GainSec

Where Information Security, Cyber Security, OSINT, Penetration Testing, Ethical Hacking, Piracy, Privacy and Law aren't interests, they're lifestyles.

[gainsec]

CVE-2022-35142, CVE-2022-35143, CVE-2022-35144 – DoS, XSS and Weak Password Policy in Renato a Markdown powered knowledge base

Multiple new CVEs discovered and disclosed! XSS, DoS and a weak password policy!

Multiple new CVEs discovered and disclosed! XSS, DoS and a weak password policy!

[gainsec]

CVE-2022-34613, CVE-2022-34618, CVE-2022-34619 – Multiple XSS (And more) in Mealie

Multiple new CVEs discovered and disclosed! XSS, file uploads and more!

CVE-2022-34613, CVE-2022-34618, CVE-2022-34619 – Multiple XSS (And more) in Mealie

Multiple new CVEs discovered and disclosed! XSS, file uploads and more!

[gainsec]

CVE-2022-34625 – (SSTI) to (RCE) in Mealie – A lesson in patience

CVE-2022-34625 – Server-Side Template Injection to Remote Code Execution (SSTI) to (RCE) in Mealie – A lesson in patience

A detailed walkthrough of CVE-2022-34625 aka a Server-Side Template Injection (SSTI) to Remote Code Execution (RCE)

[gainsec]

I found a Denial of Service discovered against Fossil SCM when running on Windows boxes.

CVE-2022-34009

Denial of Service discovered against Fossil SCM when running on Windows boxes.

[gainsec]

How to Find the next BIG Data Leak in under 20 minutes or less! – LeakLooker-X – Updated 2022

An update to my tutorial for installing and running LeakLooker-X working properly with current versions of Kali Linux and Celery.

How to Find the next BIG Data Leak in under 20 minutes or less! – LeakLooker-X – Updated 2022

An update to my tutorial for installing and running LeakLooker-X working properly with current versions of Kali Linux and Celery.

[gainsec]

Azure Cloud Pen Testing Software Suite

Azure Cloud Pen Testing Software Suite

A great collection of scripts for attacking and defending Azure environments. Perfect for any azure cloud security assessment, audit or pene

A great collection of scripts for attacking and defending Azure environments. Perfect for any azure cloud security assessment, audit or penetration test.

[gainsec]

Should I add this Repo to TreeHouse Wordlists?

You tell me what you think of this wordlist repo? Is it worth adding?

Should I add this Repo to TreeHouse Wordlists?

You tell me what you think of this wordlist repo? Is it worth adding?

[gainsec]

The Hacker’s Search Engine

An all-in-one "hacker" search engine

The Hacker’s Search Engine

An all-in-one “hacker” search engine

[gainsec]

OSINT Tool for Searching GitHub

Find every companies secrets, passwords, api keys and accidentally exposed data on GitHub.

OSINT Tool for Searching GitHub

Find every companies secrets, passwords, api keys and accidentally exposed data on GitHub.

[gainsec]

CLI Web Discovery Alternative to Dirb, Dirsearch, Etc

A great alternative to have for web discovery during web app pen tests or bug bounties.

CLI Web Discovery Alternative to Dirb, Dirsearch, Etc

A great alternative to have for web discovery during web app pen tests or bug bounties.

[gainsec]

Awesome new feature added to Kali

Great new feature added to Kali Linux!

Awesome new feature added to Kali

Great new feature added to Kali Linux!

[gainsec]

All in One RF/HID reader/writer smaller then the ProxMark?!

A great and useful device for any physical penetration test or hardware hacking engagement.

All in One RF/HID reader/writer smaller then the ProxMark?!

A great and useful device for any physical penetration test or hardware hacking engagement.

[gainsec]

OSINT Unified Research Tool (Search Engine)

Another day, another great OSINT tool added to the toolset. This one being a all-in-one research tool.

OSINT Unified Research Tool (Search Engine)

Another day, another great OSINT tool added to the toolset. This one being a all-in-one research tool.

[gainsec]

Alternative to Google Hacking Database

Web application to help in search engine and especially google dorking!

Alternative to Google Hacking Database

Web application to help in search engine and especially google dorking!

[gainsec]

How to install Veracrypt on Kali Linux

How to install, use and uninstall Veracrypt on Kali Linux.

How to install Veracrypt on Kali Linux

How to install, use and uninstall Veracrypt on Kali Linux.

[gainsec]

NEW TOOL for Automated External Recon – Discovery – Vuln Scanning

A new piece for your arsenal for the automation of external penetration tests? Maybe not.

NEW TOOL for Automated External Recon – Discovery – Vuln Scanning

A new piece for your arsenal for the automation of external penetration tests? Maybe not.

[gainsec]

Using the WayBack Machine to create parameter wordlists

A tool to create parameter wordlists of whatever domains (and subdomains) via the internet archive (wayback machine)!

Using the WayBack Machine to create parameter wordlists

A tool to create parameter wordlists of whatever domains (and subdomains) via the internet archive (wayback machine)!