sanspie's notes

thats soooo coool

https://github.com/jazzband/django-debug-toolbar

good alternative for jwt.io

https://dinochiesa.github.io/jwt/

cool article on how to protect your site from SSTI in general concept, was hard to find, so hope you love it

https://securityintelligence.com/posts/how-to-protect-server-side-template-injection/

HTB Writer. Ломаем приложение на Django, чтобы захватить веб-сервер👀

https://telegra.ph/Haker---HTB-Writer-Lomaem-prilozhenie-na-Django-chtoby-zahvatit-veb-server-12-14

django 4.0 release🥳
the main changes:
- full redis db support
- new password hasher
- template based form rendering

https://www.djangoproject.com/weblog/2021/dec/07/django-40-released/

introduction into rootkits

https://www.ptsecurity.com/ru-ru/research/analytics/rootkits-evolution-and-detection-methods/?utm_source=youtube&utm_medium=description

Video on how log4j works

https://youtu.be/7qoPDq41xhQ
https://www.youtube.com/watch?v=5-GkpxbZ9Zw
https://www.youtube.com/watch?v=iI9Dz3zN4d8

Debug and edit .NET and Unity assemblies

https://github.com/dnSpy/dnSpy

working with regex in python

https://habr.com/ru/post/60369/

Designing distributed systems: patterns and paradigms for scalable, reliable services
Burns, Brendan (2018)

The race to compete in today's fast-moving markets, large enterprises are busy adopting new technologies for creating new products, processes, and business models. But one obstacle on the road to digital transformation is placing too much emphasis on technology, and not enough on the types of processes technology enables. What if different lines of business could build their own services and applications-and decision-making was distributed rather than centralized? This report explores the concept of a digital business platform as a way of empowering individual business sectors to act on data in real time. Much innovation in a digital enterprise will increasingly happen at the edge, whether it involves business users (from marketers to data scientists) or IoT devices. To facilitate the process, your core IT team can provide these sectors with the digital tools they need to innovate quickly.

now thats something

https://www.revshells.com/

Magic Bytes

https://www.netspi.com/blog/technical/web-application-penetration-testing/magic-bytes-identifying-common-file-formats-at-a-glance/

For any kind of bruteforce find wordlists...

https://weakpass.com/

analyzing memory dump [Форензика]

https://cybersec.org/ctf/analiz-dampov-pamyati-kompyutera-na-ctf-na-hacktober-ctf-2020-evil-twin-forenzika.html

Getting reverse shell by abusing broken rights

https://github.com/darrenmartyn/visualdoor