SecList for CyberStudents
@SecListForCyberStudents
241 subscribers
593 photos
24 videos
211 files
904 links
Think outside the box
Download Telegram
About
Blog
Apps
Platform
Join
SecList for CyberStudents
241 subscribers
SecList for CyberStudents
Forwarded from Turan Security
This media is not supported in your browser
VIEW IN TELEGRAM
🏆 BlackHat MEA 2025 CTF musobaqasida 12-o'rin!

☠️Turan Security va 🇺🇿O'zbekiston sharafini himoya qilgan jamoa dunyoning eng nufuzli kiberxavfsizlik musobaqalaridan birida 125 jamoa orasidan TOP-12 talikdan joy oldi!

Saudiya Arabistoning Ar-Riyod shahrida o‘tkazilgan BlackHat MEA tadbiri - global miqyosdagi eng kuchli mutaxassislar, ekspertlar va jahonning yetakchi kiberxavfsizlik jamoalari uchrashadigan maydon.

TOP jamoalar orasida Team lead’imiz qiyinlik darajasi yuqori bo'lgan 3 ta taskda:
🚩Firstblood - web, birinchi;
🚩Firstblood - forensics, birinchi;
🚩Secondblood - web, ikkinchi bo'lib flagni aniqlashga erishdi.

Bizning maqsadimiz xalqaro maydonda O‘zbekistonni nufuzini oshirish, yoshlarga ilhom berish va kiberxavfsizlik sohasini rivojlantirishga hissa qo’shish.
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3👍2❤1
95 views
SecList for CyberStudents
IDOR.pdf
78.5 KB
2FA Bypass.pdf
301.4 KB
123 views
SecList for CyberStudents
Forwarded from Private Shizo
CVE-2022-46463.zip
2.9 KB
💥PoC for CVE-2022-46463
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication.

Usage:
python3 cve-2022-46463.py -u TargetURL
python3 cve-2022-46463.py -f targetListUrlFile
123 views
SecList for CyberStudents
https://labs.withsecure.com/publications/getting-real-with-xss
Withsecure
Getting Real with XSS
Times they are a-changin'The times of “<script>alert(1)</script>” and making use of “python –m SimpleHTTPServer” have well faded away.
❤1
117 views
SecList for CyberStudents
https://github.com/BishopFox/h2csmuggler
GitHub
GitHub - BishopFox/h2csmuggler: HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
HTTP Request Smuggling over HTTP/2 Cleartext (h2c) - BishopFox/h2csmuggler
108 views
SecList for CyberStudents
https://drive.google.com/file/d/1ACTOGBuelEFGRJrNMjjU6KsP4Ak5Cskw/view

#SOC #BlueTeam #DFIR
101 views
SecList for CyberStudents
https://github.com/infosecn1nja/Red-Teaming-Toolkit#Payload%20Development
GitHub
GitHub - infosecn1nja/Red-Teaming-Toolkit: This repository contains cutting-edge open-source security tools (OST) for a red teamer…
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter. - infosecn1nja/Red-Teaming-Toolkit
100 views
SecList for CyberStudents
https://portswigger.net/research/the-fragile-lock
PortSwigger Research
The Fragile Lock: Novel Bypasses For SAML Authentication
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi
107 views
SecList for CyberStudents
https://github.com/besimorhino/powercat
GitHub
GitHub - besimorhino/powercat: netshell features all in version 2 powershell
netshell features all in version 2 powershell. Contribute to besimorhino/powercat development by creating an account on GitHub.
118 views
SecList for CyberStudents
Forwarded from Ombor
Active Directory Hujum va Himoya.pptx
10.4 MB
#ActiveDirectory
#CRTE
#CRTP

Va nihoyat tugadi. Tan olish kerak bu mukammal qo'llanma emas ammo yo'gdan ko'ra yaxshi. O'qish uchun sabr tilayman...
🔥2
98 views
SecList for CyberStudents
Awesome Bug Bounty Tools.pdf
292 KB
117 views
SecList for CyberStudents
https://cirt.net/passwords/

https://default-password.info/

https://datarecovery.com/rd/default-passwords/

https://github.com/danielmiessler/SecLists/tree/master/Passwords/Leaked-Databases

You can use this passwords for bruteforce
134 viewsedited  
SecList for CyberStudents
https://github.com/xFreed0m/RDPassSpray
GitHub
GitHub - xFreed0m/RDPassSpray: Python3 tool to perform password spraying using RDP
Python3 tool to perform password spraying using RDP - xFreed0m/RDPassSpray
112 views
SecList for CyberStudents
https://github.com/byt3bl33d3r/SprayingToolkit
GitHub
GitHub - byt3bl33d3r/SprayingToolkit: Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less…
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient - byt3bl33d3r/SprayingToolkit
106 views
SecList for CyberStudents
https://github.com/dafthack/MailSniper
GitHub
GitHub - dafthack/MailSniper: MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment…
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca...
109 views
SecList for CyberStudents
https://github.com/PwnDexter/Invoke-EDRChecker
GitHub
GitHub - PwnDexter/Invoke-EDRChecker: Checks running processes, process metadata, Dlls loaded into your current process and the…
Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services, the registry and running drivers for th...
86 views
SecList for CyberStudents
https://github.com/PwnDexter/SharpEDRChecker
GitHub
GitHub - PwnDexter/SharpEDRChecker: Checks running processes, process metadata, Dlls loaded into your current process and the each…
Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, inst...
90 views
SecList for CyberStudents
https://www.youtube.com/watch?v=fvMus-Tc83E
YouTube
Wazuh Crash Course | 2 Hour+ Free Course(Must for Security Analyst)
Join our 2-hour+ free Wazuh Crash Course, perfect for security analysts. Learn to install, configure, and use Wazuh for effective threat detection and incident response. Ideal for beginners and professionals looking to enhance their cybersecurity skills.…
96 views