P.F.K 0Day

https://lnkd.in/p/dGAC7jAD

🎓 مرجع تخصصی آموزش تست نفوذ و رد تیم TryHackBox  📌 در اینجا، آموزش‌ های خودمون رو همراه با سناریوها و تمرین‌ های واقعی در اختیارتون قرار میدهیم. 📌 شما میتونید در کنار آموزش‌ های تئوری و عملی‌ محور ما، مستقیماً در محیط‌ های کاری ازشون استفاده کنید. 📌 علاوه بر این، نکته‌ های باگ بانتی و مطالب مرتبط دیگه هم همیشه در اختیارتون قرار میگیرد. ✍ از اولین پست های کانال ما شروع کنید به خوندن . ⚠️ پس این فرصت رو از دست ندید!  ➖➖➖➖➖➖➖➖➖ 🆔 @TryHackBox

ADKAVEH — PowerShell tool for AD enumeration & attack simulation ADKAVEH is a PowerShell script that allows security teams to perform enumeration and attack simulation in Active Directory environments. It includes modules for Kerberoasting, AS-REP Roasting, Password Spraying, and optional Windows Defender tamper tests https://github.com/TryHackBox/ADKAVEH

https://github.com/oldboy21/CGPL

​​pdtm ProjectDiscovery's Open Source Tool Manager A simple and easy-to-use golang based tool for managing open source projects from ProjectDiscovery. https://github.com/projectdiscovery/pdtm

​​CreateRemoteThreadPlus CreateRemoteThread: how to pass multiple parameters to the remote thread function without shellcode. https://github.com/lem0nSec/CreateRemoteThreadPlus

​​Gold Digger Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. https://github.com/ustayready/golddigger

​​Hunting-Queries-Detection-Rules Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules. https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules

​​Conjur CyberArk Conjur automatically secures secrets used by privileged users and machine identities https://github.com/cyberark/conjur

​​Fuzztruction Prototype of a fuzzer that does not directly mutate inputs but instead uses a so-called generator application to produce an input for our fuzzing target https://github.com/fuzztruction/fuzztruction

​​REST-Attacker Automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control handling, and report generation - with minimal configuration effort. Additionally, REST-Attacker is designed to be flexible and extensible with support for both large-scale testing and fine-grained analysis. https://github.com/RUB-NDS/REST-Attacker

​​CVE-2022-39073 Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit. https://github.com/v0lp3/CVE-2022-39073 #cve #exploit @Pfk_0Day

https://github.com/Phypeng/StupidData

https://github.com/Liuergouzi/kefu #sqlinjection @pfk_0day

sql injection An online customer service system based on vue+node+socket+vant+mysql, front and back ends are separated, browser fingerprint is used as the unique id of visitors, built-in chatGPT intelligent reply, uses RSA to encrypt and decrypt data, prevents sql injection, xss, and can send pictures Emoticons, query history messages, leave messages, kick people, etc., more functions are waiting for subsequent updates. Simple and fast deployment, basically I have written notes every few lines, strong readability, currently there are not many functions, welcome for secondary development https://github.com/Liuergouzi/- #sqlinjection @Pfk_0day

https://github.com/edoardottt/awesome-hacker-search-engines

CVE-2022-34718: IPv6 RCE exploit sample https://github.com/SecLabResearchBV/CVE-2022-34718-PoC @Pfk_0day

TcpDump Cheat Sheet #Tcpdump #CheatSheet @pfk_0day

​​BYOB BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: ▫️ Command & control server with intuitive user-interface ▫️ Custom payload generator for multiple platforms ▫️ 12 post-exploitation modules https://github.com/malwaredllc/byob @pfk_0day

Network Attacks ⚔ #infographic #infosec #tip @Pfk_0Day