Последние посты
Hck4Fun
15 апр., 16:14
Infrastructure Exposure: What Your Network Reveals to Attackers Before They Even Knockhttps://www.cyborux.com/blog/infrastructure-exposure-what-your-network-reveals-to-attackersHck4Fun
9 апр., 08:34
Cybersecurity API for AI Agents: The Complete MCP Integration Guidehttps://www.cyborux.com/blog/cybersecurity-api-for-ai-agents-mcp-integration-guideHck4Fun
7 апр., 15:08
Most organizations have no idea what's visible from the outside.Your network tells a story to anyone who looks — cloud providers, leaked internal IPs, server names buried in old PDFs, even your Active Directory naming conventions. 👉 𝗪𝗲 𝗯𝗿𝗼𝗸𝗲 𝗶𝘁 𝗱𝗼𝘄𝗻: https://www.cyborux.com/blog/infrastructure-exposure-what-your-network-reveals-to-attackersCyboruxCyborux — External Exposure IntelligenceKnow exactly what you're exposing to the internet — before attackers do. AI-driven external exposure intelligence for every domain, email, and employee.Hck4Fun
23 июл. 2025 г., 07:13
📢 𝗙𝗿𝗼𝗺 @𝗵𝗰𝗸𝟰𝗳𝘂𝗻 𝘁𝗼 𝗛𝗰𝗸𝟰𝗳𝘂𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗛𝘂𝗯 — 1300+ Cybersecurity Resources in One Place 🔐Back in 𝟮𝟬𝟮𝟬, I started the @𝗵𝗰𝗸𝟰𝗳𝘂𝗻 𝗧𝗲𝗹𝗲𝗴𝗿𝗮𝗺 𝗰𝗵𝗮𝗻𝗻𝗲𝗹 to share infosec content I was reading, using, or learning from — tutorials, tools, write-ups, and niche guides I thought deserved more attention.Fast forward to today, and 𝗜’𝘃𝗲 𝘀𝗵𝗮𝗿𝗲𝗱 𝟭,𝟯𝟬𝟬+ links across all areas of cybersecurity — from Red Team to OSINT, reverse engineering to bug bounty, Windows to Android hacking.🔍 N𝗼𝘄 all resources are available 𝗶𝗻 𝗮 𝘀𝗲𝗮𝗿𝗰𝗵𝗮𝗯𝗹𝗲, 𝗰𝗮𝘁𝗲𝗴𝗼𝗿𝗶𝘇𝗲𝗱, 𝗼𝗽𝗲𝗻 𝗿𝗲𝗽𝗼𝘀𝗶𝘁𝗼𝗿𝘆 — 𝗲𝗮𝘀𝘆 𝘁𝗼 𝗲𝘅𝗽𝗹𝗼𝗿𝗲, 𝗲𝗮𝘀𝘆 𝘁𝗼 𝘀𝗵𝗮𝗿𝗲.👉 https://bytemallet.github.io/hck4fun-security-hub/bytemallet.github.ioHck4fun Learning HubCurated cybersecurity learning resources with advanced filtering and search capabilities.1,120Открыть в TelegramHck4Fun
7 июл. 2025 г., 09:54
🚨 I'm building a tool that lets you check if 𝘆𝗼𝘂𝗿 𝗱𝗼𝗺𝗮𝗶𝗻 𝗵𝗮𝘀 𝗯𝗲𝗲𝗻 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗶𝗻 𝘁𝗵𝗲 𝗿𝗲𝘀𝘂𝗹𝘁𝘀 𝗼𝗳 𝗻𝗲𝗮𝗿𝗹𝘆 𝟴,𝟬𝟬𝟬 𝗲𝘅𝗲𝗰𝘂𝘁𝗲𝗱 𝗚𝗼𝗼𝗴𝗹𝗲 𝗱𝗼𝗿𝗸𝘀.It’s a simple way to 𝘂𝗻𝗰𝗼𝘃𝗲𝗿 𝗽𝘂𝗯𝗹𝗶𝗰𝗹𝘆 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗱𝗮𝘁𝗮 𝗹𝗶𝗻𝗸𝗲𝗱 𝘁𝗼 𝘆𝗼𝘂𝗿 𝗱𝗼𝗺𝗮𝗶𝗻 — without running a single search yourself.You can try the early version — and if you want full reports or alerts, get in touch.👉 𝗗𝗠 𝗺𝗲 𝗼𝗿 𝘀𝗶𝗴𝗻 𝘂𝗽 𝗵𝗲𝗿𝗲: https://www.darkgos.xyzThis is just the beginning. Alerts, 𝗲𝘅𝗽𝗼𝘀𝘂𝗿𝗲 𝗿𝗲𝗽𝗼𝗿𝘁𝘀, 𝗔𝗣𝗜 𝗮𝗰𝗰𝗲𝘀𝘀, 𝗮𝗻𝗱 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻 𝗮𝗿𝗲 𝗰𝗼𝗺𝗶𝗻𝗴 𝘀𝗼𝗼𝗻.www.darkgos.xyzDarkgos SecurityIdentify potential security exposures in your web domain through advanced Google dork analysis. Strengthen your security posture by discovering what attackers might find.Hck4Fun
20 мая 2025 г., 15:32
Game of Active Directory (GOADv3) en Windows – 2025https://deephacking.tech/game-of-active-directory-goadv3-en-windows-2025/#Windows #AD #GOAD #labDeep HackingCómo instalar Game of Active Directory (GOADv3) en Windows – Deep HackingGuía completa para instalar GOADv3, el mejor laboratorio de Active Directory para practicar pentesting, utilizando VMWare y Python en Windows.Hck4Fun
17 мая 2025 г., 08:32
Penetration Testing and Auditing AWShttps://themayor.notion.site/penetration-testing-and-auditing-aws#pentesting #AWS #auditng #resourcesthemayor on NotionPenetration Testing and Auditing AWS | NotionBasic AWS UsageHck4Fun
12 мая 2025 г., 08:36
MALOPS - Advanced Malware Analysis Training Platformhttps://malops.io/#malware #training #analysis #platformHck4Fun
8 мая 2025 г., 08:32
Why Prompts Are the New IOCs You Didn’t See Coming!https://blog.securitybreak.io/why-prompts-are-the-new-iocs-you-didnt-see-coming-46ecaacafe0a#IoC #prompt #YARA #NOVAMediumWhy Prompts Are the New IOCs You Didn’t See Coming!Prompts? Really? Yep, Really. 😏Hck4Fun
2 мая 2025 г., 16:09
Advance Phishing Toolhttps://github.com/Ignitetch/AdvPhishing#phishing #tool #OTP #templateGitHubGitHub - Ignitetch/AdvPhishing: This is Advance Phishing Tool ! OTP PHISHINGThis is Advance Phishing Tool ! OTP PHISHING. Contribute to Ignitetch/AdvPhishing development by creating an account on GitHub.Hck4Fun
30 апр. 2025 г., 08:34
Nginxpwnerhttps://github.com/stark0de/nginxpwner#Nginxpwner #nginx #herramienta #configuraciónGitHubGitHub - stark0de/nginxpwner: Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. - stark0de/nginxpwnerHck4Fun
28 апр. 2025 г., 08:30
Herramientas SAST para auditoría de código y SecDevOps – Parte 1https://thehackerway.com/2021/09/23/herramientas-sast-para-auditoria-de-codigo-y-secdevops-parte-1/#SecDevOps #SAST #herramientas #auditoriaThe Hacker WayHerramientas SAST para auditoría de código y SecDevOps - Parte 1 - The Hacker WayDemostración en vídeo de este postHck4Fun
27 апр. 2025 г., 08:30
Minifying XSS (EN)https://medium.com/taptuit/minifying-xss-f17d7dc241cf#XSS #19chars #evasion #emojiMediumMinifying XSSHow I bypassed Cross-Site Scripting sanitation in less than 20 charactersHck4Fun
26 апр. 2025 г., 08:30
XML External Entity – Beyond /etc/passwd (For Fun & Profit)https://www.blackhillsinfosec.com/xml-external-entity-beyond-etcpasswd-fun-profit/#XML #XEE #vulnerabilidad #explotaciónBlack Hills Information Security, Inc.XML External Entity - Beyond /etc/passwd (For Fun & Profit) - Black Hills Information Security, Inc.Robert Schwass*// Last week I was asked twice in one day if I knew what XML External Entity (XXE) Vulnerabilities were. Maybe they are making a comeback in mainstream security […]Hck4Fun
25 апр. 2025 г., 08:30
Cómo utilitzar anónimamente Kalihttps://noticiasseguridad.com/tutoriales/como-utilizar-anonimamente-kali-os-para-hacking/#kali #anonimo #hackingNoticiasseguridadCÓMO UTILIZAR ANÓNIMAMENTE KALI OS PARA HACKINGCÓMO UTILIZAR ANÓNIMAMENTE KALI OS PARA HACKING : Tutorial hacking ético ciberseguridad servicios especialistas seguridad informáticaHck4Fun
24 апр. 2025 г., 08:30
Aprende a enumerar dominios de Active Directory con SMBMaphttps://thehackerway.com/2022/09/28/aprende-a-enumerar-dominios-de-active-directory-con-smbmap/#ActiveDirectory #SMBMap #enumeración #RCEThe Hacker WayAprende a enumerar dominios de Active Directory con SMBMap - The Hacker WayDemostración en vídeo de este post:Hck4Fun
23 апр. 2025 г., 08:30
Evil Twin Enterprise WiFi Network using Hostapd-Manahttps://tbhaxor.com/evil-twin-wifi-network-using-hostapd-mana/#wifi #eviltwin #red #manatbhaxor's BlogEvil Twin Enterprise WiFi Network using Hostapd-ManaIn this post, you will learn how to set up Honeypot WiFi Enterprise WiFi Network and get the username and password of the client.Hck4Fun
22 апр. 2025 г., 08:30
Redcloud (EN)https://github.com/khast3x/Redcloud#redcloud #redteam #docker #labGitHubGitHub - khast3x/Redcloud: Automated Red Team Infrastructure deployement using DockerAutomated Red Team Infrastructure deployement using Docker - khast3x/RedcloudHck4Fun
21 апр. 2025 г., 08:30
Magic Unicornhttps://github.com/trustedsec/unicorn#herramienta #maldoc #powershell #evasionGitHubGitHub - trustedsec/unicorn: Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into…Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique...Hck4Fun
20 апр. 2025 г., 08:30
Exploiting Race conditions with Nuclei (EN)https://blog.projectdiscovery.io/exploiting-race-conditons/#Nuclei #condicion #carrera #explotacionProjectDiscoveryExploiting Race conditions with Nuclei — ProjectDiscovery BlogWhat Is a Race Condition Vulnerability? A race condition attack happens when a computing system that’s designed to handle tasks in a specific sequence is forced to perform two or more operations simultaneously. This technique takes advantage of a time gap…
