Red Teaming Hardware
https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/
Hi Everyone I'm interested in physical red teaming tools such as the USB Kill and USB Samurai. Can you guys please advise where I can find similar tools for red teaming exercises Thank you submitted by /u/messi1_0- (https://www.reddit.com/user/messi1_0-)
[link] (https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/) [comments] (https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/
Hi Everyone I'm interested in physical red teaming tools such as the USB Kill and USB Samurai. Can you guys please advise where I can find similar tools for red teaming exercises Thank you submitted by /u/messi1_0- (https://www.reddit.com/user/messi1_0-)
[link] (https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/) [comments] (https://www.reddit.com/r/redteamsec/comments/pjljvn/red_teaming_hardware/)
___________________________
@hacking_Attack
@Hacking_Video
Reddit
From the redteamsec community on Reddit
Explore this post and more from the redteamsec community
Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
🔥🔥
https://external-preview.redd.it/apCKkcDzBGMzYTzIJmsir0HKAeJvI6k7c4n2DocgINA.jpg?width=320&crop=smart&auto=webp&s=82d341d01ad77afe6a6b5aea72fbdf65c0226a96 submitted by /u/rawrollingtray
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
🔥🔥
https://external-preview.redd.it/apCKkcDzBGMzYTzIJmsir0HKAeJvI6k7c4n2DocgINA.jpg?width=320&crop=smart&auto=webp&s=82d341d01ad77afe6a6b5aea72fbdf65c0226a96 submitted by /u/rawrollingtray
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
🔥🔥
Posted in r/deepweb by u/rawrollingtray • 3 points and 1 comment
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
MSSQL for Pentester: Abusing Trustworthy
In this article, we will learn how to give sysadmin rights to the user who has only fundamental public rights. Technically, we will apply privilege escalation logic and give sysadmin the privilege to a regular public user. And abuse the trustworthy property, given that it is enabled on the Database.
Table of contentIntroduction to Trustworthy Trustworthy database property helps to determine that whether the SQL server relies on a database or not. When working with CRL, there will be many instances where special commands or procedures deem it vital to have particular privileges. It requires such a license so that it can protect the Database from malicious scenarios. Many properties can be used in windows servers and SQL servers to determine if the Database is trusted. The properties must be set accordingly to allow the SQL server to function. One method for doing this is by adding the trust command on both servers.Lab SetupTo perform the practical and for it to be successful, we will first set up our MSSQL server lab and for that, let us create a new database by right-clicking on the Database and selecting the New Database option as shown in the image below:OKbutton as shown in the image below:Loginsand choose the New Loginoption as shown in the image below:OKbutton as shown in the image below:User Mapping,and there select igniteDatabase for your user. In the role membership panel, choose the db_owneroption, then click on the OKbutton as shown in the image below:select name,is_trustworthy_on from sys.databaseshttps://1.bp.blogspot.com/-ncK71FhZRSU/YTc7aOLaPjI/AAAAAAAAyfY/xSvKieHUNgETaeAA4DbBRo5VayLYJLMCQCLcBGAsYHQ/s16000/7.png As you can see that the Database we[...]
___________________________
@hacking_Attack
@Hacking_Video
MSSQL for Pentester: Abusing Trustworthy
In this article, we will learn how to give sysadmin rights to the user who has only fundamental public rights. Technically, we will apply privilege escalation logic and give sysadmin the privilege to a regular public user. And abuse the trustworthy property, given that it is enabled on the Database.
Table of contentIntroduction to Trustworthy Trustworthy database property helps to determine that whether the SQL server relies on a database or not. When working with CRL, there will be many instances where special commands or procedures deem it vital to have particular privileges. It requires such a license so that it can protect the Database from malicious scenarios. Many properties can be used in windows servers and SQL servers to determine if the Database is trusted. The properties must be set accordingly to allow the SQL server to function. One method for doing this is by adding the trust command on both servers.Lab SetupTo perform the practical and for it to be successful, we will first set up our MSSQL server lab and for that, let us create a new database by right-clicking on the Database and selecting the New Database option as shown in the image below:OKbutton as shown in the image below:Loginsand choose the New Loginoption as shown in the image below:OKbutton as shown in the image below:User Mapping,and there select igniteDatabase for your user. In the role membership panel, choose the db_owneroption, then click on the OKbutton as shown in the image below:select name,is_trustworthy_on from sys.databaseshttps://1.bp.blogspot.com/-ncK71FhZRSU/YTc7aOLaPjI/AAAAAAAAyfY/xSvKieHUNgETaeAA4DbBRo5VayLYJLMCQCLcBGAsYHQ/s16000/7.png As you can see that the Database we[...]
___________________________
@hacking_Attack
@Hacking_Video
Blogspot
MSSQL for Pentester: Abusing Trustworthy
Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.
Hacking Articles|Raj Chandel's Blog
MSSQL for Pentester: Abusing Trustworthy
___________________________
@hacking_Attack
@Hacking_Video
MSSQL for Pentester: Abusing Trustworthy
___________________________
@hacking_Attack
@Hacking_Video
Blogspot
MSSQL for Pentester: Abusing Trustworthy
Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Penelope - Shell Handler
https://1.bp.blogspot.com/-CyhpWLNMB-M/YSRt-_Dp4_I/AAAAAAAAtzA/2T9nAwJXyF0y1iMIiL6o-7qCyqcLHmPvgCNcBGAsYHQ/w640-h512/penelope_1.png Penelope is an advanced shell handler. Its main aim is to replace netcat as shell catcher during exploiting RCE vulnerabilities. It works on Linux and macOS and the only requirement is Python3. It is one script without 3rd party dependencies and hopefully it will stay that way.
Among the main features are:
* Auto-upgrade shells to PTY (auto-resize included)
* Logging interaction with the targets
* Download files from targets
* Upload files to targets
* Upload preset scripts to targets
* Spawn backup shells
* Multiple sessions
* Multiple listeners
* Can be imported by exploits and get shell on the same terminal (see extras)
Penelope can work in conjunction with metasploit exploits by disabling the default handler with
2. Pressing F12 to detach the session and go to the main menu
3. Run 'recon' command to upload preset privesc scripts to the target
4. Interacting again with the session, confirming that scripts are uploaded
5. Detaching again with F12 and downloading /etc directory from the target
6. Kill the session and exiting with Ctrl-D https://1.bp.blogspot.com/-CyhpWLNMB-M/YSRt-_Dp4_I/AAAAAAAAtzA/2T9nAwJXyF0y1iMIiL6o-7qCyqcLHmPvgCNcBGAsYHQ/w640-h512/penelope_1.png Demonstrating random usage (2)1. Adding an extra listener and show all listeners
2. Interacting with session 1
3. Spawning 2 extra backup sessions
4. Showing all sessions https://1.bp.blogspot.com/-kuoxTXZ47A0/YSR00WubkvI/AAAAAAAAtzI/S6IM4A701zod_ip4hm6Sx-amziG_7Rw5ACNcBGAsYHQ/w640-h578/penelope_2.png Command line options
___________________________
@hacking_Attack
@Hacking_Video
Penelope - Shell Handler
https://1.bp.blogspot.com/-CyhpWLNMB-M/YSRt-_Dp4_I/AAAAAAAAtzA/2T9nAwJXyF0y1iMIiL6o-7qCyqcLHmPvgCNcBGAsYHQ/w640-h512/penelope_1.png Penelope is an advanced shell handler. Its main aim is to replace netcat as shell catcher during exploiting RCE vulnerabilities. It works on Linux and macOS and the only requirement is Python3. It is one script without 3rd party dependencies and hopefully it will stay that way.
Among the main features are:
* Auto-upgrade shells to PTY (auto-resize included)
* Logging interaction with the targets
* Download files from targets
* Upload files to targets
* Upload preset scripts to targets
* Spawn backup shells
* Multiple sessions
* Multiple listeners
* Can be imported by exploits and get shell on the same terminal (see extras)
Penelope can work in conjunction with metasploit exploits by disabling the default handler with
set DisablePayloadHandler TrueIt supports Windows shells but autoupgrade is not implemented yet. However it can accept PTY shells from the excellent project ConPtyShell of @antonioCoco. Autoresize of PTY is implemented. Sample basic usagereverse shells on 0.0.0.0:4444 penelope.py 5555 # Listening for reverse shells on 0.0.0.0:5555 penelope.py 5555 -i eth0 # Listening for reverse shells on eth0:5555 penelope.py -c target 3333 # Connect to a bind shell on target:3333 ">penelope.py # Listening for reverse shells on 0.0.0.0:4444
penelope.py 5555 # Listening for reverse shells on 0.0.0.0:5555
penelope.py 5555 -i eth0 # Listening for reverse shells on eth0:5555
penelope.py -c target 3333 # Connect to a bind shell on target:3333 Demonstrating random usage (1)1. Executing penelope without parameters and getting a reverse shell2. Pressing F12 to detach the session and go to the main menu
3. Run 'recon' command to upload preset privesc scripts to the target
4. Interacting again with the session, confirming that scripts are uploaded
5. Detaching again with F12 and downloading /etc directory from the target
6. Kill the session and exiting with Ctrl-D https://1.bp.blogspot.com/-CyhpWLNMB-M/YSRt-_Dp4_I/AAAAAAAAtzA/2T9nAwJXyF0y1iMIiL6o-7qCyqcLHmPvgCNcBGAsYHQ/w640-h512/penelope_1.png Demonstrating random usage (2)1. Adding an extra listener and show all listeners
2. Interacting with session 1
3. Spawning 2 extra backup sessions
4. Showing all sessions https://1.bp.blogspot.com/-kuoxTXZ47A0/YSR00WubkvI/AAAAAAAAtzI/S6IM4A701zod_ip4hm6Sx-amziG_7Rw5ACNcBGAsYHQ/w640-h578/penelope_2.png Command line options
positional arguments:
PORT Port to listen/connect to depending on -i/-c options. Default: 4444
Reverse or Bind shell?:
-i , --address IP Address or Interface to listen on. Default: 0.0.0.0
-c , --connect Bind shell Host
Hints:
-a, --hints Show sample payloads for reverse shell based on the registered listeners
-l, --interfaces Show the available network interfaces
-h, --help show this help message and exit
Verbosity:
-Q, --silent Show only errors and warnings
-X, --extra-silent Suppress all logging messages
Logging:
-L, --no-log Do not create session log files
-T, --no-timestamps Do not include timestamps on logs
Misc:
-H, --no-history Disable shell history on target
-P, --plain Just land to the menu
-S, --single-session Accommodate only the first created session
-C, --no-attach Disable auto attaching sessions upon creation
-U, --no-upgrade Do not upgrade shells
Debug:
-d, --debug Show debug messages
-NP, --no-python Simulate python absence on target
-NB, --no-bash Simulate bash absence on target Menu optionsreconnaissance scripts to the[...]___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Penelope - Shell Handler
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! Penelope - Shell Handler https://1.bp.blogspot.com/-CyhpWLNMB-M/YSRt-_Dp4_I/AAAAAAAAtzA/2T9nAwJXyF0y1iMIiL6o-7qCyqcLHmPvgCNcBGAsYHQ/w640-h512/penelope_1.png Penelope is an advanced shell handler. Its main aim is to replace netcat…
target spawn [sessionID] Spawn a new session. Whether it will be reverse or bind, depends on the current session. upgrade [sessionID] Upgrade the session's shell to "PTY". If it fails attempts to upgrade it to "Advanced". If this fail too, then falls back to "Basic" shell. dir|. [sessionID] Open the session's local folder. If no session is selected, opens the base folder. listeners [use [sessionID|none]
Select a session
sessions [sessionID]
Show active sessions. When followed by ExtrasThere are also included two sample exploit simulation scripts to demonstrate how penelope can be imported and get shell on the same terminal. Furthermore, one bash script is included that automatically upgrades Unix shells to PTY using xdotool. TODOFeatures* currently download/upload/spawn/upgrade commands are supported only on Unix shells. Will implement those commands for Windows shells too.
* port forwarding
* persistence
* edit command: open the remote file locally, make changes and upon saving, upload it to target
* ability to specify a list of commands to run automatically on target and/or the main menu
* an option switch for disable all logging, not only sessions.
* execute a local script on target and get the output on a local file
* main menu autocompletion for short commands
* download/upload progress bar
* download/upload autocompletion
* IPv6
* encryption
* UDP Bugs* Ctrl-C on main menu has not the expected behaviour yet. However can still stop commands like 'download'.
* Session logging: when executing commands with alternate buffers like nano on target, then when cat the log it seems corrupted. However the data are still there. Misc* apply some PEP8
* consider autorunning bash -l on new shells
* better way to handle duplicate downloads Limitations* emojis don't appear on mate-terminal (parrot OS)
* download comma[...]
___________________________
@hacking_Attack
@Hacking_Video
Select a session
sessions [sessionID]
Show active sessions. When followed by ExtrasThere are also included two sample exploit simulation scripts to demonstrate how penelope can be imported and get shell on the same terminal. Furthermore, one bash script is included that automatically upgrades Unix shells to PTY using xdotool. TODOFeatures* currently download/upload/spawn/upgrade commands are supported only on Unix shells. Will implement those commands for Windows shells too.
* port forwarding
* persistence
* edit command: open the remote file locally, make changes and upon saving, upload it to target
* ability to specify a list of commands to run automatically on target and/or the main menu
* an option switch for disable all logging, not only sessions.
* execute a local script on target and get the output on a local file
* main menu autocompletion for short commands
* download/upload progress bar
* download/upload autocompletion
* IPv6
* encryption
* UDP Bugs* Ctrl-C on main menu has not the expected behaviour yet. However can still stop commands like 'download'.
* Session logging: when executing commands with alternate buffers like nano on target, then when cat the log it seems corrupted. However the data are still there. Misc* apply some PEP8
* consider autorunning bash -l on new shells
* better way to handle duplicate downloads Limitations* emojis don't appear on mate-terminal (parrot OS)
* download comma[...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
target spawn [sessionID] Spawn a new session. Whether it will be reverse or bind, depends on the current session. upgrade [sessionID] Upgrade the session's shell to "PTY". If it fails attempts to upgrade it to "Advanced". If this fail too, then falls…
nd: path links are not clickable on qterminal (Kali Linux)
* penelope menu commands and PTY autoresize operate on the same socket. This could be an advantage but it has a side effect that for example if nano is open on target, then detaching the session and attempt a download, penelope copes with that by sending Ctrl-Z -> Ctrl-E -> Ctrl-U. Then must run fg to get the process back. Maybe consider to spawn extra socket for controling the session in the future. However, if before executing a menu command, the target's terminal if left on a clear state, then there is no problem. Thanks to* Cristian Grigoriu - @crgr for inspiring me to automate the PTY upgrade process. This is how this project was born.
* Paul Taylor - @bao7uo for advising me that penelope should not be shipped without the ability to connect to a bind shell. Download Penelope
___________________________
@hacking_Attack
@Hacking_Video
* penelope menu commands and PTY autoresize operate on the same socket. This could be an advantage but it has a side effect that for example if nano is open on target, then detaching the session and attempt a download, penelope copes with that by sending Ctrl-Z -> Ctrl-E -> Ctrl-U. Then must run fg to get the process back. Maybe consider to spawn extra socket for controling the session in the future. However, if before executing a menu command, the target's terminal if left on a clear state, then there is no problem. Thanks to* Cristian Grigoriu - @crgr for inspiring me to automate the PTY upgrade process. This is how this project was born.
* Paul Taylor - @bao7uo for advising me that penelope should not be shipped without the ability to connect to a bind shell. Download Penelope
___________________________
@hacking_Attack
@Hacking_Video
Top 25 Account Takeover Bug Bounty Reports
In this article, we will discuss the Account Takeover attack, and present 25 disclosed reports based on this issue.Continue reading on Medium »
Read more...
In this article, we will discuss the Account Takeover attack, and present 25 disclosed reports based on this issue.Continue reading on Medium »
Read more...
Golff Bug Bounty Program
Golff.Finance is committed to providing safe and reliable services to users, and the security of the system has always been a top priority…Continue reading on Medium »
Read more...
Golff.Finance is committed to providing safe and reliable services to users, and the security of the system has always been a top priority…Continue reading on Medium »
Read more...
[Atlassian Confluence CVE-2021–26084]::: The other side of bug report!
tl;dr A pull request for Nuclei template of CVE-2021–26084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian…Continue reading on tradahacking »
Read more...
tl;dr A pull request for Nuclei template of CVE-2021–26084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian…Continue reading on tradahacking »
Read more...
Apple Hall Of Fame
Hello Guys ! I am Sagar Jana a Security Researcher. I have found a Content Spoofing/Text Injection vulnerability on domain www.apple.comContinue reading on Medium »
Read more...
Hello Guys ! I am Sagar Jana a Security Researcher. I have found a Content Spoofing/Text Injection vulnerability on domain www.apple.comContinue reading on Medium »
Read more...
[Atlassian Confluence CVE-2021–26084]::: The other side of bug report!
https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5
https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5
tl;dr
A pull request for Nuclei template of CVE-2021–26084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian…Continue reading on tradahacking » (https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5)
A pull request for Nuclei template of CVE-2021–26084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian…Continue reading on tradahacking » (https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5)
Account Takeover via XSS in e-signature feature worth 2500$
https://medium.com/@gguzelkokar.mdbf15/xss-via-account-takeover-in-e-signature-feature-worth-2500-435f3f8325bf?source=rss------bug_bounty-5
https://medium.com/@gguzelkokar.mdbf15/xss-via-account-takeover-in-e-signature-feature-worth-2500-435f3f8325bf?source=rss------bug_bounty-5
Hi everyone, I hope all is well. I was hacking an HR application and started testing the integrated applications that were on it.Continue reading on Medium » (https://medium.com/@gguzelkokar.mdbf15/xss-via-account-takeover-in-e-signature-feature-worth-2500-435f3f8325bf?source=rss------bug_bounty-5)