توضیح کاملی از نحوه کار فایل پاورپوینت آلوده به اکسپلویت CVE-2017-0199
https://blog.fortinet.com/2017/09/01/powerpoint-file-armed-with-cve-2017-0199-and-uac-bypass
#pptx
#malware
#exploit
#windows
https://blog.fortinet.com/2017/09/01/powerpoint-file-armed-with-cve-2017-0199-and-uac-bypass
#pptx
#malware
#exploit
#windows
باگ xss در سایت uber (در کوکی های سایت)
https://zhchbin.github.io/2017/08/30/Uber-XSS-via-Cookie/
#xss
#bugbounty
#pentest
#webapp
https://zhchbin.github.io/2017/08/30/Uber-XSS-via-Cookie/
#xss
#bugbounty
#pentest
#webapp
zhchbin
[BBP系列二] Uber XSS via Cookie
This write up is about part of my latest XSS report to Uber@hackerone. Sorry for my poor English first of all, I will try my best to explain this XSS problem throughly. JSONP RequestSeveral months ago
Pro PHP and JQuery (pdf)
https://index-of.es/Programming/Pro%20PHP%20and%20jQuery.pdf
#php
#jquery
#webapp
https://index-of.es/Programming/Pro%20PHP%20and%20jQuery.pdf
#php
#jquery
#webapp
قانون جدید کشور چین به دستگاه های امنیتی اجازه میده برای کارهای جاسوسی از باگهای 0day استفاده کنن!
https://securityaffairs.co/wordpress/62663/laws-and-regulations/chinese-cyber-security-law.html
#news
#china
https://securityaffairs.co/wordpress/62663/laws-and-regulations/chinese-cyber-security-law.html
#news
#china
Security Affairs
Chinese cyber security law will allow China to use zero-day knowledge for its intelligence
According to the Chinese Cyber Security law, the information obtained by the CNNVD could be used in intelligence operations.
مهندسی معکوس یک فایل باینری
https://0x00sec.org/t/reversing-and-exploiting-a-nuclear-bomb/3412
#RE
#binary
#gdb
#virus
https://0x00sec.org/t/reversing-and-exploiting-a-nuclear-bomb/3412
#RE
#binary
#gdb
#virus
0x00sec - The Home of the Hacker
Reversing and Exploiting a Nuclear Bomb ;)
Preface Yo! It’s been a long time since I last posted anything here. Life kept me more than busy, but now I’ve got a little more time on my hands. I decided to do a write up on the following binary, because it taught me some new things, compared to the…
ابزاری بر پایه پاورشل برای ساخت ماکروهای آفیس با اهداف تخریبی
https://github.com/curi0usJack/luckystrike
#ps
#windows
#office
#macro
#virus
https://github.com/curi0usJack/luckystrike
#ps
#windows
#office
#macro
#virus
GitHub
GitHub - curi0usJack/luckystrike: A PowerShell based utility for the creation of malicious Office macro documents.
A PowerShell based utility for the creation of malicious Office macro documents. - curi0usJack/luckystrike
بایپس پسورد ادمین در ویندوزهای ۷ و ۸ و ۱۰
https://www.techworm.net/2017/04/bypass-windows-10-8-7-local-administrator-password.html
#windows
https://www.techworm.net/2017/04/bypass-windows-10-8-7-local-administrator-password.html
#windows
TechWorm
How to Bypass Windows 10 / 8 / 7 Local Administrator Password
How to Bypass Windows 10 / 8 / 7 Local Administrator Password How to automatically bypass Windows login screen every time you turn on your computer? Is the
https://zempirians.com/ebooks/Michael%20Collins-Network%20Security%20Through%20Data%20Analysis_%20Building%20Situational%20Awareness-O%27Reilly%20Media%20(2014).pdf
Network Security Through Data Analysis: Building Situational Awareness
#ebook
#pdf
Network Security Through Data Analysis: Building Situational Awareness
#ebook
کالبد شکافی رمزنگاری GSM و پروسه بروزرسانی مکان
https://payatu.com/dissecting-gsm-encryption-location-update-process/
#gsm
#mobile
#bts
https://payatu.com/dissecting-gsm-encryption-location-update-process/
#gsm
#mobile
#bts
Payatu
Dissecting GSM encryption and Location update process
This post is about gsm encryption and location update process. Learn how the mobile phone update it’s location to the mobile network.
خودکارسازی حملات فاز بر روی ورودی های سایت با استفاده از ماکروهای burp suite
https://blog.securelayer7.net/automating-web-apps-input-fuzzing-via-burp-macros/
#web
#pentest
#fuzzing
#burpsuite
#macro
https://blog.securelayer7.net/automating-web-apps-input-fuzzing-via-burp-macros/
#web
#pentest
#fuzzing
#burpsuite
#macro
SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management
Automating Web Apps Input fuzzing via Burp Macros
Hi Readers, This article is about Burp Suite Macros which helps us in automating efforts of manual input payload fuzzing. While it may be known to many testers, this article is written for those...
Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing.
https://github.com/niloofarkheirkhah/nili
#network
#pentest
https://github.com/niloofarkheirkhah/nili
#network
#pentest
شبکه عصبی ساده با استفاده از پایتون و keras
https://www.pyimagesearch.com/2016/09/26/a-simple-neural-network-with-python-and-keras
#AI
#neuralNetwork
#machineLearning
#python
https://www.pyimagesearch.com/2016/09/26/a-simple-neural-network-with-python-and-keras
#AI
#neuralNetwork
#machineLearning
#python
PyImageSearch
A simple neural network with Python and Keras - PyImageSearch
Learn how to create a simple neural network using the Keras neural network and deep learning library along with the Python programming language.