ಟೆಲಿಗ್ರಾಮ್ ಚಾನೆಲ್ "Pentester"

Pentester

Public

ಗಮನ : ಯಾವುದೇ ಮಾಹಿತಿಯಲ್ಲಿ ನಿಮ್ಮ ನಂಬಿಕೆಯನ್ನು ಇಡುವ ಮೊದಲು ನಿಮ್ಮದೇ ಆದ ಸಂಶೋಧನೆಯನ್ನು ಮಾಡುವುದು ಮುಖ್ಯವಾಗಿದೆ, ವಿಶೇಷವಾಗಿ ಹಣದ ವಿನಂತಿಯಿದ್ದರೆ.

ಸೇರಲು ಸಾಧ್ಯವಿಲ್ಲವೇ? @news4hack

2.8k ಸದಸ್ಯರು

ನವೀಕರಿಸಲಾಗಿದೆ: March 11, 2026 at 3:12 AM

Pentester

- Offensive Security (Red Teaming / PenTesting) - BlueTeam (OperationSec, TreatHunting, DFIR) - Reverse Engineering / Malware Analisys - Web Security

@news4hack is a growing community focused on engineering and teaming and related topics

ಶ್ರೇಯಾಂಕ

ಜಾಗತಿಕ ಶ್ರೇಯಾಂಕ

#4718ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ಭಾಷಾ ಶ್ರೇಯಾಂಕ

#1000ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ವಿಭಾಗ ಶ್ರೇಯಾಂಕ

#26ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ಭಾಗವಹಿಸುವವರ ಬೆಳವಣಿಗೆ (ಕಳೆದ 29 ದಿನಗಳು)

ಒಟ್ಟು: 2.8K

24ಗಂ ಬೆಳವಣಿಗೆ: -11 0%

ಇತ್ತೀಚಿನ ಪೋಸ್ಟ್‌ಗಳು

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

ARES-Dashboard - AI Red Team Operations Console https://github.com/Arnoldlarry15/ARES-Dashboard

Demo: https://ares-dashboard-mauve.vercel.app/

ARES is an AI Red Team Operations Dashboard for planning, executing, and auditing structured adversarial testing of AI systems across established risk frameworks.

ARES Dashboard is an enterprise-oriented AI red team operations console designed to help security teams, AI safety researchers, and governance programs conduct structured, repeatable, and auditable adversarial testing of AI systems.

ARES provides a centralized workspace for building attack manifests, managing red team campaigns, aligning assessments with recognized frameworks such as OWASP LLM Top 10 and MITRE, and exporting evidence for review and compliance workflows.

The system supports role-based access control, audit logging, persistent campaign storage, and optional AI-assisted scenario generation. A built-in demo mode allows full exploration of core functionality without requiring external API keys.

ARES is designed to serve as the operational execution layer within a broader AI safety and governance ecosystem, enabling disciplined red teaming without automating exploitation or removing human oversight.

807

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

Release v3.6.2 · projectdiscovery/nuclei

https://github.com/projectdiscovery/nuclei/releases/tag/v3.6.2

815

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

MongoBleed: CVE-2025-14847 Memory Corruption in MongoDB. Your Database Talks Back

https://phoenix.security/mongobleed-vulnerability-cve-2025-14847/

930

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

📎 File

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication.

2,210

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

📷 Photo

2,300

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

📎 File

2,420

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

POC for CVE-2025-4404
https://github.com/Cyxow/CVE-2025-4404-POC

2,010

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

CVE-2025-48799: Windows Update Service #LPE

PoC: https://github.com/Wh04m1001/CVE-2025-48799

Patched: July 8, 2025

This vulnability affects windows clients (win11/win10) with at least 2 hard drives.

2,130

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

CVE-2025-25257: Pre-Auth SQLi to RCE - Fortinet FortiWeb

PoC: https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257

Blog: https://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/

Affected:
7.6.0 through 7.6.3
7.4.0 through 7.4.7
7.2.0 through 7.2.10
7.0.0 through 7.0.10

2,590

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

CVE-2025-53770: SharePoint RCE (ToolShell)

Exploit: https://github.com/soltanali0/CVE-2025-53770-Exploit

Patched: July 20, 2025

#rce #pentest #redteam #ad #sharepoint #cve

2,570

Pentester

ಫೆಬ್ರ 22,2026, 11:15 AM

CitrixBleed 2 — Citrix NetScaler Memory Leak (CVE-2025-5777)

Critical memory leak vulnerability in Citrix NetScaler ADC/Gateway. Sending malformed POST request with login parameter without value causes server to return ~127 bytes of uninitialized stack memory, including session tokens, enabling MFA bypass and active session hijacking.

Research:
https://doublepulsar.com/citrixbleed-2-electric-boogaloo-cve-2025-5777-c7f5e349d206

Source:
https://github.com/win3zz/CVE-2025-5777

1,850

Pentester

ಫೆಬ್ರ 20,2026, 11:17 PM

CVE-2025-32463: sudo 1.9.14-1.9.17 LPE

Blog + exploit: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot

Patched: June 28, 2025

1,620

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

CVE-2025-49113: Roundcube (1.6.10) Auth RCE

blog: https://fearsoff.org/research/roundcube

PoC: https://github.com/fearsoff-org/CVE-2025-49113

1,600

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

CVE-2025-32756: Fortinet UnAuth RCE

PoC: https://github.com/kn0x0x/CVE-2025-32756-POC

Affected Products: FortiVoice, FortiMail, FortiNDR, FortiRecorder, FortiCamera

1,650

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

CVE-2025-33073: Reflective Kerberos Relay (LPE)

Blog: https://blog.redteam-pentesting.de/2025/reflective-kerberos-relay-attack/

Auth RCE
https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025

1,520

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

?q=%23GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit
https://github.com/hakivvi/cve-2025-23369

1,670

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

Nuclei AI Prompts

Nuclei v3.3.9 has -ai option to generate and run nuclei templates on the fly in natural language.

This is a list of prompts for this option:

- sensitive data exposure
- SQLi
- XSS
- SSRF

and more

https://github.com/reewardius/Nuclei-AI-Prompts

1,560

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

A cross-platform tool for handling Active Directory Shadow Credentials/msDS-KeyCredentialLink. It supports UnPAC-the-Hash/PKINIT, Pass-the-Cert, Channel Binding and more.

https://github.com/RedTeamPentesting/keycred

1,670

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

Regsecrets

Blog: https://www.synacktiv.com/publications/lsa-secrets-revisiting-secretsdump

Script: https://github.com/fortra/impacket/pull/1898/commits/e8f437200248b641b3baa3ce48505232287150e3

?q=%23pentest ?q=%23redteam ?q=%23ad ?q=%23creds

2,050

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

AdaptixC2 v0.2
Adaptix is an extensible post-exploitation and adversarial emulation framework made for penetration testers. The Adaptix server is written in Golang and to allow operator flexibility. The GUI Client is written in C++ QT, allowing it to be used on Linux, Windows, and MacOS operating systems.
https://github.com/Adaptix-Framework/AdaptixC2

2,280

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

A library of tools for vibe coding
https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools

1,930

Pentester

ಡಿಸೆಂ 6,2025, 10:56 AM

https://genai.owasp.org/resource/ai-security-solution-cheat-sheet-q1-2025/

1,360

Showing 22 of 22 posts

No more posts

Loading posts...

ರೇಟಿಂಗ್

ಲಾಗಿನ್ ಅಗತ್ಯವಿದೆ

ಬಳಕೆದಾರ ವಿಮರ್ಶೆಗಳು (0)

ಇನ್ನೂ ಯಾವುದೇ ವಿಮರ್ಶೆಗಳು ಇಲ್ಲ. ನಿಮ್ಮ ಅನುಭವವನ್ನು ಹಂಚಿಕೊಳ್ಳುವವರಲ್ಲಿ ಮೊದಲಿಗರಾಗಿ!

Loading reviews...

Pentester

- Offensive Security (Red Teaming / PenTesting) - BlueTeam (OperationSec, TreatHunting, DFIR) - Reverse Engineering / Malware Analisys - Web Security

@news4hack is a growing community focused on engineering and teaming and related topics

ಶ್ರೇಯಾಂಕ

ಜಾಗತಿಕ ಶ್ರೇಯಾಂಕ

#4718ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ಭಾಷಾ ಶ್ರೇಯಾಂಕ

#1000ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ವಿಭಾಗ ಶ್ರೇಯಾಂಕ

#26ಯಾವುದೇ ಬದಲಾವಣೆ ಇಲ್ಲ

ಭಾಗವಹಿಸುವವರ ಬೆಳವಣಿಗೆ (ಕಳೆದ 29 ದಿನಗಳು)

ಒಟ್ಟು: 2.8K

24ಗಂ ಬೆಳವಣಿಗೆ: -11 0%

ಇತ್ತೀಚಿನ ಪೋಸ್ಟ್‌ಗಳು

Pentester

ಮಾರ್ಚ್ 8,2026, 08:46 AM

ARES-Dashboard - AI Red Team Operations Console https://github.com/Arnoldlarry15/ARES-Dashboard

Demo: https://ares-dashboard-mauve.vercel.app/

ARES is an AI Red Team Operations Dashboard for planning, executing, and auditing structured adversarial testing of AI systems across established risk frameworks.

ARES Dashboard is an enterprise-oriented AI red team operations console designed to help security teams, AI safety researchers, and governance programs conduct structured, repeatable, and auditable adversarial testing of AI systems.

ARES provides a centralized workspace for building attack manifests, managing red team campaigns, aligning assessments with recognized frameworks such as OWASP LLM Top 10 and MITRE, and exporting evidence for review and compliance workflows.

The system supports role-based access control, audit logging, persistent campaign storage, and optional AI-assisted scenario generation. A built-in demo mode allows full exploration of core functionality without requiring external API keys.

ARES is designed to serve as the operational execution layer within a broader AI safety and governance ecosystem, enabling disciplined red teaming without automating exploitation or removing human oversight.