-
-
-
-
GTFOBins
January 25, 2019 at 4:33:34 PM UTC - permalink -GTFOBins is a curated list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.
- https://gtfobins.github.io/
-
-
MEGA : Pentest Academy - Courses
January 22, 2019 at 3:48:04 PM UTC - permalink -Big repo for Pentest Academy courses.
- https://mega.nz/#F!bCgTkYhA!haaINPhu_CPjkcl1ZBBOSw
-
Building A Red Team WiFi Attack Car
January 21, 2019 at 1:36:24 PM UTC - permalink -Component reference
Wifi cardsAC1200
AWUS1900, 50€ https://www.amazon.de/Network-AWUS1900-802-11ac-Ultra-adapter/dp/B01MZD7Z76/ref=sr_1_1?s=computers&ie=UTF8&qid=1547331669&sr=1-1&keywords=AWUS+1900 or the https://www.amazon.de/Alfa-AWUS036ACH-Dual-Adapter-AC1200/dp/B00VEEBOPG/ref=sr_1_1?s=computers&ie=UTF8&qid=1547331743&sr=1-1&keywords=alfa+ac1200
Raspberry PI 3B+- https://www.secjuice.com/red-team-wifi-attack-wardrive-car/
-
Using Burp to Test Session Token Generation | Burp Suite Support Center
January 15, 2019 at 3:13:10 PM UTC - permalink -Burp Decoder : Send the token to the Decoder and try to decode the string
Burp Sequencer : Send request to sequencer and "Start Live Capture"
"Burp Sequencer will repeatedly issue the request and extract the relevant token from the application's responses."Burp Intruder : Send request to Intruder, and select either "Character frobber" or "Bit flipper" payload type and then start attack.
The "Character frobber" payload type operates on a string input and modifies the value of each character position in turn.- https://support.portswigger.net/customer/portal/articles/1964169-using-burp-to-test-session-token-generation
-
-
-
-
http://blog.sevagas.com/IMG/pdf/exploiting_capabilities_the_dark_side.pdf
December 28, 2018 at 12:56:28 PM UTC - permalink -e: Effective
This means the capability is “activated”.p: Permitted
This means the capability can be used/is allowed.i: Inherited
The capability is kept by child/subprocesses upon execve() for example.- http://blog.sevagas.com/IMG/pdf/exploiting_capabilities_the_dark_side.pdf
-
-
-
-
44592-linux-restricted-shell-bypass-guide.pdf
December 19, 2018 at 1:18:32 PM UTC - permalink -tar cf /dev/null testfile --checkpoint=1 --checkpoint-action=exec=/bin/bash
- https://www.exploit-db.com/docs/english/44592-linux-restricted-shell-bypass-guide.pdf
-
NVISO ApkScan - Scan Android applications for malware
December 18, 2018 at 4:36:54 PM UTC * - permalink -www.decompileandroid.com
www.virustotal.com
https://github.com/pjlantz/droidbox- https://apkscan.nviso.be/
-
-
How to Bypassing Filter to Traversal Attacks ? | Hacking & Tricks
December 12, 2018 at 11:12:14 PM UTC - permalink -dot %2e
forward slash %2f
backslash %5cdot %u002e
forward slash %u2215
backslash %u2216....//
....\/
..../\
....\- https://tipstrickshack.blogspot.com/2013/02/how-to-bypassing-filter-to-traversal_8831.html
-