Mr.Trunk · @mrtrunk
12 followers · 19529 posts · Server dromedary.seedoubleyou.meSecurityOnline: Pentest Mapper: Burp Suite Extension for Application Penetration Testing https://securityonline.info/pentest-mapper-burp-suite-extension-for-application-penetration-testing/ #ApplicationPenetrationTesting #WebVulnerabilityAnalysis #WebInformationGathering #burpsuite
#applicationpenetrationtesting #webvulnerabilityanalysis #webinformationgathering #burpsuite
Vlad :verified: · @VladDBA
47 followers · 84 posts · Server mastodon.cloudIn this post I'm covering the risks brought on by not securing SQL Server's service account and setting it to run under a privileged account, and demo how an attacker can leverage it to gain access to the instance's host.
It was fun using Burp Suite Pro to demo data exfiltration through HTTP, as well as HoaxShell to demo initiating a reverse shell connection, all from SQL Server.
https://vladdba.com/2023/07/24/securing-sql-servers-service-account/
#sqlserver #dba #mssqlserver #mssql #sqlserverdba #windows #security #hoaxshell #burpsuite
#sqlserver #dba #mssqlserver #mssql #sqlserverdba #windows #security #hoaxshell #burpsuite
agentduckman · @agentduckman
42 followers · 96 posts · Server fosstodon.org@birnim a fair point. I guess the two things that I must have WM for would be an internet browser and #burpsuite (Doing security work with Kali)
Duggy Tuxy · @duggytuxy
10 followers · 14 posts · Server mastouille.fr
De chouettes ressources/modules d'apprentissage sur Hack The Box Academy tels que Linux Fundamentals, Nmap, Metasploit, Burp Suite, BloodHound etc.
Lien vers le site ==> https://lnkd.in/eycfydta
PS: à consommer sans modérations !!!
#apprentissage #linux #burpsuite #infosec #pentest #hackthebox #cybersecurity #cyber
#apprentissage #linux #burpsuite #infosec #pentest #hackthebox #cybersecurity #cyber
Tae'lur Alexis :verified: · @taeluralexis
285 followers · 99 posts · Server infosec.exchange
#100DaysOfHacking Day 6:
My friend taught me Metasploit today and we were poppin shells it was pretty dope! It was a hands on approach, I picked up the basics fairly quickly. Also won a Burp Suite Pro license for a year and I’m excited to use it. What a great day :3
I’m taking the rest of the day off from studying to spend time with my mom, she just got told by her doctor that her vitals are good and that’s so great!
#100daysofhacking #infosec #burpsuite #cybersecurity
iz_floresta · @iz_floresta
47 followers · 140 posts · Server hachyderm.ioMy latest blog post on manipulating JWT tokens in PortSwigger labs with the super cool JWT Editor extension for #Burpsuite.
This is result of another assignment from The XSS Rat's #CNWPP prep course.
https://medium.com/@iz_floresta/json-web-token-attacks-with-burp-suite-1ca8938c6843
Wu Yuansheng · @admin
19 followers · 15159 posts · Server social.xinghaizhandui.com
RT three_cube: Web App Hacking: Online Password Cracking with BurpSuite #burpsuite #burp #webapphacking #cybersecurity #cyberwarrior #infosec
#burpsuite #burp #webapphacking #CyberSecurity #cyberwarrior #infosec
Tae'lur Alexis :verified: · @taeluralexis
231 followers · 7 posts · Server infosec.exchangeHere’s how I’ve been learning web app pentesting:
- Bug Bounty Bootcamp by Vickie Li (This book provides such a beautiful & detailed introduction to how HTTP & cookies/JSON Web Tokens work, Burp Suite, writing Bash scripts & finding web vulnerabilities)
- Portswigger Web Academy
- TryHackMe
- HackTheBox Academy (this platform is beast!)
I’ve been testing out diff tools, techniques & recon on my personal websites :-)
#pentesting #infosec #cybersecurity #coding #owasp #burpsuite #hacking
#pentesting #infosec #cybersecurity #coding #owasp #burpsuite #hacking
n0kovo 🇩🇰:anarchy::comm::terminal::vegan::debian::python::tor::signal: · @n0kovo
553 followers · 110 posts · Server infosec.exchange
I made a Burp extension! Are you tired of manually copying request headers from Burp, formatting them like
-H 'User-Agent:Something'
and pasting them into your command to use them with cURL, Gobuster, Wfuzz, fuff, Feroxbuster etc.?
I sure was. So I made this:
https://github.com/n0kovo/burp-copy-headers-as-args
You're welcome ❤️
#burpsuite #pentest #pentesting #bugbountytips #bugbounty #foss #appsec #hacking #tools #infosec #redteam #redteaming #PentestingTools #fuzzing #bapp
#burpsuite #pentest #pentesting #bugbountytips #bugbounty #foss #appsec #hacking #tools #infosec #redteam #redteaming #pentestingtools #fuzzing #bapp
Konstantin · @kpwn
38 followers · 164 posts · Server infosec.exchange
Seriously, why is there no stop button?!
#MemeMonday #Pentesting #InfoSec #CyberSec #BugBounty #ParamMiner #BurpSuite
#mememonday #pentesting #infosec #cybersec #bugbounty #paramminer #burpsuite
Konstantin · @kpwn
36 followers · 161 posts · Server infosec.exchange
#BurpSuite 2023.1.2 (stable) was released today. Changes include
- Restructured settings ⚙️
- The possibility to configure the default group for Repeater tabs 😍
- Persistence for Burp extensions 💾
- Prefixes and suffixes in macro parameters 🟨⬛🟨
- Improvements to Burp Scanner 🐜
Read more here:
https://portswigger.net/burp/releases/professional-community-2023-1-2
· @postmodern
868 followers · 551 posts · Server infosec.exchangeAsking this question again in 2023. Do bug bounty hunters have a preferred common format for logging HTTP requests / responses?
#bugbounty #burpsuite #http
infosec-jobs.com · @infosec_jobs
1430 followers · 14555 posts · Server mastodon.socialHIRING: Penetration Testers - Red Team ICS/OT and Network Experience / Florida https://infosec-jobs.com/J23745/ #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #Florida #Aircrack #APIs #Blackbox #BurpSuite #Cpp #CEH #Clearance #Cloud #CobaltStrike #EDR
#infosec #infosecjobs #cybersecurity #jobsearch #hiringnow #cybercareers #florida #aircrack #apis #blackbox #burpsuite #cpp #ceh #clearance #cloud #cobaltstrike #edr
Konstantin · @kpwn
29 followers · 91 posts · Server infosec.exchange
#burpsuite #mememonday #pentesting #infosec #cybersec #bugbounty #clientsidedesync
Digital Empress :verified: · @digitalempress
405 followers · 224 posts · Server infosec.exchange
Solved: Broken brute-force protection, IP block
Took me 2 days but I got it! 🥳
#burpsuite #appsec #hacking #owasp #bruteforce
Digital Empress :verified: · @digitalempress
405 followers · 224 posts · Server infosec.exchange
Solved: Username enumeration via response timing
#burpsuite #portswigger #owasp #appsec #studying
Digital Empress :verified: · @digitalempress
404 followers · 223 posts · Server infosec.exchange
Solved: Username enumeration via subtly different responses
#portswigger #burpsuite #appsec
infosec-jobs.com · @infosec_jobs
1417 followers · 14544 posts · Server mastodon.socialHIRING: Penetration Tester - Remote / Alexandria, VA https://infosec-jobs.com/J22819/ #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareers #Alexandria #VA #ActiveDirectory #Analytics #Applicationsecurity #APT #BurpSuite #CEH #CISSP #Clearance #CobaltStrike
#infosec #infosecjobs #cybersecurity #jobsearch #hiringnow #cybercareers #alexandria #va #activedirectory #analytics #applicationsecurity #apt #burpsuite #ceh #cissp #clearance #cobaltstrike
Darryl Nixon :verified_flashing: · @darryl
120 followers · 159 posts · Server infosec.exchangeI purchased ProxyMan for my Mac with their generous student discount because it's cheaper than Burp Suite, and I can't/don't use my work licenses for self-directed research and academia.
It's nice. The UI/UX is intuitive and macOS-like, making it stand out for me against the likes of mitmproxy, Burp, and ZAP. It took a handful of straightforward in-app clicks to set the system proxy, trust their root CA certificate for specific domains, and pass-thru everything else.
My license also unlocked premium features for their mobile app, which I just learned of but am now interested in checking out. I'm glad there's still room for competition in the MITM space.
#ProxyMan #proxy #mitm #mitmproxy #burp #burpsuite #owasp #zap
José Pedro Mayo · @jpmayo
7 followers · 22 posts · Server infosec.exchangeoffsec.tools - A vast collection of security tools
#CyberSecurity #osint #pentest #scanner #cve #vulnerabilities #burpsuite #endpoints #passwords #cloud #secrets #fuzzing #dns #ips #framework #network #directories #crawler #screeenshots #git #cms #allinone #proxy #probing
#cybersecurity #osint #pentest #scanner #cve #vulnerabilities #burpsuite #endpoints #passwords #cloud #secrets #fuzzing #dns #ips #framework #network #directories #crawler #screeenshots #git #cms #allinone #proxy #probing