There’s $20 up for grabs in this post

I have been hosting a challenge for my readers with a reward of $20. No one has claimed it yet, the prize is still up for grabs.Continue reading on Medium »
Read more...

Hacking on Medium
Grid cyberthreats, Bitcoin busts and a Russian botnet takedown

https://cdn-images-1.medium.com/max/720/1*eVSwdftd2UKjTSrA-hWOwA.png
Welcome to Changelog for 4/10/22, published by Synack! Blake here, writing from the nation’s capital. Last week saw a spate of cyber…

Continue reading on README_ »

LDAP shell - AD ACL Abuse
http://www.kitploit.com/2022/04/ldap-shell-ad-acl-abuse.html

This repository contains a small tool inherited from ldap_shell (https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ldap_shell.py).
Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to go: git clone https://github.com/z-Riocool/ldap_shell.git
cd ldap_shell
python3 setup.py install Usage Connection options ldap_shell domain.local/user:password
ldap_shell domain.local/user:password -dc-ip 192.168.1.2
ldap_shell domain.local/user -hashes aad3b435b51404eeaad3b435b51404ee:aad3b435b51404eeaad3b435b51404e1
export KRB5CCNAME=/home/user/ticket.ccache
ldap_shell -k -no-pass domain.local/user
Functionality access to the domain object, assign the DS-Replication right to the selected user. del_dcsync user - Delete DS-Replication right to the selected user. get_user_groups user - Retrieves all groups this user is a member of. get_group_users group - Retrieves all members of a group. get_laps_password computer - Retrieves the LAPS (https://www.kitploit.com/search/label/LAPS) passwords (https://www.kitploit.com/search/label/Passwords) associated with a given computer (sAMAccountName). set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName). set_owner target grantee - Abuse WriteOwner privilege. dacl_modify - Modify ACE (https://www.kitploit.com/search/label/ACE) (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified. set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false. set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName). write_gpo_dacl user gpoSID - Write a full control ACE to the gpo (https://www.kitploit.com/search/label/GPO) for the given user. The gpoSID must be entered surrounding by {}. get_maq user - Get ms-DS-MachineAccountQuota for current user. exit - Terminates this session.">add_computer computer [password] - Adds a new computer to the domain with the specified password. Requires LDAPS.
add_user new_user [parent] - Creates a new user.
add_user_to_group user group - Adds a user to a group.
change_password user [password] - Attempt to change a given user's password. Requires LDAPS.
clear_rbcd target grantee - Clear the resource based constrained delegation configuration information.
disable_account user - Disable the user's account.
enable_account user - Enable the user's account.
dump - Dumps the domain.
search query [attributes,] - Search users and groups by name, distinguishedName and sAMAccountName.
set_dcsync user - If you have write access to the domain object, assign the DS-Replication right to the selected user.
del_dcsync user - Delete DS-Replication right to the selected user.
get_user_groups user - Retrieves all groups this user is a member of.
get_gro up_users group - Retrieves all members of a group.
get_laps_password computer - Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
set_genericall target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
set_owner target grantee - Abuse WriteOwner privilege.
dacl_modify - Modify ACE (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified.
set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false.
set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
write_gpo_dacl user gpoSID - Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
get_maq user - Get ms-DS-MachineAccountQuota for current user.
exit - Terminates this session.

TODO del_computer - Delete computer del_user - Delete user set_dcsync - If you have write access to the domain object, assign the DS-Replication right to the selected user del_dcsync - Del DS-Replication right to the selected user shadow_credantional - inherited pywhisker (https://github.com/ShutdownRepo/pywhisker) get_all_laps - Get all LAPS passwords set_owner - Abuse WriteOwner privilege dacl_modify - Set GenericAll, WriteDacl, WriteProperties or set MASK of privilege License Apache Authors saber-nyan (https://saber-nyan.com/) (main dev) Riocool (https://t.me/riocool) Credits Impacket (https://github.com/SecureAuthCorp/impacket) saber-nyan (https://saber-nyan.com/) Donate If you want to support the project or have unnecessary money :) ETH: 0xAA89044f8BE2F712Cc987Be00F55296B3045c9c3

Download Ldap_Shell (https://github.com/z-Riocool/ldap_shell)

Hacking on Medium
PROTOSTAR WALKTHROUGH STACK-5

https://cdn-images-1.medium.com/max/600/1*34Ggv1VUlfu4rvf7AYtV6Q.png
Hello hackers! hope you are all doing well. I know I took some time off from posting writeups because of how busy I got over time (jk I…

Continue reading on Medium »

Hacking on Medium
XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain

https://cdn-images-1.medium.com/max/2600/1*wtMaqnbtRFdbscUDDKn2mg.png
Hi all :) I hope you are all good :)

Continue reading on Medium »

Exploiting BITB with advanced open redirect

BITB, despite being old, is only being popularly known now, so I will briefly explain what it is, whoever knows, can jump from this to the…Continue reading on Medium »
Read more...

Exploiting BITB with advanced open redirect
https://danielmizael.medium.com/exploiting-bitb-with-advanced-open-redirect-827fbe0bf904?source=rss------bug_bounty-5

BITB, despite being old, is only being popularly known now, so I will briefly explain what it is, whoever knows, can jump from this to the…Continue reading on Medium » (https://danielmizael.medium.com/exploiting-bitb-with-advanced-open-redirect-827fbe0bf904?source=rss------bug_bounty-5)

hacking: security in practice
Acer "ConceptD" N18C3 laptop not booting from live USB

I've tried just about every option I can think of - I have a live USB of Kali Linux that I usually just pop into a USB port, boot from there, and go to town. This particular laptop (Acer "ConceptD" N18C3) is being particularly annoying. As it only gives me the option to boot via UEFI (not legacy mode no matter how hard I try) I mount the ISO in a handful of different ways via Rufus and nothing makes it recognizable in the F12 boot menu within the laptop. I've also disabled "secure boot" but that hasn't made any difference. The only option that shows is "Windows Boot Manager"

​

Any ideas?

submitted by /u/spectre1995
[link] [comments]

hacking: security in practice
white hat hackers

I have an idea for white hat hackers (I think that's what hackers who do no harm are called). They could send out a link that looks like a normal scam, and instead of it being a scam when they get access to their computer they open the note pad and copy paste info about scams and how to prevent the person from being scammed. Like for example a list of applications like TeamViewer that they should never download and stuff like that.

submitted by /u/n0th1ngsp3c14l
[link] [comments]

Ad-Honeypot-Autodeploy — Deploy A Small, Intentionally Insecure, Vulnerable Windows Domain For RDP…
https://medium.com/@pentesterclubpvtltd/ad-honeypot-autodeploy-deploy-a-small-intentionally-insecure-vulnerable-windows-domain-for-rdp-1d1efbacf2ae?source=rss------bug_bounty-5

Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/ad-honeypot-autodeploy-deploy-a-small-intentionally-insecure-vulnerable-windows-domain-for-rdp-1d1efbacf2ae?source=rss------bug_bounty-5)

Web-Hacking-Toolkit — A Multi-Platform Web Hacking Toolkit Docker Image With Graphical User…
https://medium.com/@pentesterclubpvtltd/web-hacking-toolkit-a-multi-platform-web-hacking-toolkit-docker-image-with-graphical-user-a67031597512?source=rss------bug_bounty-5