Silverfox

[Dan @danmurrays]

Google loves keeping valuable websites from you a secret.

So here's 10 of them you likely never heard of:

(Can't believe they're free)

[bluecapesec @bluecapesec]

1) First of all observe how legitimate domain authentication requests are handled between domain controller and client

2) Wdigest downgrade attack

3) Pass the hash

4) Pass the ticket

5) DCSync and golden ticket attack

All of them can be carried out using Mimkatz!

#dfirlabs

[𝔅͛𝔯͛𝔦͛𝔞͛𝔫͛ ͛𝔚͛𝔥͛𝔢͛𝔩͛𝔱͛𝔬͛𝔫͛ @brianwhelton]

@sailingbikeruk @pry0cc Many ways, easiest is covert to flat decimal

Say you have 8.8.8.8

(8x256)+ 8x256)+ 8x256)+8= 133744072

Ping 133744072

This can be done with any IP (replace 8!) and bypasses string detection looking for ‘IP. IP. IP. IP’

[Trickest @trick3st]

If you're a bug bounty hunter, you will 💚 this GitHub repository.

It contains all assets that we uncover on public bug bounty targets, and it is updated automatically, frequently 😎

Enjoy! 🚀

https://t.co/3Rf0WSZC9K

[Ayoub FATHI 阿尤布 @_ayoubfathi_]

AWS/GCP Free tier stuff is so underrated, I've been running parts of my recon automation in the cloud for as low as 0.01$ per month for a long time, and it's been nothing but amazing!

[Clint Gibler @clintgibler]

🔒 Tool: SSH No Ports

SSH to a remote Linux host/device without that device having any open ports (not even 22) on external interfaces

All network connectivity is outbound

No need to know the target's IP

By @atsigncompany

https://t.co/ASampjUMqV

[Leila Hormozi @LeilaHormozi]

7 habits I learned in my 20's that made me millions:

[Hakin9 @Hakin9]

A cloud based Android Spying or Monitoring Tool, powered by NodeJS https://t.co/nD11rCTZBR

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #android #mobile #spyware

[Hakin9 @Hakin9]

This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. https://t.co/2UTGTfMylE

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #linux #windows #dns #cyberattack

[Hakin9 @Hakin9]

Ninja - Open source C2 server created for stealth red team operations https://t.co/pHlcAr2aaE

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #linux #windows #DFIR #cyberattack

[Harsh Bothra @harshbothra_]

4 Free labs to learn OAuth Vulnerabilities

🧵

[Hakin9 @Hakin9]

Recox - Master script for web reconnaissance https://t.co/W6KNq60u68

#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #webapp #script #bugbounty #vulnerability

[Stephan Berger @malmoeb]

1/ #Linux #Forensics: pssst... I will now reveal my favorite interview question for candidates who want to work in our IR team ;) "In the process list, I see a (running) binary, but the binary is no longer present on disc. How can I restore the original binary? (screenshot 👇)"

[Lu3ky13 ⚡️⚡️ @lu3ky13]

XSS finder working with https://t.co/4NmvIlXMIC to find links and parameters injectable to xss to many #bughunter need this tool

https://t.co/A5vLxIaNrc

#TogetherWeHitHarder #bugbounty #bugbountytips #RCE #AppSec #hackerone #bugbountytips #security #bugcrowd #security

[Renganathan @IamRenganathan]

Advice for Beginner bug hunters 🧵

#bugbounty #bugbountytip

[Binni Shah @binitamshah]

Decrypting your own HTTPS traffic with Wireshark : https://t.co/WfZV1gaPSj

[Devansh Bordia @devansh_bordia]

Common Vulnerabilities in Android Deep Links:
1) LFI
2) RCE
3) CSRF
4) Open Redirect

[Takezo - Sword Of Clarity @takezopure]

If you're in your 20’s, remember this:

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

How to start Bug Bounty Hunting

Follow this thread 🧵

Note:I m assuming that you have cleared your basics

#bugbounty #bugbountytip #bugbountytips

[Silverfox @Silver_F0X_]

@NFTLaunchpadso1 ExLVp6bBzx3wKZo2dgGnQhbxtcBJoUkpXH2QwN4cB7he