[OSINT]Shodanを使ってFileZenを探せ その1｜__aloha__
【更新履歴】 2020年12月10日 情報更新：１２月１０日にソリトンシステムズ（株）から脆弱性に係る情報が詳細の公開されため追記。 2021年3月2日 情報更新：「【重要】FileZen脆弱性に関するお知らせ」として2月18日に開発元のソリトンシステムズから新たな脆弱性に係る情報の発出がなされました。本件については脆弱性に係るパッチが存在しない「ゼロデイ」の情報であることが公開されています。 https://www.soliton.co.jp/support/2021/004334.html 2021年4月27日 情報更新： 内閣府職員等が利用する「ファイル共有ストレージ」に対する不正アクセスについて https://www.cao.go.jp/others/csi/security/20210422notice.html また、情報がでてきたため、追加調査（パッチはいつ適用したのかを調
![[OSINT]Shodanを使ってFileZenを探せ その1｜__aloha__](https://cdn-ak-scissors.b.st-hatena.com/image/square/4b5144d6d7dfe94349769dbdc4c146fe846efae2/height=288;version=1;width=512/https%3A%2F%2Fassets.st-note.com%2Fproduction%2Fuploads%2Fimages%2F40425274%2Fpicture_pc_fb297569192625412286ad66b9673712.png)
"Must Have" Free OSINT Resources | SANS
Free course demos allow you to see course content, watch world-class instructors in action, and evaluate course difficulty.
Best OSINT Tools for 2020
OSINT means Open source intelligence refers to information that can be collected from the public for free. Here are the 10 best OSINT tools to do so. OSINT or Open source intelligence refers to information about businesses or people that can be collected from online sources. However, it requires tools to do so, and here are the 10 best OSINT Tools for 2020. In a world full of information overload,
GitHub - hisxo/gitGraber: gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
It's important to understand that gitGraber is not designed to check history of repositories, many tools can already do that great. gitGraber was originally developed to monitor and parse last indexed files on GitHub. If gitGraber find something interesting, you will receive a notification on your Slack channel. You can also use it to have results directly on the command line. In our experience, w
『事例から学ぶ情報セキュリティ』
わかりやすい内容で勉強になった。 以下メモ。 詳細は自分で調べたほうがよさそう。 ■SHODANを利用したネットワーク機器の情報取得
Bug Hunting Methodology(Part-2)
Hi I am Shankar R ( @trapp3r_hat) from India. I hope you all doing good. I am a security researcher from the last few years. Yes absolutely am doing bug bounty in the part-time because I am working as a Cyber Security Consultant at Peneto Labs Pvt Ltd(Chennai). Here is my first write up about the Bug Hunting Methodology Kindly read the first one if you really missed it to read previously.(I am not
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - Dutchosintguy/osint_links: Collection of osint related links original posted by Tr1gger on raidforums.com which Tr1gger had copied from the @i_intelligence handbook
https://i-intelligence.eu/uploads/public-documents/OSINT_Handbook_June-2018_Final.pdf
GitHub - Lucifer1993/cmsprint: CMS和中间件指纹库
Bug Bounty Helper
GitHub - kaiiyer/awesome-vulnerable: A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
Patrik’s Bug Bounty 🛠️Tools🛠️ | Patrik Fehrenbach
GitDorker — A Better Tool to Perform GitHub Dorks and Snag Easy Bug Bounty Wins
GitHub - obheda12/GitDorker: A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
GitHub - cve-search/git-vuln-finder: Finding potential software vulnerabilities from git commit messages
GitHub - ALFA-group/BRON: "Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting" by Erik Hemberg, Jonathan Kelly, Michal Shlapentokh-Rothman, Bryn Reinstadler, K
GitHub - Sajibekanti/Bug_Bounty_Hand_Book: This is a 1st Part Of Bug Bounty Guideline . Hope Very Soon i will publish 2nd part
GitHub - serain/bbrecon: Python library and CLI for the Bug Bounty Recon API
GitHub - euphrat1ca/Security-List: If you have any good suggestions or comments during the search process, please feedback some index experience in issues. Thank you for your participation.查阅过程中，如果有什么好的意见或建议，请在Issues反馈，感谢您的参与。
Recon - My Way Or High Way