Сегодня мой внешний IP был заблокирован в сервисе IVI с сообщением Ваш ip-адрес идентифицируется как анонимный. Пожалуйста, обратитесь к своему интернет-провайд...

Let's not play games with semantics. The way I see the situation for 2.7 is
that EOL is January 1st, 2020, and there will be no updates, not even
source-only security patches, after that da...

The Cisco Security portal provides actionable intelligence for security threats and vulnerabilities in Cisco products and services and third-party products.

Find out which products will retire, reach end of support or move from mainstream support to extended support in 2020.

Just another Windows Process Injection. Contribute to antonioCoco/Mapping-Injection development by creating an account on GitHub.

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it. - vaib25vicky/a...

Contribute to Fire30/bad_hoist development by creating an account on GitHub.

01:20 - Begin of recon
03:18 - Checking out the HTTPS Certificate for potential hostnames
05:10 - Looking at api.craft.htb, appears to be some type of Documentation for the REST API
06:40 - Looking at gogs.craft.htb, no known exploits but there is some source code!
09:20 - Checking out the Git Issues, seeing Dinesh put a JWT Token in a comment. Checking the token out
11:25 - Attempting to crack the JWT (fails)
13:30 - Going back to the issues to see there is an eval() on user input
16:25 - Installing Go and Pip3 on Kali 2019.4, so we can install GitLeaks and TruffleHog
18:57 - Running GitLeaks and TruffleHog (find nothing) then manually analyzing the git commits
21:20 - Discovering Dinesh's credentials in an old git commit
25:05 - Logging into GOGS with Dinesh, then showing adding an SSH Key for potential port forwarding
28:28 - Testing Code Execution from the previous git issue, use the test.py script as a skeleton.
31:30 - Getting a reverse shell with this exploit using exec(base64)
35:10 - Reverse Shell Returned…

In this guide, I will:




Quickly introduce the SSH protocol and implementations.Expose some common configuration mistakes then showcase some attacks on the protocol & implementations.Present some SSH pentesting & blue team tools.Give a standard reference for security guidelines and finally

Using Burp to Test for Open Redirections Open redirections are potential vulnerabilities for web applications in which a redirection is performed to a ...

Read FortiGuard Labs' analysis of a new strain of ransomware dubbed DeathRansom.…

How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber

Basically a script thrift shop. Contribute to 0vercl0k/stuffz development by creating an account on GitHub.

Что это за четыре буквы и кому это вообще надо? Я не буду описывать курс PWK и OSCP экзамен, простой запрос «OSCP review» выдаст вам кучу обзоров, описание форма...

Let me start off by saying that I know this deface is a surprise to absolutely nobody. It doesn’t necessarily warrant the attention I gave…

Library to disassemble MC7 bytecode for Siemens PLC SIMATIC S7-300 and S7-400 - wargio/libmc7