Learn Cybersecurity

🔖 ex-param
An automated tool designed to discover reflected parameters for XSS vulnerabilities. It:

Crawls target websites.
Extracts GET parameters.
Tests them for reflected input.

Ideal for bug bounty hunters and penetration testers, enabling fast and efficient detection of XSS flaws.

🔗 GitHub: https://github.com/rootDR/ex-param

𝐃𝐢𝐬𝐜𝐥𝐚𝐢𝐦𝐞𝐫: This post is for educational and informational purposes only. Do not use this information for illegal activities or to cause harm to others. The author is not liable for any misuse or illegal use of the information presented. Please use this information responsibly and in compliance with Facebook's community standards.
====================
Join Our Telegram Channel
❶ https://t.me/teammatrixs
❷ https://t.me/teammatriix

Follow us on
❶ https://www.facebook.com/teammatriix
❷ https://www.youtube.com/@Teammatrixs

🔗 Visit our site: https://teammatrix.net

Awesome Bug Bounty Tools.

•  Recon:
- Subdomain Enumeration;
- Port Scanning;
- Screenshots;
- Technologies;
- Content Discovery;
- Links;
- Parameters;
- Fuzzing.

•  Exploitation:
- Command Injection;
- CORS Misconfiguration;
- CRLF Injection;
- CSRF Injection;
- Directory Traversal;
- File Inclusion;
- GraphQL Injection;
- Header Injection;
- Insecure Deserialization;
- Insecure Direct Object References;
- Open Redirect;
- Race Condition;
- Request Smuggling;
- Server Side Request Forgery;
- SQL Injection;
- XSS Injection;
- XXE Injection.

•  Miscellaneous:
- Passwords;
- Secrets;
- Git;
- Buckets;
- CMS;
- JSON Web Token;
- postMessage;
- Subdomain Takeover;
- Uncategorized.

Twitter Tools

View username, display name and bio history of any Twitter user.

twitter.lolarchiver.com

Partly free. Works well, but not always accurately. Use in combination with other similar tools (like UserSearch etc).

Cybersecurity Tools for 2024 (what to learn)👇

✅ Network Security
├─ Firewalls
│  ├─ Next-Generation Firewalls
│  └─ Cloud-Based Firewalls
├─ VPNs
│  ├─ SSL/TLS VPNs
│  └─ Software-Defined Perimeter (SDP)
└─ Network Monitoring
   ├─ Network Traffic Analysis
   └─ Intrusion Detection and Prevention Systems (IDPS)

✅ Endpoint Security
├─ Antivirus/Antimalware
│  ├─ Behavior-Based Detection
│  └─ Machine Learning-Powered Antimalware
├─ Endpoint Detection and Response (EDR)
│  ├─ Threat Hunting
│  └─ Automated Remediation
└─ Patch Management
   ├─ Vulnerability Scanning
   └─ Automated Patching

✅ Identity and Access Management
├─ Multi-Factor Authentication (MFA)
│  ├─ Biometric Authentication
│  └─ Hardware Security Keys
└─ Privileged Access Management (PAM)
   ├─ Session Recording
   └─ Just-In-Time Access

✅ Cloud Security
├─ Cloud Access Security Brokers (CASB)
│  ├─ Data Loss Prevention (DLP)
│  └─ Anomaly Detection
└─ Container Security
   ├─ Image Scanning
   └─ Runtime Protection

✅ Application Security
├─ Web Application Firewalls (WAF)
│  ├─ Bot Management
│  └─ API Security
└─ Application Security Testing
   ├─ Static Application Security Testing (SAST)
   └─ Dynamic Application Security Testing (DAST)

✅ Security Analytics and Automation
├─ Security Information and Event Management (SIEM)
│  ├─ User and Entity Behavior Analytics (UEBA)
│  └─ Automated Threat Hunting
└─ Security Orchestration, Automation, and Response (SOAR)
   ├─ Playbook Automation
   └─ Threat Intelligence Integration

✅ Emerging Technologies
├─ Extended Detection and Response (XDR)
   ├─ Threat Intelligence Platforms
   └─ Artificial Intelligence/Machine Learning
└─ Quantum-Resistant Cryptography
   ├─ Post-Quantum Algorithms
   └─ Quantum Key Distribution

iOS Forensics Suite

Generates detailed reports from iOS backups (encrypted & unencrypted) with device info, contacts, messages, WiFi, notes, WhatsApp data & more. All done locally.

https://github.com/piotrbania/ios_forensics_suite

🔖afrog - Vulnerability Scanner

afrog is a fast and reliable tool for finding and fixing vulnerabilities. It supports custom PoCs and detects issues like CVEs, unauthorized access, and file reading.

📌 GitHub: github.com/zan8in/afrog

Common Crawl Archive allows to get a saved copy of most pages on the internet for every week since October 2014 + less regular data since 2008.

https://commoncrawl.org

TryHackMe - Intro Rooms:

https://tryhackme.com/room/hello
https://tryhackme.com/room/howtousetryhackme
https://tryhackme.com/room/gettingstarted
https://tryhackme.com/room/welcome
https://tryhackme.com/room/tutorial
https://tryhackme.com/room/openvpn
https://tryhackme.com/room/beginnerpathintro
https://tryhackme.com/room/startingoutincybersec
https://tryhackme.com/room/introtoresearch