/archive/

Desofuscando endereços de email protegidos pela Cloudflare, muito interessante.

https://blog.jse.li/posts/cloudflare-scrape-shield/

blog.jse.li

An Analysis of Cloudflare's Email Address Obfuscation | Jesse Li

It's a hex encoded string where the first byte (the key), is XORed against each subsequent byte to decrypt the email address. This is not a vulnerability.

104 viewsLain Iwakura, 00:41

/archive/

https://infosecwriteups.com/

InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly newsletter for the coolest infosec updates: https://weekl…

111 viewsLain Iwakura, 13:02

/archive/

The best articles from /r/oscp

https://libredd.it/r/oscp/comments/owfcl3/i_passed_oscp_and_here_is_how_you_shouldnt_do_it/
https://libredd.it/r/oscp/comments/ng6k5t/from_35_point_fail_to_100_point_pass_how_to_avoid/
https://libredd.it/r/oscp/comments/rs38pm/a_different_kind_of_root_how_a_dentist_passed_the/

125 viewsLain Iwakura, 21:38

/archive/

Discussão sobre redes monitoradas e possíveis formas de silenciosamente bypassar a Intrusion Detection System:

https://security.stackexchange.com/questions/193109/websocket-vpn-and-mitm-gateways

Information Security Stack Exchange

Websocket VPN and MitM Gateways

A number of solutions are available for tunnelling IP over
Websockets to masquerade a VPN as browser traffic. How well
are these connections isolated though? Specifically, if the
browser happens to...

112 viewsLain Iwakura, 02:31

/archive/

See how many IP addresses your fail2ban banned:

sudo zgrep 'Ban' /var/log/fail2ban.log*

113 viewsLain Iwakura, 02:36

/archive/

Security script to run using Cron

https://wiki.metawerx.net/wiki/LBSA

108 viewsLain Iwakura, 12:07

/archive/

encrypted reverse shell com openssl lol

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Reverse%20Shell%20Cheatsheet.md#openssl

GitHub

PayloadsAllTheThings/Methodology and Resources/Reverse Shell Cheatsheet.md at master · swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

116 viewsLain Iwakura, 00:27

/archive/

115 viewsLain Iwakura, 10:18

/archive/

script powershell que limpa todos os logs de evento do windows

Get-EventLog -List | % { Clear-EventLog $_.Log }; Get-WinEvent -ListLog * -Force | % { WEvtUtil cl $_.LogName }

106 viewsLain Iwakura, 12:59

/archive/

Database with evasion techniques

https://unprotect.it/

104 viewsLain Iwakura, 14:10

/archive/

windows_commonly_abused_privileges.pdf

123.8 KB

349 viewsLain Iwakura, 19:51

/archive/

https://github.com/fuzzdb-project/fuzzdb

GitHub

GitHub - fuzzdb-project/fuzzdb: Dictionary of attack patterns and primitives for black-box application fault injection and resource…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery. - fuzzdb-project/fuzzdb

124 viewsNaomi Kajitsu, 20:22

/archive/

https://www.hostt.com/server-setup-steps-ssh-keys-firewall/

Hostt

Advanced Wordpess Hosting Server Setup Steps - SSH Keys, Firewall & Other Tweaks - Hostt

Running your own server can be time consuming and difficult. If you are just starting your blogging journey then I highly recommend that you begin with

134 viewsLain Iwakura, 02:29

/archive/

Windows malware development
https://0xpat.github.io/
https://cocomelonc.github.io/

0xpat.github.io

0xPat blog – Red/purple teamer

300 viewsLain Iwakura, 16:05

/archive/

https://github.com/pluja/awesome-privacy

GitHub

GitHub - pluja/awesome-privacy: Awesome Privacy - A curated list of services and alternatives that respect your privacy because…

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS. - pluja/awesome-privacy

118 views🚶‍♂️, 00:34

/archive/

Test your knowledge to be an attractive modern slave.

https://github.com/Ebazhanov/linkedin-skill-assessments-quizzes

GitHub

GitHub - Ebazhanov/linkedin-skill-assessments-quizzes: Full reference of LinkedIn answers 2024 for skill assessments (aws-lambda…

Full reference of LinkedIn answers 2024 for skill assessments (aws-lambda, rest-api, javascript, react, git, html, jquery, mongodb, java, Go, python, machine-learning, power-point) linkedin excel t...

🤩1

128 viewsLain Iwakura, 02:33

/archive/

Forwarded from p.file

https://godbolt.org/

116 viewsLain Iwakura, 02:34

/archive/

"It's not a vulnerability, it's a feature." - <three letter agency>

https://yewtu.be/watch?v=j5YMRZol1yE

Invidious

Millions of Smart Phones Are Vulnerable to Remote Attacks

A stack overflow vulnerability discovered in the UNISOC chipset on many budget smartphones could lead to a denial of service attack on the phone, or remote code execution. UNISOC has updated their firmware, but the patch will not be rolling out to android…

136 viewsLain Iwakura, 22:19

/archive/

Very useful tool to help identify hashes

https://gitlab.com/kalilinux/packages/hash-identifier/

GitLab

Kali Linux / Packages / hash-identifier · GitLab

hash-identifier packaging for Kali Linux

131 viewsLain Iwakura, 21:07

/archive/

Try harder. Never give up.

https://www.offensive-security.com/offsec/what-it-means-to-try-harder/

OffSec

What It Really Means to "Try Harder"

Discover how OffSec’s “Try Harder” mantra evolved into a mindset, and how it helps learners build grit, creativity, and real-world problem-solving skills.

144 viewsLain Iwakura, 02:45

/archive/

Checklist for privilege escalation:

https://github.com/netbiosX/Checklists/blob/master/Linux-Privilege-Escalation.md

https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Linux%20-%20Privilege%20Escalation.md

https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_-_linux.html

https://payatu.com/guide-linux-privilege-escalation

GitHub

Checklists/Linux-Privilege-Escalation.md at master · netbiosX/Checklists

Red Teaming & Pentesting checklists for various engagements - netbiosX/Checklists

155 viewsLain Iwakura, 02:12

About

Blog

Apps

Platform