Weapons in my quiver: Tools and extension I use in bounties
https://manasharsh.medium.com/weapons-in-my-quiver-tools-and-extension-i-use-in-bounties-d8e2e0265fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

As this blog already describes, I will be putting some info about tools and extensions which I use daily in my bounties. For an early…Continue reading on Medium » (https://manasharsh.medium.com/weapons-in-my-quiver-tools-and-extension-i-use-in-bounties-d8e2e0265fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Legit or not so much
https://www.reddit.com/r/Pentesting/comments/rpdml6/legit_or_not_so_much/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/stewtech3 (https://www.reddit.com/user/stewtech3)
[link] (https://portswigger.net/web-security) [comments] (https://www.reddit.com/r/Pentesting/comments/rpdml6/legit_or_not_so_much/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Weapons in my quiver: Tools and extension I use in bounties

https://cdn-images-1.medium.com/max/2500/1*MxnhUEq-rHvDaOGO76YZyg.jpeg
As this blog already describes, I will be putting some info about tools and extensions which I use daily in my bounties. For an early…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What would be your methodology in this case?

Hello, I'm trying to understand the methodology or workflow of people more experienced than me.

What would you do in this scenario:

HOST: Port 445 open along with other ports, Windows 7 2016 RDC

You need to get inside this to delete some logs or something

how would you get inside like, what would you use (rdcclient + metasploit for example) what would you look for (ports, other stuff) and what would you do once you get a foothold

Thanks to whoever will reply

Edit:typos

submitted by /u/SantoIsBack
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Common Nginx Misconfiguration leads to Path Traversal
https://mikekitckchan.medium.com/common-nginx-misconfiguration-leads-to-path-traversal-d58701e997bc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Recently, I have been invited by my friend to participate into a private pentest project. The target has been using Nginx as its Reverse…Continue reading on Medium » (https://mikekitckchan.medium.com/common-nginx-misconfiguration-leads-to-path-traversal-d58701e997bc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

XSS via file upload
https://sharmajijvs.medium.com/xss-via-file-upload-a2bcc1e5d7f7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I found xss via file upload here i uploaded svg file which stored in google cloud and reflected with xssContinue reading on Medium » (https://sharmajijvs.medium.com/xss-via-file-upload-a2bcc1e5d7f7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Weapons in my quiver: Tools and extension I use in bounties

As this blog already describes, I will be putting some info about tools and extensions which I use daily in my bounties. For an early…Continue reading on Medium »
Read more...

Common Nginx Misconfiguration leads to Path Traversal

Recently, I have been invited by my friend to participate into a private pentest project. The target has been using Nginx as its Reverse…Continue reading on Medium »
Read more...

XSS via file upload

I found xss via file upload here i uploaded svg file which stored in google cloud and reflected with xssContinue reading on Medium »
Read more...

Kali Linux Tutorials
Ad-Honeypot-Autodeploy : Deploy A Small, Intentionally Insecure, Vulnerable Windows Domain For RDP Honeypot Fully Automatically

Ad-Honeypot-Autodeploy a tool to Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.

Runs on self-hosted virtualization using libvirt with QEMU/KVM (but it can be customized easily for cloud-based solutions).

Used for painlessly set up a small Windows Domain from scratch automatically (without user interaction) for the purpose of RDP Honeypot testing.

Features a Domain Controller, a Desktop Computer and a configured Graylog server for logging the actions of the bad guys. Automatic deployment phases

1. Packer: download the necessary install media and setup the automated base virtual machine images unattended.
2. Terraform: provision the libvirt virtualization infrastructure (network + virtual machines) using the packer-prepared virtual machine images.
3. Ansible: Configure the infrastructure (DC, Desktop, Graylog) automatically, without user interaction.

After going through the Packer+Terraform+Ansible pipeline, the configured Windows Domain should be up and running, you could attach the RDP service of the Desktop to the public internet, and let’s monitor the events through the Graylog. Features

Features of the running system are:

* a Windows Server 2016 as a Domain Controller
* a Windows 10 Desktop (version 2004) as a Domain Computer
* a Graylog 3.3 (Open Source edition) running as a Log Collector on Ubuntu 18.04 LTS
* Using VirtIO drivers for best performance
* Enabled RDP and WinRM Services
* Populated Windows Active Directory with random users
* Sysmon (from Windows Sysinternals) installed and running on Domain Computers
* NXLog Collector running a Domain Computers and forwarding logs to Graylog
* Configured Graylog GeoIP lookup table and pipeline for IP addresses (useful for showing a map of invalid RDP login attempts)
* Graylog World Map of RDP attacks Host System Requirements

Virtualization needs some power of your host system:

* ~80 GB disk space for the base images and the sparse images of the guest computers.
* at least 3 x 4 GB memory for the guest machines (may run with less than 12 GB because of overcommitment)
* installed up-to-date libvirt with QEMU/KVM (official current packages in Ubuntu 18.04 LTS should work)
* Python 3 (preferably with venv) for Ansible

Tested on Ubuntu 18.04 LTS host. Installation and Usage

First, clone the repo:

git clone https://github.com/tothi/ad-honeypot-autodeploy
cd ad-honeypot-autodeploy

Before starting with Packer, set up the intial passwords:

./init_passwords.sh

Packer

Now build the initial images.

cd packer

Windows Server 2016 and Ubuntu installation media should be downloaded by the Packer script. VirtIO needs to be downloaded by the attached get-virtio.sh script:

./get-virtio.sh

Windows 10 should be downloaded manually by getting a temporary download link and save it to the ISO folder. The download link could be obtained from here. Select the English (International), 64-bit version and save the ISO to ISO/Win10_2004_EnglishInternational_x64.iso.

For mapping IP locations on a World Map in Graylog, the MaxMind GeoIP database is needed. Unfortunately due to licensing terms it cannot be redistributed, so you have to download it manually (after registering) from the MaxMind site. The free GeoLite2 version should work, get the “GeoLite2 City” Database in MMDB format (download the GZIP and untar) and put it at resources/GeoLite2-City.mmdb.

If you do not have Packer, get the latest version from the packer.io site (download the pre-compiled binary) or try to add the Hashicorp repository to your packaging system (useful for Terrafrom also).

If you are rebuilding the images, do not forget to clea[...]

___________________________
@hacking_Attack
@Hacking_Video