pSQL. Now that we have access to importing and executing the scripts on the machine. We can use the Import-Module cmdlet to import the PowerShell. Script. Then use the Invoke-SQLOSCmd command with parameters such as username, a password containing the credential for the database user. Followed by the instance that we want to run that particular command in. In our case, it is the SQL Express. Then we have the command that we want to run, which here we have selected The whoami command. Again, after executing this particular command first, the tool PowerUpSQL tries to connect with the database, after the connection is successful, it checks if the user credentials that we have provided are for sysadmin or the users that we have provided have sysadmin access or not, then it runs the commands in a similar way that we did earlier with sqsh. It first enables the advanced options and then tries to enable the XP command shell functionality. Here, in this demonstration, the XP commands functionality is already enabled, so the tool just moves on to run the whoami command which shows that we are the user and nt service/MSSQL$sqlexpress user.<o:p cd PowerUPSQL-master<o:ppowershell -ep bypass<o:pImport-Module .\PowerUpSQL.psq<o:pInvoke-SQLOSCmd -Username sa -Password Password@1 -Instance  WIN-P83OS778EQK\SQLEXPRESS –Command whoami –Verbose<o:phttps://1.bp.blogspot.com/-kN3UTEONcgQ/YR_q63mDkyI/AAAAAAAAyQs/b4BbISjwmuQmY6up2h4jQxhXo1lo7-H4gCLcBGAsYHQ/s16000/50.png Conclusion<o:p

This article was designed to provide the users with possible content that can help them whenever they want to perform penetration testing on Ms SQL Server where there is a chance that they could enable the XP command shell functionality or the XP command shell functionality already enabled. The point of this article is not to speculate on how the user can get the credentials or how they were able to elevate its sysadmin access but, when or if the user was able to get those privileges, they can move on to extract and execute multiple commands on the target system and do more damage. <o:p

hacking: security in practice
1Password Secret Retrieval — Methodology and Implementation

https://posts.specterops.io/1password-secret-retrieval-methodology-and-implementation-6a9db3f3c709

submitted by /u/losthuman42
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Hack The Box — Bounty Hunter

https://cdn-images-1.medium.com/max/1174/1*J8i204KT8yOffwM2Feb7ww.png
This machine is a beginner friendly machine. The root flag especially tests your mindset of privilege escalation.
I opened the website and…

Continue reading on Medium »

Hacking on Medium
Apple’s NeuralHash — How it works and ways to break it

https://cdn-images-1.medium.com/max/600/1*Hkagch3pdtqpImcwH8oXVA.png
A guide to the technology, its vulnerabilities and possible mitigations

Continue reading on Medium »

What are the top 5 reverse lookups for online investigations?
https://www.reddit.com/r/Pentesting/comments/p8cwik/what_are_the_top_5_reverse_lookups_for_online/

submitted by /u/justbrowsingtosay (https://www.reddit.com/user/justbrowsingtosay)
[link] (https://medium.com/@CyberGuyknows/what-are-the-top-5-reverse-lookups-for-online-investigations-6db8835c431f) [comments] (https://www.reddit.com/r/Pentesting/comments/p8cwik/what_are_the_top_5_reverse_lookups_for_online/)

PackageDNA - Tool To Analyze Software Packages Of Different Programming Languages That Are Being Or Will Be Used In Their Codes
http://www.kitploit.com/2021/08/packagedna-tool-to-analyze-software.html

This tool gives developers, researchers and companies the ability to analyze software packages of different programming languages that are being or will be used in their codes, providing information that allows them to know in advance if this library complies with processes. secure development, if currently supported, possible backdoors (malicious embedded code), typosquatting (https://www.kitploit.com/search/label/Typosquatting) analysis, the history of versions and reported vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) (CVEs) of the package.
Installation
Clone this repository with: git clone https://github.com/ElevenPaths/packagedna PackageDNA uses python-magic which is a simple wrapper around the libmagic C library, and that MUST be installed as well: Debian/Ubuntu
$ sudo apt-get install libmagic1

Windows
You will need DLLs for libmagic. @julian-r has uploaded a version of this project that includes binaries
to PyPI: https://pypi.python.org/pypi/python-magic-bin/0.4.14
Other sources of the libraries in the past have been File for Windows.
You will need to copy the file magic out of [binary-zip]\share\misc, and pass its location to Magic(magic_file=...).

If you are using a 64-bit build of python, you will need 64-bit libmagic binaries which can be found here: https://github.com/pidydx/libmagicwin64.
Newer version can be found here: https://github.com/nscaife/file-windows.

OSX
When using Homebrew: brew install libmagic
When using macports: port install file


More details: https://pypi.org/project/python-magic/ Run setup for installation: python3 setup.py install --user
External Modules
PackageDNA uses external modules for its analysis (https://www.kitploit.com/search/label/Analysis) that you should install previously: Microsoft AppInpsector https://github.com/microsoft/ApplicationInspector Virus Total API https://www.virustotal.com/ LibrariesIO API https://libraries.io/ Rubocop https://github.com/rubocop/rubocop After installation you should configure the external modules, in the option [7] Configuration of the main menu. VirusTotal API Key: Your API KEY [2] AppInspector absolute path: /Local/Path/MSAppInpsectorInstallation [3] Libraries.io API Key: Your API KEY [4] Github Token: Your Token [B] Back [X] Exit ">[1] VirusTotal API Key: Your API KEY
[2] AppInspector absolute path: /Local/Path/MSAppInpsectorInstallation
[3] Libraries.io API Key: Your API KEY
[4] Github Token: Your Token
[B] Back
[X] Exit NOTE: External modules are not mandatory. PackageDNA will continue its execution, however we recommend making all the configurations of these modules so that the tool performs a complete analysis
Running PackageDNA
Inside the PackageDNA directory: ./packagedna.py Analyzer Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./packagedna.py [*] -------------------------------------------------------------------------------------------------------------- [*] [!] Select from the menu: [*] -------------------------------------------------------------------------------------------------------------- [*] [1] Analyze Package (Last Version) [2] Analyze Package (All Versions) [3] Analyze local package [4] Information gathering [5] Upload file and analyze all Packages [6] List previously analyzed packages [7] Configurations [X] Exit [*] -------------------------------------------------------------------------------------------------------------- [*] [!] Enter your selection: ">_____ _ ____ __ _ _______
| __ \ | | | __ \ | \ | || ___ |
| |__) |__ __ ____ | | __ __ __ ____ ___ | | \ \ | |\ \ | || |___| |
| ___// _` |/ __)| |/ / / _` | / _ | / _ \| | | || | \ \| || ___ |
| | | (_| || (__ | |\ \ | (_| || (_| || __/| |__/ / | | \ || | | |
|_| \__,_|\____)|_| \_\ \__,_| \__ | \___||_____/ |_| \__||_| |_|

__| |
(____|

Modular Packages Analyzer Framework
By ElevenPaths https://www.elevenpaths.com/
Usage: python3 ./packagedna.py

[*] -------------------------------------------------------------------------------------------------------------- [*]
[!] Select from the menu:
[*] -------------------------------------------------------------------------------------------------------------- [*]
[1] Analy ze Package (Last Version)
[2] Analyze Package (All Versions)
[3] Analyze local package
[4] Information gathering
[5] Upload file and analyze all Packages
[6] List previously analyzed packages
[7] Configurations
[X] Exit
[*] -------------------------------------------------------------------------------------------------------------- [*]
[!] Enter your selection:

Download Packagedna (https://github.com/Telefonica/packagedna)

Hacking Articles
MSSQL for Pentester: Command Execution with xp_cmdshell

This article is the series of MSSQL for pentester, here we will discover and exploit the security aspects of the xp_cmdshell functionality. Table of Content Introduction What is xp_cmdshell? Enabling xp_cmdshell Manually (GUI) sqsh mssqlclient.py Exploiting xp_cmdshell Metasploit Netcat Crackmapexec Nmap PowerUpSQL Introduction All the demonstrations in this article will

The post MSSQL for Pentester: Command Execution with xp_cmdshell appeared first on Hacking Articles.

Let’s build an API to hack — Part 4: Mass assignment

The developers forgot to protect this one crucial property, now we will hack it.Continue reading on Medium »
Read more...

How I was able to get 1000$ bounty from a ds-store file?

Let’s start?Continue reading on Medium »
Read more...

Let’s build an API to hack — Part 4: Mass assignment
https://thexssrat.medium.com/lets-build-an-api-to-hack-part-4-mass-assignment-fe403e9a4a96?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The developers forgot to protect this one crucial property, now we will hack it.Continue reading on Medium » (https://thexssrat.medium.com/lets-build-an-api-to-hack-part-4-mass-assignment-fe403e9a4a96?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video