Hello Hackers, Myself Pawan Rawat and this is my first blog. So this post is about my approach to GitHub recon.Continue reading on Medium » (https://medium.com/@pawan_rawat/github-recon-for-finding-sensitive-information-aecdeb9c9dce?source=rss------bug_bounty-5)

GitHub - duy-31/CVE-2024-21413: Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
https://www.reddit.com/r/redteamsec/comments/1at5iw1/github_duy31cve202421413_microsoft_outlook/

submitted by /u/inebriatedshark (https://www.reddit.com/user/inebriatedshark)
[link] (https://github.com/duy-31/CVE-2024-21413) [comments] (https://www.reddit.com/r/redteamsec/comments/1at5iw1/github_duy31cve202421413_microsoft_outlook/)

Hacking the Dutch Government

Last year, I became interested in bug bounties and saw the Dutch government will mail you swag (often the t-shirt pictured above) if…Continue reading on Medium »
Read more...

MonikerLink Meltdown: Demystifying CVE-2024–21413 and Dodging Outlook’s Booby Trap

Introduction:Continue reading on Medium »
Read more...

Hacking the Dutch Government
https://medium.com/@jackson_80133/hacking-the-dutch-government-153678a191c0?source=rss------bug_bounty-5

Last year, I became interested in bug bounties and saw the Dutch government will mail you swag (often the t-shirt pictured above) if…Continue reading on Medium » (https://medium.com/@jackson_80133/hacking-the-dutch-government-153678a191c0?source=rss------bug_bounty-5)

MonikerLink Meltdown: Demystifying CVE-2024–21413 and Dodging Outlook’s Booby Trap
https://medium.com/@chinamayjoshi/monikerlink-meltdown-demystifying-cve-2024-21413-and-dodging-outlooks-booby-trap-43ba52c4b458?source=rss------bug_bounty-5

Introduction:Continue reading on Medium » (https://medium.com/@chinamayjoshi/monikerlink-meltdown-demystifying-cve-2024-21413-and-dodging-outlooks-booby-trap-43ba52c4b458?source=rss------bug_bounty-5)

HackTheBox — SQLMap Essentials
https://medium.com/@harry.hphu/hackthebox-sqlmap-essentials-72eaa7a13596?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@harry.hphu/hackthebox-sqlmap-essentials-72eaa7a13596?source=rss------bug_bounty-5)

MrHandler - Linux Incident Response Reporting
http://www.kitploit.com/2024/02/mrhandler-linux-incident-response.html

 
MR.Handler is a specialized tool designed for responding to security incidents on Linux (https://www.kitploit.com/search/label/Linux) systems. It connects to target systems via SSH (https://www.kitploit.com/search/label/SSH) to execute a range of diagnostic commands, gathering (https://www.kitploit.com/search/label/Gathering) crucial information such as network configurations, system logs, user accounts, and running processes. At the end of its operation, the tool compiles all the gathered data into a comprehensive HTML report. This report details both the specifics of the incident response (https://www.kitploit.com/search/label/Incident%20Response) process and the current state of the system, enabling security analysts to more effectively assess and respond to incidents.

𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦
$ pip3 install colorama
$ pip3 install paramiko
$ git clone https://github.com/emrekybs/BlueFish.git
$ cd MrHandler
$ chmod +x MrHandler.py
$ python3 MrHandler.py

Report

Download MrHandler (https://github.com/emrekybs/MrHandler)