Telegram-канал "Technical Devang" — @technicaldevang

Technical Devang

22 Nov, 18:33

URLFinder

URLFinder is a high-speed, passive URL discovery tool designed to simplify and accelerate web asset discovery, ideal for penetration testers, security researchers, and developers looking to gather URLs without active scanning.

— Passive source discovery
— JSON/file/stdout output
— Optimized speed & efficiency

https://github.com/projectdiscovery/urlfinder

GitHub - projectdiscovery/urlfinder: A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning. - projectdiscovery/urlfinder

59 0 0

Technical Devang

22 Nov, 18:16

ODIN

IP search engine.

Search by ip, domain name, ASN, geolocation, BGP prefix, ASN number, WHOIS updated date and other parameters.

search.odin.io

62 0 0

Technical Devang

19 Nov, 19:43

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487).

https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487) — ProjectDiscovery Blog

Introduction In light of the recent Ruby-SAML bypass discovered in GitLab, we set out to examine the SAML implementation within GitHub Enterprise. During our research, we identified a significant vulnerability that enabled bypassing GitHub’s SAML authentication when encrypted assertions were in use...

104 0 0

Technical Devang

18 Nov, 17:08

100 Hacking Tools and Resources

https://www.hackerone.com/ethical-hacker/100-hacking-tools-and-resources

100 Hacking Tools and Resources

Whether you’ve just started hacking or are a real pro, we’ve created the ultimate list of 100 hacking tools for your toolkit!

129 0 2

Technical Devang

16 Nov, 21:32

🎣 Top 13 Public Phishing Tools in 2024

🔹 1. Phishing Frenzy: github.com/pentestgeek/phishing-frenzy 🎉
🔹 2. Ghost Phisher: github.com/savio-code/ghost-phisher 👻
🔹 3. King Phisher: github.com/rsmusllp/king-phisher 👑
🔹 4. WiFiPhisher: github.com/wifiphisher/wifiphisher 📶
🔹 5. GoPhish: github.com/gophish/gophish 🚀
🔹 6. Zphisher: github.com/htr-tech/zphisher ⚡
🔹 7. BlackPhish: github.com/iinc0gnit0/BlackPhish 🖤
🔹 8. OhMyQR: github.com/cryptedwolf/ohmyqr 🤳
🔹 9. SayCheese: github.com/hangetzzu/saycheese 📸
🔹 10. I-See-You: github.com/Viralmaniar/I-See-You 👀
🔹 11. Social Engineer Toolkit (SET): github.com/trustedsec/social-engineer-toolkit 🛠️
🔹 12. Evilginx: github.com/kgretzky/evilginx 😈
🔹 13. SocialFish: github.com/UndeadSec/SocialFish 🐟

GitHub - pentestgeek/phishing-frenzy: Ruby on Rails Phishing Framework

Ruby on Rails Phishing Framework. Contribute to pentestgeek/phishing-frenzy development by creating an account on GitHub.

137 0 2

Technical Devang

16 Nov, 10:34

Google advanced video search

When you search for videos on search engines, don't forget that there, as on and YouTube, there are advanced search filters. For example, #Google has filters for language, duration, subtitles, and domain.

https://www.google.com/advanced_video_search

137 0 1

Technical Devang

13 Nov, 10:31

MEMERY

Very easy to install and use #python tool (with GUI) for text search of images in a local directory on your computer or server.

https://github.com/deepfates/memery

GitHub - deepfates/memery: Search over large image datasets with natural language and computer vision!

Search over large image datasets with natural language and computer vision! - deepfates/memery

180 0 1

Technical Devang

12 Nov, 18:44

Finding Email Addresses without Paywalls

Every Pentester or Red Teamer has likely encountered situations where they need to perform User Enumeration or Password Spraying, but where can you find a list of valid users? Snov.io, Hunter.io, and Phonebook.cz no longer provide easy access to email lists and instead hit you with a paywall.

Here’s the solution — Prospeo! Just log in with Google SSO, enter the target domain, and get a list of email addresses with no strings attached.

176 0 1

Technical Devang

11 Nov, 19:59

superbolt.web.app
A new tool from GrayLark allows to geolocate a photo by very small details (a window corner, a trash can, a bush on the sidewalk, etc.).
So far only works for San Francisco, but many other cities are ahead.

183 0 2

Technical Devang

11 Nov, 19:25

Telegram Scraper

- scrape messages from multiple channels
- download media files
- export data to JSON/CSV formats
- SQLite database storage

https://github.com/unnohwn/telegram-scraper

GitHub - unnohwn/telegram-scraper: A powerful Python script that allows you to scrape messages and media from Telegram channels using the Telethon library. Features include real-time continuous scraping, media downloading, and data export capabilities.

A powerful Python script that allows you to scrape messages and media from Telegram channels using the Telethon library. Features include real-time continuous scraping, media downloading, and data ...

185 0 3

Technical Devang

11 Nov, 19:14

From HTTP to RCE - How to leave backdoor in IIS.

https://cicada-8.medium.com/from-http-to-rce-how-to-leave-backdoor-in-iis-cbef8249eba9

From HTTP to RCE. How to leave backdoor in IIS

I will show the way of persistence on a target system using legitimate Microsoft product being Internet Information Services.

152 0 0

Technical Devang

11 Nov, 19:07

Obsidian Web Clipper

New extension that helps you highlight and capture the web in your browser. Anything you save is stored as durable Markdown files that you can read offline, and preserve for the long term.

Source:
https://obsidian.md/clipper

Obsidian Web Clipper

Highlight and capture web pages in your favorite browser. Save anything and everything with just one click.

152 0 2