Building a Robust Security Architecture

In an era dominated by digital technologies, the importance of a robust security architecture cannot be overstated. Organizations face an…Continue reading on Medium »
Read more...

Title: Unveiling the Trio: Idor,Account,Takeover And Account Enumeration

Continue reading on Medium »
Read more...

Vulnerable WordPress January 2024 (Imadaddin Nasimi)

Github: https://github.com/onhexgroup/Vulnerable-WordPressContinue reading on Medium »
Read more...

Building a Robust Security Architecture
https://medium.com/@paritoshblogs/building-a-robust-security-architecture-10d01b22380d?source=rss------bug_bounty-5

In an era dominated by digital technologies, the importance of a robust security architecture cannot be overstated. Organizations face an…Continue reading on Medium » (https://medium.com/@paritoshblogs/building-a-robust-security-architecture-10d01b22380d?source=rss------bug_bounty-5)

Title: Unveiling the Trio: Idor,Account,Takeover And Account Enumeration
https://medium.com/@mrraghavop12/title-unveiling-the-trio-idor-account-takeover-and-account-enumeration-cad7f7ca671f?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@mrraghavop12/title-unveiling-the-trio-idor-account-takeover-and-account-enumeration-cad7f7ca671f?source=rss------bug_bounty-5)

Vulnerable WordPress January 2024 (Imadaddin Nasimi)
https://medium.com/@onhexgroup/vulnerable-wordpress-january-2024-imadaddin-nasimi-09f163d473db?source=rss------bug_bounty-5

Github: https://github.com/onhexgroup/Vulnerable-WordPressContinue reading on Medium » (https://medium.com/@onhexgroup/vulnerable-wordpress-january-2024-imadaddin-nasimi-09f163d473db?source=rss------bug_bounty-5)

Zero-Day: Navigating the Storm of CVE-2024–21893 in Ivanti Products
https://systemweakness.com/zero-day-navigating-the-storm-of-cve-2024-21893-in-ivanti-products-3b27078377e2?source=rss------bug_bounty-5

A Deep Dive into the High-Risk SSRF Vulnerability Affecting Ivanti UsersContinue reading on System Weakness » (https://systemweakness.com/zero-day-navigating-the-storm-of-cve-2024-21893-in-ivanti-products-3b27078377e2?source=rss------bug_bounty-5)

Zero-Day: Navigating the Storm of CVE-2024–21893 in Ivanti Products

A Deep Dive into the High-Risk SSRF Vulnerability Affecting Ivanti UsersContinue reading on System Weakness »
Read more...

Collect Active Directory data with Adalanche
https://www.reddit.com/r/redteamsec/comments/1ahqnjp/collect_active_directory_data_with_adalanche/

<!-- SC_OFF -->I recently discovered the Adalanche tool (https://youtu.be/PG2J0uILL1Q?si=9aNcoAMca4OTHCW5) and was quite amazed on how easy it is to get it running. I know it's not Bloodhound but still can present real attack paths. I blogged my experience and review on Adalanche and hope you will find this useful (https://lsecqt.github.io/Red-Teaming-Army/active-directory/enumeration/visualizing-acls-with-adalanche/) <!-- SC_ON --> submitted by /u/lsecqt (https://www.reddit.com/user/lsecqt)
[link] (https://lsecqt.github.io/Red-Teaming-Army/) [comments] (https://www.reddit.com/r/redteamsec/comments/1ahqnjp/collect_active_directory_data_with_adalanche/)

Nemesis - An Offensive Data Enrichment Pipeline
http://www.kitploit.com/2024/02/nemesis-offensive-data-enrichment.html

Nemesis is an offensive data enrichment (https://www.kitploit.com/search/label/Enrichment) pipeline (https://www.kitploit.com/search/label/Pipeline) and operator support system. Built on Kubernetes (https://www.kitploit.com/search/label/Kubernetes) with scale in mind, our goal with Nemesis was to create a centralized data processing platform that ingests data produced during offensive security assessments. Nemesis aims to automate a number of repetitive tasks operators encounter on engagements, empower operators’ analytic capabilities and collective knowledge, and create structured and unstructured data stores of as much operational data as possible to help guide future research (https://www.kitploit.com/search/label/Research) and facilitate offensive data analysis.
Setup / Installation See the setup instructions (https://github.com/SpecterOps/Nemesis/blob/main/docs/setup.md). Contributing / Development Environment Setup See development.md (https://github.com/SpecterOps/Nemesis/blob/main/docs/development.md) Further Reading Post Name Publication Date Link Hacking With Your Nemesis Aug 9, 2023 https://posts.specterops.io/hacking-with-your-nemesis-7861f75fcab4 Challenges In Post-Exploitation (https://www.kitploit.com/search/label/Post-Exploitation) Workflows Aug 2, 2023 https://posts.specterops.io/challenges-in-post-exploitation-workflows-2b3469810fe9 On (Structured) Data Jul 26, 2023 https://posts.specterops.io/on-structured-data-707b7d9876c6 Acknowledgments Nemesis is built on large chunk of other people's work. Throughout the codebase we've provided citations, references, and applicable licenses for anything used or adapted from public sources. If we're forgotten proper credit anywhere, please let us know or submit a pull request! We also want to acknowledge Evan McBroom, Hope Walker, and Carlo Alcantara from SpecterOps for their help with the initial Nemesis concept and amazing feedback throughout the development process.

Download Nemesis (https://github.com/SpecterOps/Nemesis)

A Story of an IDOR bug I found on a SaaS application

IDORs. If you’re reading this, it’s probably too late! Haha.. I’m just messing with you. If you’re reading this, you probably know a thing…Continue reading on Medium »
Read more...

A Story of an IDOR bug I found on a SaaS application
https://medium.com/@duncanochieng682/a-story-of-an-idor-bug-i-found-on-a-saas-application-28fa65907bfd?source=rss------bug_bounty-5

IDORs. If you’re reading this, it’s probably too late! Haha.. I’m just messing with you. If you’re reading this, you probably know a thing…Continue reading on Medium » (https://medium.com/@duncanochieng682/a-story-of-an-idor-bug-i-found-on-a-saas-application-28fa65907bfd?source=rss------bug_bounty-5)