Unconstrained Delegation Attack - Kerberos
https://www.reddit.com/r/redteamsec/comments/18kaw3f/unconstrained_delegation_attack_kerberos/

submitted by /u/Accomplished-Mud1210 (https://www.reddit.com/user/Accomplished-Mud1210)
[link] (https://vandanpathak.com/exploiting-ad/unconstrained-delegation-attack/) [comments] (https://www.reddit.com/r/redteamsec/comments/18kaw3f/unconstrained_delegation_attack_kerberos/)

Mitel MiCollab AWV Directory Traversal Vulnerability (CVE-2020–11798)

IntroductionContinue reading on Medium »
Read more...

Mitel MiCollab AWV Directory Traversal Vulnerability (CVE-2020–11798)
https://samshadow.medium.com/mitel-micollab-awv-directory-traversal-vulnerability-cve-2020-11798-ec1408cd35b9?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://samshadow.medium.com/mitel-micollab-awv-directory-traversal-vulnerability-cve-2020-11798-ec1408cd35b9?source=rss------bug_bounty-5)

NetworkSherlock - Powerful And Flexible Port Scanning Tool With Shodan
http://www.kitploit.com/2023/12/networksherlock-powerful-and-flexible.html

api_key = YOUR_SHODAN_API_KEY Usage Port Scan Tool positional arguments: target Target IP address(es), range, or CIDR (e.g., 192.168.1.1, 192.168.1.1-192.168.1.5, 192.168.1.0/24) options: -h, --help show this help message and exit -p PORTS, --ports PORTS Ports to scan (e.g. 1-1024, 21,22,80, or 80) -t THREADS, --threads THREADS Number of threads to use -P {tcp,udp}, --protocol {tcp,udp} Protocol to use for scanning -V, --version-info Used to get version information -s SAVE_RESULTS, --save-results SAVE_RESULTS File to save scan results -c, --ping-check Perform ping check before scanning --use-shodan Enable Shodan integration for additional information " dir="auto">python3 networksherlock.py --help
usage: networksherlock.py [-h] [-p PORTS] [-t THREADS] [-P {tcp,udp}] [-V] [-s SAVE_RESULTS] [-c] target

NetworkSherlock: Port Scan Tool

positional arguments:
target Target IP address(es), range, or CIDR (e.g., 192.168.1.1, 192.168.1.1-192.168.1.5,
192.168.1.0/24)

options:
-h, --help show this help message and exit
-p PORTS, --ports PORTS
Ports to scan (e.g. 1-1024, 21,22,80, or 80)
-t THREADS, --threads THREADS
Number of threads to use
-P {tcp,udp}, --protocol {tcp,udp}
Protocol to use for scanning
-V, --version-info Used to get version information
-s SAVE_RESULTS, --save-results SAVE_RESULTS
File to save scan results
-c, --ping-check Perform ping check before scanning
--use-shodan Enable Shodan integration for additional information
Basic Parameters target: The target IP address(es), IP range, or CIDR block to scan. -p, --ports: Ports to scan (e.g., 1-1000, 22,80,443). -t, --threads: Number of threads to use. -P, --protocol: Protocol to use for scanning (tcp or udp). -V, --version-info: Obtain version information during banner grabbing. -s, --save-results: Save results to the specified file. -c, --ping-check: Perform a ping check before scanning. --use-shodan: Enable Shodan integration. Example Usage Basic Port Scan Scan a single IP address on default ports: python networksherlock.py 192.168.1.1 Custom Port Range Scan an IP address with a custom range of ports: python networksherlock.py 192.168.1.1 -p 1-1024 Multiple IPs and Port Specification Scan multiple IP addresses on specific ports: python networksherlock.py 192.168.1.1,192.168.1.2 -p 22,80,443 CIDR Block Scan Scan an entire subnet using CIDR notation: python networksherlock.py 192.168.1.0/24 -p 80 Using Multi-Threading Perform a scan using multiple threads for faster execution: python networksherlock.py 192.168.1.1-192.168.1.5 -p 1-1024 -t 20 Scanning with Protocol Selection Scan using a specific protocol (TCP or UDP): python networksherlock.py 192.168.1.1 -p 53 -P udp Scan with Shodan python networksherlock.py 192.168.1.1 --use-shodan Scan Multiple Targets with Shodan python networksherlock.py 192.168.1.1,192.168.1.2 -p 22,80,443 -V --use-shodan Banner Grabbing and Save Results Perform a detailed scan with banner grabbing and save results to a file: python networksherlock.py 192.168.1.1 -p 1-1000 -V -s results.txt Ping Check Before Scanning Scan an IP range after performing a ping check: python networksherlock.py 10.0.0.1-10.0.0.255 -c OUTPUT EXAMPLE 5900/tcp open unknown RFB 003.003 53 /tcp open domain ---------------------------------------------" dir="auto">$ python3 networksherlock.py 10.0.2.12 -t 25 -V -p 21-6000 -t 25
********************************************
Scanning target: 10.0.2.12
Scanning IP : 10.0.2.12
Ports : 21-6000
Threads : 25
Protocol : tcp

---------------------------------------------
Port Status Service VERSION
22 /tcp open ssh SSH-2.0-OpenSSH_4.7p1 Debian-8ubuntu1
21 /tcp open telnet 220 (vsFTPd 2.3.4)
80 /tcp open http HTTP/1.1 200 OK
139 /tcp open netbios-ssn %SMBr
25 /tcp open smtp 220 metasploitable.localdomain ESMTP Postfix (Ubuntu)
23 /tcp open smtp #' #'
445 /tcp open microsoft-ds %SMBr
514 /tcp open shell
512 /tcp open exec Where are you?
1524/tcp open ingreslock ro ot@metasploitable:/#
2121/tcp open iprop 220 ProFTPD 1.3.1 Server (Debian) [::ffff:10.0.2.12]
3306/tcp open mysql >
5900/tcp open unknown RFB 003.003
53 /tcp open domain
--------------------------------------------- OutPut Example ******************************************** Scanning target: 10.0.2.20 Scanning IP : 10.0.2.20 Ports : 21-1000 Threads : 10 Protocol : tcp --------------------------------------------- Port Status Service VERSION 22 /tcp open ssh SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.9" dir="auto">$ python3 networksherlock.py 10.0.2.0/24 -t 10 -V -p 21-1000
********************************************
Scanning target: 10.0.2.1
Scanning IP : 10.0.2.1
Ports : 21-1000
Threads : 10
Protocol : tcp
---------------------------------------------
Port Status Service VERSION
53 /tcp open domain
********************************************
Scanning target: 10.0.2.2
Scanning IP : 10.0.2.2
Ports : 21-1000
Threads : 10
Protocol : tcp
---------------------------------------------
Port Status Service VERSION
445 /tcp open microsoft-ds
135 /tcp open epmap
********************************************
Scanning target: 10.0.2.12
Scanning IP : 10.0.2.12
Ports : 21- 1000
Threads : 10
Protocol : tcp
---------------------------------------------
Port Status Service VERSION
21 /tcp open ftp 220 (vsFTPd 2.3.4)
22 /tcp open ssh SSH-2.0-OpenSSH_4.7p1 Debian-8ubuntu1
23 /tcp open telnet #'
80 /tcp open http HTTP/1.1 200 OK
53 /tcp open kpasswd 464/udpcp
445 /tcp open domain %SMBr
3306/tcp open mysql >
********************************************
Scanning target: 10.0.2.20
Scanning IP : 10.0.2.20
Ports : 21-1000
Threads : 10
Protocol : tcp
---------------------------------------------
Port Status Service VERSION
22 /tcp open ssh SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.9 Contributing Contributions are welcome! To contribute to NetworkSherlock, follow these steps: Fork the repository. Create a new branch for your feature or bug fix. Make your changes and commit them. Push your changes to your forked repository. Open a pull request in the main repository. Contact Linktr :Halil Deniz (https://linktr.ee/halildeniz) LinkedIn : Halil İbrahim Deniz (https://www.linkedin.com/in/halil-ibrahim-deniz/) TryHackMe : halilovic (https://tryhackme.com/p/halilovic) Instagram : deniz.halil333 (https://www.instagram.com/deniz.halil333/) YouTube : HalilDeniz (https://www.youtube.com/c/HalilDeniz) Email: halildeniz313@gmail.com (mailto:halildeniz313@gmail.com)

Download NetworkSherlock (https://github.com/HalilDeniz/NetworkSherlock)

Bug Bounty programmes give people the fear (they shouldn’t)

In the vast, interconnected realm of cyberspace, where bits and bytes engage in an intricate dance that puts your Grannie’s knitting…Continue reading on Medium »
Read more...

Bug Bounty programmes give people the fear (they shouldn’t)
https://medium.com/@ethanrom/bug-bounty-programmes-give-people-the-fear-they-shouldnt-755466351140?source=rss------bug_bounty-5

In the vast, interconnected realm of cyberspace, where bits and bytes engage in an intricate dance that puts your Grannie’s knitting…Continue reading on Medium » (https://medium.com/@ethanrom/bug-bounty-programmes-give-people-the-fear-they-shouldnt-755466351140?source=rss------bug_bounty-5)

XSSRF : The Unholy Matrimony of XSS and SSRF

Learn How I turned an P5(Informative) SSRF to an Impactful P2(High) Severe Vulnerability and also got a Bounty For It…..Continue reading on Medium »
Read more...

Unveiling a Security Flaw: The Divergence of OTP and Link Password Authentication in redacted.com

Hello everyone!!!Continue reading on Medium »
Read more...

XSSRF : The Unholy Matrimony of XSS and SSRF
https://naumankh4n.medium.com/xssrf-the-unholy-matrimony-of-xss-and-ssrf-89f7abfca5b3?source=rss------bug_bounty-5

Learn How I turned an P5(Informative) SSRF to an Impactful P2(High) Severe Vulnerability and also got a Bounty For It…..Continue reading on Medium » (https://naumankh4n.medium.com/xssrf-the-unholy-matrimony-of-xss-and-ssrf-89f7abfca5b3?source=rss------bug_bounty-5)

Unveiling a Security Flaw: The Divergence of OTP and Link Password Authentication in redacted.com
https://medium.com/@MohaseenK/unveiling-a-security-flaw-the-divergence-of-otp-and-link-password-authentication-in-redacted-com-27e0cc2dc73c?source=rss------bug_bounty-5

Hello everyone!!!Continue reading on Medium » (https://medium.com/@MohaseenK/unveiling-a-security-flaw-the-divergence-of-otp-and-link-password-authentication-in-redacted-com-27e0cc2dc73c?source=rss------bug_bounty-5)

DOM XSS in document.write sink using source location.search
https://medium.com/@marduk.i.am/dom-xss-in-document-write-sink-using-source-location-search-ae458bc5c85f?source=rss------bug_bounty-5