(e.g. specs/my_module) in a directory to mount it in the Docker container. Otherwise, the CloudSpec will not be able to open the spec files outside the container. export AWS_ACCESS_KEY_ID=***
export AWS_SECRET_ACCESS_KEY=***
export AWS_REGION=eu-west-1
docker run -v "/my_module:/my_module" -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_REGION efoncubierta/cloudspec run -d my_module If you are running the docker container in AWS with a dedicated IAM role attached, you can omit the AWS environment variables.

For more options of the CloudSpec command, see help: docker run efoncubierta/cloudspec -h Build CloudSpecIf you want to build CloudSpec yourself, follow these instructions.

Requirements:

* Git
* Maven 3
* OpenJDK 8
* Docker

Pull the source code and build CloudSpec: # Clone git repo
git clone https://github.com/efoncubierta/cloudspec
cd cloudspec
# Build CloudSpec
mvn clean install
# Run CloudSpec
java -jar runner/target/cloudspec-${VERSION}.jar -h CollaborationsFor the time being, this is a pet project and, therefore, only some resources in AWS are supported, but I am open to collaborations. Feel free to fork this project and send pull requests. Download Cloudspec

Exploit samAccountName spoofing with Kerberos
https://www.reddit.com/r/redteamsec/comments/reps7h/exploit_samaccountname_spoofing_with_kerberos/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing/) [comments] (https://www.reddit.com/r/redteamsec/comments/reps7h/exploit_samaccountname_spoofing_with_kerberos/)

Bug Bounty Recon: Horizontal Correlation.
https://medium.com/@Sm9l/bug-bounty-recon-horizontal-correlation-b7c81a32951a?source=rss------bug_bounty-5

Horizontal Correlation — The process of finding different domains owned by the same organisation.Continue reading on Medium » (https://medium.com/@Sm9l/bug-bounty-recon-horizontal-correlation-b7c81a32951a?source=rss------bug_bounty-5)

Hacking on Medium
Cybersecurity: This Truly Scared Me!

https://cdn-images-1.medium.com/max/1920/1*6c6l9mayUjwZ409KRzrmnQ.jpeg
Apache log4j Vulnerability CVE-2021–4428

Continue reading on Medium »

Hacking on Medium
Bug Bounty Recon: Horizontal Correlation.

https://cdn-images-1.medium.com/max/1806/1*TXvQicGt_KbOHA5Ji3IK8w.png
Horizontal Correlation — The process of finding different domains owned by the same organisation.

Continue reading on Medium »

Hacking on Medium
Instalação do DVWA via Docker

https://cdn-images-1.medium.com/max/1440/0*L0xE_oKhjLP-RLpW.jpg
O Damn Vulnerable Web Application (DVWA) é uma aplicação desenvolvida em PHP e MySQL que contém diversos tipos de vulnerabilidades, com o…

Continue reading on Medium »

hacking: security in practice
Currently working through the logic puzzle book: “What is the name of this book?”. Is there any benefit of solving the puzzles in your mind without writing anything down?

I am improving my logical thinking by working the logic puzzles in “What is the name of this Book?” by Raymond Smullyan.

So far I have been solving everything in my mind, then writing it down to check the answers. But how does that compare to working through the logic puzzles on paper?

My goal is to become a better hacker, so I was thinking that it is essential to improve my ability to hold many things in mind at a time. Which would mean that solving the puzzles completely in my mind would be helpful. However, it may be more beneficial to just solve the puzzles on paper since I am able to work through them faster like that.

submitted by /u/Mysterious_Ad7624
[link] [comments]

A story about a not-so-direct SSRF

Hi all, hope you are keeping well and staying safe. This blog is about my recent SSRF finding.Continue reading on InfoSec Write-ups »
Read more...

this is my write up , lets start

Broken Authentication and Session Management > Privilege EscalationContinue reading on Medium »
Read more...

SVG based Stored XSS

Hi, hope you guys doing great! Here is a story about me finding a stored XSS using svg filesContinue reading on Medium »
Read more...

Bug Bounty Recon: Horizontal Correlation.

Horizontal Correlation — The process of finding different domains owned by the same organisation.Continue reading on Medium »
Read more...

Hacking on Medium
Kişisel Bilgisayarlardaki Siber Saldırganlar Nasıl Tespit Edilir ? — Linux/Windows

https://cdn-images-1.medium.com/max/770/1*dFFZPN2qwx6G7jEutVZpDg.jpeg
Merhabalar, bu blog yazısında, kişisel bilgisayarlarda ki siber saldırganların tespit edilme konusuyla beraber, yüzeysel bir şekilde…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
modi ji twitter account hack | modiji twitter hacked | Who hack modi twitter account |…

modi ji twitter account hack | modiji twitter hacked | Who hack modi twitter account | Allaboutsubha

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video