Hello Everyone, welcome to another writeup dedicated to helping you get your 1st bounty or to help you get started on the platform fast.Continue reading on Medium » (https://medium.com/@anonymoustriager/easy-latest-critical-severity-fc9413d57d80?source=rss------bug_bounty-5)

Bypassing Windows Defender with FilelessPELoader AGAIN
https://www.reddit.com/r/redteamsec/comments/1d8fxnw/bypassing_windows_defender_with_filelesspeloader/

submitted by /u/cybermepls (https://www.reddit.com/user/cybermepls)
[link] (https://youtu.be/NmB2MPAafTo) [comments] (https://www.reddit.com/r/redteamsec/comments/1d8fxnw/bypassing_windows_defender_with_filelesspeloader/)

Master Bug Bounty Hunting: Your Comprehensive Bug Bounty Course in Hindi
https://medium.com/@marketing_94387/master-bug-bounty-hunting-your-comprehensive-bug-bounty-course-in-hindi-ab990527f9b0?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@marketing_94387/master-bug-bounty-hunting-your-comprehensive-bug-bounty-course-in-hindi-ab990527f9b0?source=rss------bug_bounty-5)

Master Bug Bounty Hunting: Your Comprehensive Bug Bounty Course in Hindi

IntroductionContinue reading on Medium »
Read more...

EMPIRE CTF: LUPINONE VulnHub Walkthrough | Writeup

Hello, friends I’m Shams Ul Mehmood and this is my 6th article.Continue reading on Medium »
Read more...

Active Directory Red Teaming: A Comprehensive Guide

Active Directory (AD) is a critical component in most enterprise IT infrastructures, providing authentication and authorization services…Continue reading on Medium »
Read more...

EMPIRE CTF: LUPINONE VulnHub Walkthrough | Writeup
https://shamsulmehmood.medium.com/empire-ctf-lupinone-vulnhub-walkthrough-writeup-bea8558ea03b?source=rss------bug_bounty-5

Hello, friends I’m Shams Ul Mehmood and this is my 6th article.Continue reading on Medium » (https://shamsulmehmood.medium.com/empire-ctf-lupinone-vulnhub-walkthrough-writeup-bea8558ea03b?source=rss------bug_bounty-5)

Active Directory Red Teaming: A Comprehensive Guide
https://medium.com/@paritoshblogs/active-directory-red-teaming-a-comprehensive-guide-06b1f008d0d4?source=rss------bug_bounty-5

Active Directory (AD) is a critical component in most enterprise IT infrastructures, providing authentication and authorization services…Continue reading on Medium » (https://medium.com/@paritoshblogs/active-directory-red-teaming-a-comprehensive-guide-06b1f008d0d4?source=rss------bug_bounty-5)

In-memory sleeping technique using threads created in suspended state and timers that work with the ResumeThread function after context is set for execution. Each workers has its own stack and no need to modify the list of valid indirect call targets in CFG. Use case: Swappala with Reflective DLL
https://www.reddit.com/r/redteamsec/comments/1d8jo25/inmemory_sleeping_technique_using_threads_created/

submitted by /u/oldboy21 (https://www.reddit.com/user/oldboy21)
[link] (https://oldboy21.github.io/posts/2024/06/sleaping-issues-swappala-and-reflective-dll-friends-forever/) [comments] (https://www.reddit.com/r/redteamsec/comments/1d8jo25/inmemory_sleeping_technique_using_threads_created/)

X-Recon - A Utility For Detecting Webpage Inputs And Conducting XSS Scans
http://www.kitploit.com/2024/06/x-recon-utility-for-detecting-webpage.html

A utility for identifying web page inputs and conducting XSS scanning.
Features: Subdomain Discovery: Retrieves relevant subdomains (https://www.kitploit.com/search/label/Subdomains) for the target website and consolidates them into a whitelist (https://www.kitploit.com/search/label/Whitelist). These subdomains (https://www.kitploit.com/search/label/Subdomains) can be utilized during the scraping (https://www.kitploit.com/search/label/Scraping) process. Site-wide Link Discovery: Collects all links throughout the website based on the provided whitelist and the specified max_depth. Form and Input Extraction: Identifies all forms and inputs found within the extracted links, generating a JSON output. This JSON output serves as a foundation for leveraging the XSS scanning (https://www.kitploit.com/search/label/Scanning) capability of the tool. XSS Scanning: Once the start recon option returns a custom JSON containing the extracted entries, the X-Recon tool can initiate the XSS vulnerability testing process and furnish you with the desired results!

Note: The scanning functionality is currently inactive on SPA (Single Page Application) web applications, and we have only tested it on websites developed with PHP, yielding remarkable results. In the future, we plan to incorporate these features into the tool.