Slides of #POC2018 have been uploaded. Some files are missing because of the request of speakers. Enjoy! powerofcommunity.net/2018.htm #Zer0Con2019 - April 11 ~ 12, 2019 #POC2019 - November 7 ~ 8, 2019

If you want to know the name of inside-site s3 bucket - just put %c0 into url

dive : A tool for exploring each layer in a docker image : github.com/wagoodman/dive

SSRF testing resources. github.com/cujanovic/SSRF… CRLF Injection Payloads. github.com/cujanovic/CRLF… Open Redirect Payloads. github.com/cujanovic/Open… subdomain bruteforce list. github.com/cujanovic/subd… Content Bruteforcing Wordlist. github.com/cujanovic/Cont…

Want a free Safari 0day? (Ok, it's actually a 1day because it's fixed in the latest WebKit version, but it still works in the latest version of Safari) Then go to github.com/LinusHenze/Web… Please don't do evil stuff with this.

中国造

Pocsuite v2.0.8 - Remote Vulnerability Testing Framework Developed By The Knownsec Security Team kitploit.com/2018/12/pocsui…

List of Recon methodology,Recon tools and Bug Bounty writeups. medium.com/bugbountywrite… medium.com/secjuice/guide… medium.com/ehsahil/recon-… 0xpatrik.com/asset-discover… pentester.land/list-of-bug-bo… bugbountyforum.com/tools/recon/ github.com/enaqx/awesome-… geekflare.com/find-subdomain…

666啊

SocialFi 2.0: xpet.tech mainnet is live! ❤️‍🔥 Set up the extension, raise pets on 𝕏 and receive $BPET. Download the extension: xpet.tech Code for newcomers: xpet-early-access Don't forget that you can share your code to receive additional

Hackers hijack WhatsApp and Telegram accounts using SS7 Exploit - Part 2 blog.drhack.net/whatsapp-teleg… 来自 Hackology