Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Detections This tool does nothing more than query Active Directory using LDAP queries, which may not be easy to detect. Netflow could possibly be used to detect large numbers of LDAP queries / traffic to one system. The other possible way to detect this is through honeypot (https://www.kitploit.com/search/label/HoneyPot) accounts. The idea would be to create a computer object that some user / group has write privileges to. The RBCD attack relies on modifying a computer object and then delegating kerberos tickets to it. The possible points of detection for the honeypot computer object could be: Monitor modifications to the honeypot computer object, specifically to the "msds-allowedtoactonbehalfofotheridentity" property Monitor for kerberos tickets requested for services on the honeypot computer object, specifically any kerberos tickets for administrator users I made this tool to help me on penetration tests. However, defenders / blue teams (https://www.kitploit.com/search/label/Blue%20Teams) / sysadmins can easily use this to help find weaknesses in their environments and (hopefully) move to remediate them.

Download Get-RBCD-Threaded (https://github.com/FatRodzianko/Get-RBCD-Threaded)
Exploiting CVE-2019–5418- File Content Disclosure on Rails

In Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1, and v3, a File Content Disclosure vulnerability exists where properly designed…Continue reading on Medium »
Read more...
How to Setup/Configure Burpsuite with Firefox

Hello all i am back with another blog on bug bounty we will see how we can setup/configure burpsuite with firefox to intercept all…Continue reading on Medium »
Read more...
Install LinkFinder on Kali Linux

LinkFinder : a tool written in python that finds the endpoints from/in JavaScript files.Continue reading on Medium »
Read more...
100 Days of Hacking — DAY 9

Objectives of day 9 :Continue reading on Medium »
Read more...