#windows #pentest #pr1v8 #dll #injection #kopimi
Executáveis amigáveis para receber ataques Process Hollowing e DLL Injection no Windows
https://medium.com/@viniciuskmax/execut%C3%A1veis-amig%C3%A1veis-para-receber-ataques-process-hollowing-e-dll-injection-no-windows-ce29c14479f6
🌐 @PR1V8
Executáveis amigáveis para receber ataques Process Hollowing e DLL Injection no Windows
https://medium.com/@viniciuskmax/execut%C3%A1veis-amig%C3%A1veis-para-receber-ataques-process-hollowing-e-dll-injection-no-windows-ce29c14479f6
🌐 @PR1V8
Medium
Executáveis amigáveis para receber ataques Process Hollowing e DLL Injection no Windows
Compartilhando duas dicas que tem me ajudado na fase de pós exploração em pentests.
#fuzzing #pr1v8 #toolist #kopimi
CertFuzz — The CERT Basic Fuzzing Framework (BFF) is a software testing tool that finds defects in applications that run on Linux, Mac OS X and Windows
https://github.com/CERTCC/certfuzz
🌐 @PR1V8
CertFuzz — The CERT Basic Fuzzing Framework (BFF) is a software testing tool that finds defects in applications that run on Linux, Mac OS X and Windows
https://github.com/CERTCC/certfuzz
🌐 @PR1V8
GitHub
GitHub - CERTCC/certfuzz: This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure…
This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE). - CERTCC/certfuzz
#iot #kopimi #leak #hacked #pr1v8
O aquário que quebrou um cassino
O vazamento de dados que partiu de um termostato de um aquário inteligente
https://www.kaspersky.com.br/blog/leaking-fish-tank/10280/
🌐 @PR1V8
O aquário que quebrou um cassino
O vazamento de dados que partiu de um termostato de um aquário inteligente
https://www.kaspersky.com.br/blog/leaking-fish-tank/10280/
🌐 @PR1V8
www.kaspersky.com.br
O aquário que quebrou um cassino
O vazamento de dados que partiu do termostato de um aquário inteligente.
#js #pr1v8 #programacao #learn #web #kopimi
JavaScript The Right Way
Esse é um guia com a intenção de apresentar novos desenvolvedores ao JavaScript e ajudar desenvolvedores experientes a aprenderem mais sobre as melhores práticas.
http://jstherightway.org/pt-br/
🌐 @PR1V8
JavaScript The Right Way
Esse é um guia com a intenção de apresentar novos desenvolvedores ao JavaScript e ajudar desenvolvedores experientes a aprenderem mais sobre as melhores práticas.
http://jstherightway.org/pt-br/
🌐 @PR1V8
#flash #pr1v8 #flaw #exploit #kopimi #swf
Find vulnerabilities in Flash SWF
http://10degres.net/testing-flash-swf/
🌐 @PR1V8
Find vulnerabilities in Flash SWF
http://10degres.net/testing-flash-swf/
🌐 @PR1V8
Gwendal Le Coguic
Find vulnerabilities in Flash SWF
As a user I would say that I don’t care about all these Flash stuff that try to catch my eyes, most of the time I have a plugin to disable them.
As a developper, it reminds me the (not so good) old time when the marketing peoples always wanted to add “movement”…
As a developper, it reminds me the (not so good) old time when the marketing peoples always wanted to add “movement”…
#cdn #npm #pr1v8 #web #hacking #kopimi
Compromising Thousands of Websites Through a CDN
https://justi.cz/security/2018/05/23/cdn-tar-oops.html
🌐 @PR1V8
Compromising Thousands of Websites Through a CDN
https://justi.cz/security/2018/05/23/cdn-tar-oops.html
🌐 @PR1V8
justi.cz
Compromising Thousands of Websites Through a CDN
tl;dr unpkg.com is a pretty popular CDN for serving up assets from npm packages. I found a vulnerability in a tar implementation that allowed me to write arb...
#poc #cve #pr1v8 #awesomelist #kopimi
awesome-cve-poc - A curated list of CVE PoCs
https://github.com/qazbnm456/awesome-cve-poc
créditos: @odanobunagaa
🌐 @PR1V8
awesome-cve-poc - A curated list of CVE PoCs
https://github.com/qazbnm456/awesome-cve-poc
créditos: @odanobunagaa
🌐 @PR1V8
GitHub
GitHub - qazbnm456/awesome-cve-poc: ✍️ A curated list of CVE PoCs.
✍️ A curated list of CVE PoCs. Contribute to qazbnm456/awesome-cve-poc development by creating an account on GitHub.
#russia #fbi #pr1v8 #router #infected #botnet #kopimi #malware
FBI tells router users to reboot now to kill malware infecting 500k devices
Feds take aim at potent VPNFilter malware allegedly unleashed by Russia.
https://arstechnica.com/information-technology/2018/05/fbi-tells-router-users-to-reboot-now-to-kill-malware-infecting-500k-devices/
🌐 @PR1V8
FBI tells router users to reboot now to kill malware infecting 500k devices
Feds take aim at potent VPNFilter malware allegedly unleashed by Russia.
https://arstechnica.com/information-technology/2018/05/fbi-tells-router-users-to-reboot-now-to-kill-malware-infecting-500k-devices/
🌐 @PR1V8
Ars Technica
FBI tells router users to reboot now to kill malware infecting 500k devices
Feds take aim at potent VPNFilter malware allegedly unleashed by Russia.
#tor #pr1v8 #instance #toolist #kopimi
Multitor — a tool that lets you create multiple TOR instances with a load-balancing
https://github.com/trimstray/multitor
🌐 @PR1V8
Multitor — a tool that lets you create multiple TOR instances with a load-balancing
https://github.com/trimstray/multitor
🌐 @PR1V8
GitHub
GitHub - trimstray/multitor: Create multiple TOR instances with a load-balancing.
Create multiple TOR instances with a load-balancing. - trimstray/multitor
#despacito #hacked #pr1v8 #youtube #video #kid #kopimi
French Teens Arrested for Hacking Vevo, Defacing Despacito Music Video
https://gizmodo.com/french-teens-arrested-for-hacking-vevo-defacing-despac-1826348217/amp
🌐 @PR1V8
French Teens Arrested for Hacking Vevo, Defacing Despacito Music Video
https://gizmodo.com/french-teens-arrested-for-hacking-vevo-defacing-despac-1826348217/amp
🌐 @PR1V8
Gizmodo
French Teens Arrested for Hacking Vevo, Defacing Despacito Music Video
Last month, a handful of extremely popular music videos on YouTube were defaced. Now two 18-year-old French citizens are in police custody and have been charged with crimes related to the hack of Vevo YouTube accounts.
#shellcode #crypter #pr1v8 #av #kopimi
SLAE32 Assignment #7 – Custom Crypter
If we want to avoid AV and IDS systems, we have to transform the shellcode somehow into a non-recognizable format. AV and IDS uses pattern recognition methods to find well-known shellcodes. One way to avoid detection is encoding the shellcode.
https://xor4u.net/custom-crypter-linux-x86/
🌐 @PR1V8
SLAE32 Assignment #7 – Custom Crypter
If we want to avoid AV and IDS systems, we have to transform the shellcode somehow into a non-recognizable format. AV and IDS uses pattern recognition methods to find well-known shellcodes. One way to avoid detection is encoding the shellcode.
https://xor4u.net/custom-crypter-linux-x86/
🌐 @PR1V8
#urna #eleicao #pr1v8 #brasil #bypass #kopimi
Este pesquisador garante que as urnas eletrônicas são hackeáveis
Em teste promovido pelo TSE no ano passado, Diego Aranha mudou mensagem na tela da urna, alterou registros de votação e encontrou uma maneira de quebrar o sigilo do voto. Agora ele afirma que é possível fraudar eleições.
https://www.vice.com/amp/pt_br/article/vbqvkx/urnas-eletronicas-sao-ou-nao-sao-seguras
🌐 @PR1V8
Este pesquisador garante que as urnas eletrônicas são hackeáveis
Em teste promovido pelo TSE no ano passado, Diego Aranha mudou mensagem na tela da urna, alterou registros de votação e encontrou uma maneira de quebrar o sigilo do voto. Agora ele afirma que é possível fraudar eleições.
https://www.vice.com/amp/pt_br/article/vbqvkx/urnas-eletronicas-sao-ou-nao-sao-seguras
🌐 @PR1V8
#osint #toolist #track #pr1v8 #kopimi
trape — people tracker on the Internet: Learn to track the world, to avoid being traced.
https://github.com/boxug/trape
🌐 @PR1V8
trape — people tracker on the Internet: Learn to track the world, to avoid being traced.
https://github.com/boxug/trape
🌐 @PR1V8
GitHub
GitHub - jofpin/trape: People tracker on the Internet: OSINT analysis and research tool by Jose Pino
People tracker on the Internet: OSINT analysis and research tool by Jose Pino - jofpin/trape
#criptografia #livros #recomendacoes #pr1v8 #learn #ptbr #en #kopimi
Livros para aprender criptografia - Livros indicados pelo canal Criptologia para quem quer aprender criptografia
dl: https://yadi.sk/d/6mg447DA3Wg9PW
🌐 @PR1V8
Livros para aprender criptografia - Livros indicados pelo canal Criptologia para quem quer aprender criptografia
dl: https://yadi.sk/d/6mg447DA3Wg9PW
🌐 @PR1V8
Yandex Disk
Criptologia-recomendacoes
View and download from Yandex Disk
Forwarded from .: PR1V8 :.
#redteam #pr1v8 #hacking #rce #mssql #kopimi
Red Team Tales 0x01: From MSSQL to RCE
https://www.tarlogic.com/en/blog/red-team-tales-0x01/amp/
🌐 @PR1V8
Red Team Tales 0x01: From MSSQL to RCE
https://www.tarlogic.com/en/blog/red-team-tales-0x01/amp/
🌐 @PR1V8
Tarlogic Security
Red Team Tales 0x01: From MSSQL SQL Injection to RCE
Remote execution of commands from an SQL injection in an MSSQL environment. Use of certutil as an exfiltration tool in Red Team exercises.