hacking: security in practice
Small Group

Hello! Im currently in a small group looking for people to join!

We are not master haxors and its just a fun small group to hangout in share knowledge and help eachother grow

We are going to be using guided (a alternative to discord) for non private messages and matrix for private messages If you would like to apply sign up to join check the comments for the link!

https://guilded.gg/Hacking

submitted by /u/YAROBONZ-
[link] [comments]

Running Decentralized, and Community Oriented Bug Bounties

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium »
Read more...

Running Decentralized, and Community Oriented Bug Bounties
https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium » (https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5)

There’s $20 up for grabs in this post
https://ethr.medium.com/theres-20-up-for-grabs-in-this-post-aff4873a82fd?source=rss------bug_bounty-5

I have been hosting a challenge for my readers with a reward of $20. No one has claimed it yet, the prize is still up for grabs.Continue reading on Medium » (https://ethr.medium.com/theres-20-up-for-grabs-in-this-post-aff4873a82fd?source=rss------bug_bounty-5)

Threat Actor Profile - FIN7
https://www.reddit.com/r/redteamsec/comments/u0ldkc/threat_actor_profile_fin7/

submitted by /u/RandyMarsh_Lorde (https://www.reddit.com/user/RandyMarsh_Lorde)
[link] (https://www.overtoperator.com/p/threat-actor-profile-fin7?s=w) [comments] (https://www.reddit.com/r/redteamsec/comments/u0ldkc/threat_actor_profile_fin7/)

There’s $20 up for grabs in this post

I have been hosting a challenge for my readers with a reward of $20. No one has claimed it yet, the prize is still up for grabs.Continue reading on Medium »
Read more...

Hacking on Medium
Grid cyberthreats, Bitcoin busts and a Russian botnet takedown

https://cdn-images-1.medium.com/max/720/1*eVSwdftd2UKjTSrA-hWOwA.png
Welcome to Changelog for 4/10/22, published by Synack! Blake here, writing from the nation’s capital. Last week saw a spate of cyber…

Continue reading on README_ »

LDAP shell - AD ACL Abuse
http://www.kitploit.com/2022/04/ldap-shell-ad-acl-abuse.html

This repository contains a small tool inherited from ldap_shell (https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ldap_shell.py).
Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to go: git clone https://github.com/z-Riocool/ldap_shell.git
cd ldap_shell
python3 setup.py install Usage Connection options ldap_shell domain.local/user:password
ldap_shell domain.local/user:password -dc-ip 192.168.1.2
ldap_shell domain.local/user -hashes aad3b435b51404eeaad3b435b51404ee:aad3b435b51404eeaad3b435b51404e1
export KRB5CCNAME=/home/user/ticket.ccache
ldap_shell -k -no-pass domain.local/user
Functionality access to the domain object, assign the DS-Replication right to the selected user. del_dcsync user - Delete DS-Replication right to the selected user. get_user_groups user - Retrieves all groups this user is a member of. get_group_users group - Retrieves all members of a group. get_laps_password computer - Retrieves the LAPS (https://www.kitploit.com/search/label/LAPS) passwords (https://www.kitploit.com/search/label/Passwords) associated with a given computer (sAMAccountName). set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName). set_owner target grantee - Abuse WriteOwner privilege. dacl_modify - Modify ACE (https://www.kitploit.com/search/label/ACE) (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified. set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false. set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName). write_gpo_dacl user gpoSID - Write a full control ACE to the gpo (https://www.kitploit.com/search/label/GPO) for the given user. The gpoSID must be entered surrounding by {}. get_maq user - Get ms-DS-MachineAccountQuota for current user. exit - Terminates this session.">add_computer computer [password] - Adds a new computer to the domain with the specified password. Requires LDAPS.
add_user new_user [parent] - Creates a new user.
add_user_to_group user group - Adds a user to a group.
change_password user [password] - Attempt to change a given user's password. Requires LDAPS.
clear_rbcd target grantee - Clear the resource based constrained delegation configuration information.
disable_account user - Disable the user's account.
enable_account user - Enable the user's account.
dump - Dumps the domain.
search query [attributes,] - Search users and groups by name, distinguishedName and sAMAccountName.
set_dcsync user - If you have write access to the domain object, assign the DS-Replication right to the selected user.
del_dcsync user - Delete DS-Replication right to the selected user.
get_user_groups user - Retrieves all groups this user is a member of.
get_gro up_users group - Retrieves all members of a group.
get_laps_password computer - Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
set_owner target grantee - Abuse WriteOwner privilege.
dacl_modify - Modify ACE (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified.
set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false.
set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
write_gpo_dacl user gpoSID - Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
get_maq user - Get ms-DS-MachineAccountQuota for current user.
exit - Terminates this session.

TODO del_computer - Delete computer del_user - Delete user set_dcsync - If you have write access to the domain object, assign the DS-Replication right to the selected user del_dcsync - Del DS-Replication right to the selected user shadow_credantional - inherited pywhisker (https://github.com/ShutdownRepo/pywhisker) get_all_laps - Get all LAPS passwords set_owner - Abuse WriteOwner privilege dacl_modify - Set GenericAll, WriteDacl, WriteProperties or set MASK of privilege License Apache Authors saber-nyan (https://saber-nyan.com/) (main dev) Riocool (https://t.me/riocool) Credits Impacket (https://github.com/SecureAuthCorp/impacket) saber-nyan (https://saber-nyan.com/) Donate If you want to support the project or have unnecessary money :) ETH: 0xAA89044f8BE2F712Cc987Be00F55296B3045c9c3

Download Ldap_Shell (https://github.com/z-Riocool/ldap_shell)

Hacking on Medium
PROTOSTAR WALKTHROUGH STACK-5

https://cdn-images-1.medium.com/max/600/1*34Ggv1VUlfu4rvf7AYtV6Q.png
Hello hackers! hope you are all doing well. I know I took some time off from posting writeups because of how busy I got over time (jk I…

Continue reading on Medium »

Hacking on Medium
XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain

https://cdn-images-1.medium.com/max/2600/1*wtMaqnbtRFdbscUDDKn2mg.png
Hi all :) I hope you are all good :)

Continue reading on Medium »

Exploiting BITB with advanced open redirect

BITB, despite being old, is only being popularly known now, so I will briefly explain what it is, whoever knows, can jump from this to the…Continue reading on Medium »
Read more...