SecList for CyberStudents

📝Подборка обходов различных WAF

Автор собрал советы по обходу waf из Twitter'а и упаковал это в едином репозитории.

Ссылка на GitHub

#web #waf #bypass

94 views19:29

payloads.csv

37.2 KB

FUCK WAF
От Cloudflare до Imperva, Akamai, F5, Checkpoint, Fortinet

#waf #bypass #payload #regexp

79 views04:48

SecList for CyberStudents

https://news.xcoode.com/automation-for-target-surface-information-gathering-xcoode-ai-prompting-for-bug-bounty-giants-a545dadc87dc

Medium

Automation for Target Surface Information Gathering — XCOODE + AI Prompting for Bug Bounty Giants

Hello Cyber Enthusiasts! Join us today as we delve into the exciting realm of bug bounty hunting. In this article, XCOODE will guide you…

65 views08:46

SecList for CyberStudents

https://github.com/xnl-h4ck3r/GAP-Burp-Extension

#BurpSuite #Extension #BugHunting

GitHub

GitHub - xnl-h4ck3r/GAP-Burp-Extension: Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist - xnl-h4ck3r/GAP-Burp-Extension

70 views10:24

SecList for CyberStudents

62 views18:32

SecList for CyberStudents

The_Art_of_Linux_Persistence__1702487063.pdf

6.9 MB

75 views18:32

SecList for CyberStudents

https://github.com/Marshall-Hallenbeck/red_team_attack_lab

GitHub

GitHub - Marshall-Hallenbeck/red_team_attack_lab: Red Team Attack Lab for TTP testing & research

Red Team Attack Lab for TTP testing & research. Contribute to Marshall-Hallenbeck/red_team_attack_lab development by creating an account on GitHub.

63 views18:32

SecList for CyberStudents

https://null-byte.wonderhowto.com/how-to/discover-hidden-subdomains-any-website-with-subfinder-0341687/

WonderHowTo

Discover Hidden Subdomains on Any Website with Subfinder

When approaching a target, having a precise and detailed plan of attack is absolutely necessary. One of the main goals is to increase the attack surface since the more opportunities there are for e...

56 views18:56

SecList for CyberStudents

https://github.com/Sn1r/Forbidden-Buster

GitHub

GitHub - Sn1r/Forbidden-Buster: A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes…

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and...

63 views19:00

SecList for CyberStudents

Forwarded from SHADOW:Group

🐔

XSS и CSRF в Twitter

Тут багхантер взял недавно слитую XSS , за которую не заплатили и докрутил ее до импакта, позволяющего выполнять различные действия в вашем аккаунте в Twitter, вплоть до его захвата. Однако ему за это тоже не заплатили и он так же решил слить уязвимость на всеобщее обозрение.

Ссылка на пост

#web #csrf

Please open Telegram to view this post

VIEW IN TELEGRAM

X (formerly Twitter)

Chaofan Shou (svm/acc) (@shoucccc) on X

😝 Here is the full disclosure of the Twitter XSS + CSRF vulnerability.

Clicking a crafted link or going to some crafted web pages would allow attackers to take over your account (posting, liking, updating your profile, deleting your account, etc.)

64 views19:19

SecList for CyberStudents

Хакинг на С++.pdf

17 MB

Хакинг на С++. 2023
Ярошенко А.А.

78 views06:03

SecList for CyberStudents