https://ghcp.in Infosec blog: write-ups, cheat sheets, notes. Zola en Thu, 22 Oct 2026 00:00:00 +0000 Thu, 22 Oct 2026 00:00:00 +0000 Unknown https://ghcp.in/security/se-fundamental/ https://ghcp.in/security/se-fundamental/ <p>Before a series of articles about advanced SE, it would be necessary to talk about the database. But I’m in for a scrap.</p> <p>There are already three tons of information on the Web that can be useful. Although, I’ll leave the thought here for further understanding.</p> <pre><code>SE is a manipulation method that relies on deep knowledge of psychology and philosophy of human behavior. Using these tools, an attacker convinces a person to voluntarily disclose confidential information, provide access to secure systems, or perform certain actions. </code></pre> <p>I’ll throw some links here, and you’ll figure it out.</p> <ul> <li>https://gen.stopphish.ru/</li> <li>https://github.com/bigb0sss/gogophish</li> <li>https://github.com/jaykali/maskphish</li> <li>https://xakep.ru/2024/01/30/offline-social-engineering/</li> <li>https://xakep.ru/2026/04/15/polygraph-tricks/</li> <li>https://xakep.ru/2024/02/21/mind-exploits/</li> <li>https://xakep.ru/2023/10/20/social-network-phishing/</li> <li>https://xakep.ru/2024/09/11/corporate-fishing/</li> <li>https://xakep.ru/2023/12/20/phishing-sites/</li> <li>https://xakep.ru/2018/04/05/social-engineering-recipes/</li> <li>https://xakep.ru/2023/10/05/surprise-malware/</li> <li>https://xakep.ru/2021/09/09/phishing-domains/</li> <li>https://xakep.ru/2018/10/17/social-engineering-recipes-2/</li> <li>https://itsec.group/blog-post-social-engineering-101.html</li> <li>https://www.crowdstrike.com/en-us/cybersecurity-101/social-engineering/</li> <li>https://www.youtube.com/watch?v=s9jwOVGWWuk&amp;pp=ygUSc29jaWFsIGVuZ2luZWVyaW5n0gcJCTMMAYcqIYzv</li> <li>https://www.youtube.com/watch?v=xEdZwLRJttQ&amp;pp=ygUSc29jaWFsIGVuZ2luZWVyaW5n0gcJCTMMAYcqIYzv</li> <li>https://www.youtube.com/watch?v=Pd7x2bHVSAs&amp;pp=ygUSc29jaWFsIGVuZ2luZWVyaW5n</li> <li>и т.д.</li> </ul> <p>Well, and some books in a separate tg post::@<a rel="noopener noreferrer external" target="_blank" href="https://t.me/infosex_and_a_sh1t/55">infosex_and_a_sh1t</a></p> <div class="fig"><a href="image.png" target="_blank"><img src="image.png" alt="meme" loading="lazy" decoding="async"></a><div class="cap">Easy social engineering hook</div></div> Tue, 20 Oct 2026 00:00:00 +0000 Unknown https://ghcp.in/security/qr-phishing/ https://ghcp.in/security/qr-phishing/ <p>A QR code is just a URL a human can’t read with their eyes. That’s exactly why attackers love it: mail filters check links in text, but don’t always recognize a picture.</p> Mon, 12 Oct 2026 00:00:00 +0000 Unknown https://ghcp.in/security/nmap-cheatsheet/ https://ghcp.in/security/nmap-cheatsheet/ <p>Nmap is the main network reconnaissance tool. Below are the flags you need 90% of the time. Only scan your own systems or ones you have written permission for.</p> Mon, 28 Sep 2026 00:00:00 +0000 Unknown https://ghcp.in/security/password-hashing/ https://ghcp.in/security/password-hashing/ <p>Fast hash functions (MD5, SHA-1, SHA-256) are built to be fast. For passwords that’s a downside: a GPU tries billions of guesses per second.</p>