Search results

❗️ Bug Bounty Process Automation Reconftw is a very large script that automates literally everything: from reconnaissance to vulnerability scanning. It incorporates the best tools used by bug hunters. Here's a small sample of what Reconftw can do: ⏺Search URLs on a website; ⏺Collect...

❗️ Cheat Sheet for Bypassing Browser XSS Filters Bypassing a browser's XSS filter is an attempt to bypass security measures that prevent cross-site scripting (XSS) attacks. These attacks occur when a web application accepts user input into its output without validating or encoding it. Some...

😈 Stealing User Hashes Using NTP Timeroasting is a security attack technique that allows one to extract password hashes of computer accounts in an Active Directory (AD) domain. The method involves exploiting the NTP protocol and the Kerberos response hashing mechanism to obtain hashes without...

🎃 MAC Address Manipulation Tool macchanger (also known as the GNU MAC Changer) – simplifies MAC address manipulation for network interfaces. It offers various features, such as changing the address to match a specific manufacturer or completely randomizing it. https://github.com/alobbs/macchanger

💰 SEC Account Hack: One Tweet and Bitcoin Crashed - An Alabama resident pleaded guilty to hacking the U.S. Securities and Exchange Commission (SEC) account on social media site X In January, 25-year-old Eric Council Jr. hacked the SEC account and posted a false statement about the imminent...

🖥 GitHub Hacking Basics GitHub is a web-based version control and collaboration platform for software developers, and it's currently one of the easiest ways to compromise an organization. https://timcore.ru/2024/07/22/7-bug-bounty-v-2-osnovy-vzloma-github/?ysclid=m71rbm8hdo557935735

🪰 OWASP Vulnerable Web Applications Directory The OWASP Vulnerable Web Applications Directory (VWAD) is a registry of known vulnerable web and mobile applications. The project's primary goal is to provide a list of vulnerable applications for security professionals to exploit for hacking...

🧑‍🎓 Book: "Blue Fox: Hacking and Reverse Engineering ARM" In this article, we will focus only on reverse engineering compiled programs. A compiler is a program that takes code written in a high-level language and converts it into low-level machine instructions. This package of instructions is...

👁‍🗨 Remote Control Framework PhpSploit is a remote control framework designed to provide covert, interactive communication via HTTP between a client and a web server. It is a post-exploitation tool capable of maintaining access to a compromised web server for privilege escalation...

🥷 Changing and Randomizing the MAC Address in Kali Linux Open a Kali Linux terminal and run the following commands: sudo ifconfig eth0 down sudo macchanger -r eth0 sudo ifconfig eth0 up You can also configure NetworkManager to change the MAC address to a random one each time you connect to the...

😈 Account takeover without a single click In today's article, the author will explain how he was able to take over an account without user interaction, thanks to a single misconfiguration in the guest login. https://tproger.ru/translations/10-free-resources-to-learn-git

🤓 10 Resources for Learning and Using Git Git is a free, open-source, distributed version control system created by Linus Torvalds, the creator of Linux. In this article, the authors have compiled 10 resources to help you get started with Git, including guides, cheat sheets, documentation...

❗️ Microsoft PowerShell Modules for Security Auditing PowerSploit is a set of Microsoft PowerShell modules used for security auditing and penetration testing. The project consists of eight modules, grouped by functionality. Each module includes a series of scripts for automating common...