Offensive LSO (@BackupLSO) — Telegram channel posts

O

Offensive LSO

Photo

⚡Google Dorks - Cloud Storage: site:http://s3.amazonaws.com "target[.]com" site:http://blob.core.windows.net "target[.]com" site:http://googleapis.com "target[.]com" site:http://drive.google.com "target[.]com" 👉Find buckets and sensitive data. Combine: site:http://s3.amazonaws.com | site:http://blob.core.windows.net | site:http://googleapis.com | site:http://drive.google.com "target[.]com" Add something to narrow the results: "confidential” “privileged" “not for public release” ✅Credit- Mike Takahashi Save ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

20 · 1.6K · 18:11

Offensive LSO

Photo

url/?f=etc/passwd ==> 403 encode etc/passwd as base64 url/?f=L2V0Yy9wYXNzd2Q= ==> 200 you can use this trick in SQL , SSTI , XSS , LFI , Etc... ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

28 · 1.5K · 04:27

O

Photo

File
common_security_issues_in_financially_orientated_web_applica · 654 KB · click to show

Common Security Issues in Financially Oriented Web Applications ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

30 · 2K · 05:02

O

Offensive LSO

🛡️ Bug Bounty Tip: Test IDOR + Web Cache Deception Together When hunting IDORs, always check for web cache deception on the same endpoints: 1. As User A, access a sensitive resource like /api/invoices/123 (also try appending .css or .js). 2. As User B, repeat the exact same URL with identical headers. 3. Only change the Cookie/Auth token. If User B receives User A's 200 OK response from cache → you've likely found a critical vulnerability! This combo can lead to account takeover-level impacts. ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

9 · 1.5K · 05:15

O

Offensive LSO

Video
523476288-a67db2b5-672a-43df-b709-149c8eaee975.mp4 · 1010 KB

PenTesting Agent : is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows. red team ops, Automated recon & exploitation, smart task trees, multi-agent collab, and seamless tool chaining like Nmap, Metasploit, SQLMap, Amass etc https://github.com/GH05TCREW/pentestagent ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

36 · 1.9K · 05:18

O

Offensive LSO

File
SQL injection.pdf · 599 KB · click to show

🚨SQL Injection Cheat Sheet ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

46 · 1.9K · 05:19

O

Offensive LSO

File
Top RCE reports from HackerOne.pdf · 367 KB · click to show

❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

31 · 1.7K · 06:24

O

Offensive LSO

File
Unauthenticated & Exploitable JIRA Vulnerabilities.pdf · 93 KB · click to show

❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

19 · 1.8K · 05:11

O

Offensive LSO

🔐 Testing 2FA in Web Applications? Don’t just test the OTP. A real 2FA assessment means checking the entire authentication flow account binding, token reuse, rate limiting, session state, backup codes, recovery flows, API logic, and more. We turned these checks into a practical Web Pentesting Field Checklist you can keep beside you during assessments. 🎯 Built for: • Bug Bounty Hunters • Web Pentesters • Security Researchers • CTF Players 💰 Get it for just $1 Small price. Useful checklist. No unnecessary theory. 👉 Get the 2FA Bypass Field Checklist : $1 📩 To purchase, send us a message : @LibrarySecOfficialBot

18 · 4.4K · 05:21

O

Offensive LSO

🤖🤖 JOIN THE Librarysec Backup COMMUNITY! 🤖🤖 Welcome to our mirrored Telegram group, designed to be a backup for our main LibrarySec Telegram channel in case of any unforeseen issues. Stay updated with the latest in cybersecurity: e-Books, guides, market trends, wordwide analytics, industry insiders, educational resources, ethical hacking, data protection, and more. 💰 JOIN NOW! 💰 30 day's invite links Don’t forget to stay tuned and follow us for any updates!

1 · 599 · 07:39

O

Offensive LSO

File
SAML Vulnerabilities.pdf · 104 KB · click to show

❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

14 · 732 · 04:56

O

Offensive LSO

Link
click to show

Archive Sans : https://t.me/+GpP6DvyK9f9mYzZk Archive OffSec : https://t.me/+nNgh2rGVWbs1N2Y0 Archive TCM Security : https://t.me/+ukI7oEgYw1djOTVk Archive alteredsecurity : https://t.me/+pj98dN_ZmCwwYzI8 Archive eLearnSecurity : https://t.me/+Uk0Q1W0KtGNmOWI0 Archive Ec Council : https://t.me/+PbuNXZjyEpMzMGU0 Archive Cyber Security Course : https://t.me/+pKh9NHDwEyIyZTE0 Archive Red Team : https://t.me/+pNaEuYkdeeo4MmI0

18 · 517 · 10:32

Offensive LSO

Hi everyone last week there was a wave of Telegram channel blocks in the OSINT community, and my second channel @osintgit was among those affected. Most channels have already been restored, but mine remains blocked. Please help forward the following message to Telegram support: The @osintgit channel has been blocked. It contained links to articles, presentations from the author’s conference talks, and publicly available tools related to information security. The channel never published personal data or any other prohibited content. Please unblock this channel and remove the restrictions on. Colleagues in the field have already managed to get the message through; with enough visibility we can do the same. Please send the message to Telegram support bots: @PressBot @AmeliaTearheart @BotSupport Also use Telegram Support: Open Settings → “Ask a Question” → proceed to the question. And email their official addresses: [email protected] [email protected] [email protected] [email protected] [email protected] I would be grateful for reposts of this post it greatly increases the chances of getting the channel unblocked.

5 · 542 · 17:34

O

Link
click to show

https://x.com/OffensivePwn/status/2103223998326648863 #Privacy

3 · 761 · 20:46

O

Offensive LSO

File
The Top Hacker Methodologies.pdf · 592 KB · click to show

The Top Hacker Methodologies ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

31 · 682 · 17:31

O

Offensive LSO

Photo

📚 مجموعه کتابهای کاربردی در دنیای امنیت مهارت واقعی با خواندن شروع میشود، اما با تمرین و تجربه ساخته میشود؛ کتابی را انتخاب کن که قدم بعدی تو در مسیر حرفه‌ای شدن باشد. 📖 کتابچه "Mimikatz: تسلط عملی بر تکنیک‌های پیشرفته حملات Active Directory" از مقدماتی تا پیشرفته. 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۵۰ تومان 📖 وایرشارک برای ردتیمرها: از پایه تا پیشرفته 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۵۰ تومان 📖 شکار عملی باگ بانتی : از Recon تا Bounty واقعی : متدولوژی و شناسایی و آسیب پذیری های دنیای واقعی 📕 جزئیات بیشتر کتاب 💰 قیمت : ۳۶۰ تومان 📖 کتابچه Kerberos For Pentesters 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۶۹ تومان ممکنه در آینده قیمت کتاب‌ ها تغییر کنه و افزایش داشته باشه بنابراین اگر قصد خرید دارید، قیمت فعلی فرصت خوبی برای تهیه کتاب‌ هاست. 📌 جهت خرید به ایدی زیر پیام دهید: @THBxSupport

214 · 14:54

O

Offensive LSO

Link
click to show

Download For509 Sans : https://t.me/+GpP6DvyK9f9mYzZk

2 · 317 · 03:22

O

Offensive LSO

We’re building a serious international Red Teaming education initiative, and we’re looking for experienced Red Teamers to join the team. The goal is not to create another course platform. We want to build practical, high-quality training based on real-world attack methodologies, adversary tradecraft, hands-on scenarios, and the mindset required to operate as a Red Teamer. Our training will be developed and published in English for a global audience. If you’re an experienced Red Teamer, penetration tester, or security practitioner and you’re interested in contributing your expertise and helping build something from the ground up, I’d be glad to connect and discuss the project. If this sounds interesting, send me a message : @RedTeamKitBot

116 · 12:11

O

Offensive LSO

🔖 پیدا کردن اطلاعات حساس با gf # Search for testing point with gau and fff gau target -subs | cut -d"?" -f1 | grep -E "\.js+(?:on|)$" | tee urls.txt sort -u urls.txt | fff -s 200 -o out/ # After we save responses from known URLs, it's time to dig for secrets for i in gf -list; do [[ ${i} =~ "_secrets"* ]] && gf ${i}; done کدوم secret با gf در JS فایل‌ها شکار کردین که bounty داد؟ تجربتون رو کامنت کنی @TryHackBox #باگ_بانتی

20 · 06:19

Offensive LSO

Photo

📚 مجموعه کتابهای کاربردی در دنیای امنیت مهارت واقعی با خواندن شروع میشود، اما با تمرین و تجربه ساخته میشود؛ کتابی را انتخاب کن که قدم بعدی تو در مسیر حرفه‌ای شدن باشد. 📖 کتابچه "Mimikatz: تسلط عملی بر تکنیک‌های پیشرفته حملات Active Directory" از مقدماتی تا پیشرفته. 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۵۰ تومان 📖 وایرشارک برای ردتیمرها: از پایه تا پیشرفته 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۵۰ تومان 📖 شکار عملی باگ بانتی : از Recon تا Bounty واقعی : متدولوژی و شناسایی و آسیب پذیری های دنیای واقعی 📕 جزئیات بیشتر کتاب 💰 قیمت : ۳۶۰ تومان 📖 کتابچه Kerberos For Pentesters 📕 جزئیات بیشتر کتاب 💰 قیمت : ۲۶۹ تومان ممکنه در آینده قیمت کتاب‌ ها تغییر کنه و افزایش داشته باشه بنابراین اگر قصد خرید دارید، قیمت فعلی فرصت خوبی برای تهیه کتاب‌ هاست. 📌 جهت خرید به ایدی زیر پیام دهید: @THBxSupport

40 · 06:00

O

If anyone has the PDF files for the following courses, please send them: * SEC537 * SEC487 * SEC587 * SEC617 * SEC580 Please send the files to the ID below: @LibrarySecOfficialBot

76 · 06:28

O

Offensive LSO

File
common_security_issues_in_financially_orientated_web_applica · 654 KB · click to show

Common Security Issues in Financially Oriented Web Applications ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial

9 · 416 · 04:31

O

Offensive LSO

We’re planning to build a specialized cybersecurity and CTF platform. If any developers are interested in contributing to the project on a voluntary basis in exchange for a share of its future revenue, feel free to message us. We’d be happy to discuss the project and explore opportunities to collaborate. @RedTeamKitBot

1 · 315 · 02:14

O

Offensive LSO

File
thb-ctf-04-keystone-player.zip · 17 KB · click to show

🔐 THB CTF Team Qualification : Challenge #04 Forgotten دسته: Web / API Authentication سطح سختی: Hard پروژه: TCTQ : مسیر پذیرش تیم CTF TryHackBox 📖 سناریو اKeystone یه پلتفرم داخلی همکاری تیمیه. کاربرها میتونن اکانت بسازن، لاگین کنن، و اگه پسوردشون یادشون رفت، دسترسیشون رو برگردونن. شما به‌ عنوان یه پنتستر خارجی استخدام شدید. یه اکانت عادی بسازید و ببینید یه کاربر معمولی تا کجا میتونه پیش بره. 🎯 هدف: شناسایی و دسترسی به بالاترین‌سطح Resource قابل‌ دسترس روی این پلتفرم، و گرفتن verification code ای که برمیگردونه. ⚙️ نحوه اجرا docker compose up --build یا ./start.sh اپلیکیشن روی آدرس زیر بالا میاد: http://localhost:8004 فرمت فلگ : THB{ } ارسال فلگ : @Unique_exploitbot @TryHackBox #CTF_THB

1 · 29 · 09:04