​​AIMOD2

Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proactively identify, engage and prevent cyber threats denying or mitigating potential damage to the organization.

https://github.com/darkquasar/AIMOD2

#cybersecurity #infosec

Hello,

There is a web application security course from TCM security running in discount.

Course Name: Practical Web Application Security & Testing
Provider: TCM Security
Course Link: https://academy.tcm-sec.com/p/practical-web-application-security-and-testing
Orginal Price: $29.99
Coupon Code: HAPPYBIRTHDAYTAGGART
Discount Price: $1.18 (Inc. TAX)

​​Advanced SQL Injection Cheatsheet

This repository contains a advanced methodology of all types of SQL Injection.

• Find injection point
• Understand the website behaviour
• Send queries for enumeration
• Understanding WAF & bypass it
• Dump the database

https://github.com/kleiton0x00/Advanced-SQL-Injection-Cheatsheet

#infosec #pentesting #bugbounty

Bug Bounty Beginner's Roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

https://github.com/bittentech/Bug-Bounty-Beginner-Roadmap

#bugbounty #pentesting #infosec

​​wpfinger

WordPress scanning tool.

• Core version detection
• Plugin scanning through fingerprinting
• Vulnerability output, using database from Wordfence

https://github.com/LeakIX/wpfinger

#pentesting #redteam #bugbounty

Malware is a type of software that is designed to cause harm to a computer or its users. It can be used to steal personal information, damage files, or even take control of a computer.

Read Full Article

https://trickypenguin.ink/what-is-malware-and-how-to-protect-against-malware-attacks/

@trickypenguin

#malware #botnets #torjan

​​BLACKHAT_Asia2023

Just About BLACKHAT USA2022 PDF Public. File List, Search what your intersting.

https://github.com/Mr-xn/BLACKHAT_Asia2023

#infosec #pentesting #redteam

​​RedCaddy

C2 redirector base on caddy.

• Block IP by GEOIP country
• Allow requests by header matcher
• User-agent & IP blacklist
• Support multiple redirection
• TeamServer port warden

https://github.com/XiaoliChan/RedCaddy

#infosec #pentesting #redteam

Best Online MD5 Encryption & Decryption Tools


https://trickypenguin.ink/best-online-md5-encryption-decryption-tools/

@trickypenguin

#pentesting #cryptography

Multiple Vulnerabilities in Kiddoware Kids Place Parental Control Android App (CVE-2023-28153, CVE-2023-29078, CVE-2023-29079)
1) Login and registration returns password as MD5 hash
2) Stored XSS via device name in parent Dashboard
3) Possible CSRF attacks in parent Dashboard
4) Arbitrary File Upload to AWS S3 bucket
5) Disable Child App Restriction without Parent's notice
https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-kiddoware-kids-place-parental-control-android-app/

829 GB of books and videos in MEGA ✅

Course Books (28 GB)
Course Videos (790 GB)
Softwares (11 GB)

https://mega.nz/folder/1rBHzIyD#M-aTi-c1nC3OGNgpH8OqhA

Google introduced Mobile VRP: Mobile Vulnerability Rewards Program (Mobile VRP) focuses on first-party Android applications developed or maintained by Google
https://bughunters.google.com/about/rules/6618732618186752/google-mobile-vulnerability-reward-program-rules