Hello People🙌,Continue reading on Medium » (https://medium.com/@liferacer333/story-of-my-first-bounty-by-a-low-hanging-fruit-9b5cfef1bd89?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
World wideTraffic Hack Review| And Amazing Bonus|


In this Article World wideTraffic Hack Review, I’m going to be showing you a system that’s going to allow you to get free or very very…

Continue reading on Medium »

Hacking on Medium
Rust Wrapper for Metasploit RPC.

Hey fellas,yes you heard it right.We are now having a metasploit RPC in rust.So fasten your seat belts,we are gonna go through the whole…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WHY IS IT NECESSARY FOR YOUR ONLINE BUSINESS TO INVEST IN CYBER SECURITY?


Today, we’re going to explain to you why you should invest in cyber security for your internet company and why you should not put it off…

Continue reading on Medium »

Hacking on Medium
GTA Vice City | Grand Theft Auto Vice City Mod Apk

GTA Vice City is The Best Game For All Action Game Lovers. In This Game Yo Do, Anything Because Your Character is a Gangstar in The Game.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GTA 3 | Grand Theft Auto Mod Apk III [ Unlimited All ]


GTA 3 is a 2001 activity experience game created by DMA Design and distributed by Rockstar Games. It is the principal primary section in…

Continue reading on Medium »

targetedKerberoast - Kerberoast With ACL Abuse Capabilities

targetedKerberoast is a Python script that can, like many others (e.g. GetUserSPNs.py), print "kerberoast" hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one (abuse of a write permission on the servicePrincipalName attribute), print the "kerberoast" hash, and delete the temporary SPN set for that operation. This is called targeted Kerberoasting. This tool can be used against all users of a domain, or supplied in a list, or one user supplied in the CLI. More information about this attack The Hacker Recipes - Kerberoast The Hacker Recipes - Targeted KerberoastingUsage This tool supports the following authentications (NTLM) Cleartext password (NTLM) Pass-the-hash (Kerberos) Cleartext password (Kerberos) Pass-the-key / Overpass-the-hash (Kerberos) Pass-the-cache (type of Pass-the-ticket) Among other things, targetedKerberoast supports multi-level verbosity, just append -v, -vv, ... to the command :) Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command line --no-pass don't ask for password (useful for -k) -p PASSWORD, --password PASSWORD password to authenticate with -H LMHASH:NTHASH, --hashes LMHASH:NTHASH NT/LM hashes, format is LMhash:NThash --aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits) ">usage: targetedKerberoast.py -h -v -q -D TARGET\_DOMAIN -U USERS\_FILE --request-user username -o OUTPUT\_FILE --use-ldaps --only-abuse --no-abuse --dc-ip ip address -d DOMAIN -u USER -k --no-pass | -p PASSWORD | -H [LMHASH:NTHASH | --aes-key hex key]Queries target domain for SPNs that are running under a user account and operate targeted Kerberoastingoptional arguments: -h, --help show this help message and exit -v, --verbose verbosity level (-v for verbose, -vv for debug) -q, --quiet show no information at all -D TARGET_DOMAIN, --target-domain TARGET_DOMAIN Domain to query/request if different than the domain of the user. Allows for Kerberoasting across trusts. -U USERS_FILE, --users-file USERS_FILE File with user per line to test --request-user username Requests TGS for the SPN associated to the user specified (just the username, no domain needed) -o OUTPUT_FILE, --output-file OUTPUT_FILE Output filename to write ciphers in JtR/hashcat format --use-ldaps Use LDAPS instead of LDAP --only-abuse Ignore accounts that already have an SPN and focus on targeted Kerberoasting --no-abuse Don't attempt targeted Kerberoastingauthentication & connection: --dc-ip ip address IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN) specified in the identity parameter -d DOMAIN, --domain DOMAIN (FQDN) domain to authenticate to -u USER, --user USER user to authenticate withsecrets: -k, --kerberos Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameter s. If valid credentials cannot be found, it will use the ones specified in the command line --no-pass don't ask for password (useful for -k) -p PASSWORD, --password PASSWORD password to authenticate with -H LMHASH:NTHASH, --hashes LMHASH:NTHASH NT/LM hashes, format is LMhash:NThash --aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits) Below is an example what the tool can do. Credits and references Credits to the whole team behind Impacket and its contributors. Download targetedKerberoast
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Deri Protocol Bug Bounty Program
https://deri-protocol.medium.com/deri-protocol-bug-bounty-program-fc2b0f8ba3ae?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

After the release of Perpetual Protocol on Binance Smart Chain and Polygon Network, we’re thrilled to reveal our bug bounty program with…Continue reading on Medium » (https://deri-protocol.medium.com/deri-protocol-bug-bounty-program-fc2b0f8ba3ae?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

targetedKerberoast - Kerberoast With ACL Abuse Capabilities
http://www.kitploit.com/2021/09/targetedkerberoast-kerberoast-with-acl.html

___________________________
@hacking_Attack
@Hacking_Video

targetedKerberoast is a Python script that can, like many others (e.g. GetUserSPNs.py (https://github.com/SecureAuthCorp/impacket/blob/master/examples/GetUserSPNs.py)), print "kerberoast" hashes (https://www.kitploit.com/search/label/Hashes) for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one (abuse of a write permission on the servicePrincipalName attribute), print the "kerberoast" hash, and delete the temporary SPN set for that operation. This is called targeted Kerberoasting. This tool can be used against all users of a domain, or supplied in a list, or one user supplied in the CLI. More information about this attack The Hacker Recipes - Kerberoast (https://www.thehacker.recipes/active-directory-domain-services/movement/kerberos/kerberoast) The Hacker Recipes - Targeted Kerberoasting (https://www.thehacker.recipes/active-directory-domain-services/movement/access-control-entries/targeted-kerberoasting)
Usage
This tool supports the following authentications (NTLM) Cleartext password (NTLM) Pass-the-hash (https://www.thehacker.recipes/active-directory-domain-services/movement/lm-and-ntlm/pass-the-hash) (Kerberos) Cleartext password (Kerberos) Pass-the-key (https://www.thehacker.recipes/active-directory-domain-services/movement/kerberos/pass-the-key) / Overpass-the-hash (https://www.thehacker.recipes/active-directory-domain-services/movement/kerberos/overpass-the-hash) (Kerberos) Pass-the-cache (https://www.thehacker.recipes/active-directory-domain-services/movement/kerberos/pass-the-cache) (type of Pass-the-ticket (https://www.thehacker.recipes/active-directory-domain-services/movement/kerberos/pass-the-ticket)) Among other things, targetedKerberoast supports multi-level verbosity, just append -v, -vv, ... to the command :) Kerberos authentication. Grabs credentials (https://www.kitploit.com/search/label/Credentials) from .ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command line --no-pass don't ask for password (useful for -k) -p PASSWORD, --password PASSWORD password to authenticate with -H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH NT/LM hashes, format is LMhash:NThash --aes-key hex key AES (https://www.kitploit.com/search/label/AES) key to use for Kerberos Authentication (https://www.kitploit.com/search/label/Authentication) (128 or 256 bits) ">usage: targetedKerberoast.py [-h] [-v] [-q] [-D TARGET_DOMAIN] [-U USERS_FILE] [--request-user username] [-o OUTPUT_FILE] [--use-ldaps] [--only-abuse] [--no-abuse] [--dc-ip ip address] [-d DOMAIN] [-u USER]
[-k] [--no-pass | -p PASSWORD | -H [LMHASH:]NTHASH | --aes-key hex key]

Queries target domain for SPNs that are running under a user account and operate targeted Kerberoasting

optional arguments:
-h, --help show this help message and exit
-v, --verbose verbosity level (-v for verbose, -vv for debug)
-q, --quiet show no information at all
-D TARGET_DOMAIN, --target-domain TARGET_DOMAIN
Domain to query/request if different than the domain of the user. Allows for Kerberoasting across trusts.
-U USERS_FILE, --users-file USERS_FILE
File with user per line to test
--request-user username
Requests TGS for the SPN associated to the user specified (just the username, no domain needed)
-o OUTPUT_FILE, --output-file OUTPUT_FILE
Output filename to write ciphers in JtR/hashcat format
--use-ldaps Use LDAPS instead of LDAP
--only-abuse Ignore accounts that already have an SPN and focus on targeted Kerberoasting
--no-abuse Don't attempt targeted Kerberoasting

authentication & connection:

___________________________
@hacking_Attack
@Hacking_Video

--dc-ip ip address IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If omitted it will use the domain part (FQDN) specified in the identity parameter
-d DOMAIN, --domain DOMAIN
(FQDN) domain to authenticate to
-u USER, --user USER user to authenticate with

secrets:
-k, --kerberos Use Kerberos authentication. Grabs credentials from .ccache file (KRB5CCNAME) based on target parameter s. If valid credentials cannot be found, it will use the ones specified in the
command line
--no-pass don't ask for password (useful for -k)
-p PASSWORD, --password PASSWORD
password to authenticate with
-H [LMHASH:]NTHASH, --hashes [LMHASH:]NTHASH
NT/LM hashes, format is LMhash:NThash
--aes-key hex key AES key to use for Kerberos Authentication (128 or 256 bits)
Below is an example what the tool can do.

___________________________
@hacking_Attack
@Hacking_Video

Credits and references
Credits to the whole team behind Impacket (https://github.com/SecureAuthCorp/impacket/) and its contributors.

Download targetedKerberoast (https://github.com/ShutdownRepo/targetedKerberoast)

___________________________
@hacking_Attack
@Hacking_Video

I'm curious.
https://www.reddit.com/r/redteamsec/comments/po22zs/im_curious/

Does anyone know the least known C2 out there? I use beacon for most the time which is Unreliable.. if you have recommendation let me know please. submitted by /u/R3dd3v3l (https://www.reddit.com/user/R3dd3v3l)
[link] (https://www.reddit.com/r/redteamsec/comments/po22zs/im_curious/) [comments] (https://www.reddit.com/r/redteamsec/comments/po22zs/im_curious/)

___________________________
@hacking_Attack
@Hacking_Video