Hello Hacking8!

她爹已经不在了，她独自看爸爸给她留下的记忆，肯定哭得稀里哗啦的

Quick Navigation About InstagramReasons to Spy on Someone’s InstaThe Truth: How to See Someone’s Direct Messages on InstagramThe 5 Best Instagram Spy Apps – Reviewed1. mSpy2. Spyic3. FlexiSPY4. XNSPY5. CocospyConclusion About InstagramInstagram (commonly known as Insta or IG) has only been around for 10 years, but is already one of the most-used social media platforms ...
Read more
The post 5 Best Instagram Spy Apps Review (2021) – Updated first appeared on SuspeKt.

☁️
Nextcloud server, a safe home for all your data

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Wind…

Experiment on reproducing Obfuscate & Sleep

填一下一个六个月前的的坑
附件:Spring_Part_2_SpringMVC.pdf

Our thanks to DEFCON for publishing their outstanding DEF CON 29 IoT Village videos on the Conferences’ YouTube channel.
Permalink
The post DEFCON 29 IoT Village – Amit Elazari’s, Anahit Tarkhanyan’s And Rita Cheruvu’s ‘Establishing IoT Trustworthiness’ appeared first on Security Boulevard.

FOSS软件中漏洞的生命周期 https://mp.weixin.qq.com/s/XTJf0wdUQFOGypHofjsscQ
PT632电信“老猫”分析 https://www.anquanke.com/post/id/259503
2021年“绿盟杯”重庆市大学生信息安全竞赛-WP https://www.anquanke.com/post/id/256976
蓝队反制后的自动化信息收集 https://www.anquanke.com/post/id/259358
ysomap : Java反序列化利用框架 https://paper.seebug.org/1766/
2021第四届强网拟态防御积分赛工控pwn eserver WP https://www.anquanke.com/post/id/259594
自删除技术详解 https://www.anquanke.com/post/id/259050
使用 ProxyShell 和 ProxyLogon 劫持邮件链 https://paper.seebug.org/1764/
关于多步骤攻击预测方法的调研概要 https://mp.weixin.qq.com/s/ADOeqhYcjKfJlkVhkUAFaw
数据安全保护和治理的新方法 https://mp.weixin.qq.com/s/rTz8HVyGJE0x2UbVjiy8jw

timwhitez starred cube0x0/SharpMapModules
Nov 28, 2021
cube0x0/SharpMapModules
C# recon modules
C#
49 Updated Oct 31

Date: 2021-11-28 13:46 UTC
OS: Alpine Linux
PHP Version: 8.0.13
Package: *Directory/Filesystem functions
Title: DirectoryIterator ignore files

Somewhere right now, sitting in front of a bank of computer screens in Russia, China, or even in the United States, is a band of cyber-criminals planning a nation-state grade attack. If they haven’t attacked your network yet, it’s just a matter of time. Taking proactive steps to secure your cloud now will give you […]
The post Proactively Securing Your Enterprise Cloud appeared first on HolistiCyber.
The post Proactively Securing Your Enterprise Cloud appeared first on Security Boulevard.

2022年ICS威胁、 900 万 Android 设备感染、Windows 0day、Apache Druid任意文件读取漏洞.......

Parses Windows event logs files based on SANS Poster

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container im…

Tomorrow Theme now lives on at https://github.com/chriskempson/base16

Monospaced font family for user interface and coding environments

The lightning-fast ASGI server.
🦄

StealBit1.1 and earlier strings and config extraction scripts

Run binaries straight from memory in Linux
🚫
💾

Mind maps / flow charts to help with privilege escalation on the OSCP.

Super organized and flexible script for sending phishing campaigns

写了几天前端，准备做一个hacking8的chrome插件，初步的想法是将网址收藏和信息流结合...

快来学习免费课程吧！

《拔刀相向》等你来战！

看雪论坛作者ID：1900

This article discusses some of the risks and pitfalls of using Office 365 Email Essentials (purchased via GoDaddy Inc.) for bulk email send out directly via SMTP servers. As many others, I have faced issues with this product and I’m hoping that the information below will help you solve these issues once and for all. …
Solving Problems with Office 365 Email from GoDaddy Read More »
The post Solving Problems with Office 365 Email from GoDaddy appeared first on InfosecMatter.

Ed1s0nZ forked Ed1s0nZ/ZheTian from yqcs/ZheTian
Nov 28, 2021
yqcs/ZheTian
ZheTian 免杀shellcode执行程序
Go
170 Updated Nov 26

timwhitez starred zyylhn/zscan
Nov 28, 2021
zyylhn/zscan
Zscan a scan blasting tool set
Go
75 Updated Nov 28

消失了两周，写了篇文章记录一下： 出中国记（上） 下周就能办好宽带了，后面各种工作恢复正常。

很多时候我们需要将一个类的实例变成二进制数据存储或是通过网络发送，这个过程叫序列化。如果将二进制数据解析成位于内存中的类实例或是相关数据结构，那叫反序列化。所有的序列化算法都遵循一定的套路，例如: class A { public int a = 1; public int b = 2; protected B b = new B(); private float c = 3.0; } 如果要序列化类A的实例，那么通常需要将变量a,b的数值对应的二进制数写入，然后获得类B实例序列化后的二进制数据，最后将变
作者：tyler_download 发表于 2021/11/28 15:28:21 原文链接 https://blog.csdn.net/tyler_download/article/details/121407937
阅读：63

timwhitez starred 3lp4tr0n/BeaconHunter
Nov 28, 2021
3lp4tr0n/BeaconHunter
Detect and respond to Cobalt Strike beacons using ETW.
C#
344 Updated May 3

timwhitez starred snovvcrash/DInjector
Nov 28, 2021
snovvcrash/DInjector
Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL
C#
215 Updated Nov 28

timwhitez starred 0x00007e/bugbountytips
Nov 28, 2021
0x00007e/bugbountytips
漏洞賞金相關的Tips
23 Updated Nov 27

timwhitez starred nodauf/GoMapEnum
Nov 28, 2021
nodauf/GoMapEnum
User enumeration and password bruteforce on Azure, ADFS, OWA, O365 and gather emails on Linkedin
Go
54 Updated Nov 26

timwhitez starred D4stiny/ForkPlayground
Nov 28, 2021
D4stiny/ForkPlayground
An implementation and proof-of-concept of Process Forking.
C++
56 Updated Nov 26

timwhitez starred RedCursorSecurityConsulting/PPLKiller
Nov 28, 2021
RedCursorSecurityConsulting/PPLKiller
Tool to bypass LSA Protection (aka Protected Process Light)
C++
368 Updated May 23

timwhitez starred nettitude/RunPE
Nov 28, 2021
nettitude/RunPE
C# Reflective loader for unmanaged binaries.
C#
174 Updated Jun 25

timwhitez starred br-sn/CheekyBlinder
Nov 28, 2021
br-sn/CheekyBlinder
Enumerating and removing kernel callbacks using signed vulnerable drivers
C++
181 Updated Mar 31

ThreadStackSpoofer是一种先进的内存规避技术，它可以帮助广大研究人员或红/蓝队人员更好地隐藏已注入的Shellcode的内存...

Enumerating and removing kernel callbacks using signed vulnerable drivers

POC <form id="upload-form" action="http://xxxx.com/g […]

Tool to bypass LSA Protection (aka Protected Process Light)

Fig adds autocomplete to your terminal.

iMonitor（冰镜 - 终端行为分析系统）

漏洞賞金相關的Tips

Detect and respond to Cobalt Strike beacons using ETW.

近期捕获了AvosLocker勒索病毒的新样本，根据其后缀名为avos2的特征推测可能为AvosLocker变种。

[该文章已设置加密]

在 COVID-19 还未结束之际，伪装成 COVID-22 安装程序的新兴恶意软件已经出现。

开源项目 | CTFCrackTools - CTF工具框架 version 4.0+Burp插件同...

Guide to using YubiKey for GPG and SSH

ThreadStackSpoofer是一种先进的内存规避技术