Multithreaded C# .NET Assembly (https://www.kitploit.com/search/label/Assembly) to enumerate accessible network shares in a domain
Built upon djhohnstein's SharpShares (https://github.com/djhohnstein/SharpShares) project > .\SharpShares.exe help

Usage:
SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbose /outfile:C:\path\to\file.txt

Optional Arguments:
/threads - specify maximum number of parallel threads (default=25)
/dc - specify domain controller (https://www.kitploit.com/search/label/Domain%20Controller) to query (if not ran on a domain-joined host)
/domain - specify domain name (if not ran on a domain-joined host)
/ldap - query hosts from the following LDAP filters (default=all)
:all - All enabled computers (https://www.kitploit.com/search/label/Computers) with 'primary' group 'Domain Computers'
:dc - All enabled Domain Controllers (not read-only DCs)
:exclude-dc - All enabled computers that are not Domain Controllers or read-only DCs
:servers - All enabled servers
:servers-exclude-dc - All enabled servers excluding Domain Controllers or read-only DCs
/ou - specify LDAP OU to query enabled computer objects from
ex: "OU=Special Servers,DC=example,DC=local"
/stealth - list share names without performing read/write access (https://www.kitploit.com/search/label/Access) checks
/filter - list of comma-separated shares to exclude from enumeration
default: SYSVOL,NETLOGON,IPC$,PRINT$
/outfile - specify file for shares to be appended to instead of printing to std out
/verbose - return unauthorized shares
Execute Assembly execute-assembly /path/to/SharpShares.exe /ldap:all /filter:sysvol,netlogon,ipc$,print$
Example Output Specifying Targets The /ldap and /ou flags can be used together or seprately to generate a list of hosts to enumerate. All hosts returned from these flags are combined and deduplicated before enumeration (https://www.kitploit.com/search/label/Enumeration) starts.

Download SharpShares (https://github.com/mitchmoser/SharpShares)

Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability

My recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of…Continue reading on Medium »
Read more...

Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability
https://lohigowda.medium.com/unveiling-cve-2024-0953-firefox-ios-open-redirect-vulnerability-57533efb4cf4?source=rss------bug_bounty-5

My recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of…Continue reading on Medium » (https://lohigowda.medium.com/unveiling-cve-2024-0953-firefox-ios-open-redirect-vulnerability-57533efb4cf4?source=rss------bug_bounty-5)

Symlink Sabotage: ZIPping Through Web Security. (LFI Lab)
https://medium.com/@josh.beck2006/symlink-sabotage-zipping-through-web-security-lfi-lab-ca20e2d30c8d?source=rss------bug_bounty-5

Objective: Learn how to exploit web applications that accept file uploads using symlinks within ZIP files.Continue reading on Medium » (https://medium.com/@josh.beck2006/symlink-sabotage-zipping-through-web-security-lfi-lab-ca20e2d30c8d?source=rss------bug_bounty-5)

CVE-2024-23222: Apple WebKit’s Zero-Day Vulnerability
https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5

Explore CVE-2024-23222, the zero-day vulnerability in WebKit affecting Apple devices, its implications, and the urgent call for updates.Continue reading on Medium » (https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5)

Symlink Sabotage: ZIPping Through Web Security. (LFI Lab)

Objective: Learn how to exploit web applications that accept file uploads using symlinks within ZIP files.Continue reading on Medium »
Read more...

CVE-2024-23222: Apple WebKit’s Zero-Day Vulnerability

Explore CVE-2024-23222, the zero-day vulnerability in WebKit affecting Apple devices, its implications, and the urgent call for updates.Continue reading on Medium »
Read more...

NTLM Relay Gat: Automating Mass Exploitation of ntlmrelayx Authenticated Sessions
https://www.reddit.com/r/redteamsec/comments/1akiy9s/ntlm_relay_gat_automating_mass_exploitation_of/

submitted by /u/ad0nis (https://www.reddit.com/user/ad0nis)
[link] (https://github.com/ad0nis/ntlm_relay_gat) [comments] (https://www.reddit.com/r/redteamsec/comments/1akiy9s/ntlm_relay_gat_automating_mass_exploitation_of/)

Physical security bypasses
https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/

<!-- SC_OFF -->I’m thinking things like metal detectors, RF scanners, IR, things you have to get past before you get to the tech. What methods have you found useful for overcoming physical security, and what’s still perplexing you? <!-- SC_ON --> submitted by /u/Gloomy-Substance6309 (https://www.reddit.com/user/Gloomy-Substance6309)
[link] (https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/) [comments] (https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/)

TLP-CLEAR+MIVD+AIVD+Advisory+COATHANGER
https://www.reddit.com/r/redteamsec/comments/1akmocq/tlpclearmivdaivdadvisorycoathanger/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.ncsc.nl/binaries/ncsc/documenten/publicaties/2024/februari/6/mivd-aivd-advisory-coathanger-tlp-clear/TLP-CLEAR+MIVD+AIVD+Advisory+COATHANGER.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/1akmocq/tlpclearmivdaivdadvisorycoathanger/)

“The Power of Recon A Deep Dive into Bug Bounty Reconnaissance Techniques”

In the world of cybersecurity, bug bounty programs have become indispensable for organizations seeking to fortify their defenses against…Continue reading on Medium »
Read more...

“Fuzzing Fundamentals A Practical Approach to Automated Vulnerability Discovery”

In the realm of cybersecurity, staying ahead of potential threats requires proactive measures to identify and mitigate vulnerabilities…Continue reading on Medium »
Read more...

“The Power of Recon A Deep Dive into Bug Bounty Reconnaissance Techniques”
https://medium.com/@Land2Cyber/the-power-of-recon-a-deep-dive-into-bug-bounty-reconnaissance-techniques-9bfea7a1d993?source=rss------bug_bounty-5

In the world of cybersecurity, bug bounty programs have become indispensable for organizations seeking to fortify their defenses against…Continue reading on Medium » (https://medium.com/@Land2Cyber/the-power-of-recon-a-deep-dive-into-bug-bounty-reconnaissance-techniques-9bfea7a1d993?source=rss------bug_bounty-5)