How I was able to bypass the admin panel without the credentials.

This is my first article and I hope you guys will surely learn something new. Since I am not allowed to disclose the information about the…
Read more...

An exciting journey to find SSRF , Bypass Cloudflare , and extract AWS metadata !

In The Name Of God.
Read more...

I Reported 30 Vulnerabilities in 1 Day
https://infosecwriteups.com/i-reported-30-vulnerabilities-in-1-day-2a9e5eaa1b6c?source=rss------bug_bounty-5

Yeah hi, as of now I'm free. So I thought of sharing my experience when I reported 30 bugs to different programs in one day.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/i-reported-30-vulnerabilities-in-1-day-2a9e5eaa1b6c?source=rss------bug_bounty-5)

PicoCTF 2021: Transformation
https://infosecwriteups.com/picoctf-2021-transformation-6242546fba02?source=rss------bug_bounty-5

The basic reverse engineering concept of a file hidden message.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/picoctf-2021-transformation-6242546fba02?source=rss------bug_bounty-5)

XScan.io: Multi-chain Explorer powered by Unmarshal APIs
https://blog.unmarshal.io/xscan-io-multi-chain-explorer-powered-by-unmarshal-apis-b4e487605d5c?source=rss------bug_bounty-5

🐞Bug Hunting with a bounty of 3,000USD worth of $MARSHContinue reading on unmarshal » (https://blog.unmarshal.io/xscan-io-multi-chain-explorer-powered-by-unmarshal-apis-b4e487605d5c?source=rss------bug_bounty-5)

One Time Code Bypass With An Inverted Brute-Force Attack
https://infosecwriteups.com/one-time-code-bypass-with-an-inverted-brute-force-attack-7c5a270196d1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

“We’ve sent a six-digit code to your email address. Enter it below to login.”Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/one-time-code-bypass-with-an-inverted-brute-force-attack-7c5a270196d1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Caronte : A Tool To Analyze The Network Flow During Attack/Defence Capture The Flag Competitions

Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using protocol specific rules. The connection flows are saved into […]

The post Caronte : A Tool To Analyze The Network Flow During Attack/Defence Capture The Flag Competitions appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Steel Mountain

https://cdn-images-1.medium.com/max/2600/1*NuP4l23THgs2Q2z04E1Skg.png
A walkthrough.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kconfig-Hardened-Check - A Tool For Checking The Hardening Options In The Linux Kernel Config
http://www.kitploit.com/2021/06/kconfig-hardened-check-tool-for.html

___________________________
@hacking_Attack
@Hacking_Video

Motivation
There are plenty of Linux kernel hardening config options. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs manually. So let the computers do their job! kconfig-hardened-check.py helps me to check the Linux kernel Kconfig option list against my hardening preferences, which are based on the KSPP recommended settings (http://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Recommended_Settings), CLIP OS kernel configuration (https://docs.clip-os.org/clipos/kernel.html#configuration), last public grsecurity (https://grsecurity.net/) patch (options which they disable), SECURITY_LOCKDOWN_LSM (https://lwn.net/Articles/791863/) patchset, direct feedback from Linux kernel maintainers (Daniel Vetter in issue #38 (https://github.com/a13xp0p0v/kconfig-hardened-check/issues/38)). I also created Linux Kernel Defence Map that is a graphical representation of the relationships between these hardening features and the corresponding vulnerability (https://www.kitploit.com/search/label/Vulnerability) classes or exploitation (https://www.kitploit.com/search/label/Exploitation) techniques.
Supported microarchitectures
X86_64 X86_32 ARM64 ARM
Installation
You can install the package: pip install git+https://github.com/a13xp0p0v/kconfig-hardened-check
or simply run ./bin/kconfig-hardened-check from the cloned repository.
Usage
usage: kconfig-hardened-check [-h] [--version] [-p {X86_64,X86_32,ARM64,ARM}]
[-c CONFIG]
[-m {verbose,json,show_ok,show_fail}]

Checks the hardening options in the Linux kernel config

optional arguments:
-h, --help show this help message and exit
--version show program's version number and exit
-p {X86_64,X86_32,ARM64,ARM}, --print {X86_64,X86_32,ARM64,ARM}
print hardening preferences for selected architecture
-c CONFIG, --config CONFIG
check the kernel config file against these preferences
-m {verbose,json,show_ok,show_fail}, --mode {verbose,json,show_ok,show_fail}
choose the report mode

Output for Ubuntu 20.04 LTS (Focal Fossa) kernel config
$ ./bin/kconfig-hardened-check -c kconfig_hardened_check/config_files/distros/ubuntu-focal.config
[+] Config file to check: kconfig_hardened_check/config_files/distros/ubuntu-focal.config
[+] Detected architecture: X86_64
[+] Detected kernel version: 5.4
=========================================================================================================================
option name | desired val | decision | reason | check result
=========================================================================================================================
CONFIG_BUG | y |defconfig | self_protection | OK
CONFIG_SLUB_DEBUG | y |defconfig | self_protection | OK
CONFIG_GCC_PLUGINS | y |defconfig | self_protection | FAIL: not found
CONFIG_STACKPROTECTOR_STRONG | y |defconfig | self_protection | OK
CONFIG_STRICT_KERNEL_RWX | y |defconfig | self_protection | OK
CONFIG_STRICT_MODULE_RWX | y |defconfig | self_protection | OK
CONFIG_REFCOUNT_FULL | y |defconfig | self_protection | FAIL: "is not set"
CONFIG_IOMMU_SUPPORT | y |defconfig | self_protection | OK
CONFIG_MICROCODE | y |defconfig | self_protection | OK
CONFIG_RETPOLINE | y |defconfig | self_protection | OK

___________________________
@hacking_Attack
@Hacking_Video