Initiative to showcase open source hacking tools for hackers and pentesters. Follow @bnchandrapal for personal tweets.
Internet
Joined February 2016
- Tweets4.3K
- Following102
- Followers18.6K
- Likes103
Hack with GitHub retweeted
🔍We scanned millions of @Docker Containers and studied the security posture of Publicly Exposed instances. This "Hunt" revealed thousands of secrets leaking out and many more interesting results.
redhuntlabs.com/blog/scannin…
#attacksurface #cyber #security #bugbounty
Please RT.
Hack with GitHub retweeted
👀 shadow credentials with ntlmrelayx. You don’t even need AD CS web enrollment now. The attacks just keep coming. github.com/SecureAuthCorp/im…
Hack with GitHub retweeted
Finished my talk at MOSEC'21. I spent much time on the slides (github.com/wangtielei/Slides…). Although the bug was discussed in my Zer0Con'21 talk, I added more attack attempts in the new talk, and put more background information regarding Mach ports. Hope you like it.
Hack with GitHub retweeted
10 Vulnerable Android Applications for beginners to learn Android hacking.
🧵👇
Hack with GitHub retweeted
Better with link... github.com/rapid7/metasploit…
Hack with GitHub retweeted
UAF exploit in WebKit's JavaScriptCore library (CVE-2016-4657) landed in @metasploit !! First #iOS exploit in #metasploit since 2012 and one of the vuln used by the #Pegasus spyware. Awesome project by @timwr backed up by @qwertyoruiopz @s1guza @thimstar works #PhoenixNonce
Hack with GitHub retweeted
We open sourced the challenges for this year's Google CTF! 🥳github.com/google/google-ctf…
I wrote Full Chain, a challenge where players had to chain a V8 bug, a Chrome sandbox escape, and a Linux LPE to get root in a VM. Looking forward to the writeups! 👀
Hack with GitHub retweeted
Just released wtf which is a distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and kernel-mode targets running on Microsoft Windows.
It found bugs in IDA, a triple-A game, the Windows kernel, etc. 🔥🔥
github.com/0vercl0k/wtf
Hack with GitHub retweeted
RET2pwn releasing a PickleC2 framework written in python3 used to help the community in Penetration Testing and red teaming engagements.
Blog Post: xret2pwn.github.io/PickleC2/
PickleC2 Documentation: picklec2.readthedocs.io/
#C2 #redteam #infosec
Hack with GitHub retweeted
Don't Be Rude, Stay: Avoiding Fork&Run .NET Execution With InlineExecute-Assembly BOF:
No tool modification needed for most of your favorite tools, disable AMSI, disable/revert ETW, and more...
Blog: securityintelligence.com/pos…
Tool: github.com/xforcered/InlineE…
Hack with GitHub retweeted
Introducing the extended BApp store - apps.burpsuite.guide/
It's the right place for all your #BurpSuite #extension needs!
You can search through multiple extensions to find the one for your exact use-case - #XSS, file upload #vulnerabilities, WordPress, you name it.
Hack with GitHub retweeted
Happy Friday 🦊. Subscribe to "What's happening in the Burp-verse" newsletter!
#BurpSuite
newsletter.burpsuite.guide/
Hack with GitHub retweeted
Aaaaand, just for fun, you can use objection to boot mettle (the iOS payload) via a plugin to play around :) github.com/sensepost/objecti…
Did you know #metasploit contains a few #iOS modules?
E.g: a UAF in WebKit (used by the #Pegasus spyware) or a type confusion in WebKit (found by P0).
Post modules let you get the stored messages/photos 😎 or access to the camera 😈
#mobilesecurity #iOS #tips
1/2
Hack with GitHub retweeted
What's happening in the Burp-verse - Issue #6
newsletter.burpsuite.guide/a…
Hack with GitHub retweeted
The new OWASP MASVS v1.3 is out with a new control, a brand new document build pipeline and 4 new translations:
- Brazilian Portuguese
- Hindi
- Persian (Farsi)
- Portugal Portuguese
Big thanks to all contributors who helped to make this happen!
github.com/OWASP/owasp-masvs…
Hack with GitHub retweeted
Lazy to write payloads in @Burp_Suite? HopLa adds autocompletion support and a custom payload library! 🤠 github.com/synacktiv/HopLa
cc @alexisdanizan
Hack with GitHub retweeted
Did you check out "A lot has happened in the Burp-verse - Issue #5"?
It covers:
✅ New intruder updates
✅ Excellent blog posts on Burp (and one blog post by Julien Voisin on how to break Burp 😱 😱 )
✅ Free #BurpBounty profiles GitHub repo newsletter.burpsuite.guide/i…
Hack with GitHub retweeted
What's happening in the Burp-verse - Issue #4
It covers the following on #BurpSuite:
☑️ Latest feature updates
☑️ New extensions
☑️ Exciting resources
newsletter.burpsuite.guide/a…
Hack with GitHub retweeted
Dnschef is super handy, y’all should give it a shot if you haven’t.
Kudos to @iphelix & @byt3bl33d3r for this slick rogue DNS server I used recently called dnschef:
github.com/iphelix/dnschef
It was literally this easy to do what I needed:
sudo python3 dnschef[.]py --fake-ip=<ip-to-answer-for-all-dns-requests> --interface=<ip-of-eth0>
Hack with GitHub retweeted
Here is POC for CVE-2021-1699.
github.com/waleedassar/CVE-2…