Are you still confused about the difference between Reflected XSS and DOM XSS?

Today, we will explain the most challenging type of XSS vulnerability, which is DOM-Based XSS. However, today’s explanation will make this…Continue reading on Medium »
Read more...

Reaper - Proof Of Concept On BYOVD Attack
http://www.kitploit.com/2024/06/reaper-proof-of-concept-on-byovd-attack.html

Reaper is a proof-of-concept designed to exploit BYOVD (Bring Your Own Vulnerable (https://www.kitploit.com/search/label/Vulnerable) Driver (https://www.kitploit.com/search/label/Driver)) driver vulnerability (https://www.kitploit.com/search/label/Vulnerability). This malicious technique involves inserting a legitimate, vulnerable driver into a target system, which allows attackers to exploit the driver to perform malicious actions. Reaper was specifically designed to exploit the vulnerability present in the kprocesshacker.sys driver in version 2.8.0.0, taking advantage of its weaknesses to gain privileged access and control over the target system. Note: Reaper does not kill the Windows (https://www.kitploit.com/search/label/Windows) Defender process, as it has a protection, Reaper is a simple proof of concept.
Features Kill process Suspend process Help ____
/ __ \___ ____ _____ ___ _____
/ /_/ / _ \/ __ `/ __ \/ _ \/ ___/
/ _, _/ __/ /_/ / /_/ / __/ /
/_/ |_|\___/\__,_/ .___/\___/_/
/_/

[Coded by MrEmpy]
[v1.0]

Usage: C:\Windows\Temp\Reaper.exe [OPTIONS] [VALUES]
Options:
sp, suspend process
kp, kill process

Values:
PROCESSID process id to suspend/kill

Examples:
Reaper.exe sp 1337
Reaper.exe kp 1337
Demonstration

Install You can compile it directly from the source code or download it already compiled (https://github.com/MrEmpy/Reaper/releases/). You will need Visual Studio 2022 to compile. Note: The executable and driver must be in the same directory.

Download Reaper (https://github.com/MrEmpy/Reaper)

MY FIRST BUG !
https://medium.com/@amjadkhan_72632/my-first-bug-8d52edf256c7?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@amjadkhan_72632/my-first-bug-8d52edf256c7?source=rss------bug_bounty-5)

هل مازلت محتار في الاختلاف بين Reflected XSS و DOM XSS؟ اليوم ستحسم المسألة بكل ثقة
https://gentilsecurity.medium.com/%D9%87%D9%84-%D9%85%D8%A7%D8%B2%D9%84%D8%AA-%D9%85%D8%AD%D8%AA%D8%A7%D8%B1-%D9%81%D9%8A-%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D9%84%D8%A7%D9%81-%D8%A8%D9%8A%D9%86-reflected-xss-%D9%88-dom-xss-%D8%A7%D9%84%D9%8A%D9%88%D9%85-%D8%B3%D8%AA%D8%AD%D8%B3%D9%85-%D8%A7%D9%84%D9%85%D8%B3%D8%A3%D9%84%D8%A9-%D8%A8%D9%83%D9%84-%D8%AB%D9%82%D8%A9-c4224d126056?source=rss------bug_bounty-5

اليوم سنشرح النوع الأكثر صعوبة في ثغرات ال XSS وهو ال DOM-Based XSS
ولكن شرح النهاردة سيجعل هذا النوع بالنسبة لك أسهل نوع, فقط اقرأ بتركيز…Continue reading on Medium » (https://gentilsecurity.medium.com/%D9%87%D9%84-%D9%85%D8%A7%D8%B2%D9%84%D8%AA-%D9%85%D8%AD%D8%AA%D8%A7%D8%B1-%D9%81%D9%8A-%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D9%84%D8%A7%D9%81-%D8%A8%D9%8A%D9%86-reflected-xss-%D9%88-dom-xss-%D8%A7%D9%84%D9%8A%D9%88%D9%85-%D8%B3%D8%AA%D8%AD%D8%B3%D9%85-%D8%A7%D9%84%D9%85%D8%B3%D8%A3%D9%84%D8%A9-%D8%A8%D9%83%D9%84-%D8%AB%D9%82%D8%A9-c4224d126056?source=rss------bug_bounty-5)

Are you still confused about the difference between Reflected XSS and DOM XSS?
https://gentilsecurity.medium.com/are-you-still-confused-about-the-difference-between-reflected-xss-and-dom-xss-45715d0fe37b?source=rss------bug_bounty-5

Today, we will explain the most challenging type of XSS vulnerability, which is DOM-Based XSS. However, today’s explanation will make this…Continue reading on Medium » (https://gentilsecurity.medium.com/are-you-still-confused-about-the-difference-between-reflected-xss-and-dom-xss-45715d0fe37b?source=rss------bug_bounty-5)

State of WiFi Security in 2024
https://www.reddit.com/r/redteamsec/comments/1d5q278/state_of_wifi_security_in_2024/

<!-- SC_OFF -->Hi, I've written an article about exploiting various vulnerabilities in the WiFi protocol, you may find it on Medium. Feedback is always welcome. <!-- SC_ON --> submitted by /u/Material-Tonight8924 (https://www.reddit.com/user/Material-Tonight8924)
[link] (https://medium.com/@flytechoriginal/state-of-wifi-security-in-2024-b88091015cc2) [comments] (https://www.reddit.com/r/redteamsec/comments/1d5q278/state_of_wifi_security_in_2024/)

cy27.1 Lab: DOM XSS using web messages

This lab demonstrates a simple web message vulnerability. To solve this lab, use the exploit server to post a message to the target site…Continue reading on Medium »
Read more...

State of WiFi Security in 2024
https://www.reddit.com/r/Pentesting/comments/1d5q3s4/state_of_wifi_security_in_2024/

<!-- SC_OFF -->Hi, I've written an article about WiFi security, where we explore and exploit various vulnerabilities, you can find it on Medium. <!-- SC_ON --> submitted by /u/Material-Tonight8924 (https://www.reddit.com/user/Material-Tonight8924)
[link] (https://medium.com/@flytechoriginal/state-of-wifi-security-in-2024-b88091015cc2) [comments] (https://www.reddit.com/r/Pentesting/comments/1d5q3s4/state_of_wifi_security_in_2024/)

Unveiling the Sneaky CSV Injection: VDP vs. Objective-Based Offensive Tactics

Welcome to the world of cybersecurity hide-and-seek, where we’re on a mission to find and fix sneaky computer bugs. But not all bugs are…Continue reading on Medium »
Read more...