RT @Moaaz_0x: Microsoft Exchange password spray tool with proxy support. https://t.co/eU2KhAMPYI #infosec #CyberSecurity #github #informationsecurity #Python https://t.co/O9sJZzOqAJ
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 25, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 25, 2022
GitHub
GitHub - iomoath/PyExchangePasswordSpray: Microsoft Exchange password spray tool with proxy support.
Microsoft Exchange password spray tool with proxy support. - GitHub - iomoath/PyExchangePasswordSpray: Microsoft Exchange password spray tool with proxy support.
RT @ptracesecurity: Detect strange memory regions and DLLs https://t.co/xEfiidtUUB #Pentesting #CyberSecurity #Infosec https://t.co/Ql812qWUZb
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 26, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 26, 2022
GitHub
GitHub - waldo-irc/MalMemDetect: Detect strange memory regions and DLLs
Detect strange memory regions and DLLs. Contribute to waldo-irc/MalMemDetect development by creating an account on GitHub.
RT @SkyNetTools: (AutoPWN Suite - Automatically Scan For Vulnerabilities & Exploit Systems) - https://t.co/mj9zoQghRw #infosec #netsec #pentest #cybersecurity #bugbounty https://t.co/bP7OEUZAvg
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 1, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 1, 2022
RT @Pethuraj: OWASP Zed Attack Proxy Scripts for finding CVEs and Secrets🔥 » https://t.co/n0yw1rSaKV To use this, add this directory to the scripts directory in ZAP (under Options -> Scripts). #cybersecurity #bugbountytips #bugbounty #infosec #owasp https://t.co/QAvuClc2XI
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 5, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Jun 5, 2022
GitHub
GitHub - sepehrdaddev/zap-scripts: Zed Attack Proxy Scripts for finding CVEs and Secrets.
Zed Attack Proxy Scripts for finding CVEs and Secrets. - GitHub - sepehrdaddev/zap-scripts: Zed Attack Proxy Scripts for finding CVEs and Secrets.
RT @Hakin9: PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. https://t.co/1AGcsmc1Eq #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #DFIR #ransomware #powershell #cyberattack https://t.co/iTwI7y2BUT
— DragonJAR - Seguridad Informática (@DragonJAR) Jul 22, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Jul 22, 2022
Hakin9 - IT Security Magazine
PSRansom PowerShell Ransomware Simulator with C2 Server
PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate the encryption process of generic...
RT @sec_r0: ❤️ JWT token !! ❤️ And two very simple and basic attacks with them. Go give it a read. Share if you like 🖖 Download : https://t.co/3n6tHsbT2P #infosec #appsec #cybersecuritytips #cybersecurity #bugbountytips #security https://t.co/HMgUzk8ko5
— DragonJAR - Seguridad Informática (@DragonJAR) Jul 28, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Jul 28, 2022
Securityzines
Do you know JWT ?
JWT token is widely used token for access and resource sharing. In this flyer learn about what a token is, its structure and working. In the last section we discuss two very common attacks with JWT.
RT @macru35: Excelente ponencia de Ricardo Monreal @joy_dragon en el #DragonJARCON https://t.co/hNt66JfzkZ @DragonJARCon @DragonJAR #Phishing #cybersecurity #Ciberseguridad #CyberAttack https://t.co/kKsg6e7AfB
— DragonJAR - Seguridad Informática (@DragonJAR) Sep 8, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Sep 8, 2022
RT @Infosecpat: Villain - Undetectable Backdoor Generator for Windows and Linux. Villain has a built-in auto-obfuscate payload function to assist in bypassing AV. Payloads are currently undetected - Repo: https://t.co/UMu9wpTnB5… - Creator: @t3l3machus #hacking #cybersecurity #microsoft https://t.co/U0sF0rsvJS
— DragonJAR - Seguridad Informática (@DragonJAR) Nov 28, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Nov 28, 2022
Busca y explota un XSS con #ChatGPT https://t.co/c9OyTYuJeW
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 4, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 4, 2022
X (formerly Twitter)
payloadartist (@payloadartist) on X
I gave ChatGPT a code snippet
And asked how I could exploit a vulnerability in it
Tbh I'm blown away by the potential of this tool for #cybersecurity use cases🤯
#bugbounty #hacking #infosec #gptchat
And asked how I could exploit a vulnerability in it
Tbh I'm blown away by the potential of this tool for #cybersecurity use cases🤯
#bugbounty #hacking #infosec #gptchat
Ya encontraron una ejecución remota de codigo como root en #ChatGPT https://t.co/dypDkFyJSX
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 5, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 5, 2022
Twitter
Just reported RCE with ROOT access in ChatGPT and AI Playground by OpenAI. Who said is AI gonna take over Humans? 🤣
There is 90 Day Disclosure. I'll write an article about it then.
#cybersecurity #safecottage #AI #rce #report #vapt https://t.co/RK105H2Nx8
There is 90 Day Disclosure. I'll write an article about it then.
#cybersecurity #safecottage #AI #rce #report #vapt https://t.co/RK105H2Nx8
RT @0xor0ne: Windows kernel drivers for red team tools development Intro series by @Idov31 Part 1: https://t.co/gLIk9tGiEI Part 2: https://t.co/ryrPfTLJrR Part 3: https://t.co/l6C4j7TMte #windows #kernel #redteam #malware #infosec #cybersecurity https://t.co/PxyiuNNP6C
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 27, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 27, 2022
RT @0xor0ne: Unpatched TP-Link WR940N V6, vulnerability analysis and exploitation by @b1ack0wl https://t.co/plA9jEfafJ #iot #embedded #infosec #cybersecurity https://t.co/H9gP4DCEFm
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 31, 2022
— DragonJAR - Seguridad Informática (@DragonJAR) Dec 31, 2022
GitHub
vulnerability-write-ups/TP-Link/WR940N/112022/Part1.md at master · b1ack0wl/vulnerability-write-ups
This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed. - b1ack0wl/vulnerability-write-ups
RT @0xor0ne: Couple years old but still a very cool research by @theflow0 on zero click RCE in Linux bluetooth stack https://t.co/yVQvSi6hzT #bluetooth #exploit #cve #infosec #cybersecurity https://t.co/qgYhFdirKe
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 3, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 3, 2023
security-research
BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
RT @ptracesecurity: PXEThief - Set Of Tooling That Can Extract Passwords From The Operating System Deployment Functionality In Microsoft Endpoint Configuration Manager https://t.co/bMQs06j4JX #Pentesting #PXEThief #Python #Windows #CyberSecurity #Infosec https://t.co/48khJua4c6
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 9, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 9, 2023
KitPloit - PenTest & Hacking Tools
PXEThief - Set Of Tooling That Can Extract Passwords From The Operating System Deployment Functionality In Microsoft Endpoint Configuration…
RT @0xor0ne: Linux kernel exploitation intro series by Keith Makan Debugging: https://t.co/MFkoXhjCXP Stack overflow: https://t.co/JyCPAttO1V Privilege escalation: https://t.co/mIdgQs4F0f #Linux #kernel #exploit #infosec #cybersecurity https://t.co/M1FsxIMHjM
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 14, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Jan 14, 2023
K3170Makan
[Linux Kernel Exploitation 0x0] Debugging the Kernel with QEMU
Hacking,Information Security,Penetration Testing,Google Hacking,Google Dorking,Keith Makan,Black Hat,Security Research,InfoSec,Web Site Security
RT @hack_git: CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. https://t.co/0beKMen1Fl Details: https://t.co/VdTW9uViLk #infosec #CyberSecurity #Pentesting #redteam https://t.co/bT4RCzZpDZ
— DragonJAR - Seguridad Informática (@DragonJAR) Mar 17, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Mar 17, 2023
GitHub
GitHub - sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY: Exploit for the CVE-2023-23397
Exploit for the CVE-2023-23397. Contribute to sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY development by creating an account on GitHub.
RT @hack_git: reverse-proxy A toolkit for developing high-performance HTTP reverse proxy applications. https://t.co/OL6vbv7d1t #cybersecurity #infosec https://t.co/vS8oARLybp https://t.co/ffbrKKTDys
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 9, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 9, 2023
GitHub
GitHub - microsoft/reverse-proxy: A toolkit for developing high-performance HTTP reverse proxy applications.
A toolkit for developing high-performance HTTP reverse proxy applications. - microsoft/reverse-proxy
RT @hack_git: ⚡Ciphey Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡ https://t.co/YN01Std6Gf #cybersecurity #infosec #infosecurity https://t.co/GiOqk9FhDs
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 18, 2023
— DragonJAR - Seguridad Informática (@DragonJAR) Apr 18, 2023
GitHub
GitHub - Ciphey/Ciphey: ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes…
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡ - Ciphey/Ciphey
RT @BurpBounty: 🔥🚀 "Heads up, everyone! ! We have not released any special profiles to detect the CVE-2023-29489 (#XSS in #cPanel) vulnerability, because we already detected it with our current XSS profiles 💯.🔒🌐 #Cybersecurity #InfoSec" 🚀🔥
https://t.co/DXxo2SJU8z
https://t.co/IE9a9j2l5T https://t.co/vZ9cEXbyhJ
— DragonJAR - Seguridad Informática (@DragonJAR)
Apr 28, 2023
https://t.co/DXxo2SJU8z
https://t.co/IE9a9j2l5T https://t.co/vZ9cEXbyhJ
— DragonJAR - Seguridad Informática (@DragonJAR)
Apr 28, 2023
RT @FilipiPires: ShadowSpray - A Tool To Spray Shadow Credentials Across An Entire Domain In Hopes Of Abusing Long Forgotten GenericWrite/GenericAll DACLs Over Other Objects In The Domain https://t.co/1VuDhUSj3E #security #opensource #cybersecurity #malware #cyber #pentesting #malwareanalysis #…
— DragonJAR - Seguridad Informática (@DragonJAR)
May 16, 2023
— DragonJAR - Seguridad Informática (@DragonJAR)
May 16, 2023
KitPloit - PenTest & Hacking Tools
ShadowSpray - A Tool To Spray Shadow Credentials Across An Entire Domain In Hopes Of Abusing Long Forgotten GenericWrite/GenericAll…