While exploring the website https://redacted.com/, I stumbled upon a fascinating vulnerability in the search functionality. This discovery…Continue reading on Medium » (https://ibrahimxss.medium.com/discovering-an-xss-vulnerability-on-vue-js-2-6-10-webapp-e6c0cc88e840?source=rss------bug_bounty-5)

How I Found a Simple IDOR Bug That Exposed Sensitive Data

Exposing a Simple IDOR VulnerabilityContinue reading on Medium »
Read more...

The Ultimate Shodan Search Guide for Cybersecurity Analysts

In cybersecurity, Shodan is a powerful tool for discovering internet-connected devices.Continue reading on System Weakness »
Read more...

How I Found a Simple IDOR Bug That Exposed Sensitive Data
https://medium.com/@dra0x0/how-i-found-a-simple-idor-bug-that-exposed-sensitive-data-36e6e9b508db?source=rss------bug_bounty-5

Exposing a Simple IDOR VulnerabilityContinue reading on Medium » (https://medium.com/@dra0x0/how-i-found-a-simple-idor-bug-that-exposed-sensitive-data-36e6e9b508db?source=rss------bug_bounty-5)

The Ultimate Shodan Search Guide for Cybersecurity Analysts
https://systemweakness.com/the-ultimate-shodan-search-guide-for-cybersecurity-analysts-283f17f56182?source=rss------bug_bounty-5

In cybersecurity, Shodan is a powerful tool for discovering internet-connected devices.Continue reading on System Weakness » (https://systemweakness.com/the-ultimate-shodan-search-guide-for-cybersecurity-analysts-283f17f56182?source=rss------bug_bounty-5)

Guide to Using httpx

Discover httpx a powerful tool for reconnaissance, and HTTP probing.Continue reading on Medium »
Read more...

Guide to Using httpx
https://medium.com/@learntheshell/guide-to-using-httpx-a542cbdc4ed4?source=rss------bug_bounty-5

Discover httpx a powerful tool for reconnaissance, and HTTP probing.Continue reading on Medium » (https://medium.com/@learntheshell/guide-to-using-httpx-a542cbdc4ed4?source=rss------bug_bounty-5)

Practical Threat Hunting Using Known IOC IPs
https://medium.com/@paritoshblogs/practical-threat-hunting-using-known-ioc-ips-26a4eab0b616?source=rss------bug_bounty-5

It involves the active search for cyber threats within an organization’s network before they can cause significant damage. One effective…Continue reading on Medium » (https://medium.com/@paritoshblogs/practical-threat-hunting-using-known-ioc-ips-26a4eab0b616?source=rss------bug_bounty-5)

Practical Threat Hunting Using Known IOC IPs

It involves the active search for cyber threats within an organization’s network before they can cause significant damage. One effective…Continue reading on Medium »
Read more...

XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues
http://www.kitploit.com/2024/06/xmgoat-composed-of-xm-cyber-terraform.html

XM Goat (https://www.kitploit.com/search/label/Goat) is composed of XM Cyber (https://www.kitploit.com/search/label/Cyber) terraform (https://www.kitploit.com/search/label/Terraform) templates that help you learn about common Azure (https://www.kitploit.com/search/label/Azure) security issues. Each template is a vulnerable (https://www.kitploit.com/search/label/Vulnerable) environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Here's what to do for each environment: Run installation and then get started. With the initial user and service principal credentials, attack the environment based on the scenario flow (for example, XMGoat/scenarios/scenario_1/scenario1_flow.png). If you need help with your attack, refer to the solution (for example, XMGoat/scenarios/scenario_1/solution.md). When you're done learning the attack, clean up.
Requirements Azure tenant Terafform version 1.0.9 or above Azure CLI Azure User with Owner permissions on Subscription and Global Admin privileges in AAD Installation Run these commands: $ az login
$ git clone https://github.com/XMCyber/XMGoat.git
$ cd XMGoat
$ cd scenarios
$ cd scenario_<\SCENARIO>
Where <\SCENARIO> is the scenario number you want to complete $ terraform init
$ terraform plan -out <\FILENAME>
$ terraform apply <\FILENAME>
Where <\FILENAME> is the name of the output file Get started To get the initial user and service principal credentials, run the following query: $ terraform output --json
For Service Principals, use application_id.value and application_secret.value. For Users, use username.value and password.value. Cleaning up After completing the scenario, run the following command in order to clean all the resources created in your tenant $ az login
$ cd XMGoat
$ cd scenarios
$ cd scenario_<\SCENARIO>
Where <\SCENARIO> is the scenario number you want to complete $ terraform destroy


Download XMGoat (https://github.com/XMCyber/XMGoat)