Monday, April 1, 2019

Commando VM - The First of Its Kind Windows Offensive Distribution



Welcome to CommandoVM - a fully customized, Windows-based security distribution for penetration testing and red teaming.

Using HTTP Pipelining to hide requests

Image result for http bad request

In this post I'm going to discuss using HTTP pipelining to hide malicious HTTP requests. This is not domain fronting but uses similar techniques to get the same result, an observer who is not able to perform TLS interception is only able to see the "good" request which conceals the "bad" request.

Sunday, March 31, 2019

How To Increase Jio 4G Net Speed Upto 80 Mbps, 7 Awesome Tricks

Image result for jio
How To Increase Jio 4G Net Speed Up to 80 Mbps, 7 Awesome Tricks: So you got Jio 4G sim card and are you looking to increase the internet speed of your jio sim. Then you came to right place.

UPnProxy – A Dubbed NSA Hacking Tool of EternalSilence Vulnerable to Attack 277,000 UPnP Enabled Routers

UPnProxy

New research reveals that  Universal Plug and Play (UPnP) implemented 277,000 Connected Devices are vulnerable to malicious proxy system UPnProxy , a dubbed EternalSilence NSA hacking tool arsenal.

OWASP A10-Unvalidated Redirects and Forwards

Unvalidated Redirects and Forwards

Web applications often redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages.

Flightsim - A Utility To Generate Malicious Network Traffic And Evaluate Controls


flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other suspicious traffic patterns.

Osmedeus - Fully Automated Offensive Security Tool For Reconnaissance And Vulnerability Scanning

Osmedeus allow you automated run the collection of awesome tools to  reconnaissance  and  vulnerability scanning  against the target.