LATEST ARTICLES

B(l)utter

Varshini - 0

Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime. Currently, the application supports only Android libapp.so. Also, the application currently works only against recent Dart versions. Environment Setup This application uses the C++20 Formatting Library. It requires a very recent C++ compiler, such as g++ >=13 or Clang >=15. I recommend using Linux OS (only tested on Deiban SD) because it...

Read more

FLARE-VM : A Comprehensive Guide To Establishing A Reverse Engineering Lab On Windows

Varshini - 0

Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine (VM). FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on two main technologies: Chocolatey and Boxstarter. Chocolatey is a Windows-based Nuget package management system,...

Read more

AWeSomeUserFinder : Harnessing AWS IAM For Username Enumeration And Password Security

Varshini - 0

AWS IAM Username Enumerator and Password Spraying Tool in Python3 In order to use the tool with the UpdateAssumeRolePolicy method, the IAM user account utilized must have the following permissions attached: "iam:GetRole" "iam:CreatePolicy" "iam:UpdateAssumeRolePolicy" "iam:CreateRole" "iam:AttachRolePolicy" An example policy is included in the files named "example_assume_role_policy.json" in the example_policies directory. Additionally, an AWS access key and AWS secret key are required. See this link for information on...

Read more

Monolith : The Ultimate Tool For Compiling Entire Web Pages Into Single HTML Files

Varshini - 0

A data hoarder’s dream come true: bundle any web page into a single HTML file. You can finally replace that gazillion of open tabs with a gazillion of .html files stored somewhere on your precious little drive. Unlike the conventional “Save page as”, monolith not only saves the target document, it embeds CSS, image, and JavaScript assets all at once,...

Read more

Useful Bug Bounty And Security Related Write-ups : A Comprehensive Guide For Enthusiasts

Varshini - 0

This repo contains all variants of information security & Bug bounty & Penetration Testing write-up design for beginners or newcomers who are confused or don't know which keyword to search. All these articles' links are fetched from medium.com (A popular blog sharing site for a variety of different interest people) Note: All of them were generated by an automation tool...

Read more

Admin-Panel-Dorks : Mastering Google Dorks To Uncover Hidden Admin Panels

Varshini - 0

site:*/sign-in site:*/account/login site:*/forum/ucp.php?mode=login inurl:memberlist.php?mode=viewprofile intitle:"EdgeOS" intext:"Please login" inurl:user_login.php intitle:"Web Management Login" site:*/users/login_form site:*/access/unauthenticated site:account.*.*/login site:admin.*.com/signin/ site:portal.*.com/signin/ inurl:adminpanel/index.php site:*/login/auth site:*/index.jsp intitle:"login" site:login.*.com/signin/ site:conf.*.com/signin/ site:social.*.com/signin/ intitle:sign in inurl:/signin site:*/user/login intitle:"sign in" inurl:login.aspx inurl:login_user.asp site:accounts.*.com/signin/ site:*/joomla/administrator inurl:login.cgi inurl:/login/index.jsp -site:hertz.* inurl:cgi/login.pl site:*/auth intitle:login inurl:admin/login.aspx site:amazonaws.com inurl:login.php inurl:/index.aspx/login inurl:/site/login.php inurl:/client/login.php inurl:/guest/login.php inurl:/administrator/login.php inurl:/system/login.php inurl:/student/login.php inurl:/teacher/login.php inurl:/employee/login.php inurl:wp/wp-login.php inurl:/admin/login.php site:*/login/login.php inurl:Dashboard.jspa intext:"Atlassian Jira Project Management Software" inurl:simple/view/login.html intext:Grafana New version available! -grafana.com -grafana.org inurl:/login inurl:/en-US/account/login?return_to= inurl:/admin/index.php?module=config inurl:/admin/index.php intext:"evetsites" "Login" inurl:"/vpn/tmindex.html" vpn intitle:"netscaler gateway" intext:password "please log on" inurl:"/fuel/login" inurl:9000 AND intext:"Continuous Code Quality" "Web Analytics powered by Open Web Analytics - v: 1.6.2" intitle:"Outlook Web Access" | "Outlook Web app" -office.com youtube.com -microsoft.com intext:"Sign in with your organizational account" login...

Read more

Conduwuit : Pioneering A New Era In Matrix Homeservers

Varshini - 0

Matrix is an open network for secure and decentralized communication. Users from every Matrix homeserver can chat with users from all other Matrix servers. You can even use bridges (also called Matrix Appservices) to communicate with users outside of Matrix, like a community on Discord. What Is The Goal? A high-performance and efficient Matrix homeserver that's easy to set up and...

Read more

LSMS – Linux Security And Monitoring Scripts

R K - 0

Linux Security And Monitoring Scripts are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation. Each script works on its own and is independent of other scripts. The scripts can be set up to either print out their results, send them to you via mail, or...

Read more

Fiber – Using Fibers To Run In-Memory Code

R K - 0

A fiber is a unit of execution that must be manually scheduled by the application rather than rely on the priority-based scheduling mechanism built into Windows. Fibers are often called lightweight threads. For more detailed information about what are and how fibers work consult the official documentation. Fibers allow to have multiple execution flows in a single thread, each...

Read more

XSS-Exploitation-Tool : A Penetration Testing Tool

R K - 0

XSS Exploitation Tool is a penetration testing tool that focuses on the exploit of Cross-Site Scripting vulnerabilities. Disclaimer: This tool is only for educational purpose, do not use it against real environment Features Technical Data about victim browser Geolocation of the victim Snapshot of the hooked/visited page Source code of the hooked/visited page Exfiltrate input field data Exfiltrate cookies Keylogging Display alert box Redirect user Installation Tested on Debian 11 You may need Apache,...

Read more
123...416Page 1 of 416