Bounty Hacker Tryhackme Walkthrough

Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups »
Read more...

Bounty Hacker Tryhackme Walkthrough
https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5

Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5)

Nimbus Bug Bounty Program #2
https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5

We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium » (https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5)

Attacking Active Directory as a Red Teamer or as an attacker
https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/AttackingAD) [comments] (https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/)

Nimbus Bug Bounty Program #2

We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium »
Read more...

DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹Installation from Binary The ez way! You can download a pre-built binary from releases page, just unpack and run! from Source NOTE: Go 1.16+ compiler should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest — or Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake▶ cd dnstake/cmd/dnstake▶ go build .▶ (sudo) mv dnstake /usr/local/bin Usage $ dnstake -h ·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ . ██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀· ▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄ ██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌ ▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀ (c) pwnesia.org — v0.0.1Usage: stdin | dnstake options dnstake -t HOSTNAME optionsOptions: -t, --target Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its helpExamples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram. Currently supported DNS providers, see here. References 1 https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/ License DNSTake is distributed under MIT. See LICENSE. Download Dnstake
Read more...

___________________________
@hacking_Attack
@Hacking_Video

DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover
http://www.kitploit.com/2021/09/dnstake-fast-tool-to-check-missing.html

___________________________
@hacking_Attack
@Hacking_Video

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.
What is a DNS takeover?
DNS takeover vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records (https://www.diggui.com/#type=A&hostname=github.technology&nameserver=public&public=8.8.8.8&specify=&clientsubnet=&tcp=def&transport=def&mapped=def&nssearch=def&trace=def&recurse=def&edns=def&dnssec=def&subnet=def&cookie=def&all=def&cmd=def&question=def&answer=def&authority=def&additional=def&comments=def&stats=def&multiline=def&short=def&colorize=on) the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹
Installation

from Binary
The ez way! You can download a pre-built binary from releases page (https://github.com/pwnesia/dnstake/releases), just unpack and run!
from Source
NOTE: Go 1.16+ compiler (https://golang.org/doc/install) should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest
— or
Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake
▶ cd dnstake/cmd/dnstake
▶ go build .
▶ (sudo) mv dnstake /usr/local/bin
Usage
Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its help Examples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake ">$ dnstake -h

·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ .
██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀·
▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄
██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌
▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀

(c) pwnesia.org — v0.0.1

Usage:
[stdin] | dnstake [options]
dnstake -t HOSTNAME [options]

Options:
-t, --target Define single target host/list to check
-c, --concurrent Set the concurrency level (default: 25)
-s, --silent Suppress errors and/or clean output
-h, --help Display its help

Examples:
dnstake -t (sub.)domain.tld
dnstake -t hosts.txt
cat hosts.txt | dnstake
subfinder -silent -d domain.tld | dnstake
Workflow
DNSTake use RetryableDNS client library (https://github.com/projectdiscovery/retryabledns) to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting (https://www.kitploit.com/search/label/Fingerprinting) the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable (https://www.kitploit.com/search/label/Vulnerable) to be taken over. More or less like this (https://0xpatrik.com/content/images/2018/08/ns_automation-2.png) in form of a diagram. Currently supported DNS providers, see here (https://github.com/indianajson/can-i-take-over-dns/blob/97104102c8ce911fd978521c703f26e1c547c613/README.md#dns-providers).
References
[1] https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/
License
DNSTake is distributed (https://www.kitploit.com/search/label/Distributed) under MIT. See LICENSE.

Download Dnstake (https://github.com/pwnesia/dnstake)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malware samples found trying to hack Windows from its Linux subsystem

https://external-preview.redd.it/KpKCWOgVTzbKzZmTi5D4DprSVLiys6vJX7_l_JLs2cw.jpg?width=640&crop=smart&auto=webp&s=449174a10ccee5a7ebd5cb19cfa2624955ffed67 submitted by /u/n0SiS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone tell me what is this? Someone sent me this and i cant tell if this is a hack or not

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
17 Free Cybersecurity Tools You Should Know About

https://external-preview.redd.it/il470lEYPVPTYlOMq5dvLrU_h-D7CVPfDWabkOB08N0.jpg?width=640&crop=smart&auto=webp&s=1787bed3c4f31a8b9a576eb8ead3a5dd7da61481 submitted by /u/Anastasia_IT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Thinking about creating a Twitch channel about ethical hacking

Hey guys (and girls),

​

I was thinking about creating a Twitch channel with a primary focus on ethical hacking and everything that comes with it (doing CTF challenges live, answering questions about security in general etc ...)

​

I work as a professional pentester and trainer in infosec so that could be an interesting thing to do.

​

What do you think about that ? Is this something you would be interested in ?

If yes, do you maybe have a some tips about how to get started ?

​

Thanks

submitted by /u/Peyphour
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone here set something up to make my home internet almost unusably terrible

Hi, Is there any service that will block one website at all times with no custom error message(Blackboard.com) and randomly block other websites to give the illusion of bad internet? also remotely restart my router to disable the internet for a few minutes at a time? My parents are consistently berating me about my grades(which are on blackboard, which the school has had to specifically tell them that's it's a felony to access them without my consent) and it nearly drove me to commit suicide as legal collateral against them a month ago. I can't take the pain anymore and we got a new router that is super locked down(SerComm SAX2V1R) so I can't use a remote desktop to constantly restart my home router while I'm at university anymore. If they continue to do this I am going through with suicide as it's the last straw in my heart that I can't deal with. I will provide my public ip to anyone who wants to take a crack at DoSing me

submitted by /u/UAvi8tor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bounty Hacker Tryhackme Walkthrough


Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…

Continue reading on InfoSec Write-ups »