SecList for CyberStudents

OTP bypass Resources
- Link: https://lnkd.in/dBFU2mSg
- Link: https://lnkd.in/dBA6CDja
- Link: https://lnkd.in/dJccxQzh
- Link: https://lnkd.in/dMMxS3QG
- Link: https://lnkd.in/dpeMkFWu
- Link: https://lnkd.in/d2wra8-h
- Link: https://lnkd.in/dPag-MwX
- Link: https://lnkd.in/dcgJxJ3r
- Link: https://lnkd.in/d_6hJPc8
- Link: https://lnkd.in/djrnzT4R

lnkd.in

This link will take you to a page that’s not on LinkedIn

❤1

158 views17:02

SecList for CyberStudents

https://github.com/projectdiscovery/shuffledns

GitHub

GitHub - projectdiscovery/shuffledns: MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well…

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support. - projectdiscovery/shuffledns

122 views03:15

SecList for CyberStudents

graphw00f — is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

https://github.com/dolevf/graphw00f

#GraphQL #Web #Pentest

GitHub

GitHub - dolevf/graphw00f: graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking…

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint. - dolevf/graphw00f

👍1

121 views05:08

SecList for CyberStudents

https://github.com/APIs-guru/graphql-voyager

https://apis.guru/graphql-voyager/

133 views05:14

SecList for CyberStudents

https://github.com/dolevf/graphql-cop

GitHub

GitHub - dolevf/graphql-cop: Security Auditor Utility for GraphQL APIs

Security Auditor Utility for GraphQL APIs. Contribute to dolevf/graphql-cop development by creating an account on GitHub.

147 views08:20

SecList for CyberStudents

https://notsosecure.com/anatomy-of-a-hack-docker-registry

NotSoSecure

Anatomy of a hack: Docker Registry

107 views11:34

SecList for CyberStudents

https://infosecwriteups.com/hacking-open-docker-registries-pulling-extracting-and-exploiting-images-339f41fbf9b4

Medium

Hacking Open Docker Registries: Pulling, Extracting, and Exploiting Images.

Discovering secrets in exposed container images and leveraging misconfigurations for deeper access

111 views11:52

SecList for CyberStudents

https://github.com/NotSoSecure/docker_fetch/

GitHub

GitHub - NotSoSecure/docker_fetch: Data extraction tool for Docker Registry API

Data extraction tool for Docker Registry API. Contribute to NotSoSecure/docker_fetch development by creating an account on GitHub.

105 views11:52

SecList for CyberStudents

Forwarded from Brut Security

👨‍🍳 Damn-Vulnerable-RESTaurant 👨‍🍳

⚡️An intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

✅Get: https://github.com/theowni/Damn-Vulnerable-RESTaurant-API-Game

108 views17:23

SecList for CyberStudents

https://github.com/topotam/PetitPotam

https://github.com/ly4k/PetitPotam

GitHub

GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw…

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. - topotam/PetitPotam

124 viewsedited 06:25

SecList for CyberStudents

https://swisskyrepo.github.io/InternalAllTheThings/cheatsheets/shell-reverse-cheatsheet/#summary

swisskyrepo.github.io

Reverse Shell Cheat Sheet - Internal All The Things

Active Directory and Internal Pentest Cheatsheets

121 views06:43

SecList for CyberStudents

https://github.com/sm00v/Dehashed/

GitHub

GitHub - sm00v/Dehashed: This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all…

This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all cleartext passwords and hashes to files. - sm00v/Dehashed

132 views06:54

SecList for CyberStudents

https://github.com/tillson/git-hound

GitHub

GitHub - tillson/git-hound: Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs.…

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks. - tillson/git-hound

125 views06:17

SecList for CyberStudents

https://www.youtube.com/live/YtfbuDWKEx0?si=fwVfshLAMGsG_SOE

YouTube

How I Pentested MyFitnessPal Live: Full Bug Bounty Walk-through (Zero to Advanced)

🔍 In this live demo, I take you step-by-step through how I performed a full bug bounty hunt on MyFitnessPal — from scratch to reporting. If you’re a cybersecurity student, bug hunter, or pentester targeting USA assets, this is your real-world walkthrough.…

124 views04:47

SecList for CyberStudents

https://www.youtube.com/live/YtfbuDWKEx0?si=fwVfshLAMGsG_SOE

Live🔥

121 views04:48

SecList for CyberStudents

https://github.com/dnSpy/dnSpy

GitHub

GitHub - dnSpy/dnSpy: .NET debugger and assembly editor

.NET debugger and assembly editor. Contribute to dnSpy/dnSpy development by creating an account on GitHub.

108 views08:43

SecList for CyberStudents

https://securityonline.info/critical-mikrotik-flaw-cve-2025-61481-cvss-10-0-exposes-router-admin-credentials-over-unencrypted-http-webfig/

Daily CyberSecurity

Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig

A Critical (CVSS 10.0) flaw (CVE-2025-61481) in MikroTik RouterOS/SwOS exposes the WebFig management interface over unencrypted HTTP by default, allowing remote credential theft via MitM.

111 views08:03

SecList for CyberStudents

I'm going to write about a piece of malware that appears under the name "kaudit0." I did some research, and all the information I found indicates that its purpose is crypto-mining. There isn't much information available about it, but what does exist appears to be credible.

#malware

117 views08:15

SecList for CyberStudents

https://medium.com/@Aacle/ssrf-part-3-advanced-tricks-timing-channels-out-of-the-box-detection-693c07c97015

Medium

SSRF — Part 3: Advanced Tricks, Timing Channels & Out-of-the-Box Detection 🚀

Subtitle: The secret-sauce volume for bug bounty hunters — defensive-first, high-signal techniques that convert sketchy SSRF signs into…

105 views05:09

About

Blog

Apps

Platform