项目说明
-1- 3 Ways Extract Password Hashes from NTDS.dit:
-2- 3 ways to Capture HTTP Password in 网络 PC:
-3- 3 Ways to Crack Wifi using Pyrit,oclHashcat and Cowpatty:
www.hackingarticles.in/3-ways-crack-wifi-using-pyrit-oclhashcat-cowpatty/
-4-BugBounty @ Linkedln-How I was able to bypass Open Redirection Protection:
-5-BugBounty — “Let me reset your password and login into your account “-How I was able to Compromise any User Account Password Functionality:
-6-“Journey from LFI to RCE!!!”-How I was able to get the same in one of the India’s popular property buy/sell company:
-7-BugBounty — “I don’t need your current password to login into your account” - How could I completely takeover any user’s account in an online classi ed ads company:
-8-BugBounty — “How I was able to shop for free!”- Payment Price Manipulation:
-9-Recon — my way:
-10-Reconnaissance: a eulogy in three acts:
-11-Red-Teaming-Toolkit:
-12-Red Team Tips:
-13-Shellcode: A reverse shell for Linux in C with support for TLS/SSL:
-14-Shellcode: Encrypting traffic:
-15-Penetration Testing of an FTP Server:
-16-Reverse Engineering of the Anubis Malware — Part 1:
-17-Pri Escalation on Linux with Li:
-18-Pentesting Cheatsheets:
-19-Powershell Payload Delivery via DNS using In:
-20-SMART GOOGLE SEARCH QUERIES TO FIND SITES – LIST OF 4500+ GOOGLE DORKS:
-21-SQL Injection Cheat Sheet:
-22-SQLmap’s os-shell + Backdooring website with Weevely:
-23-SQLMap Tamper Scripts (SQL Injection and WAF bypass) Tips:
-24-Top 10 Essential NMAP Scripts for Web App Hacking:
-25-BugBounty — How I was able to download the 源码 代码 of India’s Largest Telecom Service Provider including dozens of more popular websites!:
-26-Re ected XSS Bypass Filter:
-27-XSS Payloads, getting past alert(1):
-28-XS-Searching Google’s bug tracker to find out 源码 代码 Or how side-channel timing attacks aren’t that impractical:
-29-Web Application Firewall (WAF) E Techniques:
-30-OSINT Resources for 2019:
-31-The OSINT Toolkit:
-32-OSINT : Chasing Malware + C&C Servers:
-33-OSINT 工具 for relationships between domains, IPs and email addresses:
-34-From OSINT to Internal – Gaining Access from outside the perimeter:
-35-Week in OSINT #2018–35:
-36-Week in OSINT #2019–14:
-37-Instagram OSINT | What A Nice Picture:
-38-awesome-osint:
-39-OSINT_Team_Links:
-40-Open-源码 Intelligence (OSINT) Reconnaissance:
-41-Hacking Cryptocurrency Miners with OSINT Techniques:
-42-A penetration tester’s guide to sub- domain enumeration:
-43-Packages that actively seeks exploits in the wild. More of an umbrella group for similar packages:
-44-What tools I use for my recon during BugBounty:
-45-Command and Control – DNS:
-46-Command and Control – WebDAV:
-47-Command and Control – Twitter:
-48-Command and Control – Kernel:
-49-Source code disclosure .git folder:
-50-Pentesting Cheatsheet:
-51-Windows Userland Persistence Fundamentals:
-52-A technique that a lot of SQL injection beginners don’t know | Atmanand Nagpure write-up:
-53-awesome-bug-bounty:
-54-dostoe:
-55-awesome-pentest:
-56-awesome-windows-exploitation:
-57-awesome-exploit-de:
-58-BurpSuit + SqlMap = One Love:
-59-Crack WPA/WPA2 Wi-Fi Routers with Aircrack-ng and Hashcat:
-60-DLL Injection:
-61-DLL Hijacking:
-62-My Recon Process — DNS Enumeration:
-63-Google Dorks for nding Emails, Admin users etc:
-64-Google Dorks List 2018:
-65-Hack your own NMAP with a BASH one-liner:
-66-UNIX / LINUX CHEAT SHEET:
cheatsheetworld.com/programming/unix-linux-cheat-sheet/
-67-Linux Capabilities Pri Escalation with SELinux Enabled and Enforced:
-68- information gathering:
-69-post exploitation:
-70-pri escalation:
-71-red team:
-72-The Ultimate Penetration Testing Command Cheat Sheet for Linux:
-73-Web Application Penetration Testing Cheat Sheet:
-74-Windows Kernel Exploits:
-75-Windows oneliners to download remote payload and execute arbitrary 代码:
-76-Windows-Post-Exploitation:
-77-Windows Post Exploitation Shells and File Transfer with Netcat for Windows:
-78-Windows Pri Escalation Fundamentals:
-79-Windows Pri Escalation Guide:
www.absolomb.com/2018-01-26-Windows-Pri/
-80-Windows Acti Post Exploitation Cheatsheet:
-81-Windows Exploitation Tricks: Abusing the User-Mode Debugger:
-82- Testing (Port 5901):
-83- Big List Of Google Dorks Hacking:
-84-List of google dorks for sql injection:
-85-Download Google Dorks List 2019:
-86-Comprehensi to Sqlmap (Target Options):
-87-EMAIL RECONNAISSANCE AND PHISHING TEMPLATE GENERATION MADE SIMPLE:
www.cybersyndicates.com/.../email-reconnaissance-phishing-template-generation-made-simple
-88-Comprehensi on Gobuster Tool:
-89-My Top 5 Web Hacking Tools:
-90-[technical] Pen-testing resources:
-91-File System Access on Webser Sqlmap:
-92-kali-linux-cheatsheet:
-93-Pentesting Cheatsheet:
-94-Command Injection Exploitation through Sqlmap in DVWA (OS-cmd):
-95-XSS Payload List - Cross Site Scripting Payload List:
-96-Analyzing C – Joomla!, Second Order SQL Injection:
-97-Exploiting Sql Injection with Nmap and Sqlmap:
-98-awesome-malware-analysis:
-99-Anatomy of UAC Attacks:
-100-awesome-cyber-skills:
-101-5 ways to Banner Grabbing:
-102-6 Ways to Hack PostgresSQL Login:
-103-6 Ways to Hack SSH Login Password:
-104-10 Free Ways to Find Someone’s Email Address:
-105-USING A SCF FILE TO GATHER HASHES:
-106-Hack Remote Windows PC using DLL Files (SMB Delivery Exploit):
107-Hack Remote Windows PC using Office OLE Multiple DLL Hijack :
-108-BUG BOUNTY HUNTING (METHODOLOGY , TOOLKIT , TIPS & TRICKS , Blogs):
-109-How To Perform External Black-box Penetration Testing in Organization with “ZERO” Information:
-110-A Complete Penetration Testing & Hacking Tools List for Hackers & Security Professionals:
-111-Most Important Considerations with Malware Analysis Cheats And Tools list:
-112-Awesome-Hacking:
-113-awesome-threat-intelligence:
-114-awesome-yara:
-115-Red-Team-Infrastructure-Wiki:
-116-awesome-pentest:
-117-awesome-cyber-skills:
-118-pentest-wiki:
-119-awesome-web-security:
-120-Infosec_Reference:
-121-awesome-iocs:
-122-blackhat-arsenal-tools:
-123-awesome-social-engineering:
-124-Penetration Testing Framework 0.59:
www..co.uk/Penetration%20Test.html
-125-Penetration Testing Tools Cheat Sheet :
-126-SN1PER – A Detailed Explanation of Most Ad Automated Information Gathering & Penetration Testing 工具:
-127-Spear Phishing 101:
-128-100 ways to discover (part 1):
-129-Comprehensi to SSH Tunnelling:
-130-Capture of Remote PC using SetToolkit:
-131-Hack Remote PC using PSEXEC Injection in SET Toolkit:
-132-Denial of Service Attack on 网络 PC using SET Toolkit:
-133-Hack Gmail and Facebook of Remote PC using DNS Spoofing and SET Toolkit:
-134-Hack Any Android Phone with DroidJack (Beginner’s Guide):
-135-HTTP RAT Tutorial for Beginners:
-136-5 ways to Create Permanent Backdoor in Remote PC:
-137-How to Enable and Monitor Firewall Log in Windows PC:
-138-EMPIRE TIPS AND TRICKS:
-139-CSRF account takeo Automated/Manual:
-140-CSRF Exploitation using XSS:
-141-Dumping Domain Password Hashes:
-142-Empire Post Exploitation – Unpri Agent to DA Walkthrough:
-143-Dropbox for the Empire:
-144-Empire without PowerShell.exe:
-145-RE DDE: USING ONENOTE AND EXCEL FOR 代码 EXECUTION:
-146-PHISHING WITH EMPIRE:
-146-BYPASSING UAC ON WINDOWS 10 USING DISK CLEANUP:
-147-“FILELESS” UAC BYPASS USING E.EXE AND REGISTRY HIJACKING:
-148-“FILELESS” UAC BYPASS USING SDCLT.EXE:
-149-PHISHING AGAINST PROTECTED VIEW:
-150-LATERAL MO USING EXCEL.APPLICATION AND DCOM:
-151-enum4linux Cheat Sheet:
-152-enumeration:
-153-Command and Control – WebSocket:
-154-Command and Control – WMI:
-155-Dangerous Virus For Windows Crashes E Hack window Using Virus:
-156-Comprehensi to Nmap Port Status:
-157-Commix – Automated All-in-One OS Command Injection and Exploitation 工具:
-158-Compromising Jenkins and extracting credentials:
-159-footprinting:
-160-awesome-industrial-control-system-security:
-161-xss-payload-list:
-162-awesome-:
-163-awesome-osint:
-164-awesome-python:
-165-Microsoft Windows - UAC Protection Bypass (Via Slui File Handler Hijack) (Metasploit):
-166-nbtscan Cheat Sheet:
-167-neat-tricks-to-bypass-csrfprotection:
www.slideshare.net/0ang3el/neat-tricks-to-bypass-csrfprotection
-168-ACCESSING CLIPBOAR D FROM THE LOC K SC REEN IN WI NDOWS 10 #2:
-169-NMAP CHEAT-SHEET (Nmap Scanning Types, Scanning Commands , NSE Scripts):
-170-Nmap Cheat Sheet:
-171-Powershell Without Powershell – How To Bypass Application Whitelisting, En Restrictions & AV:
-172-Phishing with PowerPoint:
-173-hide-payload-ms-office-document-properties:
-174-How to Evade Application Whitelisting Using REGSVR32:
-175-How to Build a C2 Infrastructure with Digital Ocean – Part 1:
-176-WordPress Penetration Testing using Symposium Plugin SQL Injection:
-177-Manual SQL Injection Exploitation Step by Step:
-178-MSSQL Penetration Testing with Metasploit:
-179-Multiple Ways to Get root through Writable File:
-180-MySQL Penetration Testing with Nmap:
-181-NetBIOS and SMB Penetration Testing on Windows:
-182-网络 Packet Forensic using Wireshark:
-183-Escape and E Egressing Restricted Networks:
-183-Awesome-Hacking-Resources:
-184-Hidden directories and les as a 源码 of sensiti about web application:
-185-Hiding Registry keys with PSRe ect:
-186-awesome-c:
-187-Linux Capabilities Pri Escalation with SELinux Enabled and Enforced:
-188-Post Exploitation in Windows using dir Command:
189-Web Application Firewall (WAF) E Techniques #2:
-190-Forensics In of Remote PC (Part 1):
-191-CloudFront Hijacking:
-192-PowerPoint and Custom Actions:
-193-Pri Escalation on Windows 7,8,10, 服务端 2008, 服务端 2012 using Potato:
-194-How to intercept TOR hidden service requests with Burp:
-195-How to Make a Capti of Death:
-196-How to find any CEO’s email address in minutes:
197-Microsoft Windows 10 - Child Process Restriction Mitigation Bypass:
-198-Microsoft Windows - Token Process Trust SID Access Check Bypass Pri Escalation:
-199-Microsoft Word upload to Stored XSS:
-200-MobileApp-Pentest-Cheatsheet:
-201-awesome:
-201-writing arm shellcode:
-202-debugging with gdb introduction:
-203-emulate raspberrypi with qemu:
-204-Bash One-Liner to Check Your Password(s) .com’s API Using the k-Anonymity Method:
-205-A Red Teamer's guide to pi:
-206-Using WebDA as a covert channel:
-207-A View of Persistence:
-208- pupy websocket transport:
-209-Subdomains Enumeration Cheat Sheet:
-210-DNS Reconnaissance – DNSRecon:
-211-Cheatsheets:
-212-Understanding Guide to Nmap Firewall Scan (Part 2):
-213-Exploit Office 2016 using C:
-214-windows-exploit-suggester:
-215-INSTALLING PRESISTENCE BACKDOOR IN WINDOWS:
-216-IDS, IPS AND FIREWALL E USING NMAP:
-217-Wireless Penetration Testing Checklist – A Detailed Cheat Sheet:
218-Most Important Web Application Security Tools & Resources for Hackers and Security Professionals:
-219-Web Application Penetration Testing Checklist – A Detailed Cheat Sheet:
-220-Top 500 Most Important XSS Script Cheat Sheet for Web Application Penetration Testing:
-221-USBStealer – Password Hacking 工具 For Windows Machine Applications:
-222-Most Important Mobile Application Penetration Testing Cheat sheet with Tools & Resources for Security Professionals:
-223-Metasploit Can Be Directly Used For Hardware Penetration Testing Now:
-224-How to Perform Manual SQL Injection While Pentesting With Single quote Error Based Parenthesis Method:
-225-Email Spoo ng – Exploiting Open Relay configured Public Mailservers:
-226-Email Header Analysis – Recei is Genuine or Spoofed:
-227-Most Important Cyber Threat Intelligence Tools List For Hackers and Security Professionals:
-228-Creating and Analyzing a Malicious PDF File with PDF-Parser 工具:
-229-Commix – Automated All-in-One OS Command Injection and Exploitation 工具:
-230-Ad ATM Penetration Testing Methods:
-231-A8-Cross-Site Request Forgery (CSRF):
-232-Fully undetectable backdooring PE File:
-233-backdooring exe files:
-234-From PHP (s)HELL to Powershell Heaven:
-235-Forensic In of Nmap Scan using Wireshark:
-236-Unleashing an Ultimate XSS Polyglot:
-237-wifi-arsenal:
-238-XXE_payloads:
-239-xss_payloads_2016:
-240-A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.:
-241-The goal of this repository is to document the most common techniques to bypass AppLocker.:
-242-A curated list of CTF frameworks, libraries, resources and softwares:
-243-A collection of android security related resources:
-244-OSX and iOS related security tools:
-245-regexp-security-cheatsheet:
-246-Power.0 tips and tricks:
-247-A curated list of awesome awesomeness:
-248-Android App Security Checklist:
-249-Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat:
-250-My-Gray-Hacker-Resources:
-251-A collection of tools de by other researchers in the Computer Science area to process 网络 traces:
-252-A curated list of awesome Hacking tutorials, tools and resources:
-253-RFSec-ToolKit is a collection of Radio Frequency Communication 协议 Hacktools.:
-254-Collection of the cheat sheets useful for pentesting:
-255-Collection of the cheat sheets useful for pentesting:
-256-Collection of the cheat sheets useful for pentesting:
-257-A curated list of awesome forensic analysis tools and resources:
-258-Open-Redirect-Payloads:
-259-A Threat hunter's playbook to aid the de of techniques and hypothesis for hunting campaigns.:
-260-Windows memory hacking library:
-261-A collective list of public JSON APIs for use in security.:
-262-An authoritative list of awesome de tools with the help from community experiments and contributions.:
-263-List of Awesome Hacking places, organised by Country and City, listing if it features power and wifi:
-264-A comprehensi list of a Bug Bounty & Disclosure Programs and Write-ups:
-265-Notes for taking the OSCP in 2097:
-266-A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom:
-267-A curated list of resources (books, tutorials, courses, tools and applications) for learning about Exploit De:
-268-A curated list of awesome re resources:
-269-Git All the Payloads! A collection of web attack payloads:
-270-GitHub Project Resource List:
-271-Use your macOS terminal shell to do awesome things.:
-272-Defeating Windows User Account Control:
-273-Free Security and Hacking eBooks:
-274-Uni Radio Hacker: in wireless protocols like a boss:
-275-A curated list of movies every hacker & cyberpunk must watch:
-276- public documents, whitepapers and articles about APT campaigns:
-277-A 数据库 of common, interesting or useful commands, in one handy referable form:
-278-A curated list of tools for incident response:
-279-A curated list of awesome guides, tools, and other resources related to the security and compromise of locks, safes, and keys:
-280-A curated list of static analysis tools, linters and 代码 quality checkers for programming languages:
-281-A Collection of Hacks in IoT Space so that we can address them (hopefully):
-281-A Course on Intermediate Le Exploitation:
-282-Kali Linux Cheat Sheet for Penetration Testers:
-283-A curated list of awesome infosec courses and training resources.:
-284-A curated list of resources for learning about application security:
-285-an awesome list of honeypot resources:
286-GitHub Enterprise SQL Injection:
-287-A curated list of fuzzing resources ( Books, courses - free and paid, , tools, tutorials and applications to practice on ) for learning Fuzzing and initial phases of Exploit De like root cause analysis:
-288-PHP htaccess injection cheat sheet:
-289-A curated list of the awesome resources about the Research:
-290-A list of useful payloads and bypass for Web Application Security and Pentest/CTF:
-291-A collection of Red Team focused tools, scripts, and notes:
-292-Awesome XSS stuff:
-293-A collection of hacking / penetration testing resources to make you better!:
-294-Docker Cheat Sheet:
-295-Decrypted content of eqgrp-auction-file.tar.xz:
-296-A bunch of links related to Linux kernel exploitation:
-297-Penetration Testing 102 - Windows Pri Escalation Cheatsheet:
www.exumbraops.com/penetration-testing-102-windows-priheet
-298-Pentesting Cheatsheet:
-299-Windows Pri Escalation Methods for Pentesters:
-300-Penetration Testing Cheat Sheet For Windows Machine – Intrusion Detection:
-301-Reading Your Way Around UAC (Part 1):
-302--Reading Your Way Around UAC (Part 2):
-303-Executing Metasploit & Empire Payloads from MS Office Document Properties (part 2 of 2):
-304-SSRF - 服务端 Side Request Forgery (Types and ways to exploit it) Part-1:
-304-Automating Cobalt Strike,Aggressor Collection Scripts:
-305- Sheet:
-306-Network Recon Cheat Sheet:
-307-LFI Cheat Sheet:
-308-Systemd Cheat Sheet:
-309-Aircrack-ng Cheatsheet:
-310-Kali Linux Cheat Sheet for Penetration Testers:
-311-Wifi Pentesting Command Cheatsheet:
-312-Android Testing En Cheatsheet (Part 1):
-313-cheatsheet:
-314-Reverse Shell Cheat Sheet:
-315-Linux Commands Cheat Sheet:
-316-Linux Pri Escalation using Sudo Rights:
-317-Linux Pri Escalation using Misconfigured NFS:
-318-Linux Pri Escalation by Exploiting Cronjobs:
-319-Web Penetration Testing:
-320-Webshell to Meterpreter:
-321-WordPress Penetration Testing using WPScan & Metasploit:
-322-XSS Exploitation in DVWA (Bypass All Security):
-323-Linux Pri Escalation Using PATH :
-324- over SSH:
-325- through Meterpreter:
-326-Week of E Microsoft ATA - Announcement and Day 1:
-327-Abusing DNSAdmins pri for escalation in Acti:
-328-Using SQL 服务端 for attacking a Forest Trust:
-329-Empire :
-330-8 Deadly Commands You Should Never Run on Linux:
-331-External C2 框架 for Cobalt Strike:
-332-How to use Public IP on Kali Linux:
-333-Bypass Admin access through guest Account in windows 10:
-334-Bypass Firewall Restrictions with Metasploit (re):
-335-Bypass SSH Restriction by Port Relay:
-336-Bypass UAC Protection of Remote Windows 10 PC ( Registry Key):
-337-Bypass UAC in Windows 10 using bypass_comhijack Exploit:
-338-Bind Payload using SFX archive with Trojanizer:
-339-Capture NTLM Hashes using PDF (Bad-Pdf):
-340-Best of Post Exploitation Exploits & Tricks:
-341-Detect SQL Injection Attack using Snort IDS:
-342-Beginner Guide to Website Footprinting:
-343-How to Enable and Monitor Firewall Log in Windows PC:
-344-Wifi Post Exploitation on Remote PC:
-335-Check Meltdown in CPU:
-336-XXE:
-337-[XSS] Re ected XSS Bypass Filter:
-338-Engagement Tools Tutorial in Burp suite:
-339-Wiping Out CSRF:
-340-First entry: Welcome and fileless UAC bypass:
-341-Writing a Custom Shellcode Encoder:
-342-Security Harden CentOS 7 :
-343-THE BIG BAD WOLF - XSS AND MAINTAINING ACCESS:
-344-MySQL:
-345-Deobfuscation of software protection:
-346-Online Assembler and Disassembler:
-347-Shellcodes database for study cases:
-348-Dynamic Binary Analysis and Obfuscated Codes:
-349-How Triton may help to analyse obfuscated binaries:
-350-Triton: A Concolic Execution Framework:
-351-Automatic deobfuscation of the Tigress binary protection using symbolic execution and LLVM:
-352-What kind of semantics information Triton can provide?:
-353-代码 co using a dynamic symbolic execution:
-354-Triton (concolic execution 框架) under the hood:
-355-- Stack and heap o detection at runtime analysis and Pin:
-356-Binary analysis: Concolic execution with Pin and z3:
-357-In-Memory fuzzing with Pin:
-358-Hackover 2015 r150 (outdated solving for Triton use cases):
-359-Skip sh – Web Application Security Scanner for XSS, SQL Injection, Shell injection:
-360-Sublist3r – 工具 for Penetration testers to Enumerate Sub-domains:
-361-bypassing application whitelisting with bginfo:
-362-accessing-clipboard-from-the-lock-screen-in-windows-10:
-363-bypassing-dem-c:
-364-defense-in-depth-writeup:
-365-applocker-case-study-how-insecure-is-it-really-part-1:
-366-empires-cross-platform-office-macro:
-367-recon tools:
-368-Black Hat 2018 tools list:
-369-Application Introspection & Hooking With Frida:
-370-And I did OSCP!:
-371-CoffeeMiner: Hacking WiFi to inject cryptocurrency miner to HTML requests:
-372-Most Important Endpoint Security & Threat Intelligence Tools List for Hackers and Security Professionals:
-373-Penetration Testing Cheat Sheet For Windows Machine – Intrusion Detection:
-374-pri escalation:
-375-The Complete List of Windows Post-Exploitation Commands (No Powershell):
-376-The Art of Subdomain Enumeration:
-377-The Principles of a Subdomain Takeover:
-378-The journey of Web Cache + Firewall Bypass to SSRF to AWS credentials compromise!:
-379-The Solution for Web for Pentester-I:
-380-The Ultimate Penetration Testing Command Cheat Sheet for Linux:
-381-: Ethical Hacking, Hack Tools, Hacking Tricks, Information Gathering, Penetration Testing, Recommended:
-383-Introduction to Exploitation, Part 1: Introducing Concepts and Terminology:
-384-How Hackers Kick Off of Wireless Networks:
-385-Maintaining Access Part 1: Introduction and Metasploit Example:
-386-How to Steal Windows Credentials with Mimikatz and Metasploit:
-387-E Anti-virus Part 2: Obfuscating Payloads with Msfvenom:
-388-E Anti-virus Part 1: Infecting EXEs with Shellter:
-389-Mobile Hacking Part 4: Fetching Payloads via USB Rubber Ducky:
-390-Ethical Hacking Practice Test 6 – Footprinting Fundamentals Level1:
-391-Skip Cracking Responder Hashes and Relay Them:
-392-Cracking NTLMv1 Handshakes with Crack.sh:
-393-Top 3 Anti-Forensic OpSec Tips for Linux & A New Dead Man’s Switch:
-394- Testing (Port 5901):
-395-Windows Pri Escalation:
-396-Removing Sender’s IP Address From Email’s Received: From Header:
-397-Dump Cleartext Password in Linux PC using MimiPenguin:
-398-Embedded Backdoor with Image using FakeImageExploiter:
-399-Exploit Command Injection with Commix and Netcat:
-400-Exploiting Form Based Sql Injection using Sqlmap:
-401-Beginner Guide to impacket Tool kit:
-402-Best of Post Exploitation Exploits & Tricks:
-403-Command Injection to Meterpreter using Commix:
-404-Comprehensi to Crunch Tool:
-405-Compressi to File Transfer (Post Exploitation):
-406-Crack Wifi Password using Aircrack-Ng (Beginner’s Guide):
-407-How to Detect Meterpreter in Your PC:
-408-Easy way to Hack 数据库 using Wizard switch in Sqlmap:
-409-Exploiting the Webser Sqlmap and Metasploit (OS-Pwn):
-410-Create SSL Certified Meterpreter Payload using MPM:
-411-Port forwarding: A practical hands-on guide:
-412-Exploit Dev 101: Jumping to Shellcode:
-413-Introduction to Manual Backdooring:
-414-Kernel Exploitation:
-415-Exploit Dev 101: Bypassing ASLR on Windows:
-416-Shellcode reduction tips (x86):
-417-OSCE Study Plan:
-418-[DefCamp CTF Qualification 2017] Don't net, kids! (Revexp 400):
-419-DRUPAL 7.X SERVICES MODULE UNSERIALIZE() TO RCE:
-420-SQL WEBSITES LIST 2017 [APPROX 2500 FRESH SQL SITES]:
-421-Windows IR Li Cheat Sheet:
-422-windows-kernel-logic-bug-class-access:
-423-injecting-code-into-windows-protected:
-424-USING THE DDE ATTACK WITH POWERSHELL EMPIRE:
-425-Automated Deri Administrator Search:
-426-A Red Teamer’s Guide to GPOs and OUs:
-427-Pen Testing and Acti, Part VI: The Final Case:
-428-Offensi and Techniques:
-429-Three penetration testing tips to out-hack hackers:
-430-Introducing BloodHound:
-431-Red + Blue = Purple:
-432-Acti Access Control List – Attacks and Defense – Enterprise Mobility and Security Blog:
-433-PrivEsc: Unquoted Service Path:
-434-PrivEsc: Insecure Service Permissions:
-435-PrivEsc: DLL Hijacking:
-436-Android Reverse Engineering 101 – Part 1:
-437-Luckystrike: An E Document Generator:
-438-the-number-one-pentesting-工具-youre-not-using:
-439-uac-bypass:
-440-XSSer – Automated 框架 工具 to Detect and Exploit XSS :
-441-Penetration Testing on X11 Server:
-442-Always Install Elevated:
-443-Scanning for Acti Pri & Pri Accounts:
-444-Windows Server 2016 Acti Features:
-445-powershell:
-446-PowerShell Security: PowerShell Attack Tools, Mitigation, & Detection:
-447-DerbyCon 6 (2016) Talk – Attacking E: Anatomy of a Corporate Hack:
-448-Real-World Example of How Acti Can Be Compromised (RSA Conference Presentation):
-449-Ad ATM Penetration Testing Methods:
-450-Background: Microsoft Ofice Exploitation:
-451-Automated XSS Finder:
-452-Application whitelist bypass using XLL and embedded shellcode:
-453-AppLocker Bypass – Regsvr32:
-454-Nmap Scans using Hex Value of Flags:
-455-Nmap Scan with Timing Parameters:
-456-OpenSSH User Enumeration Time- Based Attack with Osueta:
-457-Penetration Testing:
-458-Penetration Testing on Remote Desktop (Port 3389):
-459-Penetration Testing on Telnet (Port 23):
-460-Penetration Testing in Windows/Acti with Crackmapexec:
-461-Penetration Testing in WordPress Website using WordPress Exploit 框架:
-462-Port Scanning using Metasploit with IPTables:
-463-Post Exploitation Using WMIC (System Command):
-464-Pri Escalation in Linux using etc/passwd file:
-465-RDP Pi with Metasploit:
-466-A New Way to Hack Remote PC using Xerosploit and Metasploit:
-467-Shell to Meterpreter using Session Command:
-468-SMTP Pentest Lab Setup in Ubuntu (Port 25):
-469-SNMP Lab Setup and Penetration Testing:
-470-SQL Injection Exploitation in Multiple Targets using Sqlmap:
-471-Sql Injection Exploitation with Sqlmap and Burp Suite (Burp CO2 Plugin):
-472-SSH Penetration Testing (Port 22):
-473-Manual Post Exploitation on Windows PC (System Command):
-474-SSH Pi using Meterpreter:
-475-Stealing Windows Credentials of Remote PC with MS Office Document:
-476-Telnet Pi through Meterpreter:
-477-Hack Password using Rogue Wi-Fi Access Point Attack (WiFi-Pumpkin):
-478-Hack Remote PC using Fake Updates Scam with Ettercap and Metasploit:
-479-Hack Remote Windows 10 Password in Plain Text using Wdigest Credential Caching Exploit:
-480-Hack Remote Windows 10 PC using TheFatRat:
-481-2 Ways to Hack Windows 10 Password Easy Way:
-482-How to Change ALL Files Extension in Remote PC (Confuse File Extensions Attack):
-483-How to Delete ALL Files in Remote Windows PC:
-484-How to Encrypt Drive of Remote PC:
-485-Post Exploitation in Linux With Metasploit:
-486-Red Team:
-487-代码 Signing Certi cate Cloning Attacks and Defenses:
-488-Phishing:
-489-PowerPick – A ClickOnce Adjunct:
-490-sql-injection-xss-playground:
-491-Pri Escalation & Post-Exploitation:
-492-https-payload-and-c2-redirectors:
-493-a-push-toward-transparency:
-494-bloodhound:
-495-acti:
-496-Load & Execute Bundles with migrationTool:
-497-Outlook Forms and Shells:
-498-Tools:
-499-2018 pentesting resources:
-500-network pentest:
-501-[technical] Pen-testing resources:
-502-Stored XSS on Facebook:
-503-:
-504-Extending BloodHound: Track and Your Compromise:
-505-so-you-want-to-be-a-web-security-researcher:
-506-BugBounty — AWS S3 added to my “Bucket” list!:
-507-BugBounty — API keys leakage, 源码 代码 disclosure in India’s largest e-commerce health care company:
-508-BugBounty — Exploiting CRLF Injection can lands into a nice bounty:
-509-BugBounty — How I was able to bypass rewall to get RCE and then went from ser to get root user account:
-510-BugBounty — “I don’t need your current password to login into youraccount” - How could I completely takeover any user’s account in an online classi ed ads company:
-511-Ping Power — ICMP Tunnel:
-512-hacking:
-513-Top 8 Best YouTube Channels To Learn Ethical Hacking Online !:
-514-Google Dorks List 2018 | Fresh Google Dorks 2018 for SQLi:
-515-Art of Shellcoding: Basic AES Shellcode Crypter:
-516-Big List Of Google Dorks Hacking:
-517-nmap-cheatsheet:
-518-Aws Recon:
-519-Recon:
-520-Subdomain Enumeration:
-521-Shodan:
-522-Dump LAPS passwords with ldapsearch:
-523-peepdf - PDF Analysis Tool:
-524-E 2 - Next Generation of Phishing 2FA Tokens:
breakdev.org/en-of-phishing-2fa-tokens/
-526-Evil XML with two encodings:
-527-create-word-macros-with-powershell:
-528-Excess XSS A comprehensi on cross-site scripting:
-529-Executing Commands and Bypassing AppLocker with PowerShell Diagnostic Scripts:
-530-Abusing DCOM For Yet Another Lateral Mo Technique:
-531-Trust Direction: An Enabler for Acti Enumeration and Trust Exploitation:
-532-Abusing DCOM For Yet Another Lateral Mo Technique:
-533-“Practical recon techniques for bug hunters & pen testers”:
-534-Exploiting Node.js deserialization bug for Remote 代码 Execution:
-535-Exploiting System Shield AntiVirus Arbitrary Write using SeTakeOwnershipPri:
-536-Running Macros Controls:
-537-all=BUG+MALWARE+EXPLOITS
-538-“FILELESS” UAC BYPASS USING E.EXE AND:
-539-BYPASSING UAC ON WINDOWS 10 USING DISK CLEANUP:
-540-A Look at C: Bypassing C using PowerShell Module Manifests:
-541-“FILELESS” UAC BYPASS USING SDCLT.EXE:
-542-File Upload XSS:
-543-Firebase Databases:
-544-Safe Red Team Infrastructure:
-545-RED-TEAM:
-546-Egressing Bluecoat with Cobaltstike & Let's Encrypt:
-547-:
-548-Dangerous Virus For Windows Crashes E Hack window Using Virus:
-549-Download Google Dorks List 2019:
-550-Don’t leak sensitive data scanning tools:
-551-CRLF Injection Into PHP’s cURL Options:
-552-Open Redirects & Security Done Right!:
-553-DOM XSS – auth.uber.com:
-554-PowerPoint and Custom Actions:
-555-exploiting-adobe-coldfusion:
-556-Command and Control – HTTPS:
-557-Command and Control – Images:
-558-Command and Control – Ja:
-559-XSS-Payloads:
-560-Command and Control – Web Interface:
-561-Command and Control – Website:
-562-Command and Control – WebSocket:
-563-atomic-red-team:
-564-Power.0-tricks.ps1:
-565-awesome-sec-talks:
-566-Awesome-Red-Teaming:
-567-awesome-php:
-568-latest-hacks:
-569-GraphQL NoSQL Injection Through JSON Types:
-570-Writing .NET Executables for Pentesters:
-571-A curated list of fuzzing resources ( Books, courses - free and paid, , tools, tutorials and applications to practice on ) for learning Fuzzing and initial phases of Exploit De like root cause analysis.
-572-How to Shutdown, Restart, Logoff, and Hibernate Remote Windows PC:
-572-Injecting Metasploit Payloads into Android Applications – Manually:
-573-Google Dorks For Carding [Huge List] - Part 1:
-574-Google dorks for growth hackers:
-575-Google Dorks For Carding (HUGE LIST):
-576-BIGGEST SQL Injection Dorks List ~ 20K+ Dorks:
-577-Pastebin Accounts Hacking (Facebook/Paypal/LR/Gmail/Yahoo, etc):
-578-How I Chained 4 on GitHub Enterprise, From SSRF Execution Chain to RCE!:
-579-Hijacking VNC (Enum, Brute, Access and Crack):
-580-Linux Post Exploitation Command List:
-581-List of google dorks for sql injection:
-582-Microsoft Office – NTLM Hashes :
-583-Microsoft Windows 10 - Child Process Restriction Mitigation Bypass:
-584-Microsoft Windows C Remote 代码 Execution :
-585-Microsoft Windows Kernel C Local Pri Escalation :
-586-miSafes Mi-Cam Device Hijacking:
-587-Low-Le API Access From PowerShell:
-588-Linux Kernel 'mm/hugetlb.c' Local Denial of Service :
-589-Lateral Mo – RDP:
-590-Snagging creds from locked machines:
-591-Making a Blind SQL Injection a Little Less Blind:
-592- — Kioptrix: Level 5:
-593-Unauthenticated Account Takeo HTTP Leak:
-594-Hakluke’s Ultimate OSCP Guide: Part 1 — Is OSCP for you?:
-595-Finding Target-relevant Domain Fronts:
-596-Safe Red Team Infrastructure:
-597-Cobalt Strike :
-598-OWASP Top 10 2017 — Web Application Security Risks:
-599-XSS-Auditor — the protector of unprotected:
-600-Netcat – Remote Shell to Control Kali Linux from Windows machine:
-601-Jenkins Servers Infected With Miner.:
-602-cheat-sheet:
-603-Command and Control – Website Keyword:
-604-Command and Control – Twitter:
-605-Command and Control – Windows COM:
-606-Microsoft Office – NTLM Hashes :
-607-PHISHING AGAINST PROTECTED VIEW:
-608-PHISHING WITH EMPIRE:
-609-Reverse Engineering Android Applications:
-610-HTML Injection:
-611-Meterpreter stage AV/IDS e with powershell:
-612-Windows Atomic Tests by ATT&CK Tactic & Technique:
-613-Windows Acti Post Exploitation Cheatsheet:
-614-Windows 10 UAC Loophole Can Be Used to Infect Systems with Malware:
-615-How to Bypass Anti-Virus to Run Mimikatz:
-616-Userland API Monitoring and 代码 Injection Detection:
-617-USE TOR. USE EMPIRE.:
-617-AD CROSS SITE SCRIPTING (XSS) CHEAT SHEET:
-618-Empire without PowerShell.exe:
-619-RED TEAM:
-620-PDF Tools:
-621-DNS Data ex ltration — What is this and How to use?
-621-Google Dorks:
-622-Hacking with JSP Shells:
-623-Malware Analysis:
-624-A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.:
-625-Group Policy Preferences:
-627-CHECKING FOR MALICIOUSNESS IN AC OFORM OBJECTS ON PDF FILES:
-628-deobfuscation:
-629-POWERSHELL EMPIRE STAGERS 1: PHISHING WITH AN OFFICE
MACRO AND E AVS:
-630-A COMPREHENSI ON CROSS-SITE SCRIPTING:
-631-GCAT – BACKDOOR EM PYTHON:
-632-Latest Carding Dorks List for Sql njection 2019:
-633-google docs for credit card:
-634-How To Scan Multiple Organizations
With Shodan and Golang (OSINT):
-635-How to Evade Application
Whitelisting Using REGSVR32:
-636-phishing:
-637-Merlin in action: Intro to Merlin:
-638-IP Cams from around the world:
-639-Ad Cross Site Scripting(XSS) Cheat Sheet by
Jaydeep Dabhi:
-640-Just how easy it is to do a domain or
subdomain take over!?:
-641-How to Create hidden user in Remote PC:
-642-Process Doppelgänging – a new way to impersonate a process:
-643-How to turn a DLL into astandalone EXE:
-644-Hijacking extensions handlers as a malware persistence method:
-645-I'll Get Your Credentials ... Later!:
-646-Game Over: CanYouPwnMe > Ke:
-647-IKARUS anti.virus and its 9 exploitable kernel :
-648-Getting started in Bug Bounty:
-649-Union SQLi Challenges (Zixem Write-up):
-650-scanless – A 工具 for Perform Anonymous Port Scan on Target Websites:
-651-WEBAPP PENTEST:
-652-Cross-Site Scripting (XSS) Payloads:
-653-sg1: swiss army knife for data encryption, exfiltration & covert communication:
-654-NETWORK PENTEST:
-655-SQL injection in an UPDATE query - a bug bounty story!:
-656-Cross-site Scripting:
-657-Local File Inclusion:
-658-Command Injection:
-659-a categorized list of Windows CMD commands:
-660-Understanding Guide for Nmap Timing Scan (Firewall Bypass):
-661-RFID Hacking with The Proxmark 3:
-662-A practical guide to RFID badge copying:
-663-Denial of Service using Cookie Bombing:
-664-Vultr Domain Hijacking:
-665-Command and Control:
-666-Cisco Auditing 工具 & Cisco Global Exploiter to Exploit 14 in Cisco Switches and Routers:
-667-CHECKING FOR MALICIOUSNESS IN ACROFORM OBJECTS ON PDF FILES:
-668-Situational Awareness:
-669-Unquoted Service Path:
-670-NFS:
-671-List of Tools for Pentest Rookies:
-672-Common Windows Commands for Pentesters:
-673-Open-源码 Intelligence (OSINT) Reconnaissance:
-674-OSINT x UCCU Workshop on Open 源码 Intelligence:
-675-Ad Attack Techniques:
-676-Credential Theft:
-678-The Cloud Shadow Admin Threat: 10 Permissions to Protect:
-679-Online Credit Card Theft: Today’s Browsers Store Sensiti Deficiently, Putting User Data at Risk:
-680-Weakness Within: Kerberos Delegation:
-681-Simple Domain Fronting PoC with GAE C2 服务端:
-682-Find Critical Information about a Host using DMitry:
-683-How To Do OS Fingerprinting In Kali Using Xprobe2:
-684-Crack SSH, FTP, Telnet Logins Using Hydra:
-685-Reveal Sa in Browser using Ja Injection:
-686-Nmap Cheat Sheet:
-687-Manual Post Exploitation on Windows PC (网络 Command):
-688-Hack Gmail or Facebook Password of Remote PC using NetRipper Exploitation 工具:
-689-Hack Locked Workstation Password in Clear Text:
-690-How to Find ALL Excel, Office, PDF, and Images in Remote PC:
-691-red-teaming:
-692-Create a Fake AP and Sniff Data mitmAP:
-693-Bruteforcing From Nmap Output BruteSpray:
-694-Reverse Engineering Framework radare2:
-695-Automated ettercap TCP/IP Hijacking 工具 Morpheus:
-696-List Of SQL Injection Sites:
-697-Command and Control – Gmail:
-698-Command and Control – DropBox:
-699-Skeleton Key:
-700-Secondary Logon Handle:
-701-Hot Potato:
-702-Le INF-SCT Fetch & Execute Techniques For Bypass, E, & Persistence (Part 2):
-703-Linux-Kernel-exploits:
-704-Linux-Kernel-Exploit Stack Smashing:
-705-Linux Kernel Exploit En:
-706-Linux-Kernel-Exploit NULL dereference:
-707-Apache mod_python for red teams:
-708-Bounty Write-up (HTB):
709-CTF Writeups:
-710-Detecting Malicious Microsoft Office Macro Documents:
-711-SQL injection in Drupal:
-712-XSS and open redirect on Twitter:
-713-Shopify login open redirect:
-714-HackerOne interstitial redirect:
-715-Ubiquiti sub-domain takeovers:
-716-Scan.me pointing to Zendesk:
-717-Starbucks' sub-domain takeover:
-718-Vine's sub-domain takeover:
-719-Uber's sub-domain takeover:
-720-Read access to Google:
-721-A Facebook XXE with Word:
-722-The Wikiloc XXE:
-723-Uber Jinja2 TTSI:
-724-Uber Angular template injection:
-725-Yahoo Mail stored XSS:
-726-Google image search XSS:
-727-Shopify Giftcard Cart XSS :
-728-Shopify wholesale XSS :
-729-Bypassing the Shopify admin authentication:
-730-Starbucks race conditions:
-731-Binary.com – stealing a user's money:
-732-HackerOne signal manipulation:
-733-Shopify S buckets open:
-734-HackerOne S buckets open:
-735-Bypassing the GitLab 2F authentication:
-736-Yahoo PHP info disclosure:
-737-Shopify for exporting installed users:
-738-Shopify Twitter disconnect:
-739-Badoo full account takeover:
-740-Disabling PS Logging:
-741-macro-less-code-exec-in-msword:
-742-5 ways to Exploiting PUT :
-743-5 Ways to Exploit Verb Tempering :
-744-5 Ways to Hack MySQL Login Password:
-745-5 Ways to Hack SMB Login Password:
-746-6 Ways to Hack FTP Login Password:
-746-6 Ways to Hack SNMP Password:
-747-6 Ways to Hack Password:
-748-Access Sticky keys Backdoor on Remote PC with Sticky Keys Hunter:
-749-Beginner Guide to IPtables:
-750-Beginner Guide to impacket Tool kit:
-751-Exploit Remote Windows 10 PC using Discover 工具:
-752-Forensics In of Remote PC (Part 2):
-753-5 ways to File upload Exploitation:
-754-FTP Penetration Testing in Ubuntu (Port 21):
-755-FTP Penetration Testing on Windows (Port 21):
-756-FTP Pi through RDP:
-757-Fun with Metasploit Payloads:
-758-Gather Cookies and History of Mozilla Firefox in Remote Windows, Linux or MAC PC:
-759-Generating Reverse Shell using Msfvenom (One Liner Payload):
-760-Generating Scan Reports Using Nmap (Output Scan):
-761-Get Meterpreter Session of Locked PC Remotely (Remote Desktop Enabled):
-762-Hack ALL Security Features in Remote Windows 7 PC:
-763-5 ways to Exploit LFi :
-764-5 Ways to Directory Bruteforcing on Web 服务端:
-765-Hack Call Logs, SMS, Camera of Remote Android Phone using Metasploit:
-766-Hack Gmail and Facebook Password in 网络 using Bettercap:
-767-ICMP Penetration Testing:
-768-Understanding Guide to Mimikatz:
-769-5 Ways to Create Dictionary for Bruteforcing:
-770-Linux Pri Escalation using LD_Preload:
-771-2 Ways to Hack Remote Desktop Password using kali Linux:
-772-2 ways to use Msfvenom Payload with Netcat:
-773-4 ways to Connect Remote PC using SMB Port:
-774-4 Ways to DNS Enumeration:
-775-4 Ways to get Linux Pri Escalation:
-776-101+ OSINT Resources for In [2019]:
-777-Week in OSINT #2019–02:
-778-OSINT Cheat Sheet:
-779-OSINT Cheat Sheet:
-780-OSINT Links for In:
-781- Metasploit Cheat Sheet :
-782- Exploit De Cheat Sheet:
-783-Building Profiles for a Social Engineering Attack:
-784-Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes):
-785-Getting the goods with CrackMapExec: Part 2:
-786-Bug Hunting Methodology (part-1):
-787-Exploring Cobalt Strike's ExternalC2 框架:
-788-Airbnb – When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight :
-789-Ad Tactics, Techniques & Common Knowledge:
-790-Bug Bounty — Tips / Tricks / JS (Ja Files):
-791-Bug Bounty Hunting Tips #2 —Target their mobile apps (Android Edition):
-792-DiskShadow: The Return of , Persistence, and Acti
Database Extraction:
-793-Executing Commands and Bypassing AppLocker with PowerShell Diagnostic Scripts:
-794-ClickOnce (Twice or Thrice): A Technique for Social Engineering and (Un)trusted Command Execution:
-795-Le INF-SCT Fetch & Execute Techniques For Bypass, E, & Persistence (Part 2):
-796-DiskShadow: The Return of , Persistence, and Acti 数据库 Extraction:
-797-Trust Direction: An Enabler for Acti Enumeration and Trust Exploitation:
-798-DiskShadow: The Return of , Persistence, and Acti 数据库 Extraction:
-799-Abusing Exported Functions and Exposed DCOM Interfaces for Pass-Thru Command Execution and Lateral Mo:
-800-Capcom Rootkit Proof-Of-Concept:
-801-Linux Pri Escalation using Misconfigured NFS:
-802-Beginners Guide for John the Ripper (Part 1):
-803-Working of Traceroute using Wireshark:
-804-Multiple Ways to Get root through Writable File:
-805-4 ways to SMTP Enumeration:
-806-4 ways to Hack MS SQL Login Password:
-807-4 Ways to Hack Telnet Passsword:
-808-5 ways to Brute Force Attack on WordPress Website:
-809-5 Ways to Crawl a Website:
-810-Local Linux Enumeration & Pri Escalation Cheatsheet:
-811-The Drebin Dataset:
-812-ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and e else:
-813-IT and Information Security Cheat Sheets:
-814-Cheat Sheets - DFIR Training:
-815-WinDbg Malware Analysis Cheat Sheet:
-819-Cheat Sheet for Analyzing Malicious Software:
-820-Analyzing Malicious Documents Cheat Sheet - Prodefence:
-821-Cheat Sheets - SANS Digital Forensics:
-822-Linux Command Line Forensics and Intrusion Detection Cheat Sheet:
-823-Windows Registry Auditing Cheat Sheet:
-824-Cheat Sheet of Useful Commands Every Kali Linux User Needs To Know:
-825-kali-linux-cheatsheet:
-826-8 Best Kali Linux Terminal Commands used by Hackers (2019 Edition):
-827-Kali Linux Commands Cheat Sheet:
-827-Kali Linux Commands Cheat Sheet A To Z:
-828-Linux commands CHEATSHEET for HACKERS:
-829-100 Linux Commands – A Brief Outline With Cheatsheet:
-830-Kali Linux – Penetration Testing Cheat Sheet:
-831-Basic Linux Terminal Shortcuts Cheat Sheet :
-832-List Of 220+ Kali Linux and Linux Commands Line {Free PDF} :
-833-Transferring files from Kali to Windows (post exploitation):
-834-The Ultimate Penetration Testing Command Cheat Sheet for Kali Linux:
-835-What is penetration testing? 10 hacking tools the pros use:
-836-Best Hacking Tools List for Hackers & Security Professionals in 2019:
-837-ExploitedBunker PenTest Cheatsheet:
-838-How to use Zarp for penetration testing:
-839-Wireless Penetration Testing Cheat Sheet;
-840-Pentest Cheat Sheets:
-841-40 Best Penetration Testing (Pen Testing) Tools in 2019:
-842-Metasploit Cheat Sheet:
-843-OSCP useful resources and tools;
-844-Pentest + Exploit de:
-845-What is Penetration Testing? A Quick Guide for 2019:
-846-Recon resource:
-847-Network Recon Cheat Sheet:
-848-Recon Cheat Sheets:
-849-Penetration Testing Acti, Part II:
-850-Re Cheat Sheets:
-851-Reverse Engineering Cheat Sheet:
-852-ATOMBOMBING: BRAND NEW 代码 INJECTION FOR WINDOWS:
-853-PROPagate:
-854-Process Doppelgänging, by Tal Liberman and Eugene Kogan::
-855-Gargoyle:
-856-GHOSTHOOK:
-857-Learn C:
-858-x86 Assembly Programming Tutorial:
-859-Dr. Paul Carter's PC Assembly Language:
-860-Introductory Intel x86 - Architecture, Assembly, Applications, and Alliteration:
-861-x86 Disassembly:
-862-use-of-dns-tunneling-for-cc-communications-malware:
-863-Using IDAPython to Make Your Life Easier (Series)::
-864-NET binary analysis:
-865-detailed analysis of the BlackEnergy3 big dropper:
-866-detailed analysis of Uroburos rootkit:
-867-TCP/IP and tcpdump Pocket Reference Guide:
-868-TCPDUMP Cheatsheet:
-869-Scapy Cheatsheet:
-870-WIRESHARK DISPLAY FILTERS:
-871-Windows command line sheet:
-872-Metasploit cheat sheet:
-873-IPv6 Cheatsheet:
-874-IPv4 Subnetting:
-875-IOS IPV4 ACCESS LISTS:
-876-Common Ports List:
-877-WLAN:
-878-VLANs Cheatsheet:
-879-VoIP Basics CheatSheet:
-880-Google hacking and defense cheat sheet:
-881-Nmap CheatSheet:
-882-Netcat cheat sheet:
-883-PowerShell cheat sheet:
-884-Scapy cheat sheet POCKET REFERENCE:
-885-SQL injection cheat sheet.:
-886-Injection cheat sheet:
-887-Symmetric Encryption Algorithms cheat sheet:
-888-Intrusion Discovery Cheat Sheet v2.0 for Linux:
-889-Intrusion Discovery Cheat Sheet v2.0 for Window:
-890-Memory Forensics Cheat Sheet v1.2:
-891-CRITICAL LOG REVIEW CHECKLIST FOR SECURITY INCIDENTS G E N E R AL APPROACH:
-892-E collection cheat sheet:
-893-Hex file and regex cheat sheet v1.0:
-894-Rekall Memory Forensic 框架 Cheat Sheet v1.2.:
-895-SIFT WORKSTATION Cheat Sheet v3.0.:
-896- Memory Forensic Framework Cheat Sheet:
-897-Hands - on Network Forensics.:
-898-VoIP Security .:
-899-Incident Response: How to Fight Back:
-900-BI-7_ls:
-901-Bug Hunting Guide:
cybertheta.blogspot.com/2018/08/bug-hunting-guide.html
-902-Guide 001 |Getting Started in Bug Bounty Hunting:
-903-SQL injection cheat sheet :
› Web Security Academy › SQL injection › Cheat sheet
-904-RSnake's XSS Cheat Sheet:
-905-Bug Bounty Tips (2):
-906-A Review of my Bug Hunting Journey:
-907-Meet the First Hacker Millionaire on HackerOne:
-908-XSS Cheat Sheet:
-909-Bug Bounty Hunter Methodology:
-910-#10 Rules of Bug Bounty:
-911-Bugbounty Checklist:
-912-FireBounty | The Ultimate Bug Bounty List!:
-913-Brutelogic xss cheat sheet 2019:
-914-XSS Cheat Sheet by Rodolfo Assis:
-915-Cross-Site-Scripting (XSS) – Cheat Sheet:
-916-XSS Cheat Sheet V. 2018 :
-917-Cross-site Scripting Payloads Cheat Sheet :
-918-Xss Cheat Sheet :
-919-Open Redirect Cheat Sheet :
-920-XSS, SQL Injection and Fuzzing Bar 代码 Cheat Sheet:
-921-XSS Cheat Sheet:
-922-XSS for ASP.net de:
-923-Cross-Site Request Forgery Cheat Sheet:
-924-CSRF Attacks: Anatomy, Pre, and XSRF Tokens:
-925-Cross-Site Request Forgery (CSRF) Pre Cheat Sheet :
-926-Guide to CSRF (Cross-Site Request Forgery):
-927-Cross-site Request Forgery - Exploitation & Pre:
-928-SQL Injection Cheat Sheet :
-929-MySQL SQL Injection Practical Cheat Sheet:
-930-SQL Injection (SQLi) - Cheat Sheet, Attack Examples & Protection:
-931-SQL injection attacks: A cheat sheet for business pros:
-932-The SQL Injection Cheat Sheet:
-933-SQL Injection Cheat Sheet:
-934-Comprehensive SQL Injection Cheat Sheet:
-935-MySQL SQL Injection Cheat Sheet:
pentestmonkey.net/cheat-sheet/sql-injection/mysql-sql-injection-cheat-sheet
-936-SQL Injection Cheat Sheet: MySQL:
-937- MySQL Injection Cheat Sheet:
-938-SQL Injection Cheat Sheet:
-939-Google dorks cheat sheet 2019:
-940-Command Injection Cheatsheet :
-941-OS Command Injection :
-942-OS Command Injection:
-943-Command Injection: The Good, the Bad and the Blind:
-944-OS command injection:
› Web Security Academy › OS command injection
-945-How to Test for Command Injection:
-946-Data Exfiltration OS Command Injection:
-947-XXE Cheatsheet:
-948-bugbounty-cheatsheet/xxe.:
-949-XXE - Information Security:
-950-XXE Cheat Sheet:
-951-Advice From A Researcher: Hunting XXE For Fun and Profit:
-952-Out of Band Exploitation (OOB) CheatSheet :
-953-Web app penentration testing checklist and cheatsheet:
www.malwrforensics.com/.../web-app-penentration-testing-checklist-and-cheatsheet-with-example
-954-Useful Resources:
-955-Exploiting XXE in IIS/.NET:
-956-Top 65 OWASP Cheat Sheet Collections - ALL IN ONE:
-957-Hacking Resources:
-958-Out of Band XML External Entity Injection:
-959-XXE - ZeroSec - Ad In Information Security:
-960-Blog - Automated Data Exfiltration with XXE:
-961-My Experience during Infosec Interviews:
-962-Top 10 Security Risks on the Web (OWASP):
-963-Antivirus E Tools [Updated 2019] :
-964-Ad in Anti-Virus E:
-965-Antivirus Bypass Phantom E - 2019 :
-966-Antivirus E with Python:
-967-Windows oneliners to get shell:
-968-Does Veil E Still Work Against Modern AntiVirus?:
-969-Google dorks cheat sheet 2019 :
-970-Malware E Techniques :
-971-How to become a cybersecurity pro: A cheat sheet:
-972-Bypassing Antivirus With Ten Lines of 代码:
-973-Bypassing antivirus detection on a PDF exploit:
-974-Generating Payloads & Anti-Virus Bypass Methods:
-975-Apkwash Android Antivirus E For Msfvemon:
-976-Penetration Testing with Windows Computer & Bypassing an Antivirus:
-978-Penetration Testing: The Quest For Fully UnDetectable Malware:
-979-AVET: An AntiVirus Bypassing 工具 working with Metasploit 框架 :
-980-Creating an undetectable payload using Toolkit:
-981-E Antivirus :
-982-AVPASS – All things in moderation:
-983-Complete Penetration Testing & Hacking Tools List:
-984-Modern red teaming: 21 resources for your security team:
-985-BloodHound and CypherDog Cheatsheet :
-986-Redteam Archives:
-987-NMAP Commands Cheat Sheet:
-988-Nmap Cheat Sheet:
-989-Nmap Cheat Sheet: From Discovery to Exploits:
-990-Nmap Cheat Sheet and Pro Tips:
-991-Nmap Tutorial: from the Basics to Ad Tips:
-992-How to run a complete 网络 scan with OpenVAS;
-993-Nmap: my own cheatsheet:
-994-Top 32 Nmap Command Examples For Linux Sys/网络 Admins:
-995-35+ Best Free NMap Tutorials and Courses to Become Pro Hacker:
-996-Scanning Tools:
-997-Nmap - Cheatsheet:
-998-Linux for Network Engineers:
-999-Nmap Cheat Sheet:
-1000-Tactical Nmap for Beginner 网络 Reconnaissance:
-1001-A Guide For Google Hacking Database:
-1002-2019 Data Breaches - The Worst Breaches, So Far:
-1003-15 Sites To (Legally) Practice Your Hacking Skills:
-1004-Google Hacking Master List :
-1005-Smart searching with googleDorking | Exposing the In:
-1006-Google Dorks 2019:
-1007-Google Dorks List and how to use it for Good;
-1008-How to Use Google to Hack(Googledorks):
-1009-Using google as hacking tool:
-1010-#googledorks hashtag on Twitter:
-1011-Top Five Open 源码 Intelligence (OSINT) Tools:
-1012-What is open-源码 intelligence (OSINT)?:
-1013-A Guide to Open 源码 Intelligence Gathering (OSINT):
-1014-OSINT: How to find information on anyone:
-1015-What is OSINT? How can I make use of it?:
-1016-OSINT Tools for the Dark Web:
-1017-A Guide to Open 源码 Intelligence (OSINT):
-1018-An Introduction To Open 源码 Intelligence (OSINT):
-1019-SSL & TLS HTTPS Testing [Definiti] - Aptive:
-1020-Exploit Title: [Files Containing E-mail and Associated Password Lists]:
-1021-cheat_sheets:
-1022-Intel SYSRET:
-1023-Windows Pre Maintenance Best Practices:
-1024-An O of Storage Devices:
-1025-An O of RAID:
-1026-How to Troubleshoot:
-1027-Mobile Device Security Troubleshooting:
-1028-Using Wireshark: Identifying Hosts and Users:
-1029-Using Wireshark - Display Filter Expressions:
-1030-Decrypting SSL/TLS traffic with Wireshark:
-1031-A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.:
-1032- Bash One-Liners Explained, Part I: Working with files :
-1033-Bash One-Liners Explained, Part I with history:
-1034-Useful bash one-liners :
-1035-Some Random One-liner Linux Commands [Part 1]:
-1036-The best terminal one-liners from and for smart admins + devs.:
-1037-Shell one-liner:
-1038-SSH Cheat Sheet:
-1039-7000 Google Dork List:
-1040-GOOGLE HACKİNG DATABASE – GHDB:
-1041-STEALING PASSWORD WITH GOOGLE HACK:
-1042-Hack Remote PC with PHP File using PhpSploit Stealth Post-Exploitation 框架:
-1043-Open 源码 数据库 of android malware:
www.代码.google.com/archive/p/androguard/wikis/DatabaseAndroidMalwares.wiki
-1044-big-list-of-naughty-strings:
-1045-publicly a cap files:
-1046-“Insertion, E, and Denial of Service: Eluding 网络 Intrusion Detection”:
-1047-Building a malware analysis toolkit:
-1048-Netcat Reverse Shell Cheat Sheet:
-1049-Packers and crypters:
-1050-E antivirus:
-1051-cheat sheets and information,The Art of Hacking:
-1052-Error-based SQL injection:
-1053-XSS cheat sheet:
-1054-Acti Enumeration with PowerShell:
-1055-Buffer O, C Programming, NSA GHIDRA and More:
-1056-Analysis of C (BlueKeep):
-1057-Windows Pri Escalations:
-1058-The Ultimate Guide For Subdomain Takeover with Practical:
-1059-File transfer skills in the red team post penetration test:
-1060-How To Exploit PHP Remotely To Bypass Filters & WAF Rules:
-1061-Flying under the radar:
-1062-what is google hacking? and why it is useful ?and how you can learn how to use it:
-1063-useful blogs for penetration testers:
-1064-useful #BugBounty resources & links & tutorials & explanations & writeups ::
-1065-Union- based SQL injection:
-1066-Broken access control:
-1067-Understanding firewall types and configurations:
-1068-5 Kali Linux tricks that you may not know:
-1069-5 tips to make the most of Twitter as a pentester or bug bounty hunter:
-1060-A Guide To Subdomain Takeovers:
-1061-Ad Recon Automation (Subdomains) case 1:
-1062-Security testing for REST API with w3af:
-1062-The Lazy Hacker:
-1063-Practical recon techniques for bug hunters & pen testers:
-1064-A More Ad Recon Automation #1 (Subdomains):
-1065-Expanding your scope (Recon automation #2):
-1066-RCE by uploading a web.config:
-1067-Finding and exploiting Blind XSS:
-1068-Google dorks list 2018:
-1096-Out of Band Exploitation (OOB) CheatSheet:
-1070-Metasploit Cheat Sheet:
-1071-Linux Post Exploitation Cheat Sheet :
red-orbita.com/?p=8455
-1072-OSCP/Pen Testing Resources :
-1073-Out Of Band Exploitation (OOB) CheatSheet :
-1074-HTML5 Security Cheatsheet:
-1075-Kali Linux Cheat Sheet for Penetration Testers:
-1076-Responder - CheatSheet:
-1076-Windows Post-Exploitation Command List:
pentest.tonyng.net/windows-post-exploitation-command-list/
-1077-Transfer files (Post explotation) - CheatSheet
-1078-SQL Injection Cheat Sheet: MSSQL — GracefulSecurity:
-1079-OSCP useful resources and tools:
-1080-Penetration Testing 102 - Windows Pri Escalation - Cheatsheet:
www.exumbraops.com/penetration-testing-102-windows-priheet
-1081-Transferring files from Kali to Windows (post exploitation) :
-1082-Hack Like a Pro: The Ultimate Command Cheat Sheet for Metasploit:
-1083-OSCP Goldmine (not clickbait):
0xc0ffee.io/blog/OSCP-Goldmine
-1084-Pri escalation: Linux :
-1085-Exploitation Tools Archives :
-1086-From Local File Inclusion to Remote 代码 Execution - Part 1:
-1087-Basic Linux Pri Escalation:
-1088-Title: Ultimate Directory Tra & Path Tra Cheat Sheet:
www..com/resources/documents/587.txt
-1089-Binary Exploitation:
1090-A guide to Linux Pri Escalation:
-1091-Penetration Testing Tools Cheat Sheet :
-1092-List of Metasploit Commands - Cheatsheet:
-1093-A journey into Radare 2 – Part 2: Exploitation:
-1094-Remote Code E (Execution) :
-1095-Exploiting Python 代码 Injection in Web Applications:
-1096-Shells · Total OSCP Guide:
-1097-MongoDB Injection cheat sheet Archives:
-1098-Basic Shellshock Exploitation:
-1099-Wireshark Tutorial and Tactical Cheat Sheet :
-1100-Windows Command Line cheatsheet (part 2):
-1101-Detecting WMI exploitation:
www.irongeek.com/i.php?page=/derbycon8/track-3-03...exploitation...
1102-Metasploit Cheat Sheet - Hacking Land :
-1103-5 Practical Scenarios for XSS Attacks:
-1104-Ultimate gdb cheat sheet:
-1105-Reverse Engineering Cheat Sheet:
-1106-Reverse Engineering Cheat Sheet:
-1107-Reverse Engineering For Malware Analysis:
-1108-Re Cheat Sheets :
-1109-Shortcuts for Understanding Malicious Scripts:
-1110-WinDbg Malware Analysis Cheat Sheet :
-1111-Cheat Sheet for Malware Analysis:
-1112-Tips for Re Malicious Code :
-1113-Cheatsheet for radare2 :
-1114-Reverse Engineering Cheat Sheets:
-1115-Reverse Engineering Resources-Beginners to intermediate Guide/Links:
-1116-Malware Resources :
-1117-Zero-day exploits: A cheat sheet for professionals:
-1118-Getting cozy with exploit de:
-1119-appsec - Web Security Cheatsheet :
-1120-PEDA - Python Exploit De Assistance For GDB:
-1121-Exploit De Introduction (part 1) :
-1122-Windows Exploit De: A simple buffer o example:
-1123-Exploit De You Need to Know:
-1124-Exploit De :
-1125-Exploit De - Infosec Resources:
-1126-Exploit De :
-1127-A Study in Exploit De - Part 1: Setup and Proof of Concept :
-1128-Exploit De for Beginners:
-1129-Introduction to Exploit De:
-1130-Exploit De And Reverse Engineering:
-1131-wireless forensics:
-1132-fake AP Detection:
-1133-In-Depth analysis of SamSam Ransomware:
-1134-WannaCry ransomware:
-1135-malware analysis:
-1136-Metasploit's detailed communication and 协议 writeup:
-1137-Metasploit's SSL-generation module::
-1139-Empire IOCs::
-1140-excellent free training on glow analysis:
-1141-NetFlow using Silk:
-1142-Deep Packet Inspection:
-1143-Detecting Beha Personas with OSINT and Datasploit:
-1144-WordPress Penetration Testing using WPScan and MetaSploit:
-1145-Bulk SQL Injection using Burp-to-SQLMap:
-1146-XML External Entity Injection - Explanation and Exploitation:
-1147- Web Application Firewall (WAF) E Techniques #3 (CloudFlare and ModSecurity OWASP CRS3):
-1148-File Upload Restrictions Bypass:
-1149-VLAN Hopping Attack:
-1150-Jigsaw Ransomware Analysis using :
-1151-Ransomware early detection by the analysis of file sharing traffic:
-1152-Do You Think You Can Analyse Ransomware?:
-1153-Analysis of LockerGoga Ransomware :
-1154-Detection and Forensic Analysis of Ransomware Attacks :
-1155-Bad Rabbit Ransomware Technical Analysis:
-1156-NotPetya Ransomware analysis :
-1157-Identifying WannaCry on Your Ser Logs:
-1158-The past, present, and future of ransomware:
-1159-The dynamic analysis of WannaCry ransomware :
-1160-Malware Analysis: Ransomware - SlideShare:
-1161-Article: Anatomy of ransomware malware: detection, analysis :
-1162-Tracking desktop ransomware payments :
-1163-What is Ransomware? Defined, Explained, and Explored:
-1164-Detect and Recover from Ransomware Attacks:
-1165-Wingbird rootkit analysis:
-1166-Windows Kernel Rootkits: Techniques and Analysis:
-1167-Rootkit: What is a Rootkit and How to Detect It :
-1168-Dissecting Turla Rootkit Malware Using Dynamic Analysis:
-1169-Rootkits and Rootkit Detection (Windows Forensic Analysis) Part 2:
-1170-ZeroAccess – an ad kernel mode rootkit :
-1171-Rootkit Analysis Identification Elimination:
-1172-TDL3: The Rootkit of All Evil?:
static1.esetstatic.com/us/resources/white-papers/TDL3-Analysis.pdf
-1173-Avatar Rootkit: Dropper Analysis:
-1174-Sality rootkit analysis:
-1175-RootKit Hook Analyzer:
-1176-Beha Analysis of Rootkit Malware:
-1177-Malware Memory Analysis of the I Rootkit:
-1178-Analysis of the KNARK rootkit :
-1179-32 Bit Windows Kernel Mode Rootkit Lab Setup with INetSim :
-1180-Ten Process Injection Techniques: A Technical Survey of Common and Trending Process Injection Techniques:
-1181-代码 & Process Injection - Red Teaming Experiments:
-1182-What Malware Authors Don't want you to know:
-1183-.NET Process Injection:
-1184-Memory Injection like a Boss :
-1185-Process injection - Malware style:
-1186-Userland API Monitoring and 代码 Injection Detection:
-1187-Unpacking Redaman Malware & Basics of Self-Injection Packers:
-1188-Code injection on macOS:
-1189-(Shell)代码 Injection In Linux Userland :
-1190-Code injection on Windows using Python:
-1191-What is Reflective DLL Injection and how can be detected?:
-1192-Windows Process Injection:
-1193-A+ cheat sheet:
-1194-A Bettercap Tutorial — From Installation to Mischief:
-1195-Debugging Malware with WinDbg:
-1195-Malware analysis, my own list of tools and resources:
-1196-Getting Started with Reverse Engineering:
-1197-Debugging malicious windows scriptlets with Google chrome:
-1198-Intro to Radare2 for Malware Analysis:
-1199-Intro to Malware Analysis and Reverse Engineering:
-1200-Common Malware Persistence Mechanisms:
-1201-Finding Registry Malware Persistence with RECmd:
-1202-Windows Malware Persistence Mechanisms :
-1203- persistence techniques:
-1204- Persistence Mechanism - an o | ScienceDirect Topics:
-1205-Malware analysis for Linux:
-1206-Linux Malware Persistence with Cron:
-1207-What is ad persistent threat (APT)? :
-1208-Malware Analysis, Part 1: Understanding 代码 Obfuscation :
-1209-Top 6 Ad Obfuscation Techniques:
-1210-Malware Obfuscation Techniques:
-1211-How Hackers Hide Their Malware: Ad Obfuscation:
-1212-Malware obfuscation techniques: four simple examples:
-1213-Malware Monday: Obfuscation:
-1213-Challenge of Malware Analysis: Malware obfuscation Techniques:
-1214-Static Malware Analysis - Infosec Resources:
-1215-Malware Basic Static Analysis:
-1216-Difference Between Static Malware Analysis and Dynamic Malware Analysis:
-1217-What is Malware Analysis | Different Tools for Malware Analysis:
-1218-Detecting Malware Pre-execution with Static Analysis and Machine Learning:
-1219-Limits of Static Analysis for Malware Detection:
-1220-Kernel mode user mode:
-1221-Understanding the ELF:
-1222-Windows Pri Abuse: Auditing, Detection, and Defense:
-1223-First steps to memory analysis:
-1224-Maliciously Mobile: A Brief History of Mobile Malware:
-1225-Modern Binary Exploitation Writeups 0x01:
-1226-Exploit De 01 — Terminology:
-1227-Zero-day exploits: A cheat sheet for professionals:
-1228-Best google hacking list on the net:
-1229-Google Hacking:
-1230-OSCP links:
-1231-Pentesting 1 Information gathering:
-1232-OSCP-Sur:
-1233-Googledork:
-1234-Exploit DB:
-1235-Dorks:
-1236-GOOGLE HACKİNG DATABASE:
-1237-Carding Dorks 2019:
-1238-17k Carding Dorks 2019:
-1239-CARDING DORKS 2019:
-1240-sqli dork 2019:
-1241-Private Carding Dorks 2018:
-1242-20K dorks list fresh full carding 2018:
-1243-8k Carding Dorks :):
-1244-8500 SQL DORKS:
-1245-REAL CARDING DORKS:
-1246-15k btc dorks:
-1247-Sqli dorks 2016-2017:
-1248-Here is kind of a tutorial on how to write google dorks.:
-1249-10k Private Fortnite Dorks:
-1250-find login panel dorks:
-1251-Shell dorks:
-1252-HQ PAID GAMING DORKS:
-1253-10K HQ Shopping DORKS:
-1254-Exploit Dorks for Joomla,FCK and others 2015 Old but gold:
-1255-Gain access to unsecured IP cameras with these Google dorks:
-1256-new fresh dorks:
-1257-SQL DORKS FOR CC:
-1258-Wordpress uploadify Dorks Priv8:
-1259-650 DORKS CC:
-1260-3k Dorks Shopping:
-1261-DORKS 2018 :
-1262-HQ FORTNITE DORKS LIST:
-1263-HQ PAID DORKS MIXED GAMING LOL STEAM ..MUSIC SHOPING:
-1264-Camera dorks:
-1265-Admin Login Dorks:
-1266-sql go:
-1267-10k hq gaming dorks:
-1268-HQ SQLI Google Dorks For Shops/Amazon! Enjoy! :
-1269-Dorks:
-1270-10k btc dorks:
-1271-7,000 Dorks for hacking into sites:
-1272-List of information gathering search engines/tools etc:
-1273-FBOSINT:
-1274-Ultimate Penetration Testing:
-1275-massive list of information gathering search engines/tools :
-1276-CEH Class:
-1277-CEH/CHFI Bundle Study Group Sessions:
-1278-OSINT - Financial:
-1279-Most Important Security Tools and Resources:
-1280-OSINT resources from inteltechniques.com:
-1281-Red Team Tips:
-1282-OSCP Notes by Ash:
-1283-OSCP Prep:
-1284-OSCP Review/Cheat Sheet:
-1285-OSCP Prep class:
-1286-Complete Anti-Forensics Guide:
-1287-The Linux Command Line Cheat Sheet:
-1288-Command-Line Log Analysis:
-1289-An A-Z Index of the Apple macOS command line (OS X):
-1290-San Diego Exploit De 2018:
-1291-Windows Exploit De Megaprimer:
-1292-Some Free Reverse engineering resources:
-1293-Sans:
-1294-Metasploit Next Level:
-1295-Just playing around....:
-1296-Red Team Course:
-1297-New Exploit De 2018:
-1298-Good reviews of CTP/OSCE (in no particular order)::
-1299- Research Engineering Bookmarks Collection v1.0:
-1300-Professional-hacker's Pastebin :
-1301-Google Cheat Sheet:
-1302-Shodan for penetration testers:
-1303-Linux networking tools:
-1304-DNS spoofing with NetHunter:
-1305-Tips on writing a penetration testing report:
-1306-Technical penetration report sample:
-1307-Nessus sample reports:
-1308-Sample penetration testing report:
-1309-jonh-the-ripper-cheat-sheet:
-1310-ultimate guide to cracking foreign character passwords using hashcat:
-1311-Building_a_Password_Cracking_Rig_for_Hashcat_-_Part_III:
-1312-cracking story how i cracked over 122 million sha1 and md5 hashed passwords:
-1313-CSA (Cloud Security Alliance) Security White Papers:
-1314-NIST Security Considerations in the System De Life Cycle:
-1315-ISO 29100 information technology security techniques privacy 框架:
-1316-NIST National Checklist Program:
-1317-OWASP Guide to Cryptography:
-1318-N Database):
-1319-C:
-1320-CIS Cybersecurity Tools:
-1321-Security aspects of by ENISA:
-1322-CIS Benchmarks also provides a security guide for , Docker, and Kubernetes:
-1323-OpenStack's hardening of the layer provides a secure guide to building the layer:
-1324-Docker security:
-1325-Microsoft Security De Lifecycle:
-1326-OWASP SAMM Project:
-1327-CWE/SANS Top 25 Most Dangerous Software Errors:
-1329-OWASP Web Applications Directory Project:
-1330-CERT Secure Coding Standards:
-1331-NIST Special Publication 800-53:
-1332-SAFECode Security White Papers:
-1333-Microsoft Threat Modeling tool 2016:
-1334-Apache Metron for real-time big data security:
-1335-Introducing OCTA: Improving the Information Security Risk Assessment Process:
-1336-NIST 800-18 Guide for De Security Plans for Federal Information Systems:
-1337-ITU-T X.805 (10/2003) Security architecture for systems pro end- to-end communications:
-1338-ETSI TS 102 165-1 V4.2.1 (2006-12) : Method and proforma for Threat, Risk, Analysis:
-1339-SAFECode Fundamental Practices for Secure Software De:
-1340-NIST 800-64 Security Considerations in the System De Life Cycle:
-1341-SANS A Security Checklist for Web Application Design:
-1342-Best Practices for implementing a Security Awareness Program:
-1343-ETSI TS 102 165-1 V4.2.1 (2006-12): Method and proforma for Threat, Risk, Analysis:
-1344-NIST 800-18 Guide for De Security Plans for Federal Information Systems:
-1345-SafeCode Tactical Threat Modeling:
-1346-SANS Web Application Security Design Checklist:
-1347-Data Anonymization for production data dumps:
-1348-SANS Continuous Monitoring—What It Is, Why It Is Needed, and How to Use It:
-1349-Guide to Computer Security Log Management:
-1350-Malware Indicators:
-1351-OSINT Threat Feeds:
-1352-SANS How to Use Threat Intelligence effectively:
-1353-NIST 800-150 Guide to Cyber Threat Information Sharing:
-1354-Securing Web Application Technologies Checklist:
-1355-Firmware Security Training:
-1356-Burp Suite Bootcamp:
-1357-Web app hacking:
-1358-XSS Payload:
-1359-XSS Filter E Cheat Sheet:
-1360-Persistence using RunOnceEx – Hidden from Autoruns.exe:
-1361-Windows Operating System Archaeology:
-1362-How to Backdoor Windows 10 Using an Android Phone & USB Rubber Ducky:
-1363-Malware Analysis using Osquery :
-1364-Tales of a Blue Teamer: Detecting Powershell Empire shenanigans with Sysinternals :
-1365-Userland registry hijacking:
-1366-Malware Hiding Techniques to Watch for: AlienVault Labs:
-1367- Full text of "Google hacking for penetration testers" :
-1368- Full text of "Long, Johnny Google Hacking For Penetration Testers" :
-1369- Full text of "Coding For Penetration Testers" :
-1370- Full text of "Hacking For Dummies" :
-1371-Full text of "Wiley. Hacking. 5th. Edition. Jan. 2016. ISBN. 1119154685. Profescience.blogspot.com" :
-1372- Full text of "Social Engineering The Art Of Human Hacking" :
-1373- Full text of "CYBER WARFARE" :
-1374-Full text of "NSA DOCID: 4046925 Untangling The Web: A Guide To Internet Research" :
-1375- Full text of "sectools" :
-1376- Full text of "Aggressi self-defense" :
-1377-Community Texts:
-1378- Full text of "Cyber Spying - Tracking (sometimes).PDF (PDFy mirror)" :
-1379- Full text of "Enzyclopedia Of Cybercrime" :
-1380- Full text of "Information Security Management Handbook" :
-1381- Full text of "ARMArchitecture Reference Manual" :
-1382- Full text of "Metasploit The Penetration Tester S Guide" :
-1383-Tips & tricks to master Google’s search engine:
-1384-Ethical Google Hacking - Sensitive Doc Dork (Part 2) :
-1385- Google Hacking Secrets:the Hidden Codes of Google :
-1386-google hacking:
-1387-How Penetration Testers Use Google Hacking:
-1388-Free Automated Malware Analysis Sandboxes and Services:
-1389-How to get started with Malware Analysis and Reverse Engineering:
-1390-Handy Tools And Websites For Malware Analysis:
-1391-Dynamic Malware Analysis:
-1392-Intro to Radare2 for Malware Analysis:
-1393-Detecting malware through static and dynamic techniques:
-1394-Malware Analysis Tutorial : Tricks for Confusing Static Analysis Tools:
-1395-Malware Analysis Lab At Home In 5 Steps:
-1396-Malware Forensics Guide - Static and Dynamic Approach:
-1397-Top 30 Bug Bounty Programs in 2019:
-1398-Introduction - Book of BugBounty Tips:
-1399-List of bug bounty writeups:
-1400-Tips From A Bugbounty Hunter:
-1401-Cross Site Scripting (XSS) - Book of BugBounty Tips:
-1402-BugBountyTips:
-1403-Xss Filter Bypass Payloads:
www.oroazteca.net/mq67/xss-filter-bypass-payloads.html
-1404-Bug Bounty Methodology:
-1405-GDB cheat-sheet for exploit de:
www.mannulinux.org/2017/01/gdb-cheat-sheet-for-exploit-de.html
-1406-A Study in Exploit De - Part 1: Setup and Proof of Concept :
-1407-Exploit de tutorial :
-1408-exploit code de:
-1409-“Help Defeat Denial of Service Attacks: Step-by-Step”:
-1410-Internet Firewalls: Frequently Asked Questions:
-1411-Service Name and Transport 协议 Port Number:
-1412-10 Useful Open 源码 Security Firewalls for Linux Systems:
-1413-40 Linux Ser Security Tips:
-1414-Linux hardening: A 15-step checklist for a secure Linux 服务端 :
-1415-25 Hardening Security Tips for Linux Servers:
-1416-How to Harden Unix/Linux Systems & Close Security Gaps:
-1417-34 Linux Ser Tips & Checklists for Sysadmins:
-1418-Linux Hardening:
-1419-23 Hardening Tips to Secure your Linux 服务端:
-1420-What is the Windows Registry? :
-1421-Windows Registry, E You Need To Know:
-1422-Windows Registry Tutorial:
-1423-5 Tools to Scan a Linux 服务端 for Malware and Rootkits:
-1424-Subdomain takeover dew to missconfigured project settings for Custom domain .:
-1425-Massi p0wned:
-1426-Subdomain Takeover: Basics:
-1427-Subdomain Takeover: Finding Candidates:
-1428-Bugcrowd's Domain & Subdomain Takeover!:
-1429-What Are Subdomain Takeovers, How to Test and Avoid Them?:
-1430-Finding Candidates for Subdomain Takeovers:
-1431-Subdomain takeover of blog.snapchat.com:
-1432-Hostile Subdomain takeove:
-1433-Microsoft Account Takeo Affecting 400 Million Users:
-1434-What is Subdomain Hijack/Takeo? How to Identify? & Exploit It?:
-1435-Subdomain takeo with AQUATONE:
-1436-A hostile subdomain takeover! – Breaking application security:
-1437-Web De Reading List:
-1438-CSRF Attack can lead to Stored XSS:
-1439-What is Mimikatz: The Beginner's Guide | :
-1440-Pre Mimikatz Attacks :
-1441-Mimikatz tutorial: How it hacks Windows passwords, credentials:
-1442-Mimikatz: Walkthrough [Updated 2019]:
-1443-Mimikatz -Windows Tutorial for Beginner:
-1444-Mitigations against Mimikatz Style Attacks:
-1445-Exploring Mimikatz - Part 1 :
-1446-Powershell A. Running Mimikatz with PowerLine:
-1447-How to Steal Windows Credentials with Mimikatz and Metasploit:
-1448-Retrieving NTLM Hashes without touching LSASS:
-1449-From Responder to NT Authority\SYSTEM:
-1450-Getting Creds :
-1451-Living off the land: stealing NetNTLM hashes:
-1452-(How To) Using Responder to capture passwords on a Windows:
www.securityflux.com/?p=303
-1453-Pwning with Responder - A Pentester's Guide:
-1454-LLMNR and NBT-NS Poisoning Using Responder:
-1455-Responder - Ultimate Guide :
-1456-Responder - CheatSheet:
-1457-LM, NTLM, Net-NTLMv2, oh my! :
-1458-SMB Relay Attack Tutorial:
-1459-Cracking NTLMv2 responses captured using responder:
-1460-Skip Cracking Responder Hashes and Relay Them:
-1461-Metasploit's First Antivirus E Modules:
-1462-E Anti-virus Part 1: Infecting EXEs with Shellter:
-1463-E AV with Shellter:
-1464-Shellter-A Shellcode Injecting Tool :
-1465-Bypassing antivirus programs using SHELLTER:
-1466-John the Ripper step-by-step tutorials for end-users :
openwall.info/wiki/john/tutorials
-1467-Beginners Guide for John the Ripper (Part 1):
-1468-John the Ripper Basics Tutorial:
-1469-Crack Windows password with john the ripper:
-1470-Getting Started Cracking Password Hashes with John the Ripper :
-1471-Shell code exploit with Buffer o:
-1472-Shellcoding for Linux and Windows Tutorial :
www..com/shellcode/shellcode.html
-1473-Buffer O Practical Examples :
-1474-Msfvenom shellcode analysis:
-1475-Process Continuation Shellcode:
-1476-Dynamic Shellcode Execution:
-1477-Tutorials: Writing shellcode to binary files:
-1478-Creating Shellcode for an Egg Hunter :
-1479-How to: Shellcode to reverse bind a shell with netcat :
www.hackerfall.com/story/shellcode-to-renetcat
-1480-Bashing the Bash — Replacing Shell Scripts with Python:
-1481-How to See All Devices on Your 网络 With nmap on Linux:
-1482-A Complete Guide to Nmap:
-1483-Nmap from Beginner to Ad :
-1484-Using Wireshark: Identifying Hosts and Users:
-1485-tshark tutorial and filter examples:
-1486-Fuzz Testing(Fuzzing) Tutorial: What is, Types, Tools & Example:
-1487-Tutorial: Dumb Fuzzing - Peach Community Edition:
community.peachfuzzer.com/v3/TutorialDumbFuzzing.html
-1488-HowTo: ExploitDe:
-1489-Fuzzing with Metasploit:
-1490-Fuzzing – how to find bugs automagically using AFL:
9li.com/fuzzing-how-to-find-bugs-automagically-using-afl/
-1491-Introduction to File Format Fuzzing & Exploitation:
-1492-0x3 Python Tutorial: Fuzzer:
-1493-Hunting For Bugs With AFL:
-1494-Fuzzing: The New Unit Testing:
-1495-Fuzzing With Peach Framework:
-1496-How we found a tcpdump using cloud fuzzing:
-1497-Finding a Fuzzer: Peach Fuzzer :
-1498-Android malware analysis:
-1499-15+ Malware Analysis Tools & Techniques :
-1500-30 Online Malware Analysis Sandboxes / Static Analyzers:
-1501-Linux Command Line Forensics and Intrusion Detection Cheat Sheet:
-1502-Cheat Sheets - SANS Digital Forensics:
-1503-Breach detection with Linux filesystem forensics:
-1504-Digital Forensics Cheat Sheets Collection :
-1505-Security Incident Sur Sheet for Ser:
-1506-Digital forensics: A cheat sheet :
-1507-Windows Registry Forensics using 'RegRipper' Command-Line on Linux:
-1508-Windows IR Li Cheat Sheet:
-1509-10 Best Known Forensics Tools That Works on Linux:
-1510-Top 20 Free Digital Forensic In Tools for SysAdmins:
-1511-Windows Memory Acquisition & Forensics 2018:
-1512-PowerShell Cheat Sheet :
-1513-Forensic Artifacts: e of program execution on Windows systems:
-1514-How to install a CPU?:
-1515-How To Upgrade and Install a New CPU or Motherboard:
-1516-Installing and Troubleshooting CPUs:
www.pearsonitcertification.com/articles/article.aspx?p=1681054&seqNum=2
-1517-15 FREE Pastebin Alternatives You Can Use Right Away:
-1518-Basic computer troubleshooting steps:
-1519-18 Best Websites to Learn Computer Troubleshooting and Tech support:
-1520-Post Exploitation with PowerShell Empire 2.3.0 :
-1521-Windows Persistence with PowerShell Empire :
-1522-powershell-empire-tutorials-empire-to-meterpreter-shellcode-injection-ssl-tutorial:
-1523-Bypassing Anti- & Hacking Windows 10 Using Empire :
-1524-Hacking with Empire – PowerShell Post-Exploitation Agent :
-1525-Hacking Windows Acti Full guide:
www.kalitut.com/hacking-windows-acti.html
-1526-PowerShell Empire for Post-Exploitation:
-1527-Generate A One-Liner – Welcome To LinuxPhilosophy!:
linuxphilosophy.com/rtfm/more/empire/generate-a-one-liner/
-1528-CrackMapExec - Ultimate Guide:
-1529-PowerShell Logging and Security:
-1530-Create your own FUD Backdoors with Empire:
-1531-PowerShell Empire Complete Tutorial For Beginners:
-1532-Bash Bunny: Windows Remote Shell using Metasploit & PowerShell:
-1533-Kerberoasting - Stealing Service Account Credentials:
-1534-Automating Mimikatz with Empire and DeathStar :
-1535-Windows oneliners to get shell :
-1536-ObfuscatedEmpire :
-1537-Pentesting with PowerShell in six steps:
-1538-Using Credentials to Own Windows Boxes - Part 3 (WMI and WinRM):
-1539-PowerShell Security Best Practices:
-1540-You can detect PowerShell attacks:
-1541-Detecting and Pre PowerShell Attacks:
-1542-Detecting Offensi Attack Tools – Acti Security:
-1543-An Internal Pentest Audit Against Acti:
-1544-A complete Acti Penetration Testing Checklist :
-1545-Acti | Penetration Testing Lab:
-1546-Building and Attacking an Acti lab with PowerShell :
-1547-Penetration Testing in Windows Ser Directory using Metasploit:
-1548-Red Team Penetration Testing – Going All the Way (Part 2 of 3) :
-1549-Penetration Testing Acti, Part II:
-1550-Gaining Domain Admin from Outside Acti:
-1551-Post Exploitation Cheat Sheet:
-1552-Windows post-exploitation :
-1553-OSCP - Windows Post Exploitation :
-1554-Windows Post-Exploitation Command List:
-1555-Windows Post-Exploitation Command List:
-1556-Linux Post-Exploitation · OSCP - Useful Resources:
-1557-Pentesting Cheatsheet:
-1558-Pentesting Cheatsheets - Red Teaming Experiments:
-1559-OSCP Goldmine:
-1560-Linux Post Exploitation Cheat Sheet:
-1562-OSCP useful resources and tools:
-1563-Windows Post-Exploitation Command List :
-1564-Metasploit Cheat Sheet:
-1565-Windows Pri Escalation:
-1566-Linux Unix Bsd Post Exploitation:
-1567-Pri Escalation & Post-Exploitation:
-1568-Metasploit Cheat Sheet:
-1569-Metasploit Cheat Sheet :
-1570-Pri escalation: Linux:
-1571-Cheat Sheets — Amethyst Security:
-1572-Responder - CheatSheet:
-1573-Cheatsheets:
-1574-Are you ready for OSCP?:
-1575-Windows Pri Escalation:
-1576-A guide to Linux Pri Escalation:
-1577-Windows Post-Exploitation-Cheat-Sheet:
-1578-Windows Pri Escalation (privesc) Resources:
-1579-Dissecting Mobile Malware:
-1580-Android malware analysis with Radare: Dissecting the Triada Trojan:
www.nowsecure.com/blog/2016/11/21/android-malware-analysis-radare-triad/
-1581-Dissecting Mobile Native Code Packers:
-1582-What is Mobile Malware? Defined, Explained, and Explored:
-1583-Malware De — Professionalization of an Ancient Art:
-1584-Weaponizing Malware 代码 Sharing with Cythereal MAGIC:
-1585-Web App Pentest Cheat Sheet:
-1586-The USB Threat is [Still] Real — Pentest Tools for Sysadmins, Continued:
-1587-How to Run An External Pentest:
-1588-Advice for new pentesters:
-1589-NodeJS Application Pentest Tips:
-1590-How to combine Pentesting with Automation to improve your security:
-1591-Day 79: FTP Pentest Guide:
-1592-SigintOS: A Wireless Pentest Distro Review:
-1593-Conducting an IoT Pentest :
-1594-Efficient way to pentest Android Chat Applications:
-1595-APT2 - Automated PenTest Toolkit :
-1596-Pentest Tools and Distros:
-1597-Keeping notes during a pentest/security assessment/代码 review:
-1598-An intro to pentesting an Android phone:
-1599-The Penetration Testing Report:
-1600-VA :
-1601-Pentest: Hacking WPA2 WiFi using Aircrack on Kali Linux:
-1602-Pentesting Ethereum dApps:
-1603-Android pentest lab in a nutshell :
-1604-Pentest Magazine: Web Scraping with Python :
-1605-Pentesting iOS apps without jailbreak:
-1606-OSCP/Pen Testing Resources:
-1607-Web Application Security & Bug Bounty (Methodology, Reconnaissance, , Reporting):
-1608-Local File Inclusion (LFI) — Web Application Penetration Testing:
-1609-Local File Inclusion (Basic):
-1610-PHP File Inclusion :
-1611-Local File Inclusion:
-1612-Web Application Penetration Testing: Local File Inclusion:
-1613-From Local File Inclusion to 代码 Execution :
-1614-RFI / LFI:
-1615-From Local File Inclusion to Remote 代码 Execution - Part 2:
-1616-Local File Inclusion:
-1617-Beginner Guide to File Inclusion Attack (LFI/RFI) :
-1618-LFI / RFI:
-1619-LFI and RFI Attacks - All You Need to Know:
-1620-Log Poisoning - LFI to RCE :
-1621-LFI:
-1622-Hand Guide To Local File Inclusion(LFI):
www.securityidiots.com/Web-Pentest/LFI/guide-to-lfi.html
-1623-Local File Inclusion (LFI) - Cheat Sheet:
-1624-Web Application Penetration Testing Local File Inclusion (LFI):
-1625-File Inclusion Pre:
-1626-The Most In-depth Hacker's Guide:
-1627-Hacking Essentials: The Beginner's Guide To Ethical Hacking:
-1628-Web App Hacking, Part 11: Local File Inclusion:
-1629-Local and remote file inclusion :
-1630-Upgrade from LFI to RCE via PHP Sessions :
-1631-CVV #1: Local File Inclusion:
-1632-(PDF) Cross Site Scripting (XSS) in Action:
-1633-XSS exploitation part 1:
www.securityidiots.com/Web-Pentest/XSS/xss-exploitation-series-part-1.html
-1634-Weaponizing self-xss:
-1635-Cookie Tracking and Stealing using Cross-Site Scripting:
-1636-Defense against the Black Arts:
-1637-CSRF Attacks: Anatomy, Pre, and XSRF Tokens:
-1638-Bypassing CSRF protection:
-1639-Stealing CSRF tokens with XSS:
-1640-Same Origin Policy and ways to Bypass:
-1641-Bypassing Same Origin Policy :
-1642-Client-Side Attack - an o :
-1643-Client-Side Injection Attacks:
-1645-The 客户端-Side Battle Against Ja Attacks Is Already Here:
-1646-Why Let’s Encrypt is a really, really, really bad idea:
-1647-Huge Guide to Client-Side Attacks:
-1648-OSCP Prep – Episode 11: Client Side Attacks:
-1649-Client side attack - A:
-1650-客户端-Side Attack With Metasploit (Part 4):
-1651-Ransomware: Latest De and How to Defend Against Them:
-1652-Cookie Tracking and Stealing using Cross-Site Scripting:
-1653-How to Write an XSS Cookie Stealer in Ja to Steal Passwords:
-1654-How I was able to steal cookies XSS in one of the famous e-commerce site:
-1655-Steal 's cookie using Cross Site Scripting (XSS) :
-1656-Remote Code Execution — Damn Web Application(DVWA) - Medium le:
-1657-Remote Command Execution:
-1658-DevOops — An XML External Entity (XXE) HackTheBox Walkthrough:
-1659-XML External Entity - Beyond /etc/passwd (For Fun & Profit):
-1660-XXE - ZeroSec - Ad In Information Security:
-1661-Exploitation: XML External Entity (XXE) Injection:
-1662-Hack The Box: DevOops:
-1663-Web Application Penetration Testing Notes:
-1664-WriteUp – Aragog (HackTheBox) :
-1665-Linux Pri Escalation Using PATH :
-1666-Linux Pri Escalation Script :
-1667-Pri Escalation - Linux :
-1668-Linux Pri Escalation:
-1669-Perform Local Pri Escalation Using a Linux Kernel Exploit :
-1670-Linux Pri Escalation With Kernel Exploit:
-1671-Reach the root! How to gain pri in Linux:
-1672-Enumeration for Linux Pri Escalation:
-1673-Linux Pri Escalation Scripts :
-1674-Understanding Pri Escalation:
www.admin-magazine.com/Articles/Understanding-Pri
-1675-Toppo:1 | Walkthrough:
-1676-Pri Escalation resources:
-1678-OSCP Notes – Pri Escalation (Linux):
-1679-Ude Allows Local Pri Escalation :
www.madirish.net/370
-1680-Understanding Linux Pri Escalation and Defending Against It:
-1681-Windows Pri Escalation Using PowerShell:
-1682-Pri Escalation | Azeria Labs:
-1683-Abusing SUDO (Linux Pri Escalation):
-1684-Pri Escalation - Linux:
-1685-0day Linux Escalation Pri Exploit Collection :
-1686-Linux for Pentester: cp Pri Escalation :
-1687-Practical Pri Escalation Using Meterpreter:
-1688-dirty_sock: Linux Pri Escalation ():
-1689-Linux pri escalation:
-1690-The Complete Meterpreter Guide | Pri Escalation & Clearing Tracks:
-1691-How to prepare for PWK/OSCP, a noob-friendly guide:
-1692-Basic Linux pri escalation by kernel exploits:
-1693-Linux mount without root :
epaymentamerica.com/tozkwje/xl.php?trjsef=linux-mount-without-root
-1694-Linux Pri Escalation Oscp:
www.condadorealty.com/2h442/linux-pri.html
-1695-Pri Escalation Attack Tutorial:
-1696-Oscp Bethany Pri Escalation:
-1697-Hacking a Website and Gaining Root Access using Dirty COW Exploit:
-1698-Pri Escalation - Linux · Total OSCP Guide:
-1699-Linux ad pri escalation:
-1700-Local Linux pri escalation o:
-1701-Windows Pri Escalation Scripts & Techniques :
-1702-Penetration Testing: Maintaining Access:
-1703-Kali Linux Maintaining Access :
-1704-Best Open 源码 Tools for Maintaining Access & Tunneling:
-1705-Maintaining Access Part 1: Introduction and Metasploit Example:
-1706-Maintaining Access - Ethical hacking and penetration testing:
-1707-Maintaining Access with Web Backdoors [Weevely]:
-1708-Best Open 源码 MITM Tools: Sniffing & Spoofing:
-1709-Cain and Abel - Man in the Middle (MITM) Attack 工具 Explained:
-1710-Man In The Middle Attack (MITM):
-1711-Real-World Man-in-the-Middle (MITM) Attack :
-1712-The Ultimate Guide to Man in the Middle Attacks :
-1713-How to Conduct ARP Spoofing for MITM Attacks:
-1714-How To Do A Man-in-the-Middle Attack Using ARP Spoofing & Poisoning:
-1715-Ettercap and middle-attacks tutorial :
-1716-How To Setup A Man In The Middle Attack Using ARP Poisoning:
-1717-Intro to Wireshark and Man in the Middle Attacks:
-1718-MiTM Attack with Ettercap:
-1719-Man in the Middle Attack with Websploit 框架:
-1720-SSH MitM Downgrade :
-1721-How to use Netcat for Listening, Banner Grabbing and Transferring Files:
-1722-Powershell port scanner and banner grabber:
-1723-What is banner grabbing attack:
-1724-Network penetration testing:
-1725-NMAP Cheatsheet:
-1726-How To Scan a Network With Nmap:
-1727-Hacking Metasploitable : Scanning and Banner grabbing:
-1728-Penetration Testing of an FTP Server:
-1729-Nmap Usage & Cheet-Sheet:
-1730-Disco SSH Host Keys with NMAP:
-1731-Banner Grabbing using Nmap & NetCat - Detailed Explanation:
-1732-Nmap – ( Discovery):
-1733-Penetration Testing on MYSQL (Port 3306):
-1774-Password Spraying - Infosec Resources :
-1775-Password Spraying- Common mistakes and how to avoid them:
-1776-Password Spraying Tutorial:
-1777-password spraying Archives:
-1778-The 21 Best Email Finding Tools::
-1779-OSINT Primer: People (Part 2):
-1780-Disco Hidden Email Gateways with OSINT Techniques:
-1781-Top 20 Data Reconnaissance and Intel Gathering Tools :
-1782-101+ OSINT Resources for In [2019]:
-1783-Digging Through Someones Past Using OSINT:
-1784-Gathering Open Source Intelligence:
-1785-How to Locate the Person Behind an Email Address:
-1786-Find hacked email addresses and check breach mails:
-1787-A Pentester's Guide - Part 3 (OSINT, Breach Dumps, & Password :
-1788-Top 10 OSINT Tools/Sources for Security Folks:
www.snoopysecurity.github.io/osint/2018/08/02/10_OSINT_for_security_folks.html
-1789-Top 5 Open 源码 OSINT Tools for a Penetration Tester:
-1790-Open 源码 Intelligence tools for social media: my own list:
-1791-Red Teaming: I can see you! Insights from an InfoSec expert :
-1792-OSINT Playbook for Recruiters:
-1793- Links for Doxing, Personal OSInt, Profiling, Footprinting, Cyberstalking:
-1794-Open 源码 Intelligence Gathering 201 (Co 12 additional techniques):
-1795-Online In Tools for Social Media Discovery and Locating People:
-1796-Expanding Skype Forensics with OSINT: Email Accounts:
-1798-2019 OSINT Guide:
-1799-OSINT - Passi and Discovery of Assets:
-1800-OSINT With Datasploit:
-1801-Building an OSINT Reconnaissance 工具 from Scratch:
-1802-Find Identifying Information from a Phone Number Using OSINT Tools:
-1803-Find Details Of any Mobile Number, Email ID, IP Address in the world (Step By Step):
-1804-In tools for finding people online and keeping yourself safe:
-1805- Full text of "The Hacker Playbook 2 Practical Guide To Penetration Testing By Peter Kim":
-1806-The Internet Archi over 15,000,000 freely downloadable books and texts. There is also a collection of 550,000 modern eBooks that may be borrowed by anyone with a free archive.org account:
-1807-Exploiting SSRF like a Boss — Escalation of an SSRF to Local File Read!:
-1808-How to Pass OSCP Like Boss:
-1809-Deploy a private Burp Collaborator 服务端 in Azure:
-1810-Using Shodan Better Way! :):
-1811-How To Do Your Reconnaissance Properly Before Chasing A Bug Bounty:
-1812-How we got LFI in apache Drill (Recon like a boss)::
-1813-Chaining Self XSS with UI Redressing is Leading to Session Hijacking:
-1814-Week in OSINT #2019–19:
-1814-Week in OSINT #2019–02:
-1815-Week in OSINT #2019–24:
-1816-Page Admin Disclosure | Facebook Bug Bounty 2019:
-1817-XSS in Edmodo within 5 Minute (My First Bug Bounty):
-1818-Collection Of Bug Bounty Tip-Will Be updated daily:
-1819-A Unique XSS Scenario in SmartSheet || $1000 bounty.:
-1820-How I found a simple bug in Facebook without any Test:
-1821-Facebook BugBounty — Disclosing page members:
-1822-Don’t underestimates the Errors They can provide good $$$ Bounty!:
-1823-Django and Web Security Headers:
-1824-Weaponising Staged Cross-Site Scripting (XSS) Payloads:
-1825-How I was able to Bypass XSS Protection on HackerOne’s Private Program:
-1826-XSS in Microsoft subdomain:
-1827-How Angular Protects Us From XSS Attacks?:
-1828-[FUN] Bypass XSS Detection WAF:
-1829-Bug Hunting Methodology(Part-2):
-1830-Learn Web Application Penetration Testing:
-1831-“Exploiting a Single Parameter”:
-1832-CORS To CSRF Attack:
-1833-Account Takeo CSRF(json-based):
-1834-Bypassing Anti-CSRF with Burp Suite Session Handling:
-1835-10 Methods to Bypass Cross Site Request Forgery (CSRF):
-1836-Exploiting CSRF on JSON endpoints with Flash and redirects:
-1837-Finding and exploiting Cross-site request forgery (CSRF):
-1838-Hacking Facebook accounts using CSRF in Oculus-Facebook integration:
-1839-Synchronizer Token Pattern: No more tricks:
-1840-The $12,000 Intersection between Clickjacking, XSS, and Denial of Service:
-1841-XML External Entity(XXE):
-1842-XXE Attacks— Part 1: XML Basics:
-1843-From XXE to RCE with PHP/expect — The Missing Link:
-1844-My first XML External Entity (XXE) attack with .gpx file:
-1845-Open Redirects & Security Done Right!:
-1846-XXE on Windows system …then what ??:
-1847-Unauthenticated Blind SSRF in Oracle EBS C:
-1848-S SSRF fingerprinting libraries :
-1849-What is XML Injection Attack:
-1850-SSRF - 服务端 Side Request Forgery (Types and ways to exploit it) Part-1:
-1851-Penetration Testing Introduction: Scanning & Reconnaissance:
-1852-Beginner’s Guide to recon automation.:
-1853-Red Teamer’s Guide to Pulse Secure SSL VPN:
-1854-C WordPress Plugin Import Export Users = 1.3.0 - CS:
-1855-How I har Facebook credentials via free wifi?:
-1856-How to hack any Payment Gateway?:
-1857-How I hacked into my neighbour’s WiFi and har login credentials?:
-1858-What do Netcat, SMTP and self XSS have in common? Stored XSS:
-1859-1-Click Account Takeover in .io — a Nice Case Study:
-1860-Digging into Android Applications — Part 1 — Drozer + Burp:
-1861-Linux for Pentester: APT Pri Escalation:
-1862-Linux for Pentester : ZIP Pri Escalation:
-1863-Koadic - COM Command & Control 框架:
-1864-Configure Sqlmap for WEB-界面 in Kali Linux :
-1865-Penetration Testing:
-1866-Buffer O Examples, 代码 execution by shellcode :
-1867-Dynamic Shellcode Execution:
-1868-JSC Exploits:
-
-1869-Injecting Into The Hunt:
-1870-Bypassing Antivirus with Golang:
-1871-Windows Process Injection: Print Spooler:
-1872-Inject Shellcode Into Memory Using Unicorn :
-1873-Macros and More with SharpShooter v2.0:
-1874-Fuzz Testing(Fuzzing) Tutorial: What is, Types, Tools & Example:
-1875-Introduction to File Format Fuzzing & Exploitation:
-1876-Hacking a social media account and safeguarding it:
-1877-OTP Bypass on India’s Biggest Video Sharing Site:
-1879-Getting Root on macOS via 3rd Party Backup Software:
-1880-How to Enumerate MYSQL 数据库 using Metasploit:
-1881-Exploiting Insecure Firebase Database!
-1882-Penetration Testing - Complete Guide:
-1883-How To Upload A PHP Web Shell On WordPress Site:
-1884-Mimikatz tutorial: How it hacks Windows passwords, credentials:
-1885-Ethical hacking: Lateral mo techniques:
-1886-A Pi for Pentesters:
-1887-What to Look for When Reverse Engineering Android Apps:
-1888-Modlishka: Advance Phishing to Bypass 2 Factor Auth:
-1889-Bettercap Usage Examples (O, Custom setup, Caplets ):
www.cyberpunk.rs/bettercap-usage-examples-olets
-1890-The Complete Hashcat Tutorial:
-1891-Wireless Wifi Penetration Testing Hacker Notes:
-1892-#BugBounty writeups:
-1893-Kerberoasting attack:
-1894-A Pentester's Guide - Part 2 (OSINT - LinkedIn is not just for jobs):
-1895-Radare2 cutter tutorial:
-1896-Cracking Password Hashes with Hashcat:
-1897-From CSRF to RCE and WordPress-site takeo:
-1898-Best OSINT Tools:
-1899-Metasploit Exploitation Tool 2020:
-1900-How to exploit C:
-1901-PowerShell for Pentesters:
-1902-Android Pentest Tutorial:
-1903-Burp Suite Tutorial:
-1904-Company Email Enumeration + Breached Email Finder:
-1905-Kali Linux Cheat Sheet for Penetration Testers:
-1906-Acti Exploitation Cheat Sheet:
A cheat sheet that contains common enumeration and attack methods for Windows Acti.
-1907-Ad Hacking Tutorials Collection:
-1908-Persistence – DLL Hijacking:
-1909-Brute force and dictionary attacks: A cheat sheet:
-1910-How to use Facebook for Open Source In:
-1911-tcpdump Cheat Sheet:
-1912-Windows Post exploitation recon with Metasploit:
-1913-Bug Hunting Methodology:
-1914-Malware traffic analysis tutorial:
-1915-Recon-ng v5 Tutorial:
-1916-Windows and Linux Pri Escalation Tools:
-1917-Total OSCP Guide:
-1918-Phishing Windows Credentials:
-1919-Getting What You're Entitled To: A Journey Into MacOS Stored Credentials:
-1920-Recent Papers Related To Fuzzing:
-1921-Web Shells 101 Using PHP (Web Shells Part 2):
-1922-Python3 reverse shell:
-1923-Reverse Shell between two Linux machines:
-1924-Tutorial - Writing Hardcoded Windows Shellcodes (32bit):
-1925-How to Use Wireshark: Comprehensi + Tips:
-1926-How To Use PowerShell for Pri Escalation with Local Pri Escalation?
-1927-Ethical hacking:Top pri escalation techniques in Windows:
-1928-How to Identify Company's Hacked Email Addresses:
-1929-Android APK Reverse Engineering: What's in an APK:
-1930-Keep Calm and HackTheBox - Beep:
-1931-Keep Calm and HackTheBox -Legacy:
-1932-Keep Calm and HackTheBox -Lame:
-1933-HacktheBox:Writeup Walkthrough:
-1934-2020 OSCP Exam Preparation:
-1935-My OSCP transformation:
-1936-A Detailed Guide on OSCP Preparation:
-1937-Useful Commands and Tools - #OSCP:
-1938-Comprehensi on Password Spraying Attack
-1939-Pri Escalation:
-1940-Red Team:
-1941-Linux post-exploitation.Ad from user to super-user in a few clicks
-1942--#BugBounty Cheatsheet
-1943--#Windows Notes/Cheatsheet
-1944-#Linux Notes/Cheatsheet
-1945-Windows Notes
-1946-#BlueTeam CheatSheet
-1947-Linux Pri Escalation Cheatsheet for OSCP:
-1948-Shodan Pentesting Guide:
-1949-Pentesters Guide to PostgreSQL Hacking:
-1950-Hacking-OSCP cheatsheet:
-1951-A Comprehensi to Breaking SSH:
-1952-Windows Pri Escalation Methods for Pentesters:
-1953-Best #firefox addons for #Hacking:
-1954-S3 Bucket Enumeration Tools:
-1955-Github Recon Tools:
-1956-i created this group for more in depth sharing about hacking and penetration testing /daily posts: you can join:
-1957-Directory Bruteforcing Tools: && SCREENSHOTTING Tools:
-1958-S3 Bucket Enumeration Tools:
-1959-Github Recon Tools:
-1960-Website Mirroring Tools:
-1961-automated credential discovery tools:
-1962-Antiforensics Techniques:
-1963-#bugbounty tools part (1):
1964-Binary Analysis Frameworks:
-1965-#BugBounty tools part (5):
-1966-#BugBounty tools part (3):
-1967-Kali Linux Commands List (Cheat Sheet):
-1968-#BugBounty tools part (4):
-1969--Automated enumeration tools:
-1970-DNS lookup information Tools:
-1971-OSCP:
-1972-Social Engineering Tools:
-1973-Hydra :
-1974-#OSINT Your Full Guide:
-1975-#BugBounty tools part (2):
-1976-my own ebook library:
-1977-Practice part (2):
-1978-Practice part (3):
-1979-my blog:
-1980-Practice:
-1981-how to search for XSS without proxy 工具:
-1982-How to collect email addresses from search engines:
-1983-Hacking Tools Cheat Sheet:
-1984-#OSCP Your Full Guide:
-1985-#HackTheBox Your Full Guide:
-1986-Web Scanners:
-1987-HACKING MAGAZINES:
-1-2600 — The Hacker Quarterly magazine:www.2600.com
-2-Hackin9:
-3-(IN)SECURE magazine:
-4-PHRACK:www.phrack.org/archives
-5-Hacker’s Manual 2019
-1988-Web Exploitation Tools:
-1989-Kali Linux Cheat Sheet for Hackers:
-1990-Web Exploitation Tools:
-1991-2020 OSCP Exam Preparation + My OSCP transformation +A Detailed Guide on OSCP Preparation + Useful Commands and Tools - #OSCP:
-1992-100 Best Hacking Tools for Security Professionals in 2020:
-1993-SNMP Enumeration:
OpUtils:www.manageengine.com
SNMP Informant:www.snmp-informant.com
SNMP Scanner:www.secure-bytes.com
SNMPUtil:www.wtcs.org
SolarWinds:www.solarwinds.com
-1994-INFO-SEC RELATED CHEAT SHEETS:
-1995-METASPLOIT CHEAT SHEET:
-1996-Nmap Cheat Sheet, plus bonus Nmap + Nessus:
-1997-Wireshark Cheat Sheet - Commands, Captures, Filters, Shortcuts & More:
-1998-learn penetration testing a great series as PDF:
-1999-Detecting secrets in 代码 committed to Gitlab (in real time):
-2000-Penetration Tester’s Guide to E OAuth 2.0 — Authorization Code Grants:
-2001-Building Machine Labs:
-2002-Windows Kernel Exploit Cheat Sheet for [HackTheBox]:
-2003-19 Powerful Penetration Testing Tools In 2020 (Security Testing Tools):
-2004-Full Connect Scan (-sT):
-complete the three-way handshake
-slower than SYN scan
-no need for superuser Pri
-when stealth is not required
-to know for sure which port is open
-when running port scan like TOR
-it can be detected
nmap -sT -p 80 192.168.1.110
-2005-today i learned that you can use strings command to extract email addresses from binary files:
strings -n 8 /usr/bin/who | grep '@'
-2005-pentest cheat sheet :
-2006-Tcpdump cheat sheet :
-2007-tcpdump - reading tcp flags :
-2008-CTF-Notes - Hackers Resources Galore:
-2009-Pentest-Cheat-Sheets:
-2010--2-Web Application Cheatsheet ():
-2011-A cheatsheet with commands that can be used to perform kerberos attacks :
-2012-Master Shodan Search Engine:
-2013-CTF Cheatsheet:
-2014-Pentesting Cheatsheet:
-2015-Hacking Cheatsheet:
-2016-Hashcat-Cheatsheet:
-2017-Wireshark Cheat Sheet:
-2018-JustTryHarder:
-2019-PWK-CheatSheet:
-2020-kali linux cheatsheet:
-2021-Hydra-Cheatsheet:
-2022-Security Tools Cheatsheets:
-2023-popping-shells-instead-of-alert-boxes-weaponizing-xss-for-fun-and-profit:
-2024-TRICKS FOR WEAPONIZING XSS:
-2025-OSCP Notes:
-2026-OSCP Notes:
-2027-list of useful commands, shells and notes related to OSCP:
-2028-Notes for taking the OSCP in 2097:
-2029-My OSCP notes:
-2030-Disco with DNSObserver: an Out-of-Band DNS Monitor
-2031-Red Team Notes:
-2032-E Detection with Excel 4.0 Macros and the BIFF8 XLS Format:
-2033-ESCALATING SUBDOMAIN TAKEOVERS TO STEAL COOKIES BY ABUSING DOCUMENT.DOMAIN:
-2034-[SSTI] BREAKING GO'S TEMPLATE 引擎 TO GET XSS:
-2035-Metasploitable 3:
-2036-Reverse engineering and modifying an Android 游戏:
-2037-Reverse Engineering The Medium App (and making all stories in it free):
-2038-Android Apk Reverse Engineering:
-2039-DIY Web App Pentesting Guide:
-2040-Local Admin Access and Group Policy Don’t Mix:
-2041-BREAKING TYPICAL WINDOWS HARDENING IMPLEMENTATIONS:
-2042-Decrypting ADSync passwords - my journey into DPAPI:
-2043-Ultimate Guide: PostgreSQL Pentesting:
-2044-SMB Enumeration for Penetration Testing:
-2045-(Almost) All The Ways to File Transfer:
-2046-HackTheBox TartarSauce Writeup:
-2047-Kerberos-Attacks-In-Depth:
-2048-From Recon to Bypassing MFA Implementation in OWA by Using EWS Misconfiguration:
-2049-Writeups for infosec Capture the Flag events by team Galaxians:
-2050-Angstrom CTF 2018 — web challenges [writeup]:
-2051-How to get started in CTF | Complete Begineer Guide:
-2052-Hacking 101: An Ethical Hackers Guide for Getting from Beginner to Professional:
-2053-Reconnaissance the key to Ethical Hacking!:
-2054-Day 18: Essential CTF Tools:
-2055-OSCP Cheatsheet:
-2056-OSCP Cheat Sheet:
-2057-TryHackMe: :
-2058-Malware Analysis Tools And Resources:
-2059-Extracting Embedded Payloads From Malware:
-2060-Attacks and Techniques Used Against WordPress Sites:
-2061-Still Scanning IP Addresses? You’re Doing it Wrong:
-2062-Source Code Disclosure .git Folder:
-2063-GitHub Recon - It’s Really Deep:
-2064-From SSRF to Compromise: Case Study:
-2065-Bug Hunting with Param Miner: Cache poisoning with XSS, a peculiar case:
-2066-Akamai Web Application Firewall Bypass Journey: Exploiting “Google BigQuery” SQL Injection :
-2067-A detection via dhcp options:
-2068-Bug Bytes #86 - Stealing local files with Safari, Prototype pollution vs HTML sanitizers & A hacker’s mom learning bug bounty:
-2069-Bug Bytes #78 - BIG-IP RCE, Azure account takeover & Hunt scanner is back:
-2070-Hacking a Telecommunication company(MTN):
-2071-$20000 Facebook DOM XSS:
-2072-Backdooring WordPress with Phpsploit:
-2073-Pro tips for bugbounty:
-2074-Collection Of #bugbountytips:
-2075-Offensi/Ncat: From Port Scanning To Bind Shell IP Whitelisting:
-2076-XSS for beginners:
-2077-LET’S GO DEEP INTO OSINT: PART 1:
medium.com/bugbountywriteup/lets-go-deep-into-osint-part-1-c2de4fe4f3bf
-2087-Beginner’s Guide to recon automation:
medium.com/bugbountywriteup/beginners-guide-to-recon-automation-f95b317c6dbb
-2079-Automating Recon:
-2080-XSS WAF & Character limitation bypass like a boss:
-2081-Chaining Improper Authorization To Race Condition To Harvest Credit Card Details : A Bug Bounty Story:
-2082-TryHackMe Linux Challenges:
-2083-Persistence – COM Hijacking:
-2084-DLL Proxy Loading Your Fa C# Implant
-2085-how offensi use applescript for attacking macos:
-2086-Windows Pri Escalation without Metasploit
-2087-Pri Escalation in Windows:
-2088-OSWE Prep — Hack The Box Magic:
-2089-Hackthebox | Bastion Writeup:
-2090-Hacking Android phone remotely using Metasploit:
-2091-“Hacking with Metasploit” Tutorial:
-2092-Hack The Box — Tally Writeup w/o Metasploit:
-2093-Burp Suite:
-2094-h1–702 CTF — Web Challenge Write Up:
-2095-SQL Injection & Remote 代码 Execution:
-2096-Juicy Infos hidden in js scripts leads to RCE :
-2097-Escalating Pri like a Pro:
-2098-Top 16 Acti :
-2099-Windows Red Team Cheat Sheet:
-2100-OSCP: De a Methodology:
-2101-Zero to OSCP: Concise Edition:
-2102-59 Hosts to Glory — Passing the OSCP:
-2103-Can We Automate Bug Bounties With Wfuzz?
medium.com/better-programming/can-we-automate-earning-bug-bounties-with-wfuzz-c4e7a96810a5
-2104-Ad boolean-based SQLi filter bypass techniques:
-2105-Beginners Guide On How You Can Use Ja In BugBounty:
-2106-OTP Bypass:
medium.com/bugbountywriteup/otp-bypass-on-indias-biggest-7c1aa89
-2107-How we Hijacked 26+ Subdomains:
-2018-How to spot and exploit postMessage :
-2119-IDA Pro Tips to Add to Your Bag of Tricks:
-2120-N1QL Injection: Kind of SQL Injection in a NoSQL 数据库:
-2121-CSRF Protection Bypass in Play 框架:
-2122-$25K Instagram Almost XSS Filter Link — Facebook Bug Bounty:
-2123-techniques for learning passwords:
-2124-How a simple CSRF attack turned into a P1:
-2125-How I exploited the json csrf with method o technique:
-2126-How I found CSRF(my first bounty):
-2127-Exploiting websocket application wide XSS and CSRF:
-2128-Touch ID authentication Bypass on e and dropbox iOS apps:
-2129-Oauth authentication bypass on airbnb acquistion using wierd 1 char open redirect:
-2130-Two factor authentication bypass:
-2132-Tricky oracle SQLI situation:
-2133-CORS bug on google’s 404 page (rewarded):
-2134-Subdomain takeover s3 bucket:
-2135-Subdomain takeover service:
-2136-How I found CSRF(my first bounty):
-2137-Race condition that could result to RCE a story with an app:
-2138-Creating thinking is our e : Race condition and business logic:
-2139-Chaining improper authorization to Race condition to harvest credit card details:
-2140-Google APIs Clickjacking worth 1337$:
-2141-Bypass CSRF with clickjacking on Google org:
-2142-2FA Bypass rate limiting Bypass:
-2143-OTP bruteforce account takeover:
-2144-Microsoft RCE bugbounty:
-2145-Bug Bounty Tips #1:
-2146-Bug Bounty Tips #2:
-2147-Bug Bounty Tips #3:
-2148-Bug Bounty Tips #4:
-2149-Bug Bounty Tips #5:
-2150-Bug Bounty Tips #6:
-2151-Finding Bugs in File Systems with an Extensible Fuzzing 框架 ﴾TOS 2020﴿:
-2152-PeriScope: An Effecti and Fuzzing 框架 for the Hardware‐OS Boundary ﴾NDSS2019﴿:
-2153-Bug Bounty Tips #7:
-2154-Fuzzing: Hack, Art, and Science ﴾CACM 2020﴿:
-2155-Azure File Shares for Pentesters:
-2156-XSS like a Pro:
-2157-XSS on Cookie Pop-up Warning:
-2158-Effortlessly finding Cross Site Script Inclusion (XSSI) & JSONP for bug bounty:
-2159-XSS in Zoho Mail:
-2160-O Of Empire 3.4 Features:
-2161-Android App 源码 代码 Extraction and Bypassing Root and SSL Pinning checks:
-2162-The 3 Day Account Takeover:
-2163-A Review of Fuzzing Tools and Methods:
-2164-PeriScope: An Effecti and Fuzzing 框架 for the Hardware‐OS Boundary ﴾NDSS2019﴿:
-2165-Oneplus XSS in customer support portal:
-2166-Windows-Prices:
-2167-Persistence – DLL Hijacking:
-2168-Scanning JS Files for Endpoints and Secrets:
-2169-Password Spraying Secure Logon for F5 Networks:
-2170-Password Spraying Dell SonicWALL Office:
-2171-Attention to Details : Finding Hidden IDORs:
-2172-Bypassing file upload filter by 源码 代码 review in Bolt CMS:
-2173-HTB{ Giddy }:
-2174-Analyzing WhatsApp Calls with Wireshark, radare2 and Frida:
-2175-2FA bypass via CSRF attack:
-2176-CSRF token bypass [a tale of 2k bug]:
-2177-Setting the ‘Referer’ Header Using Ja:
-2178-Bug Bytes #91 - The shortest domain, Weird Facebook authentication bypass & GitHub Actions secrets:
-2179-Stored XSS on Zendesk ’s PART 2:
-2180-Azure Account Hijacking using mimikatz’s lsadump::setntlm:
-2181-CORS misconfiguration account takeover out of scope to grab items in scope:
-2182-Razzer: Finding Kernel Race Bugs through Fuzzing ﴾S&P 2019﴿:
-2183-Facebook Bug bounty : How I was able to enumerate
instagram accounts who had enabled 2FA:
-2184-Bypass hackerone 2FA:
-2185-How I abused 2FA to maintain persistence after password recovery change google microsoft instragram:
-2186-How I hacked 40k user accounts of microsoft using 2FA bypass outlook:
-2187-How to bypass 2FA with a HTTP header:
-2188-Building a custom Mimikatz binary:
-2189-Self XSS to Good XSS:
-2190-DOM based XSS or why you should not rely on cloudflare too much:
-2191-Reading internal files using SSRF :
-2192-Latest web hacking tools:
-2193-Cross-Site Scripting (XSS) Cheat Sheet - 2020 Edition:
-2194-Hijacking a Domain Controller with Netlogon RPC (aka Zerologon: C):
-2195-How I got 1200+ Open S3 buckets…!:
-2196-Open Sesame: Escalating Open Redirect to RCE with Electron 代码 Review:
-2197-When you browse Instagram and find former Australian Prime Minister Tony Abbott's passport number:
-2198-HTB{ Vault }:
-2199-HTB{ ellingson }:
-2200-HTB{ Swagshop }:
-2201-E Firewalls with Tunnels:
-2202-How to Geolocate Mobile Phones (or not):
-2203-Web application race conditions: It’s not just for binaries:
-2204-Two-Factor Authentication Bypass:
-2205-Proxies, Pivots, and Tunnels – Oh My! :
-2206-Let's Debug Together: C:
-2207-I Like to Move It: Windows Lateral Mo Part 3: DLL Hijacking:
-2208-Abusing Chrome's XSS auditor to steal tokens:
-2209-ModSecurity, Regular Expressions and Disputed C:
-2210-Bug Bounty Tips #8:
-2211-IOS Pentesing Guide From A N00bs Perspective:
-2212-Bug Bytes #92 - Pwning Apple for three months, XSS in VueJS, Hacking Salesforce Lightning & Unicode byͥtes:
-2213-We Hacked Apple for 3 Months: Here’s What We Found:
-2214-Breaking JCaptcha using Tensorflow and AOCR:
-2215-Bug Bytes #82 - Timeless timing attacks, Grafana SSRF, Pizza & Youtube delicacie:
-2216-Bug Bytes #71 – 20K Facebook XSS, LevelUp 0x06 &Naffy’s Notes:
-2217-Bug Bytes #90 - The impossible XSS, Burp Pro tips & A millionaire on bug bounty and meditation:
-2218-How to Find in Code: Bad Words:
-2219-Testing for WebSockets security :
-2220-Practical Web Cache Poisoning:
-2221-htb{ zipper }:
-2222-What is HTTP request smuggling? Tutorial & Examples:
-2223-When alert fails: exploiting transient events:
-2224-BugPoC LFI Challeng:
-2225-Misc CTF - Request Smuggling:
-2226-403 to RCE in XAMPP:
-2227-Phone numbers in, the open source way:
-2228-Covert Web Shells in .NET with Read-Only Web Paths:
-2229-From Static Analysis to RCE:
-2230-GitHub Pages - Multiple RCEs Kramdown configuration - $25,000 Bounty:
-2231-Signed Binary Proxy Execution :
-2232-Bug Bytes #93 - Discord RCE, HTML to PDF con & DOMPurify bypass demystified :
-2233-Bug Bytes #94 - Breaking Symfony apps, Why Cyber Security is so hard to learn & how best to approach it:
-2234-Ad Le For Web Application Penetration Testing:
-2235-Pass-the-hash wifi:
-2236-HTML to PDF con, can I hack them?:
-2237-Android adb reverse tethering mitm setup:
-2238-Typical Wi-Fi attacks:
-2239-Burp suite “ninja moves”:
-2240-Razzer: Finding Kernel Race Bugs through Fuzzing ﴾S&P 2019﴿:
Paper:
Code:
Slides:
-2241-MoonShine: Optimizing OS Fuzzer Seed Selection with Trace Distillation ﴾USENIX Security2018﴿:
Paper:
-2242-Sequence directed hybrid fuzzing ﴾SANER 2020﴿:
Paper:
-2243-Open 源码 Intelligence Tools And Resources Handbook 2020:
-2244-How to Find IP Addresses Owned by a Company:
-2245-What is Banner Grabbing? Best Tools and Techniques Explained:
-2246-Recon Methods Part 4 – Automated OSINT:
-2247-Forcing Firefox to Execute XSS Payloads during 302 Redirects:
-2248-HTB{ Frolic }:
-2249-Identifying in SSL/TLS and Attacking them:
-2250-My First Bug Bounty Reward:
-2251-2FA Bypass On Instagram Through A Endpoint:
-2252-Automating XSS using Dalfox, GF and Waybackurls:
-2253-Think Outside the Scope: Ad CORS Exploitation Techniques:
-2254-Intro to CTFs. Resources, advice and e else:
-2255-PowerShell Commands for Pentesters:
-2256-31k$ SSRF in Google Cloud Monitoring led to metadata exposure:
-2257-NAT Slipstreaming:
-2258-How i got 7000$ in Bug-Bounty for my Critical Finding:
-2259-SQL Injection Payload List:
-2260-Taking o user accounts:
-2261-Bug Bytes #98 - Imagemagick's comeback, Treasure trove of wordlists, Advent of Cyber & How to get more hours in your day:
-2262-How to get root on Ubuntu 20.04 by pretending nobody’s /home:
-2263-What is Shodan? Diving into the Google of IoT Devices:
-2264-Purgalicious VBA: Macro Obfuscation With & OfficePurge:
-2265-Dynamic In in .NET to bypass hooks:
-2266-NepHack Online CTF June 2020 Write-up:
-2268-Attacking SCADA Part II::
-2269-PENTESTING CHEATSHEET:
-2270-C – Exploiting “Bad Neighbor” :
-2271-TShark Cheatsheet:
-2272-Exploiting a “Simple” – In 35 Easy Steps or Less!:
-2273-Exploiting C - Part 1: Escaping the Chrome Sandbox:
-2274-Exploiting C - Part 2: Escalating to root:
-2275-Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (C):
-2276-Bug Bytes #99 – Bypassing bots and WAFs,JQ in Burp & Smarter JSON fuzzing and subdomain takeovers:
-2277-Digging secrets from git repositories by using truffleHog:
-2287-Apple Safari Pwn2Own 2018 Whitepaper:
-2288-DISSECTING APT21 SAMPLES USING A STEP-BY-STEP APPROACH:
-2289-MITRE ATT&CK T1082 System Information Discovery:
-2290-A simple and fast Wireshark tutorial:
-2291-Recon - My Way Or High Way:
-2292-Finding bugs at limited scope programs (Single Domain Websites):
-2293-Passi gathering techniques:
-2294-Android Pen-testing/Hunting 101:
-2295-All MITM attacks in one place:
-2296-From Recon to Optimizing RCE Results:
-2297-RCE on due to C:
-2298-Remote iPhone Exploitation Part 1: Poking Memory and C:
-2299-Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass:
-2300-Remote iPhone Exploitation Part 3: From Memory Corruption to Ja and Back -- Gaining 代码 Execution:
-2301-1000$ for Open redirect technique [BugBounty writeup]:
-2302-Facebook SSRF:
-2303-Metasploit Tips and Tricks for HaXmas 2020:
-2304-SubDomain TakeOver ~ Easy WIN WIN:
-2305-Recon Methodology :
-2306-h1-212 CTF Writeup:
-2307-exploiting-second-order-blind-sql-injection:
-2308-hunting-on-the-go-install-nethunter-on-unsupported-devices:
-2309-$10,000 for a that doesn’t exist:
-2310-Finding bugs on Chess.com:
-2311-Each and every request make sense:
-2312-Exploiting Max. Character Limitation:
-2313-API based IDOR to leaking Private IP address of 6000 businesses:
-2314-Facebook bug Bounty -Finding the hidden members of the Vivek ps private events:
-2315-IoT Assessment of the Irish IP Address Space:
-2316-Facebook bug bounty (500 USD) :A blocked fundraiser organizer would be unable to view or remo from the fundraiser
-2317-This is how I was able to view anyone’s private email and birthday on Instagram:
-2138-My Bug Bounty Journey and My First Critical Bug — Time Based Blind SQL Injection:
-2139-Ja analysis leading to Admin portal access:
-2140-SCADA hacker's toolset:
-2141-red team phishing:
-2142-Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies:
-2143-Stored XSS in icloud.com:
-2144-20 Common Tools & Techniques Used by macOS Threat Actors & Malware:
-2145-Error-Based SQL Injection on a WordPress website and extract more than 150k user details:
-2146-Scope Based Recon Methodology: Exploring Tactics for Smart Recon:
-2147-Hail Frida!! The Uni SSL pinning bypass for Android applications:
-2148-Common Tools & Techniques Used By Threat Actors and Malware — Part I :
-2149-Common Tools & Techniques Used By Threat Actors and Malware — Part II:
-2150-Tools designed to automate phishing attacks that are intended to bypass 2FA:
e:
Modlishka:
KoiPhish:
ReelPhish
CredSniper:
Muraena:
-2151-Digital Forensic Tools
-2152-Netcat Cheat Sheet:
-2153-Web App Hacking Methodology:
-2154-Penetration Testing MindMap:
-2155-Hacking Concept and Fundamentals:
-2156-Social Media Osint Tools:
项目信息
开发语言：未知
Star 数：13977
技术要点
该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕articles展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。
| 资源标题 | PENTESTING-BIBLE - 文章 |
| 所属分类 | 黑客技术 |
| 发布作者 | admin |
| 发布时间 | 2026-10-05 22:01:49 |
| 下载权限 | 免费下载 |
| 附件数量 | 2 个下载链接 |
| 浏览次数 | 316 |
| 讨论数量 | 0 |
| 主题状态 | 正常讨论中 |