How I made $31500 by submitting a bug to Facebook
Hello World â¤ï¸, Facebook is the largest social networking site in the world and one of the most widely used. I have always been interested in testing the security of Facebook. During the sub domain enumeration, I’ve got a sub domain which is “https://m-nexus.thefacebook.com/". It redirects me to “https://m-nexus.thefacebook.com/servlet/mstrWebAdmin" observe below screenshot: I quickly Google keywo
GitHub - tomnomnom/waybackurls: Fetch all the URLs that the Wayback Machine knows about for a domain
GitHub - GerbenJavado/LinkFinder: A python script that finds endpoints in JavaScript files
LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing new vulnerabilities. It does so by using jsbeautifier for python in combination with a fairly large regular expression. Th
网络空间测绘，网络空间安全æœç´¢å¼•æ“Žï¼Œç½‘络空间æœç´¢å¼•æ“Žï¼Œå®‰å…¨æ€åŠ¿æ„ŸçŸ¥ - FOFA网络空间测绘系统
FOFA 是白帽汇推出的一款网络空间æœç´¢å¼•æ“Žï¼Œå®ƒé€šè¿‡è¿›è¡Œç½‘ç»œç©ºé—´æµ‹ç»˜ï¼Œèƒ½å¤Ÿå¸®åŠ©ç ”ç©¶äººå‘˜æˆ–è€…ä¼ä¸šè¿…速进行网络资产匹é…，例如进行æ¼æ´žå½±å“范围分æžã€åº”用分布统计ã€åº”用æµè¡Œåº¦æŽ’å统计ç‰ã€‚
IP-API.com - Geolocation API
IP Geolocation API Fast, accurate, reliableFree for non-commercial use, no API key required Easy to integrate, available in JSON, XML, CSV, Newline, PHP Serving more than 1 billion requests per day, trusted by thousands of businesses API Documentation { "query": query, "status": status, "continent": continent, "continentCode": continentCode, "country": country, "countryCode": countryCode, "region"
redsocks - transparent socks redirector
This tool allows you to redirect any TCP connection to SOCKS or HTTPS proxy using your firewall, so redirection is system-wide. Why is that useful? I can suggest following reasons: you use tor and don't want any TCP connection to leak you use DVB ISP and this ISP provides internet connectivity with some special daemon that may be also called "Internet accelerator" and this accelerator acts as prox
tsocks - Transparent SOCKS Proxying Library
Welcome to the homepage of the tsocks, a transparent SOCKS proxying library. This project is hosted by sourceforge. The sourceforge project page is here Latest News 1.8 beta 5 is out! - 2002-10-23 21:02 Version 1.8 beta 5 of tsocks has been released. This release is a minor upgrade that contains a number of bugfixes and enhancements. This release now intercepts calls to close() and should be much
プライベートãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å†…ã«é™å®šã•ã‚ŒãŸãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚µãƒ¼ãƒ“スã«å¤–部ã‹ã‚‰æŽ¥ç¶šã™ã‚‹ã‚„㤠- Qiita
(å†æ§‹ç¯‰ä¸ã® MBA 㧠tsocks ã® autoreconf ãŒã“ã‘ã¦è©°ã¾ã£ã¦ã„ã‚‹ã®ã§ã€æš‡ã¤ã¶ã—ãŒã¦ã‚‰æ€ã„出メモをã²ã¨ã¤) 一番最åˆã«ä½¿ã£ãŸã®ã¯ã€SSH ã®ãƒãƒ¼ãƒˆãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‰ã‚’使ã†ã‚„ã¤ã€‚サービスã”ã¨ã«ã‚³ãƒžãƒ³ãƒ‰ã‚’実行ã™ã‚‹å¿…è¦ãŒã‚ã‚Šé¢å€’ã ã£ãŸæ€ã„出ãŒã‚る。
dsocks
SOCKS client wrapper for *BSD / MacOS X. (only enough of SOCKS4, SOCKS5 supported to use the built-in OpenSSH or Tor local SOCKS proxy) sample usage: copy a file remotely thru a home SSH gateway, using an internal DNS name > ssh -D 1080 home_gw > dsocks.sh scp /etc/motd internal_host:/tmp web surf anonymously thru Tor using Firefox (configured to use the Tor SOCKS proxy), with no DNS leaks (using
Is BGP safe yet? · Cloudflare
Border Gateway Protocol (BGP) is the postal service of the Internet. It’s responsible for looking at all of the available paths that data could travel and picking the best route. Unfortunately, it isn’t secure, and there have been some major Internet disruptions as a result. But fortunately there is a way to make it secure. ISPs and other major Internet players (Sprint and others) would need to im
Security assessment techniques for Go projects
The Trail of Bits Assurance practice has received an influx of Go projects, following the success of our Kubernetes assessment this summer. As a result, we’ve been adapting for Go projects some of the security assessment techniques and tactics we’ve used with other compiled languages. We started by understanding the design of the language, identifying areas where developers may not fully understan
GitHub - rofl0r/proxychains-ng: proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf
ProxyChains-NG ver 4.17 README ============================= ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL (dlsym(), LD_PRELOAD) and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only (no UDP/ICMP etc). The way it works is basically a HACK; so it is possible that it doesn't work with your p
開発ãƒãƒ¼ãƒ ã®ç”Ÿç”£æ€§ãƒ»å¥å…¨æ€§ã‚’客観的ã«çŸ¥ã‚‹ãŸã‚ã«ãƒªãƒã‚¸ãƒˆãƒªå±¥æ´ã‹ã‚‰æ©Ÿæ¢°çš„ã«å¯è¦–化ã™ã‚‹ãƒ„ールを作ã£ãŸ - Qiita
ã¯ã˜ã‚㫠ソフトウェア開発ã®ãƒãƒ¼ãƒ ã®ç”Ÿç”£æ€§ã‚„å¥å…¨æ€§ã¨ã„ã†ã‚‚ã®ã¯ã€å†…部ã®ä½“æ„Ÿçš„ã¨ã—ã¦ç†è§£ã§ãã‚‹ã‚‚ã®ã®ã€å¤–部ã®äººé–“ã‹ã‚‰ã¯è¦‹ãˆã«ãã„ã‚‚ã®ã§ã™ã€‚ã“ã†ã„ã£ãŸæƒ…å ±ã®éžå¯¾ç§°æ€§ã¯é–‹ç™ºãƒãƒ¼ãƒ 外ã®äººã€…ã¨ã®é–¢ä¿‚ã®ä¸ã§ã®å•é¡Œã®åŽŸå› ã«ãªã£ã¦ãã¾ã—ãŸã€‚ ã¾ãŸã€è¤‡æ•°ã®é–‹ç™ºãƒãƒ¼ãƒ やプãƒãƒ€ã‚¯ãƒˆã‚’æŸãã‚‹EMã€CTOã‚„ã€ç®¡ç†è·ã«ã¨ã£ã¦ãã‚Œãžã‚Œã®çŠ¶æ³ã‚’客観的ãªæ•°å—やグラフã§å¯è¦–化ã™ã‚‹ã“ã¨ã¯ã€å…¨ä½“çš„ãªæˆ¦ç•¥ã‚’考ãˆã‚‹ä¸Šã§ã‚‚é‡è¦ãªå‚è€ƒæƒ…å ±ã«ãªã‚Šã¾ã™ã€‚ã§ã™ãŒã€ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆã‚„プãƒã‚¸ã‚§ã‚¯ãƒˆç®¡ç†ã‚’増やã™ã»ã©ã€ã©ã‚“ã©ã‚“ã¨é–‹ç™ºãƒ¡ãƒ³ãƒãƒ¼ã«è² æ‹…ã‚’ã‹ã‘ã¦ã—ã¾ã†ã“ã¨ã«ãªã‚Šã€è¨ˆæ¸¬ã®ã—éŽãŽã«ã‚ˆã‚‹ç–²ã‚Œãªã©ã‚‚誘発ã—ã¦ã—ã¾ã„ã¾ã™ã€‚ 本稿ã§ã¯ã€gitリãƒã‚¸ãƒˆãƒªã®ãƒã‚°æƒ…å ±ã‹ã‚‰ã€ã„ãã¤ã‹ã®ã‚°ãƒ©ãƒ•ã‚’生æˆã—ã€ãƒãƒ¼ãƒ ã®çŠ¶æ³ã‚’å¯è¦–化ã™ã‚‹ãŸã‚ã®ãƒ„ールgilotを作æˆã—ãŸã®ã§ã€ãã®ç›®çš„ã¨æ„図ã€ãã—ã¦ä½¿ã„æ–¹ã€æ³¨æ„点を解説ã—ã¾ã™ã€‚ アプãƒãƒ¼ãƒæ–¹æ³• gilotã®ã‚¢ãƒ—ãƒãƒ¼ãƒã¯ã€git logã®
R 㨠Python よã出るテーブル処ç†å¯¾å¿œè¡¨ - 俺ã®OneNote
Rã¨Pythonã®ã‚ˆãやるテーブル処ç†ã®æ“作覚書。 #python import pandas as pd pd.__version__ # '1.0.3' #R library("tidyverse") packageVersion("tidyverse") # ‘1.3.0’ 厳密ã«ã¯ã‚¢ã‚¦ãƒˆãƒ—ットã®å†…容ãŒå®Œå…¨ã«ä¸€è‡´ã™ã‚‹ã‚‚ã®ã‚’並ã¹ã¦ã„ã‚‹ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“。 å˜ç´”ãªé–¢æ•°ãƒ»ãƒ¡ã‚½ãƒƒãƒ‰ã§ã€ä¼¼ãŸã‚ˆã†ãªç›®çš„ã®å‡¦ç†ãŒã§ãã‚‹ã‚‚ã®ã®å¯¾æ¯”ã§ã™ã€‚ åŒã˜ç›®çš„ã§ä¸¦ã¹ã¦ã‚‹é–¢æ•°ãƒ»ãƒ¡ã‚½ãƒƒãƒ‰ã§ã€è¿”り値や型ãŒä¸€è‡´ã—ãªã„ã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ã€‚ R, Pythonã¨ã‚‚ã«ä¸è‡ªç”±ãªã®ã§ã€ä»–ã«ã‚‚ã£ã¨ã‚ˆã„関数ç‰ãŒå˜åœ¨ã™ã‚‹ã¨æ€ã„ã¾ã™ã€‚ã”容赦ãã ã•ã„。 自分自身ã®è¦šæ›¸ãªã®ã§éšæ™‚æ›´æ–°ã™ã‚‹ã‹ã‚‚ã§ã™ã€‚ テーブルデータ(csv)ã®èªã¿è¾¼ã¿ 内容 R Python csvèªã¿è¾¼ã¿ï¼ˆãƒ˜ãƒƒãƒ€ãƒ¼ä»˜ã） read.csv("hoge.csv") pd.read_
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Build software better, together
GitHub - chaitin/xray: 一款完善的安全评估工具，支æŒå¸¸è§ web 安全问题扫æ和自定义 poc | 使用之å‰åŠ¡å¿…先阅读文档
Passive Reconnaissance Using OSINT
NerdyData
TinEye Reverse Image
Reflected XSS on pro.sony with Google Dork & Akamai Waf Bypass
Installs pentesting tools, then symlinks them to be ran seamlessly.
A step-by-step guide how to use Python with Tor and Privoxy
GitHub - s0md3v/Arjun: HTTP parameter discovery suite.
Get Reflected XSS within 3 minutes
Bug bounty resources & advices
GitHub - maurosoria/dirsearch: Web path scanner
XSS on Sony subdomain
GitHub - devanshbatham/Awesome-Bugbounty-Writeups: A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
Bulk URL HTTP Status Code, Header & Redirect Checker
apikey/dork.txt at master · mrnitesh/apikey
GitHub - brainfucksec/kalitorify: Transparent proxy through Tor for Kali Linux OS
GitHub - infiniteproject/torify: Tor hidden service "proxy" for Docker containers using docker-gen
The Tor Project / Core / Torsocks · GitLab
TPError: HTTP Error 429: Too Many Requests · Issue #10 · ZephrFish/GoogD0rker
awesome-cyber-security/Readme_en.md at master · xrkk/awesome-cyber-security
GitHub - fabacab/awesome-cybersecurity-blueteam: :computer:ðŸ›¡ï¸ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
GitHub - flosse/rust-web-framework-comparison: A comparison of some web frameworks and libs written in Rust
{{#tags}}- {{label}}
{{/tags}}