陈峰卫

A suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data #threathuntinghttps://github.com/Invoke-IR/ACE 

Burp Suite extension to perform Kerberos authenticationhttps://github.com/nccgroup/Berserko …

I added a script to generate the PDF & archive for my #OSCP Exam Report Template in Markdown, as I saw a lot of people where creating their own scripts.https://github.com/noraj/OSCP-Exam-Report-Template-Markdown …

SQL Injection Payload List by #ismailtasdelen https://link.medium.com/lxgpVQNUK3  Password Cracking Is Easy: Here’s How to Do It by @KennyMuLi in @TDataScience https://towardsdatascience.com/password-cracking-is-easy-heres-how-to-do-it-875806a1e42a … API Security Testing(Part 1) by Saumya Prakash Ranahttps://link.medium.com/tFlFCFfVK3 

New OSSEM updates are coming soon and some of the work being tested is the following: 1. Events from all manifest-based and mof-based ETW providers from several Windows 10 versions (Ref: https://github.com/jdu2600/Windows10EtwEvents …) as JSON: https://github.com/hunters-forge/OSSEM/tree/yaml/data_dictionaries/windows/etw/json … YAML: https://github.com/hunters-forge/OSSEM/tree/yaml/data_dictionaries/yaml/windows …

wireshark dissector for Apple’s propriety continuity protocolhttps://github.com/furiousMAC/continuity …

Articles worth reading discovered last week: https://nathandavison.com/blog/exploiting-email-address-parsing-with-aws-ses … https://blog.infosectcbr.com.au/2020/02/pointer-compression-in-v8.html … https://blog.assetnote.io/bug-bounty/2020/02/01/expanding-attack-surface-react-native/ …

Just released a quick tool, wordlistgen, I put together for taking a list of URLs/paths from stdin and parsing components (subdomains, paths, query strings & values) to easily/quickly make contextual content discovery wordlists for #bugbountyhttps://github.com/ameenmaali/wordlistgen …

A command line tool to download #Android applications directly from the Google Play Storehttps://github.com/ClaudiuGeorgiu/PlaystoreDownloader …

A common and dangerous Nessus configurationhttps://www.shorebreaksecurity.com/blog/have-you-configured-nessus-to-betray-you/ …

February 10th - Make Product Security an Exercise in Agile! Two new meetups: March 16th - Hacking WiFi April 13th - Let's Go Phishin' with #GoPhish More info at https://meetup.com/Defcon401  @Defcongroups @Defcon @Defcon617 We also have a swag store:https://teespring.com/stores/defcon401 …

Laravel Jobs and Queue 101, building a simple analytics app https://laravel-news.com/laravel-jobs-and-queues-101 … by @djug

SIEMS FRAMEWORK: MultiSIEM Modular Python3 Attack Framework https://securityonline.info/siems-framework/ … #opensource #infosec #security #pentest

#OSINT DomainTools:http://www.domaintools.com  Active Whois:http://www.johnru.com  Domain Dossier:http://centralops.net  Network Solutions:http://www.networksolutions.com  DNSstuff:http://www.dnsstuff.com  DNS-Digger:http://dnsdigger.com  Shodan:http://www.shodan.io  #bugbountytip

Parameter tampering https://blog.securitybreached.org/2020/01/26/improper-input-validation-add-custom-text-and-urls-in-sms-send-by-snapchat-bug-bounty-poc … https://b3nac.com/posts/2019-09-02-Spear-Texting-Via-Parameter-Injection.html … https://link.medium.com/rkcIUvhuD3  https://link.medium.com/8tXuo2juD3  https://link.medium.com/a6yLwgkuD3  https://blog.avatao.com/How-I-could-steal-your-photos-from-Google … https://link.medium.com/eyxLrykuD3  https://link.medium.com/cgg3NLkuD3  https://link.medium.com/MZP6o1kuD3  https://link.medium.com/ztkAjeluD3  #bugbounty