Bypassed the subscription and got the certification

Hey fellow hackers and bug hunter’s,
Read more...

TryHackMe — Jeff

Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.
Read more...

Exploiting Password Reset Poisoning

for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...

OTP Bypass via response manipulation

Hello Hunters, today I'm going tell about my one of the finding in which I'm able to bypass the OTP page. So let’s begin.Continue reading on Medium »
Read more...

Hacking on Medium
Pwning Photographer!!- OSCP Type Machine Write-up

https://cdn-images-1.medium.com/max/2177/1*JotWhHBGrNqW9BVgXt0I7w.jpeg
This is one of the intermediate machine from Offensive Security Proving Grounds!. So let’s dive in as per our goal.

Continue reading on Medium »

Hacking on Medium
Jobs that you can get as a hacker

https://cdn-images-1.medium.com/max/1920/1*l9pWYZ-UBR2qwG-l30QxcA.jpeg
Are you a hacker and and looking for a suitable job.

Continue reading on Medium »

Hacking on Medium
Hack The Box — BountyHunter Walkthrough

https://cdn-images-1.medium.com/max/2048/1*7Hd6N--vBLG6JZXMXJoJ3g.jpeg
Hello guys, Hope you are good and well. We are gonna see the walkthrough of the BountyHunter machine in Hack The Box.

Continue reading on InfoSec Write-ups »

Hacking on Medium
RootMe TryHackMe Writeup

https://cdn-images-1.medium.com/max/700/1*PoznIQhCnwdOXFU3NEPSqA.png
A ctf for beginners, can you root me?

Continue reading on Medium »

Hacking on Medium
TOOLS#5 ~ Lacak lokasi seseorang secara akurat dengan Seeker

https://cdn-images-1.medium.com/max/640/0*ysHFm_IlViZVzB-n
Disclaimer: Semua yang saya tulis disini tidak ada kaitannya untuk menyudutkan pihak manapun, tulisan ini murni hanya untuk BELAJAR

Continue reading on Medium »

hacking: security in practice
Social media profile visitors

Is there any way I can check this via some app? I wanted to know who checks my profile and how many times.

submitted by /u/Ann4_S
[link] [comments]

https://a.thumbs.redditmedia.com/VMkC7Vfh7jm-J3ijCWE08wnMSqb7arVGtKlxd0v8HG8.jpg There's a JavaScript challenge in DVWA where a page asking us to submit the word "success" to win.

I did change the word "ChangeMe" to "success", however the page return "Invalid token" message.

https://preview.redd.it/qti1gxttpcz71.png?width=550&format=png&auto=webp&s=a5736e25b8aafe00dc9a557fb5e66f725f521b93

Here's how the request looks like in Burp
POST /vulnerabilities/javascript/ HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://localhost/vulnerabilities/javascript/ Content-Type: application/x-www-form-urlencoded Content-Length: 65 DNT: 1 Connection: close Cookie: PHPSESSID=c8f9p19iv3b8s0cm58d7pm1e25; security=low Upgrade-Insecure-Requests: 1 token=8b479aefbd90795395b3e7089ae0dc09&phrase=success&send=Submit
I understand that Cookie remains the same as I was on the same session.

Question 1: What about token? Is that normal to have similar token too no matter what phrase do you change?

Question 2: Is this consider as security vulnerability?

submitted by /u/w0lfcat
[link] [comments]

hacking: security in practice
What are your go to initial nmap options?

After doing one of the recent tryhackme rooms where you had to do your scan to avoid being detected by the IDS it got me thinking about my initial scan options.

For whatever reason I used to always use -sV -O or -sS. Both of course set off the IDS alarm. I ended up using -f -sN to avoid detection.

Where do you guys start? I’d assume one wouldn’t want to fire off the bat signal right away. Or do you not really care and maybe use a vpn or something in case you get blocked using a louder scan.

submitted by /u/space_wiener
[link] [comments]

AzureHunter - A Cloud Forensics Powershell Module To Run Threat Hunting Playbooks On Data From Azure And O365
http://www.kitploit.com/2021/11/azurehunter-cloud-forensics-powershell.html

A Powershell module to run threat hunting (https://www.kitploit.com/search/label/Threat%20Hunting) playbooks on data from Azure and O365 for Cloud Forensics purposes.
Getting Started

1. Check that you have the right O365 Permissions
The following roles are required in Exchange Online, in order to be able to have read only access to the UnifiedAuditLog: View-Only Audit Logs or Audit Logs.These roles are assigned by default to the Compliance Management role group in Exchange Admin Center.NOTE: if you are a security analyst, incident responder or threat hunter and your organization is NOT giving you read-only access to these audit logs, you need to seriously question what their detection and response strategy is!More information:How to search the Audit Log using the GUI (https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide#search-the-audit-log)Manage role groups in Exchange Online (https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance)How to enable the UnifiedAuditLog (https://gcits.com/knowledge-base/enabling-unified-audit-log-delegated-office-365-tenants-via-powershell/)NOTE: your admin can verify these requirements (https://www.kitploit.com/search/label/Requirements) by running Get-ManagementRoleEntry "*\Search-UnifiedAuditLog" in your Azure tenancy cloud shell or local powershell instance connected to Azure.
2. Ensure ExchangeOnlineManagement v2 PowerShell Module is installed
Please make sure you have ExchangeOnlineManagement (EXOv2) installed. You can find instructions on the web or go directly to my little KB on how to do it at the soc analyst scrolls (https://docs.quasarops.com/en/public/the-soc-analyst-scrolls/powershell#useful-powershell-modules)
3. Either Clone the Repo or Install AzureHunter from the PSGallery

3.1 Cloning the Repo
Clone this repositoryImport the module Import-Module .\source\AzureHunter.psd1
3.2 Install AzureHunter from the PSGallery
All you need to do is:Install-Module AzureHunter -Scope CurrentUser
Import-Module AzureHunter
What is the UnifiedAuditLog?
The unified audit log contains user, group, application, domain, and directory activities performed in the Microsoft 365 admin center or in the Azure management portal. For a complete list of Azure AD events, see the list of RecordTypes (https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-schema#auditlogrecordtype).The UnifiedAuditLog is a great source of cloud forensic information since it contains a wealth of data on multiple types of cloud operations like ExchangeItems, SharePoint, Azure AD, OneDrive, Data Governance, Data Loss Prevention, Windows Defender (https://www.kitploit.com/search/label/Windows%20Defender) Alerts and Quarantine events, Threat intelligence (https://www.kitploit.com/search/label/Intelligence) events in Microsoft Defender for Office 365 and the list goes on and on!
AzureHunter Data Consistency Checks
AzureHunter implements some useful logic to ensure that the highest log density is mined and exported from Azure & O365 Audit Logs. In order to do this, we run two different operations for each cycle (batch):Automatic Window Time Reduction: this check ensures that the time interval is reduced to the optimal interval based on the ResultSizeUpperThreshold parameter which by default is 20k. This means, if the amounts of logs returned within your designated TimeInterval is higher than ResultSizeUpperThreshold, then an automatic adjustment will take place.Sequential Data Check: are returned Record Indexes sequentially valid?