Hacking on Medium
How to install dig on Kali Linux

https://cdn-images-1.medium.com/max/1341/1*QI8y97nU4nEY3YTc2Kfz5w.png
You must install dnsutils if you need to get information from DNS name servers

Continue reading on Medium »

Hacking on Medium
Web Uygulama Güvenliği Part V

https://cdn-images-1.medium.com/max/1000/1*De9UpeeHUKQbEh1PmP2aRA.jpeg
Server-side Template Injection

Continue reading on Medium »

Traitor - Automatic Linux Privesc Via Exploitation Of Low-Hanging Fruit E.G. GTFOBin
http://www.kitploit.com/2021/04/traitor-automatic-linux-privesc-via.html

Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) made easy! Traitor packages up a bunch of methods to exploit local misconfigurations (https://www.kitploit.com/search/label/Misconfigurations) and vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) (including most of GTFOBins (https://gtfobins.github.io/)) in order to pop a root shell. It'll exploit most sudo privileges listed in GTFOBins to pop a root shell, as well as exploiting issues like a writable docker.sock. More routes to root will be added over time too.
Usage
Run with no arguments to find potential vulnerabilities/misconfigurations which could allow privilege escalation. Add the -p flag if the current user password is known. The password will be requested if it's needed to analyse sudo permissions etc. traitor -p Run with the -a/--any flag to find potential vulnerabilities, attempting to exploit each, stopping if a root shell is gained. Again, add the -p flag if the current user password is known. traitor -a -p Run with the -e/--exploit flag to attempt to exploit a specific vulnerability (https://www.kitploit.com/search/label/Vulnerability) and gain a root shell. traitor -p -e docker:writable-socket
Supported Platforms
Traitor will run on all Unix-like systems, though certain exploits will only function on certain systems.
Getting Traitor
Grab a binary from the releases page (https://github.com/liamg/traitor/releases), or use go: CGO_ENABLED=0 go get -u github.com/liamg/traitor/cmd/traitor
If the machine you're attempting privesc on cannot reach GitHub to download the binary, and you have no way to upload the binary to the machine over SCP/FTP etc., then you can try base64 encoding the binary on your machine, and echoing the base64 encoded string to | base64 -d > /tmp/traitor on the target machine, remembering to chmod +x it once it arrives.

Download Traitor (https://github.com/liamg/traitor)

Traitor - Automatic Linux Privesc Via Exploitation Of Low-Hanging Fruit E.G. GTFOBin

Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities (including most of GTFOBins) in order to pop a root shell. It'll exploit most sudo privileges listed in GTFOBins to pop a root shell, as well as exploiting issues like a writable docker.sock. More routes to root will be added over time too.Usage Run with no arguments to find potential vulnerabilities/misconfigurations which could allow privilege escalation. Add the -p flag if the current user password is known. The password will be requested if it's needed to analyse sudo permissions etc. traitor -p Run with the -a/--any flag to find potential vulnerabilities, attempting to exploit each, stopping if a root shell is gained. Again, add the -p flag if the current user password is known. traitor -a -p Run with the -e/--exploit flag to attempt to exploit a specific vulnerability and gain a root shell. traitor -p -e docker:writable-socket Supported Platforms Traitor will run on all Unix-like systems, though certain exploits will only function on certain systems. Getting Traitor Grab a binary from the releases page, or use go: CGO_ENABLED=0 go get -u github.com/liamg/traitor/cmd/traitor If the machine you're attempting privesc on cannot reach GitHub to download the binary, and you have no way to upload the binary to the machine over SCP/FTP etc., then you can try base64 encoding the binary on your machine, and echoing the base64 encoded string to | base64 -d > /tmp/traitor on the target machine, remembering to chmod +x it once it arrives. Download Traitor
Read more...

KitPloit - PenTest Tools!
Traitor - Automatic Linux Privesc Via Exploitation Of Low-Hanging Fruit E.G. GTFOBin

https://1.bp.blogspot.com/-bwv7NyL5Egk/YG0DGYBWZCI/AAAAAAAAV2E/uzu3cSqMVocc77fl9xd5XR4nUesRIJB9ACNcBGAsYHQ/w640-h380/traitor_1_demo.gif
Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy!

Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities (including most of GTFOBins) in order to pop a root shell.

It'll exploit most sudo privileges listed in GTFOBins to pop a root shell, as well as exploiting issues like a writable docker.sock. More routes to root will be added over time too.
Usage

Run with no arguments to find potential vulnerabilities/misconfigurations which could allow privilege escalation. Add the -pflag if the current user password is known. The password will be requested if it's needed to analyse sudo permissions etc.

traitor -p

Run with the -a/--any flag to find potential vulnerabilities, attempting to exploit each, stopping if a root shell is gained. Again, add the -pflag if the current user password is known.

traitor -a -p

Run with the -e/--exploit flag to attempt to exploit a specific vulnerability and gain a root shell.

traitor -p -e docker:writable-socket

Supported Platforms

Traitor will run on all Unix-like systems, though certain exploits will only function on certain systems.

Getting Traitor

Grab a binary from the releases page, or use go:
CGO_ENABLED=0 go get -u github.com/liamg/traitor/cmd/traitor

If the machine you're attempting privesc on cannot reach GitHub to download the binary, and you have no way to upload the binary to the machine over SCP/FTP etc., then you can try base64 encoding the binary on your machine, and echoing the base64 encoded string to | base64 -d > /tmp/traitoron the target machine, remembering to chmod +xit once it arrives.
Download Traitor

hacking: security in practice
Bug bounty hunting step by step (practical) resources?

I've been reading books and doing courses on penetration testing and bug hunting for a while, but I find most of them point to CTFs as the place to practice a hands-on approach. I've been doing that but can't help but notice a big difference between doing CTFs and real-world bug hunting. Only a handful of them are web apps (which I will be focusing on) and the vulnerabilities don't seem "real" enough. Feels like I have all the pieces of the puzzle and the picture on the box, but I don't know the methodology that people follow to complete them.

I know that I should just jump head first into HackerOne but I would like to see someone actually working on a real bounty and try to get a feel for the process. As an example I'm looking for something like a longer version of this video by InsiderPhd.

Any tip on a book/video/course/etc would be greatly appreciated, thanks in advance!

submitted by /u/Vanthian
[link] [comments]

Dark Reading: Attacks/Breaches
Compromised Microsoft Exchange Server Used to Host Cryptominer

Researchers say an unknown attacker is targeting vulnerable Exchange Servers with a payload hosted on a compromised Exchange Server.

Dark Reading: Attacks/Breaches
DNS Vulnerabilities Expose Millions of Internet-Connected Devices to Attack

Researchers uncover a fresh set of nine vulnerabilities in four TCP/IP stacks that are widely used in everything from powerful servers and firewalls to consumer IoT products.

Any news of Georgia’s 2nd edition to Intro to Hacking?
https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/

<!-- SC_OFF -->Google search showed she tweeted in April 2019 about creating a second edition. Been 2 years, just wanted to know if anyone knows anything - couldn’t find it online <!-- SC_ON --> submitted by /u/dokiebrne (https://www.reddit.com/user/dokiebrne)
[link] (https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/)

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GRADES QULIOUSHACKER@GMAIL.COM

I NEED HACKER TO CHANGE MY UNIVERSITY GRADES
Hackers are breaking boundaries and connecting the world within a short distance. Exploiting…

Continue reading on Medium »