Lorsrf - SSRF Parameter Bruteforce
http://www.kitploit.com/2021/10/lorsrf-ssrf-parameter-bruteforce.html

Bruteforcing on Hidden (https://www.kitploit.com/search/label/Hidden) parameters to find SSRF (https://www.kitploit.com/search/label/SSRF) vulnerability (https://www.kitploit.com/search/label/Vulnerability) using GET and POST Methods
NOTE
Lorsrf has been added to scant3r (https://github.com/knassar702/scant3r) with useful additions (multi http method , multi content-type (json , query , xml , speed , large worlist and more)) https://github.com/knassar702/scant3r/wiki/lorsrf
install
download it ➜ git clone https://github.com/knassar702/lorsrf
➜ cd lorsrf
➜ sudo pip3 install requests flask install ngrok tool (https://www.youtube.com/watch?v=4sF1ATYwr3U)
Steps :

Ngrok
run your ngrok ./ngrok http 9090 run server.py script and add ngrok (https://www.kitploit.com/search/label/Ngrok) port python3 server.py 9090 run lorsrf.py and add ngrok host using -s option
requestbin.com
login to https://requestbin.com (https://requestbin.com/) copy your host and add it by using -s option (without server.py file)
How can i use it .?
cat YOUR_LIST.txt | python3 lorsrf.py -t URL_TARGET -s YOUR_HOST -w wordlist.txt
Examples :
$ cat paramters.txt | python3 lorsrf.py -t http://target.com -s http://53252.ngrok.io add threads $ cat paramters.txt | python3 lorsrf.py -t http://target.com -s http://53252.ngrok.io --threads=50 add timeout $ cat paramters.txt | python3 lorsrf.py -t http://target.com -s http://53252.ngrok.io --timeout=4 add cookies $ cat paramters.txt | python3 lorsrf.py -t http://target.com -s http://53252.ngrok.io -c 'user=5&PHPSESSION=5232' add headers (https://www.kitploit.com/search/label/Headers) from text file $ cat headers.txt
Cookie: test=1
Auth: Basic TG9yU3JmCg==

$ cat parameters.txt | python3 lorsrf.py -f headers.txt -s 'http://myhost.com' -t 'http://ssrf.hack.com'

---------------------
GET /?parameter={YOUR_HOST} HTTP/1.1
Host: targer.com
Cookie: test=1
Auth: Basic TG9yU3JmCg== Follow redirects $ cat paramters.txt | python3 lorsrf.py -t http://target.com -s http://53252.ngrok.io -r
Testing
python3 lorsrf.py -t 'http://testphp.vulnweb.com/showimage.php' -s 'https://YOUR_HOST.com' -w parameters.txt



Download Lorsrf (https://github.com/knassar702/lorsrf)

Dark Reading: Attacks/Breaches
ThycoticCentrify Integrates Secret Server With Privileged Access Management Platform

Combination avails Secret Server customers to a range of SaaS services.

Dark Reading: Attacks/Breaches
Avast Business Introduces Network Discovery for SMBs

Avast's Network Discovery enables network administrators to easily analyze their entire IT network and deploy Avast Business security services.

Dark Reading: Attacks/Breaches
Onfido Acquires EYN to Provide Acoustic-Based Liveness Detection

Technology will be incorporated into Onfido’s Real Identity Platform.

Dark Reading: Attacks/Breaches
Identity-Focused Security Controls Prevail

How identity and access management strategies held up during the pandemic and tips for putting together an identity security road map.

Dark Reading: Attacks/Breaches
Cynerio Launches IoT Attack Detection and Response Module for Healthcare IoT Devices

Module helps hospitals identify, contain, and mitigate threats on devices exhibiting malicious or suspicious behavior.

Dark Reading: Attacks/Breaches
Cyber Readiness Institute Names Karen S. Evans as New Managing Director

Former assistant secretary for cybersecurity, energy security, and emergency response at US Department of Energy and Homeland Security CIO to lead strategic vision and day-to-day operations.

Dark Reading: Attacks/Breaches
Annual Cyber Risk Survey Finds Businesses Are Sharpening Their Focus on Cybersecurity but Also Reveals Much Room for Improvement in Building Cyber-Resilience

This year's survey features the highest percentage of cyber insurance buyers since the beginning of the survey 11 years ago.

Unauthenticated Cache Purge
https://medium.com/@priyanshbansal25/unauthenticated-cache-purge-c56fac8569e8?source=rss------bug_bounty-5

Hello everyone, I am Priyansh and this is my first writeup. Today I will be discussing a vulnerability that I found in one of the…Continue reading on Medium » (https://medium.com/@priyanshbansal25/unauthenticated-cache-purge-c56fac8569e8?source=rss------bug_bounty-5)