Hunting for Mass Assignment

How to develop an intuition for Mass Assignment and exploit it like a pro!Continue reading on Pentester Academy Blog »
Read more...

Account Takeover using Update Password functionality + Weak Password Policy

Hey!Continue reading on Medium »
Read more...

Hunting for Mass Assignment
https://blog.pentesteracademy.com/hunting-for-mass-assignment-56ed73095eda?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How to develop an intuition for Mass Assignment and exploit it like a pro!Continue reading on Pentester Academy Blog » (https://blog.pentesteracademy.com/hunting-for-mass-assignment-56ed73095eda?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Account Takeover using Update Password functionality + Weak Password Policy
https://spoofing.medium.com/account-takeover-using-update-password-functionality-weak-password-policy-ab5190bc3827?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey!Continue reading on Medium » (https://spoofing.medium.com/account-takeover-using-update-password-functionality-weak-password-policy-ab5190bc3827?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs
https://medium.com/@hackitdamn/setup-guide-for-nahamsecs-intro-to-bug-bounty-labs-f398ab26dae9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone, This is setup guide for Nahamsec’s intro to bug bounty labs who don’t know how to install on local machine in Kali Linux.Continue reading on Medium » (https://medium.com/@hackitdamn/setup-guide-for-nahamsecs-intro-to-bug-bounty-labs-f398ab26dae9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs

Hello everyone, This is setup guide for Nahamsec’s intro to bug bounty labs who don’t know how to install on local machine in Kali Linux.Continue reading on Medium »
Read more...

hacking: security in practice
Anyone want to do some CTF's with me?

Doing CTF's pretty much everyday :) 22 yr old Cyber Sec student. I'm not completely trash but still have A LOT to learn.

Edit: If interested drop me a message on discord Bolgz#9439

submitted by /u/bolgz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Neat XSS trick from a G.O.A.T — Gareth Heyes special
https://securitygoat.medium.com/neat-xss-trick-from-a-g-o-a-t-gareth-heyes-special-8f335cf1880c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let’s discuss about this interesting XSS challenge, that was shared yesterday by Gareth Heyes! Read on to learn a neat Javascript trick :)Continue reading on Medium » (https://securitygoat.medium.com/neat-xss-trick-from-a-g-o-a-t-gareth-heyes-special-8f335cf1880c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AlanFramework - A Post-Exploitation Framework
http://www.kitploit.com/2021/08/alanframework-post-exploitation.html

___________________________
@hacking_Attack
@Hacking_Video

Alan Framework is a post-exploitation (https://www.kitploit.com/search/label/Post-Exploitation) framework useful during red-team (https://www.kitploit.com/search/label/Red-Team) activities. If you find my tool useful, please consider to sponsor me (https://github.com/sponsors/enkomio). Sponsored users have access (https://www.kitploit.com/search/label/Access) to early releases and non public content. You can download the binary (https://www.kitploit.com/search/label/Binary) from: https://github.com/enkomio/AlanFramework/releases/latest
Download
Download Alan Framework (https://github.com/enkomio/AlanFramework/releases/latest)
Videos:
Update agent profile at runtime (https://www.youtube.com/watch?v=oLXYUCX7dVY) Introduction (https://www.youtube.com/watch?v=dgEBEAfEseY)
Documentation:
Blog post: http://antonioparata.blogspot.com/2021/05/alan-post-exploitation-framework.html For more information on its usage please read the documentation (https://github.com/enkomio/AlanFramework/blob/main/doc/Alan%20Documentation%20-%20v3.0.502.19.pdf).
Changelog

3.0.0 - 15/05/2021
Renamed agent shell quit command to exit Implemented agent migration via migrate command Fixed error in retrieving OS version Added DLL as agent format in the creation wizard. Implemented ps command to list the currently running processes Implemented download command to locally download a file or an entire directory Implemented upload command to upload files to the compromised host Implemented SuccessRequest as HTTP server response option to customize the http/s listener (https://www.kitploit.com/search/label/Listener) response Implemented ErrorRequest to customize the http/s listener response for bad requests Implemented prepend and append as HTTP server request option to specify in the agent prof
2.0.500.23 - 20/03/2021
Implemented agent detach command to temporary exit from a joined agent Implemented shell detach command to temporary exit from a command shell Implemented listeners command to list the available listeners Implemented HTTPS listener to communicatewith the agent via TLS Implemented get-config command to download the current agent configuration Implemented update command to update the agent configuration Windows7 is now supported
1.0.0 - 22/02/2021
First Release

Download AlanFramework (https://github.com/enkomio/AlanFramework)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
AlanFramework - A Post-Exploitation Framework

https://1.bp.blogspot.com/-625nxCyDaJk/YRIP4HN3QYI/AAAAAAAAps4/EB-mI3LjkosnbABKtKqUQOm3CO6Z0noggCNcBGAsYHQ/w640-h600/alan.png
Alan Framework is a post-exploitation framework useful during red-team activities.

If you find my tool useful, please consider to sponsor me. Sponsored users have access to early releases and non public content.

You can download the binary from: https://github.com/enkomio/AlanFramework/releases/latest
Download

Download Alan Framework

Videos:

* Update agent profile at runtime
* Introduction

Documentation:

Blog post: http://antonioparata.blogspot.com/2021/05/alan-post-exploitation-framework.html

For more information on its usage please read the documentation.

Changelog

3.0.0 - 15/05/2021

* Renamed agent shell quitcommand to exit
* Implemented agent migration via migratecommand
* Fixed error in retrieving OS version
* Added DLL as agent format in the creation wizard.
* Implemented pscommand to list the currently running processes
* Implemented downloadcommand to locally download a file or an entire directory
* Implemented uploadcommand to upload files to the compromised host
* Implemented SuccessRequestas HTTP server response option to customize the http/s listener response
* Implemented ErrorRequestto customize the http/s listener response for bad requests
* Implemented prependand appendas HTTP server request option to specify in the agent prof

2.0.500.23 - 20/03/2021

* Implemented agent detachcommand to temporary exit from a joined agent
* Implemented shell detachcommand to temporary exit from a command shell
* Implemented listenerscommand to list the available listeners
* Implemented HTTPS listener to communicatewith the agent via TLS
* Implemented get-configcommand to download the current agent configuration
* Implemented updatecommand to update the agent configuration
* Windows7 is now supported

1.0.0 - 22/02/2021

* First Release
Download AlanFramework

___________________________
@hacking_Attack
@Hacking_Video