SecList for CyberStudents – Telegram

SecList for CyberStudents

@SecListForCyberStudents

240 subscribers

584 photos

23 videos

211 files

896 links

Think outside the box

Download Telegram

About

Blog

Apps

Platform

SecList for CyberStudents

240 subscribers

SecList for CyberStudents

Forwarded from Pentest Notes

Подготовил для вас подробное руководство по тестированию на проникновение Outlook Web Access (OWA). 😈

➡️ В статье я разобрал все основные атаки и уязвимости OWA. Собрал и структурировал самое полезное в одном месте.

➡️ Также материал идеально подойдет для тех, кто все еще путает между собой OWA, Outlook и MS Exchange :)

Даже если вы раньше не сталкивались с почтовыми сервисами Microsoft, после прочтения смело можете бежать проверять их на безопасность. 🥤

Ссылка на статью

💫

@pentestnotes | #pentest #OWA #Exchange

Please open Telegram to view this post

VIEW IN TELEGRAM

👍1🍓1

135 views20:14

SecList for CyberStudents

OTP bypass Resources
- Link: https://lnkd.in/dBFU2mSg
- Link: https://lnkd.in/dBA6CDja
- Link: https://lnkd.in/dJccxQzh
- Link: https://lnkd.in/dMMxS3QG
- Link: https://lnkd.in/dpeMkFWu
- Link: https://lnkd.in/d2wra8-h
- Link: https://lnkd.in/dPag-MwX
- Link: https://lnkd.in/dcgJxJ3r
- Link: https://lnkd.in/d_6hJPc8
- Link: https://lnkd.in/djrnzT4R

This link will take you to a page that’s not on LinkedIn

❤1

159 views17:02

SecList for CyberStudents

https://github.com/projectdiscovery/shuffledns

GitHub - projectdiscovery/shuffledns: MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well…

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support. - projectdiscovery/shuffledns

123 views03:15

SecList for CyberStudents

graphw00f — is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

https://github.com/dolevf/graphw00f

#GraphQL #Web #Pentest

GitHub - dolevf/graphw00f: graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking…

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint. - dolevf/graphw00f

👍1

122 views05:08

SecList for CyberStudents

https://github.com/APIs-guru/graphql-voyager

https://apis.guru/graphql-voyager/

134 views05:14

SecList for CyberStudents

https://github.com/dolevf/graphql-cop

GitHub - dolevf/graphql-cop: Security Auditor Utility for GraphQL APIs

Security Auditor Utility for GraphQL APIs. Contribute to dolevf/graphql-cop development by creating an account on GitHub.

148 views08:20

SecList for CyberStudents

https://notsosecure.com/anatomy-of-a-hack-docker-registry

Anatomy of a hack: Docker Registry

Docker is a popular container technology and has been very well accepted by industries across the world. It is used in production as well as UAT environments. However, with every new layer in the

108 views11:34

SecList for CyberStudents

https://infosecwriteups.com/hacking-open-docker-registries-pulling-extracting-and-exploiting-images-339f41fbf9b4

Hacking Open Docker Registries: Pulling, Extracting, and Exploiting Images.

Discovering secrets in exposed container images and leveraging misconfigurations for deeper access

112 views11:52

SecList for CyberStudents

https://github.com/NotSoSecure/docker_fetch/

GitHub - NotSoSecure/docker_fetch: Data extraction tool for Docker Registry API

Data extraction tool for Docker Registry API. Contribute to NotSoSecure/docker_fetch development by creating an account on GitHub.

106 views11:52

SecList for CyberStudents

Forwarded from Brut Security

👨‍🍳 Damn-Vulnerable-RESTaurant 👨‍🍳

⚡️An intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

✅Get: https://github.com/theowni/Damn-Vulnerable-RESTaurant-API-Game

109 views17:23

SecList for CyberStudents

https://github.com/topotam/PetitPotam

https://github.com/ly4k/PetitPotam

GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw…

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. - topotam/PetitPotam

125 viewsedited 06:25

SecList for CyberStudents

https://swisskyrepo.github.io/InternalAllTheThings/cheatsheets/shell-reverse-cheatsheet/#summary

swisskyrepo.github.io

Reverse Shell Cheat Sheet - Internal All The Things

Active Directory and Internal Pentest Cheatsheets

122 views06:43

SecList for CyberStudents

https://github.com/sm00v/Dehashed/

GitHub - sm00v/Dehashed: This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all…

This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all cleartext passwords and hashes to files. - sm00v/Dehashed

133 views06:54

SecList for CyberStudents

https://github.com/tillson/git-hound

GitHub - tillson/git-hound: Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs.…

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks. - tillson/git-hound

126 views06:17

SecList for CyberStudents

https://www.youtube.com/live/YtfbuDWKEx0?si=fwVfshLAMGsG_SOE

How I Pentested MyFitnessPal Live: Full Bug Bounty Walk-through (Zero to Advanced)

🔍 In this live demo, I take you step-by-step through how I performed a full bug bounty hunt on MyFitnessPal — from scratch to reporting. If you’re a cybersecurity student, bug hunter, or pentester targeting USA assets, this is your real-world walkthrough.…

125 views04:47

SecList for CyberStudents

SecList for CyberStudents

https://www.youtube.com/live/YtfbuDWKEx0?si=fwVfshLAMGsG_SOE

Live🔥

122 views04:48

SecList for CyberStudents

https://github.com/dnSpy/dnSpy

GitHub - dnSpy/dnSpy: .NET debugger and assembly editor

.NET debugger and assembly editor. Contribute to dnSpy/dnSpy development by creating an account on GitHub.

109 views08:43

SecList for CyberStudents

https://securityonline.info/critical-mikrotik-flaw-cve-2025-61481-cvss-10-0-exposes-router-admin-credentials-over-unencrypted-http-webfig/

Daily CyberSecurity

Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig

A Critical (CVSS 10.0) flaw (CVE-2025-61481) in MikroTik RouterOS/SwOS exposes the WebFig management interface over unencrypted HTTP by default, allowing remote credential theft via MitM.

112 views08:03

SecList for CyberStudents

I'm going to write about a piece of malware that appears under the name "kaudit0." I did some research, and all the information I found indicates that its purpose is crypto-mining. There isn't much information available about it, but what does exist appears to be credible.

#malware

118 views08:15