CVE-2023–32315: Administration Console authentication bypass

Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…Continue reading on Medium »
Read more...

CVE-2023–32315: Administration Console authentication bypass
https://codewithvamp.medium.com/cve-2023-32315-administration-console-authentication-bypass-c1429f8c4576?source=rss------bug_bounty-5

Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…Continue reading on Medium » (https://codewithvamp.medium.com/cve-2023-32315-administration-console-authentication-bypass-c1429f8c4576?source=rss------bug_bounty-5)

Hacking on Medium
The Legend of the Chupacabra

The Legend of El Chupacabra

Continue reading on Medium »

Hacking on Medium
WORLDCOIN : IS THERE MORE THAN MEETS THE EYE?

https://cdn-images-1.medium.com/max/1280/1*EQQJnH0qhd2YROYrUaCQWg.jpeg
Have you gone for Sam Altman’s free $50 for a harmless scan of your iris?

Continue reading on Medium »

Hacking on Medium
CVE-2023–32315: Administration Console authentication bypass

https://cdn-images-1.medium.com/max/706/1*HKR9GnATA2ksUzpH9wQL3w.png
Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…

Continue reading on Medium »

Hacking on Medium
[ Bashed ] HTB Manual Walkthrough 2023 | Tonee

https://cdn-images-1.medium.com/max/795/1*g4k_RCszMcY8voiw8HBV6Q.png
Hi everyone!

Continue reading on Medium »

Hacking on Medium
7 Books to Listen to For Free

If you’re like me, you love to read.

Continue reading on Medium »

KitPloit - PenTest Tools!
Artemis - APK Infrastructure Investigator

https://blogger.googleusercontent.com/img/a/AVvXsEiEdNzcQYMJMbBm4obxOh2FiZMblR_TqC039tHdgdovO3v-7yHVbe0F37pOtbrzo4qkIfsr1tfxEZDPRxqwrBnaYqztmAUnRAQrUgCfJee8C50poShIJhCAo_GELZfjWbdSoYUfJj_Se033XS0xpqHQE2MugYDGpBFwEAUYU1FCNjX0nMFE7DyFFgjNNNTK=w640-h640
Overview

A tools for Find APK Infrastructure .

HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized our activities around the prevention of corporate, industrial, and laboratory cyber threats.
Installation

pip install -r requirements.txt
python main.py


Command Line Options


--help Display help
--path Required path of apk file
--manifest Display manifest informations
--infra Find all infra addresses included ip,domain ex. --infra ip,domain
--whoise Whoise all infra included ip,domain ex. --whoise ip,domain
--output Set output files ex. --output out.txt



Usage

Display Manifest

https://camo.githubusercontent.com/bcd003353815351fa409c135e088112c859333b28d585362a698476463ae0755/68747470733a2f2f61736369696e656d612e6f72672f612f3539323333322e737667

IP Whois

https://camo.githubusercontent.com/d03b875cbbbe31f1750214fdcd0beb8b1653e4e95b0e096c275b940d53ae5a3d/68747470733a2f2f61736369696e656d612e6f72672f612f3539323333352e737667

Example Usage:

1.Find infra(domain and ip) in sample4.apk and set output result into out.txt

python3 main.py --path sample4.apk --infra domain,ip --output out.txt


1. Investigate the Domain and IP on the APK

python3 main.py --path sample.apk --whois ip

Download Artemis

Bypassing email verification of high-profile tech company ($$$)

Hi guys, after almost a year, I thought I should create a new write-up. Today, I’m gonna show you the email verification bypass…Continue reading on InfoSec Write-ups »
Read more...

Swagger XSS Mass Hunting

Hi guys, in this write-up, I’m gonna explain my own approach towards Swagger XSS and why I don’t use the Nuclei template (…Continue reading on InfoSec Write-ups »
Read more...

Critical Unauthorized IDOR Leads to Mass Account Takeover

Assalamu alaekum guyzz, After months of duplicates and false positives, Alhamdulillah I have found a valid bug, actually A very high…Continue reading on Medium »
Read more...

Artemis - APK Infrastructure Investigator
http://www.kitploit.com/2023/07/artemis-apk-infrastructure-investigator.html