Here are 17 platforms where you can begin learning cybersecurity:
1. HackXpert - Free labs and training.
2. TryHackMe -Hands-on exercises and labs.
3. CyberSecLabs - High quality training labs.
4. Cybrary - Videos, labs, and practice exams.
5. LetsDefend - Blue team training platform.
6. Root Me - Over 400 cybersecurity challenges.
7. RangeForce - Interactive and hands-on platform.
8. Certified Secure - Loads of different challenges.
9. Vuln Machines - Real world scenarios to practice.
10. Try2Hack - Play a game based on the real attacks.
11. TCM Security Entry level courses for cybersecurity.
12. EchoCTF - Train your offensive and defensive skills.
13. Hack The Box - Online cybersecurity training platform.
14. Vuln Hub - Material for practical hands-on experience.
15. OverTheWire -Learn security concepts through challenges.
16. PentesterL.ab - Learn web-application penetration testing.
17. PortSwigger Web Security Academy - Extensive learning material.
#Infosec #Learning #Hacking #CyberSecurity
@IndiaPostOffice Dear sir, I had post EN932073352IN but it's status showing that consignment not found, I am attaching screenshots also, please look into matter.
I found a really interesting rXSS on a @SynackRedTeam target last night.
The injection point was like this:
<button onclick="document.location='$USER_INPUTsomeother_randomtext'">
More details in thread 👇
#infosec#hacking#hunting#XSS
we are having our aktu https://t.co/O1EChISAWP.
Exams in this extreme hot weather we are not getting electricity for study, we are getting electricity one or two hour which gets interrupted every half hour please look at the matter.
Add- Bhauti Pratapur
@DMKanpurDehat@UPPCLLKO
@IndiaPostOffice Is it mandatory @IndiaPostOffice that I will have to visit the Post Office to collect my Post or Courier.
I received the courier yesterday when I visited the Post Office.
he had neither informed me on phone call or by other means and saying that we don't have people to deliver
Here's a useful recon one-liner using 2 of my tools! 🤘
Enumerate subdomains with haktrails 👉 https://t.co/z8Py1qHM73 ⭐️
Convert to absolute URLs with httpx 👉 https://t.co/ulK1qn4m5N ⭐️
Discovery URL endpoints with hakrawler 👉 https://t.co/XPuPqahWYL ⭐️
#hackingtips
How to use Amass to find ASNs and CIDRs and then enumerate subdomains with them! 🔍
🧨 Find ASN and CIDRs: amass intel -org "<target>"
💥 Enumerate subdomains:
amass enum -d <target> -active -cidr <cidr-block> -asn <asn>
Try this to find more subdomains! 🔥 #hacking
This is one of the easiest RCEs I've ever found in my BB, lets hope this isn't a duplicate.
Found an endpoint with `something.php?run=`, execute the encoded `%26echo%20`id`%24()%5C%20 ` in HTTP request, surprised to see when server returned ID.
#BugBounty#RCE
Want to start bug bounties but don't know where to begin? 🕵️♀️���
You're in luck! I get asked this question daily
So, I've put together a small list of resources to help you get started on your bug bounty adventure. 💥
A #bugbountytips thread 🧵
1/10
Some recent lessons learned:
If something is suspicious but SQLMap “thinks” it might/might not be vulnerable, manually confirm/deny before leaving.
Payload example:
' AND extractvalue(rand(),concat(0x3a,(SELECT user()))) #
#bugbountytips#BugBounty
ChatGPT Plus is much more powerful than ChatGPT.
But it costs $20/month and its knowledge ends in 2021.
Here is a FREE alternative with no limitations (and internet access):
Bypass WAF / Restrictions with REcollapse
-
This tool assists in blackbox regex fuzzing to bypass validations and discover normalizations in web apps.
-
Repo: https://t.co/iHdzytjeVC
-
Creator: @0xacb (Also thanks to @Hacker0x01)
-
-
#infosec#cybersecurity#CTF#bugbountytips
@IRCTCofficial@RailMadad I have booked in train 18190 and train will Perumbur station at 07:58 Pm but still chart is not prepared, Kindly do needful as soon as possible