Gleb Cherbov retweeted
Here are a few thoughts about #RockYou2024(2021) while the hype train is running to the station "Everyone hack3d" with a stop at "why it's useless". Obviously, most compilations suffer from the garbage inside, and it's always better to know how the wordlist was crafted.
Gleb Cherbov retweeted
The ability to look at the entirety of a situation to see the bigger picture is critical, especially for application security.
What's the point of audits if all the vulnerabilities found remain in 50-page pentester reports or ci/cd Pipeline artifacts?
linkedin.com/posts/dmitry-ch…
Gleb Cherbov retweeted
Полевой набор пентестера
Ребята из Digital Security рассказывают о составе типового полевого набора, который пентестеры берут с собой, выезжая для проведения анализа беспроводных сетей или проектов в формате Red Team: amp.gs/jGNEc
Gleb Cherbov retweeted
Informative weaknesses mentioned in report is not making it less stronger. Just do it in a proper way! That's why we have an optional "weakness" flag for every finding reported. So it is pretty simple to separate them to different report sections with no info trash in main parts.
Gleb Cherbov retweeted
Hey everyone! I just launched a yet-another-new-free- project for subdomain discovery with online tools, screenshots, and automation. So it's time to have a look!
#pentest #bugbounty
How about little automation of your favorite #bugbounty workflow with ease in two clicks? You can do it even with your mobile phone! It's totally free.
#bugbounty #automation
Gleb Cherbov retweeted
Microsoft Exchange Deserialization RCE (CVE-2021–42321)
PoC
peterjson.medium.com/some-no…
Gleb Cherbov retweeted
Here is a first draft on an NTLM relay mindmap 🙂 from authentication coercion to post-relay exploitation. I'll gladly update/correct it if you think there are things wrong or missing.
➡️Featured on The Hacker Recipes thehacker.recipes/ad-ds/move…
Gleb Cherbov retweeted
💥Easy RCE Ports
Java RMI: 1090,1098,1099,4444,11099,47001,47002,10999
WebLogic: 7000-7004,8000-8003,9000-9003,9503,7070,7071
JDWP: 45000,45001
JMX: 8686,9012,50500
GlassFish: 4848
jBoss: 11111,4444,4445
Cisco Smart Install: 4786
HP Data Protector: 5555,5556
#ptswarmTechniques
Gleb Cherbov retweeted
Decided to learn and do something new for fun, and ... here comes vdroid.app! Yet another fast, easy, etc. android application bugs scanner. #android #security #BugBounty
Gleb Cherbov retweeted
Okay, lets talk Credential Guard. What is it, why it matters, and how it works.
Gleb Cherbov retweeted
I'm proud to announce the release of #BloodHound 4.0: The Azure Update!
Blog: posts.specterops.io/introduc…
BloodHound 4.0 Release Poster: redbubble.com/i/metal-print/…
Get BloodHound: bit.ly/GetBloodHound
Docs: bloodhound.readthedocs.io/en…
Join the BloodHound Slack: bit.ly/BloodHoundSlack
Gleb Cherbov retweeted
Tool: StreamDivert: Relaying (specific) network connections on Microsoft Windows - research.nccgroup.com/2020/0…
Gleb Cherbov retweeted
Next up on #HITBLockdown002 Track 1:
"The Weakest Element of Acquiring Bank Infrastructure"
Presented by Ilia Bulatov & Gleb Cherbov
Starts 17:00 SGT at youtu.be/Yp7W4hiLpJY
Ask questions via our Slido channel #askinthebox
Gleb Cherbov retweeted
as promised (better late than never), here is the first cut of my iClass tool for libnfc github.com/nfc-tools/nfc-icl… ... i've tested as much as i can, so now over to you! use with caution! #nfc #libnfc enjoy!
Gleb Cherbov retweeted
WebArchive greatly expands your knowledge about the target.
WayBackUrls is an awesome tool written by @TomNomNom. It fetches all the URLs from WebArchive for a domain and it's subdomains.
github.com/tomnomnom/wayback…
#BugBountyTip
