Hello researchers and bug hunters! Recently I explain you interesting attack vector which I would like to share with you. Without…Continue reading on Medium » (https://androx47.medium.com/how-we-got-lfi-in-private-program-to-easy-way-7aef363d102?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SharpHound3 - C# Data Collector For The BloodHound Project
https://1.bp.blogspot.com/-hrWPo7_AjCs/YGKdjYBnN0I/AAAAAAAAVv4/4tQzfDXGIqoygITy4Z15F1O4-2ZcNPb1gCNcBGAsYHQ/w400-h400/bloodhound.png Get SharpHoundThe latest build of SharpHound will always be in the BloodHound repository here Compile InstructionsSharpHound is written using C# 9.0 features. To easily compile this project, use Visual Studio 2019.
If you would like to compile on previous versions of Visual Studio, you can install the Microsoft.Net.Compilers nuget package.
Building the project will generate an executable as well as a PowerShell script that encapsulates the executable. All dependencies are rolled into the binary. RequirementsSharpHound is designed targetting .Net 4.5. Sharphound must be run from the context of a domain user, either directly through a logon or through another method such as RUNAS. More InformationUsageEnumeration Options* CollectionMethod - The collection method to use. This parameter accepts a comma separated list of values. Has the following potential values (Default: Default):
* Default - Performs group membership collection, domain trust collection, local group collection, session collection, ACL collection, object property collection, and SPN target collection
* Group - Performs group membership collection
* LocalAdmin - Performs local admin collection
* RDP - Performs Remote Desktop Users collection
* DCOM - Performs Distributed COM Users collection
* PSRemote - Performs Remote Management Users collection
* GPOLocalGroup - Performs local admin collection using Group Policy Objects
* Session - Performs session collection
* ComputerOnly - Performs local admin, RDP, DCOM and session collection
* LoggedOn - Performs privileged session collection (requires admin rights on target systems)
* Trusts - Performs domain trust enumeration
* ACL - Performs collection of ACLs
* Container - Performs collection of Containers
* DcOnly - Performs collection using LDAP only. Includes Group, Trusts, ACL, ObjectProps, Container, and GPOLocalGroup.
* ObjectProps - Performs Object Properties collection for properties such as LastLogon or PwdLastSet
* All - Performs all Collection Methods except GPOLocalGroup
* Domain - Search a particular domain. Uses your current domain if null (Default: null)
* Stealth - Performs stealth collection methods. All stealth options are single threaded.
* ExcludeDomainControllers - Excludes domain controllers from enumeration (avoids Microsoft ATA flags :) )
* ComputerFile - Specify a file to load computer names/IPs from
* LdapFilter - LDAP Filter to apppend to search
* OverrideUserName - Overrides user name for session enumeration (advanced)
* RealDNSName - Overrides DNS name for API calls
* CollectAllProperties - Collect all string LDAP properties instead of a subset
* WindowsOnly - Limit computer collection to systems with an operating system that matches *Windows* Loop Options* Loop - Loop computer collections
* LoopDuration - How long to loop for
* LoopInterval - Duration to wait between loops Connection Options* DomainController - Specify which Domain Controller to connect to (Default: null)
* LdapPort - Specify what port LDAP lives on (Default: 0)
* SecureLdap - Connect to AD using Secure LDAP instead of regular LDAP. Will connect to port 636 by default.
* LdapUsername - Username to connect to LDAP with. Requires the LDAPPassword parameter as well (Default: null)
* LdapPassword - Password for the user to connect to LDAP with. Requires the LDAPUser parameter as well (Default: null)
* DisableKerberosSigning - Disables LDAP encryption. Not recommended. Performance Options* PortScanTimeout - Specifies the timeout for ping requests in milliseconds (Default: 2000)
* SkipPortScan - Instructs Sharp[...]
SharpHound3 - C# Data Collector For The BloodHound Project
https://1.bp.blogspot.com/-hrWPo7_AjCs/YGKdjYBnN0I/AAAAAAAAVv4/4tQzfDXGIqoygITy4Z15F1O4-2ZcNPb1gCNcBGAsYHQ/w400-h400/bloodhound.png Get SharpHoundThe latest build of SharpHound will always be in the BloodHound repository here Compile InstructionsSharpHound is written using C# 9.0 features. To easily compile this project, use Visual Studio 2019.
If you would like to compile on previous versions of Visual Studio, you can install the Microsoft.Net.Compilers nuget package.
Building the project will generate an executable as well as a PowerShell script that encapsulates the executable. All dependencies are rolled into the binary. RequirementsSharpHound is designed targetting .Net 4.5. Sharphound must be run from the context of a domain user, either directly through a logon or through another method such as RUNAS. More InformationUsageEnumeration Options* CollectionMethod - The collection method to use. This parameter accepts a comma separated list of values. Has the following potential values (Default: Default):
* Default - Performs group membership collection, domain trust collection, local group collection, session collection, ACL collection, object property collection, and SPN target collection
* Group - Performs group membership collection
* LocalAdmin - Performs local admin collection
* RDP - Performs Remote Desktop Users collection
* DCOM - Performs Distributed COM Users collection
* PSRemote - Performs Remote Management Users collection
* GPOLocalGroup - Performs local admin collection using Group Policy Objects
* Session - Performs session collection
* ComputerOnly - Performs local admin, RDP, DCOM and session collection
* LoggedOn - Performs privileged session collection (requires admin rights on target systems)
* Trusts - Performs domain trust enumeration
* ACL - Performs collection of ACLs
* Container - Performs collection of Containers
* DcOnly - Performs collection using LDAP only. Includes Group, Trusts, ACL, ObjectProps, Container, and GPOLocalGroup.
* ObjectProps - Performs Object Properties collection for properties such as LastLogon or PwdLastSet
* All - Performs all Collection Methods except GPOLocalGroup
* Domain - Search a particular domain. Uses your current domain if null (Default: null)
* Stealth - Performs stealth collection methods. All stealth options are single threaded.
* ExcludeDomainControllers - Excludes domain controllers from enumeration (avoids Microsoft ATA flags :) )
* ComputerFile - Specify a file to load computer names/IPs from
* LdapFilter - LDAP Filter to apppend to search
* OverrideUserName - Overrides user name for session enumeration (advanced)
* RealDNSName - Overrides DNS name for API calls
* CollectAllProperties - Collect all string LDAP properties instead of a subset
* WindowsOnly - Limit computer collection to systems with an operating system that matches *Windows* Loop Options* Loop - Loop computer collections
* LoopDuration - How long to loop for
* LoopInterval - Duration to wait between loops Connection Options* DomainController - Specify which Domain Controller to connect to (Default: null)
* LdapPort - Specify what port LDAP lives on (Default: 0)
* SecureLdap - Connect to AD using Secure LDAP instead of regular LDAP. Will connect to port 636 by default.
* LdapUsername - Username to connect to LDAP with. Requires the LDAPPassword parameter as well (Default: null)
* LdapPassword - Password for the user to connect to LDAP with. Requires the LDAPUser parameter as well (Default: null)
* DisableKerberosSigning - Disables LDAP encryption. Not recommended. Performance Options* PortScanTimeout - Specifies the timeout for ping requests in milliseconds (Default: 2000)
* SkipPortScan - Instructs Sharp[...]
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! SharpHound3 - C# Data Collector For The BloodHound Project https://1.bp.blogspot.com/-hrWPo7_AjCs/YGKdjYBnN0I/AAAAAAAAVv4/4tQzfDXGIqoygITy4Z15F1O4-2ZcNPb1gCNcBGAsYHQ/w400-h400/bloodhound.png Get SharpHoundThe latest build of SharpHound…
hound to skip ping requests to see if systems are up
* Throttle - Adds a delay after each request to a computer. Value is in milliseconds (Default: 0)
* Jitter - Adds a percentage jitter to throttle. (Default: 0) Output Options* OutputDirectory - Folder in which to store JSON files (Default: .)
* OutputPrefix - Prefix to add to your JSON files (Default: "")
* NoZip - Don't compress JSON files to the zip file. Leaves JSON files on disk. (Default: false)
* EncryptZip - Add a randomly generated password to the zip file.
* ZipFileName - Specify the name of the zip file
* RandomizeFilenames - Randomize output file names
* PrettyJson - Outputs JSON with indentation on multiple lines to improve readability. Tradeoff is increased file size.
* DumpComputerStatus - Dumps error codes from connecting to computers Cache Options* CacheFileName - Filename for the Sharphound cache. (Default: .bin)
* NoSaveCache - Don't save the cache file to disk. Without this flag, .bin will be dropped to disk
* InvalidateCache - Invalidate the cache file and build a new cache Misc Options* StatusInterval - Interval to display progress during enumeration in milliseconds (Default: 30000) Download SharpHound3
* Throttle - Adds a delay after each request to a computer. Value is in milliseconds (Default: 0)
* Jitter - Adds a percentage jitter to throttle. (Default: 0) Output Options* OutputDirectory - Folder in which to store JSON files (Default: .)
* OutputPrefix - Prefix to add to your JSON files (Default: "")
* NoZip - Don't compress JSON files to the zip file. Leaves JSON files on disk. (Default: false)
* EncryptZip - Add a randomly generated password to the zip file.
* ZipFileName - Specify the name of the zip file
* RandomizeFilenames - Randomize output file names
* PrettyJson - Outputs JSON with indentation on multiple lines to improve readability. Tradeoff is increased file size.
* DumpComputerStatus - Dumps error codes from connecting to computers Cache Options* CacheFileName - Filename for the Sharphound cache. (Default: .bin)
* NoSaveCache - Don't save the cache file to disk. Without this flag, .bin will be dropped to disk
* InvalidateCache - Invalidate the cache file and build a new cache Misc Options* StatusInterval - Interval to display progress during enumeration in milliseconds (Default: 30000) Download SharpHound3
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
533 million Facebook users' phone numbers and personal data have been leaked online
https://external-preview.redd.it/wwwz_guAc9mdNAq62lq2inyP_16jF2bcYf0qmYjn1Y8.jpg?width=640&crop=smart&auto=webp&s=5f08880dceb66eba6b439bfae18f7baf8dc43bfb submitted by /u/TallCanadiano
[link] [comments]
533 million Facebook users' phone numbers and personal data have been leaked online
https://external-preview.redd.it/wwwz_guAc9mdNAq62lq2inyP_16jF2bcYf0qmYjn1Y8.jpg?width=640&crop=smart&auto=webp&s=5f08880dceb66eba6b439bfae18f7baf8dc43bfb submitted by /u/TallCanadiano
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe (Task 12)Sensitive Data Exposure {OWASP walk-through}
https://cdn-images-1.medium.com/max/1366/1*ALAiCJzXBYaXo2LbjWKdcw.png
[Task 12] [Day 3] Sensitive Data Exposure (Challenge)
Continue reading on Medium »
TryHackMe (Task 12)Sensitive Data Exposure {OWASP walk-through}
https://cdn-images-1.medium.com/max/1366/1*ALAiCJzXBYaXo2LbjWKdcw.png
[Task 12] [Day 3] Sensitive Data Exposure (Challenge)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Как сохранить анонимность в сети?
https://cdn-images-1.medium.com/max/1280/1*rNpJdgRtPD2YUEiFncw8cA.jpeg
Становимся “неуловимым Джо” в мировой паутине :)
Continue reading on Medium »
Как сохранить анонимность в сети?
https://cdn-images-1.medium.com/max/1280/1*rNpJdgRtPD2YUEiFncw8cA.jpeg
Становимся “неуловимым Джо” в мировой паутине :)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking the CompTIA Pentest+
https://cdn-images-1.medium.com/max/1132/1*s1vkIfHgoOzlsJZgGrIM_Q.png
Exploits, Reporting, and Tool’s.
Continue reading on Medium »
Hacking the CompTIA Pentest+
https://cdn-images-1.medium.com/max/1132/1*s1vkIfHgoOzlsJZgGrIM_Q.png
Exploits, Reporting, and Tool’s.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Extracting Macros with Oletools
https://cdn-images-1.medium.com/max/967/1*li_2YfXXE6S3KRg7Z6hlDA.png
Analyzing VBA Macros in Microsoft’s OLE2 files
Continue reading on R3d Buck3T »
Extracting Macros with Oletools
https://cdn-images-1.medium.com/max/967/1*li_2YfXXE6S3KRg7Z6hlDA.png
Analyzing VBA Macros in Microsoft’s OLE2 files
Continue reading on R3d Buck3T »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Facebook information of 50 crore customers on online
https://cdn-images-1.medium.com/max/1000/0*MpoHr36s1Zt3QHMx
Hackers can easily find the information of 50 crore Facebook users in 108 countries online. This information includes phone number…
Continue reading on Medium »
Facebook information of 50 crore customers on online
https://cdn-images-1.medium.com/max/1000/0*MpoHr36s1Zt3QHMx
Hackers can easily find the information of 50 crore Facebook users in 108 countries online. This information includes phone number…
Continue reading on Medium »
Watson - Enumerate Missing KBs And Suggest Exploits For Useful Privilege Escalation Vulnerabilities
http://www.kitploit.com/2021/04/watson-enumerate-missing-kbs-and.html
http://www.kitploit.com/2021/04/watson-enumerate-missing-kbs-and.html
Watson is a .NET tool designed to enumerate missing KBs and suggest exploits (https://www.kitploit.com/search/label/Exploits) for Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) vulnerabilities.
Supported Versions
Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019
Usage
C:\> Watson.exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|
v2.0
@_RastaMouse
[*] OS Build Number: 14393
[*] Enumerating installed KBs...
[!] CVE-2019-0836 : VULNERABLE
[>] https://exploit-db.com/exploits/46718
[>] https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/
[!] CVE-2019-0841 : VULNERABLE
[>] https://github.com/rogue-kdc/CVE-2019-0841
[>] https://rastamouse.me/tags/cve-2019-0841/
[!] CVE-2019-1064 : VULNERABLE
[>] https://www.rythmstick.net/posts/cve-2019-1064/
[!] CVE-2019-1130 : VULNERABLE
[>] https://github.com/S3cur3Th1sSh1t/SharpByeBear
[!] CVE- 2019-1253 : VULNERABLE
[>] https://github.com/padovah4ck/CVE-2019-1253
[!] CVE-2019-1315 : VULNERABLE
[>] https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html
[*] Finished. Found 6 potential vulnerabilities.
Issues
I try to update Watson after every Patch Tuesday, but for potential false positives check the latest supersedence information in the Windows Update Catalog (https://www.catalog.update.microsoft.com/Home.aspx). If you still think there's an error, raise an Issue with the Bug label. If there's a particular vulnerability (https://www.kitploit.com/search/label/Vulnerability) that you want to see in Watson that's not already included, raise an Issue with the Vulnerability Request label and include the CVE number. If you know of a good exploit for any of the vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in Watson, raise an Issue with the Exploit Suggestion label and provide a URL to the exploit.
Download Watson (https://github.com/rasta-mouse/Watson)
Supported Versions
Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019
Usage
C:\> Watson.exe
__ __ _
/ / /\ \ \__ _| |_ ___ ___ _ __
\ \/ \/ / _` | __/ __|/ _ \| '_ \
\ /\ / (_| | |_\__ \ (_) | | | |
\/ \/ \__,_|\__|___/\___/|_| |_|
v2.0
@_RastaMouse
[*] OS Build Number: 14393
[*] Enumerating installed KBs...
[!] CVE-2019-0836 : VULNERABLE
[>] https://exploit-db.com/exploits/46718
[>] https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/
[!] CVE-2019-0841 : VULNERABLE
[>] https://github.com/rogue-kdc/CVE-2019-0841
[>] https://rastamouse.me/tags/cve-2019-0841/
[!] CVE-2019-1064 : VULNERABLE
[>] https://www.rythmstick.net/posts/cve-2019-1064/
[!] CVE-2019-1130 : VULNERABLE
[>] https://github.com/S3cur3Th1sSh1t/SharpByeBear
[!] CVE- 2019-1253 : VULNERABLE
[>] https://github.com/padovah4ck/CVE-2019-1253
[!] CVE-2019-1315 : VULNERABLE
[>] https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html
[*] Finished. Found 6 potential vulnerabilities.
Issues
I try to update Watson after every Patch Tuesday, but for potential false positives check the latest supersedence information in the Windows Update Catalog (https://www.catalog.update.microsoft.com/Home.aspx). If you still think there's an error, raise an Issue with the Bug label. If there's a particular vulnerability (https://www.kitploit.com/search/label/Vulnerability) that you want to see in Watson that's not already included, raise an Issue with the Vulnerability Request label and include the CVE number. If you know of a good exploit for any of the vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in Watson, raise an Issue with the Exploit Suggestion label and provide a URL to the exploit.
Download Watson (https://github.com/rasta-mouse/Watson)