Running Decentralized, and Community Oriented Bug Bounties

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium »
Read more...

Running Decentralized, and Community Oriented Bug Bounties
https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5

Bug bounties are not a new thing, but web 3 has challenged security trends, expanding project’s needs, and creating a deep desire for…Continue reading on Medium » (https://hatsfinance.medium.com/running-decentralized-and-community-oriented-bug-bounties-70605d769bbe?source=rss------bug_bounty-5)

There’s $20 up for grabs in this post
https://ethr.medium.com/theres-20-up-for-grabs-in-this-post-aff4873a82fd?source=rss------bug_bounty-5

I have been hosting a challenge for my readers with a reward of $20. No one has claimed it yet, the prize is still up for grabs.Continue reading on Medium » (https://ethr.medium.com/theres-20-up-for-grabs-in-this-post-aff4873a82fd?source=rss------bug_bounty-5)

Threat Actor Profile - FIN7
https://www.reddit.com/r/redteamsec/comments/u0ldkc/threat_actor_profile_fin7/

submitted by /u/RandyMarsh_Lorde (https://www.reddit.com/user/RandyMarsh_Lorde)
[link] (https://www.overtoperator.com/p/threat-actor-profile-fin7?s=w) [comments] (https://www.reddit.com/r/redteamsec/comments/u0ldkc/threat_actor_profile_fin7/)

There’s $20 up for grabs in this post

I have been hosting a challenge for my readers with a reward of $20. No one has claimed it yet, the prize is still up for grabs.Continue reading on Medium »
Read more...

Hacking on Medium
Grid cyberthreats, Bitcoin busts and a Russian botnet takedown

https://cdn-images-1.medium.com/max/720/1*eVSwdftd2UKjTSrA-hWOwA.png
Welcome to Changelog for 4/10/22, published by Synack! Blake here, writing from the nation’s capital. Last week saw a spate of cyber…

Continue reading on README_ »

LDAP shell - AD ACL Abuse
http://www.kitploit.com/2022/04/ldap-shell-ad-acl-abuse.html

This repository contains a small tool inherited from ldap_shell (https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ldap_shell.py).
Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to go: git clone https://github.com/z-Riocool/ldap_shell.git
cd ldap_shell
python3 setup.py install Usage Connection options ldap_shell domain.local/user:password
ldap_shell domain.local/user:password -dc-ip 192.168.1.2
ldap_shell domain.local/user -hashes aad3b435b51404eeaad3b435b51404ee:aad3b435b51404eeaad3b435b51404e1
export KRB5CCNAME=/home/user/ticket.ccache
ldap_shell -k -no-pass domain.local/user
Functionality access to the domain object, assign the DS-Replication right to the selected user. del_dcsync user - Delete DS-Replication right to the selected user. get_user_groups user - Retrieves all groups this user is a member of. get_group_users group - Retrieves all members of a group. get_laps_password computer - Retrieves the LAPS (https://www.kitploit.com/search/label/LAPS) passwords (https://www.kitploit.com/search/label/Passwords) associated with a given computer (sAMAccountName). set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName). set_owner target grantee - Abuse WriteOwner privilege. dacl_modify - Modify ACE (https://www.kitploit.com/search/label/ACE) (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified. set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false. set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName). write_gpo_dacl user gpoSID - Write a full control ACE to the gpo (https://www.kitploit.com/search/label/GPO) for the given user. The gpoSID must be entered surrounding by {}. get_maq user - Get ms-DS-MachineAccountQuota for current user. exit - Terminates this session.">add_computer computer [password] - Adds a new computer to the domain with the specified password. Requires LDAPS.
add_user new_user [parent] - Creates a new user.
add_user_to_group user group - Adds a user to a group.
change_password user [password] - Attempt to change a given user's password. Requires LDAPS.
clear_rbcd target grantee - Clear the resource based constrained delegation configuration information.
disable_account user - Disable the user's account.
enable_account user - Enable the user's account.
dump - Dumps the domain.
search query [attributes,] - Search users and groups by name, distinguishedName and sAMAccountName.
set_dcsync user - If you have write access to the domain object, assign the DS-Replication right to the selected user.
del_dcsync user - Delete DS-Replication right to the selected user.
get_user_groups user - Retrieves all groups this user is a member of.
get_gro up_users group - Retrieves all members of a group.
get_laps_password computer - Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
set_owner target grantee - Abuse WriteOwner privilege.
dacl_modify - Modify ACE (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified.
set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false.
set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
write_gpo_dacl user gpoSID - Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
get_maq user - Get ms-DS-MachineAccountQuota for current user.
exit - Terminates this session.

TODO del_computer - Delete computer del_user - Delete user set_dcsync - If you have write access to the domain object, assign the DS-Replication right to the selected user del_dcsync - Del DS-Replication right to the selected user shadow_credantional - inherited pywhisker (https://github.com/ShutdownRepo/pywhisker) get_all_laps - Get all LAPS passwords set_owner - Abuse WriteOwner privilege dacl_modify - Set GenericAll, WriteDacl, WriteProperties or set MASK of privilege License Apache Authors saber-nyan (https://saber-nyan.com/) (main dev) Riocool (https://t.me/riocool) Credits Impacket (https://github.com/SecureAuthCorp/impacket) saber-nyan (https://saber-nyan.com/) Donate If you want to support the project or have unnecessary money :) ETH: 0xAA89044f8BE2F712Cc987Be00F55296B3045c9c3

Download Ldap_Shell (https://github.com/z-Riocool/ldap_shell)

Hacking on Medium
PROTOSTAR WALKTHROUGH STACK-5

https://cdn-images-1.medium.com/max/600/1*34Ggv1VUlfu4rvf7AYtV6Q.png
Hello hackers! hope you are all doing well. I know I took some time off from posting writeups because of how busy I got over time (jk I…

Continue reading on Medium »

Hacking on Medium
XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain

https://cdn-images-1.medium.com/max/2600/1*wtMaqnbtRFdbscUDDKn2mg.png
Hi all :) I hope you are all good :)

Continue reading on Medium »

Exploiting BITB with advanced open redirect

BITB, despite being old, is only being popularly known now, so I will briefly explain what it is, whoever knows, can jump from this to the…Continue reading on Medium »
Read more...

Exploiting BITB with advanced open redirect
https://danielmizael.medium.com/exploiting-bitb-with-advanced-open-redirect-827fbe0bf904?source=rss------bug_bounty-5