Hacking Articles Tips Tricks Videos Tutorials

PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match
http://www.kitploit.com/2022/01/pastemonitor-scrape-pastebin-api-to.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

PasteMonitor - Scrape Pastebin API To Collect Daily Pastes, Setup A Wordlist And Be Alerted By Email When You Have A Match

10 viewsedited 21:21

Scrape Pastebin (https://www.kitploit.com/search/label/Pastebin) API to collect daily pastes, setup a wordlist (https://www.kitploit.com/search/label/Wordlist) and be alerted by email (https://www.kitploit.com/search/label/Email) when you have a match.
DescriptionThe PasteMonitor tool allows you to perform two main actions (for educational purposes only):Download daily new public pastes

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

11 viewsedited 21:21

Hacking Articles Tips Tricks Videos Tutorials

10 views21:21

Hacking Articles Tips Tricks Videos Tutorials

Average number of pastes per day: 1000-3000 (filetype: .txt)Send automatic email alertYou can setup a wordlist and be alerted by email when you have a match

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 21:21

Hacking Articles Tips Tricks Videos Tutorials

9 views21:21

Hacking Articles Tips Tricks Videos Tutorials

If your paste is no longer online, you can find it on your computer/server via the ID of your paste (here ID is "WJq2YxPg")

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 21:22

Hacking Articles Tips Tricks Videos Tutorials

Before startBefore starting the tool, make sure to:Get a Pastebin PRO (https://pastebin.com/pro) accountEnter the IP address of your machine in the "Your Account & Whitelisted IP (https://pastebin.com/doc_scraping_api)" sectionActivate a mail (https://www.kitploit.com/search/label/Mail) account that can authorize a third party application (here we use a Gmail account (https://www.google.com/intl/fr/gmail/about/))Enable 2-step verification (https://myaccount.google.com/u/2/signinoptions/two-step-verification)Generate app password (https://myaccount.google.com/u/2/apppasswords) (for more help, see this tutorial (https://ljmocic.medium.com/send-an-email-using-python-and-gmail-4ebc980eae9b))Then, add to the code "pastemonitor.py":Email credentials (https://www.kitploit.com/search/label/Credentials) ("email", "password")Email alert recipient ("receiver")WordlistIn the "wordlist.txt" file, add your keywords line by line.Prerequisitepip3 install -r requirements.txtUsagepython3 pastemonitor.pyPastebin.com usageVisit the official Pastebin webpage Scraping API (https://pastebin.com/doc_scraping_api).ContributingFeel free to clone this project. For major changes, please open an issue first to discuss what you would like to change.LicenseMIT (https://choosealicense.com/licenses/mit/)

Download PasteMonitor (https://github.com/pixelbubble/PasteMonitor)

___________________________
@hacking_Attack
@Hacking_Video

Pastebin

Pastebin.com - GO PRO!

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

10 viewsedited 21:22

Hacking Articles Tips Tricks Videos Tutorials

8 views21:22

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking Articles|Raj Chandel's Blog
Active Directory Privilege Escalation (CVE-2021–42278)

This post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos’s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________
@hacking_Attack
@Hacking_Video

Blogspot

Active Directory Privilege Escalation (CVE-2021–42278)

Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.

8 viewsedited 21:22

Hacking Articles Tips Tricks Videos Tutorials

Hacking Articles|Raj Chandel's Blog Active Directory Privilege Escalation (CVE-2021–42278) This post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low…

s-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041References:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42287Author details:Amit Kishor is having 10 plus years of Network Security experience with expertise on multiple Firewall products as well as SaaS products. ___________________________
@hacking_Attack
@Hacking_Video

8 viewsedited 21:22

Hacking Articles Tips Tricks Videos Tutorials

7 views22:44

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
P1 Vulnerability: How I chained Logical-Error to Account-Takeover Vulnerability ‍that No-One…

https://cdn-images-1.medium.com/max/1049/1*EhybBstNEFrouZE1-LN_tA.png
* Introduction *

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

P1 Vulnerability: How I chained Logical-Error to Account-Takeover Vulnerability 😈🧑‍💻that No-One…

* Introduction *

6 viewsedited 22:44

Hacking Articles Tips Tricks Videos Tutorials

6 views22:44