-identify-infrastructure-and-discover-attack-surfaces-449c83269574

Medium

SSL Search — A tool to identify infrastructure and discover attack surfaces.

This tool allows the user to scan x509 certificates on cloud service providers or given IPv4 CIDRs in order to hunt for a specific target.

4.94K viewsAmir Kiani, 13:22

HackerOne

https://medium.com/@nxenon/dive-into-single-packet-attack-3d3849ffe1d2

#race_condition

Medium

Dive into Single Packet Attack

An Overview and a Tool for Exploiting Single Packet Attack

5.39K viewsAmir Kiani, 14:11

HackerOne

♾️ Collection of DevSecOps Notes + Resources + Tools

https://github.com/nxenon/DevSecOps

#DevSecOps #SDLC #application_security

GitHub

GitHub - nxenon/DevSecOps: ♾️ Collection of DevSecOps Notes + Resources + Courses + Tools

♾️ Collection of DevSecOps Notes + Resources + Courses + Tools - nxenon/DevSecOps

👍7👏2

5.17K viewsAmir Kiani, 20:14

HackerOne

https://labs.taszk.io/articles/post/full_chain_bb_part1/

labs.taszk.io

Full Chain Baseband Exploits, Part 1

Full Chain Baseband Exploitation, Part 1

👍2🔥2❤1

4.54K viewsAmir Kiani, 04:22

HackerOne

The ART of Chaining Vulnerabilities

https://ahmdhalabi.medium.com/the-art-of-chaining-vulnerabilities-e65382b7c627

Medium

The ART of Chaining Vulnerabilities

Deep Dive into breaking applications and chaining vulnerabilities to hack complete infrastructures.

❤‍🔥6👍3🙏3❤2🫡1

5.01K viewsAmir Kiani, 04:40

HackerOne

https://github.com/SpiralBL0CK/-CVE-2023-35985

1-day exploit

GitHub

GitHub - SpiralBL0CK/-CVE-2023-35985: CVE-2023-35985 reproduction

CVE-2023-35985 reproduction. Contribute to SpiralBL0CK/-CVE-2023-35985 development by creating an account on GitHub.

👍3❤1

5.46K viewsAmir Kiani, edited 08:23

HackerOne

https://m4dm0e.github.io/blog/2023/01/06/cognito-misconfig.html

Mohammed Al-Barbari

How I was able to takeover any account (Zero-click ATO)

السلام عليكم ورحمة الله وبركاتة Who am I? I am Mohammed Fadhl Al-Barbari, a cybersecurity researcher, tools builder, and bug hunter from Yemen, active on platforms such as HackerOne (H1), BugCrowd, and SRT.

❤6👏3

5.05K viewsAmir Kiani, 12:08

HackerOne

😁15👍1

3.92K viewsAmir Kiani, 20:24

HackerOne

https://github.com/tr0uble-mAker/POC-bomber

GitHub

GitHub - tr0uble-mAker/POC-bomber: 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点. Contribute to tr0uble-mAker/POC-bomber development by creating an account on GitHub.

❤2❤‍🔥2👌2

4.31K viewsAmir Kiani, 01:33

HackerOne

https://gold-marten-204.notion.site/2d292e0b941146ef858a125bf1cb0eb3?v=f04ea483a23b4119ad85592c6e8e961b

gold-marten-204 on Notion

Daniel Kelley: Top Cybersecurity Posts Swipe File | Notion

Contains cybersecurity-related posts that have gathered over 10,000,000 impressions in the last year.

👍3❤2🙏1

3.88K viewsAmir Kiani, 06:07

HackerOne

https://github.com/Ignitetechnologies/Mindmap/tree/main/Subdomain%20Enumeration

GitHub

Mindmap/Subdomain Enumeration at main · Ignitetechnologies/Mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them - Ignitetechnologies/Mindmap

❤5👍4

4.64K viewsAmir Kiani, 17:00

About

Blog

Apps

Platform