Bug Bounty Tip 01

Hello all, today will see one basic bug bounty tip or bug :Continue reading on Medium »
Read more...

Resolving System Service Numbers using the Exception Directory - @MDSecLabs
https://www.reddit.com/r/redteamsec/comments/u72xxr/resolving_system_service_numbers_using_the/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mdsec.co.uk/2022/04/resolving-system-service-numbers-using-the-exception-directory/) [comments] (https://www.reddit.com/r/redteamsec/comments/u72xxr/resolving_system_service_numbers_using_the/)

Hacking on Medium
HTB — Love

https://cdn-images-1.medium.com/max/700/1*hBotKN50k29mXDecEfHcYw.png
Easy windows box created by Pwnmeow, with some interesting vulnerabilities, such as SSRF and elevated misconfiguration on windows.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity for Higher Education

https://cdn-images-1.medium.com/max/2600/0*wkNurXwbs4N0pLqV
The COVID-19 pandemic changed our reality and the manner in which organizations work decisively. It has additionally achieved a polar…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 5 Easy Methods by Your WhatsApp Data Can Be Hacked

https://cdn-images-1.medium.com/max/2600/1*I5dw8LLs6v8s-SuYBjqSKw.jpeg
In today’s era, WhatsApp has become a premium method of communication while other ways of talking to each other rather than physical…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -15- (HTML İnjection in Wordpress)

Greetings Everyone from Thrakion,Continue reading on Medium »
Read more...

My Pentest Log -15- (HTML İnjection in Wordpress)
https://hcibo.medium.com/my-pentest-log-15-html-i%CC%87njection-in-wordpress-ba9fb4bf0582?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings Everyone from Thrakion,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-15-html-i%CC%87njection-in-wordpress-ba9fb4bf0582?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ADReaper - A Fast Enumeration Tool For Windows Active Directory Pentesting Written In Go
http://www.kitploit.com/2022/04/adreaper-fast-enumeration-tool-for.html

___________________________
@hacking_Attack
@Hacking_Video

ADReaper is a tool written in Golang which enumerate a Active Directory (https://www.kitploit.com/search/label/Active%20Directory) environment with LDAP queries within few seconds.
Installation You can download precompiled executable binaries for Windows/Linux from latest releases (https://github.com/AidenPearce369/ADReaper/releases/tag/ADReaper) Install from source To build from source, clone the repo and build it with GO $ git clone https://github.com/AidenPearce369/ADReaper
$ cd ADReaper/
$ go build Usage ADReaper performs enumeration (https://www.kitploit.com/search/label/Enumeration) with various commands that performs LDAP queries with respective to it group policy objects spn - to list service principal objects admin-priv - to list AD objects with admin privilege domain-trust - to list domain trust ou - to list organizational units ms-sql - to list MS-SQL servers -dc string Enter the DC -password string Enter the Password -user string Enter the Username ">monish@chimera:/ADReaper$ ./ADReaper
-command string
Command to run

users - to list all users
user-logs - to list user session activities
never-loggedon - to list users never logged on
groups - to list all groups with members
computers - to list all computers
dc - to list domain controllers
gpo - to list group policy objects
spn - to list service principal objects
admin-priv - to list AD objects with admin privilege
domain-trust - to list domain trust
ou - to list organizational units
ms-sql - to list MS-SQL servers

-dc string
Enter the DC
-password string
Enter th e Password
-user string
Enter the Username
To-Do Looking forward for contributors to build the next version Planned features, Custom LDAP querying Filters with existing commands PrivEsc checker LAPS enumeration Kerberoasting Local admin access (https://www.kitploit.com/search/label/Access) hunting Registry analysis If interested, ping me :)

Download ADReaper (https://github.com/AidenPearce369/ADReaper)

___________________________
@hacking_Attack
@Hacking_Video

Is watching something online and downloading it the same?
https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/

is there a difference between downloading something with idm and watching online? I mean any technicly difference. Not just the internet usage. thanks in advance ^^ submitted by /u/Silver_Duck9800 (https://www.reddit.com/user/Silver_Duck9800)
[link] (https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/) [comments] (https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to track a redditor's location just using their normal activity (posting, commenting, etc)?

submitted by /u/I0719
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Grey Hack (Game/ Simulator) realistic?

What are the main differences from reality?

submitted by /u/Yesn05
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Interpret the EU's Guidance on DNS Abuse Worldwide

From higher standards in top-level domains to increased adoption of security controls, stepped-up measures can help fight DNS abuse and protect Web domains.

Dark Reading: Attacks/Breaches
Verica Launches Prowler Pro to Make AWS Security Simpler for Customers

The enterprise grade solution will provide enhanced cloud security and provide new open-source tools.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
ADReaper - A Fast Enumeration Tool For Windows Active Directory Pentesting Written In Go

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX5XcwcM6z2GPlDierqk2Z9t1b0r9QUVzqn0_bWRmHSmKvV0ww2sd1_zS-sj4w3aIwk6xZE4ZPp327qV2yMRLYb00yul_bsJ1-h3_tWzkxeRUD0pmttViz363MSvtEhgy_F4TRl7wJCwqI3HoPC9MX5lP2KLWZg0vtkWt6hTWlvM8Y11DV2DXKL3S5/w640-h442/ADReaper.png
ADReaperis a tool written in Golangwhich enumerate a Active Directory environment with LDAP queries within few seconds.
Installation

You can download precompiled executable binaries for Windows/Linux from latest releases

Install from source

To build from source, clone the repo and build it with GO

$ git clone https://github.com/AidenPearce369/ADReaper
$ cd ADReaper/
$ go build

Usage

ADReaper performs enumeration with various commands that performs LDAP queries with respective to it

group policy objects spn - to list service principal objects admin-priv - to list AD objects with admin privilege domain-trust - to list domain trust ou - to list organizational units ms-sql - to list MS-SQL servers -dc string Enter the DC -password string Enter the Password -user string Enter the Username ">monish@chimera:/ADReaper$ ./ADReaper
-command string
Command to run

users - to list all users
user-logs - to list user session activities
never-loggedon - to list users never logged on
groups - to list all groups with members
computers - to list all computers
dc - to list domain controllers
gpo - to list group policy objects
spn - to list service principal objects
admin-priv - to list AD objects with admin privilege
domain-trust - to list domain trust
ou - to list organizational units
ms-sql - to list MS-SQL servers

-dc string
Enter the DC
-password string
Enter th e Password
-user string
Enter the Username


To-Do

Looking forward for contributors to build the next version

Planned features,

* Custom LDAP querying
* Filters with existing commands
* PrivEsc checker
* LAPS enumeration
* Kerberoasting
* Local admin access hunting
* Registry analysis

If interested, ping me :)
Download ADReaper

___________________________
@hacking_Attack
@Hacking_Video

MobSF
https://www.reddit.com/r/Pentesting/comments/u76hbw/mobsf/

Hello, i would like to ask if there is any difference between mobsf.live and downloaded version. Thanks :) submitted by /u/xTommis1x (https://www.reddit.com/user/xTommis1x)
[link] (https://www.reddit.com/r/Pentesting/comments/u76hbw/mobsf/) [comments] (https://www.reddit.com/r/Pentesting/comments/u76hbw/mobsf/)

___________________________
@hacking_Attack
@Hacking_Video