serverless (https://www.kitploit.com/search/label/Aws%20Serverless) --profile=my-profile Use temporary session tokens obtained to check all ec2 permissions ❯❯ cliam aws enumerate ec2 --session-json=creds.json Where creds.json has { "Type" : "AWS-HMAC", "AccessKeyId" : "ASIA...", "SecretAccessKey" : "...", "Token" : "...", } Enumerate permissions for s3, iam and ec2 ❯❯ cliam aws enumerate s3 iam ec2 GCP Currently, permissions are enumerate using the cloudresourcemanager API. This will fail if this service is not enabled, but there are future plans to extend using rest alls to confirm permissions. GCP supports enumerating from a specific service account json file. Credentials from the GCP environment variables GOOGLE_APPLICATION_CREDENTIALS and CLOUDSDK_CORE_PROJECT are also supported. Because there are two modes for GCP enumeration, use enumerate if cloudresourcemanager is enabled or use rest to enumerate specific permissions. cliam gcp --help Enumerate GCP service accounts for their permissions. Usage: cliam gcp [command] Available Commands: bruteforce Enumerate all GCP permissions enumerate Enumerate specified GCP permissions rest GCP permissions using the REST API Flags: -h, --help help for gcp --project-id string GCP project id --region string GCP Region (default "us-central1") --service-account string GCP service account path --zone string GCP Zone (default "us-central1-a") Global Flags: --max-threads int Maximum number of threads to use. (default 5) --request-timeout int Timeout for each request in seconds. (default 10) Use "cliam gcp [command] --help" for more information about a command. Debug cliam supports two environment variables to show debug output DEBUG=true (shows status codes of requests) VERBOSE=true (shows body of requests)

Download Cliam (https://github.com/securisec/cliam)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XXE (XML External Entity) to get Password from the server

https://cdn-images-1.medium.com/max/1338/1*BcRA6kECj9VNdMAWJUhjtg.png
What is XXE?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I created my first malware when I was 10 years old

https://cdn-images-1.medium.com/max/1920/1*5fbZOqyl7r7cSZYE7S-wNw.jpeg
This is the story how I creted my first malware as a 10 years old kid.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tornado Cash, como fugan el capital del exploit al Bridge de Ronin Network

https://cdn-images-1.medium.com/max/900/1*Y-oosmOj2vnn4KQf1cLSKQ.jpeg
TornadoCash Es una herramienta de privacidad que se ha utilizado para desviar el producto de múltiples fraudes, estafas y hacks en…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack To Learn: OSINT and Passive Reconnaissance

https://cdn-images-1.medium.com/max/2000/0*Rwsbw2wn6oATjXlr
Dear Friend, welcome to HaXeZ where I want to talk about Open-source intelligence and passive reconnaissance.

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Cliam - Multi Cloud IAM Permissions Enumeration Tool

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
GitHub to Developers: Turn on 2FA, or Lose Access

All active GitHub users who contribute code will be required to enable at least one form of two-factor authentication by the end of 2023.

hacking: security in practice
Hacking a Bank by Finding a 0day in DotCMS

https://external-preview.redd.it/U7g6L4x6U0JG5GUPcPLu78v649DRYzo4-bG2P-30eWc.jpg?width=108&crop=smart&auto=webp&s=f08d3aede65e61dd7c5e46c4dfcd9178f9a767de submitted by /u/Free-Speech-101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
if u wanna hack omegle

​

chormeogle for pulling ips

Manycam for disappearing

obs for connecting 2 omegles

there are tutorials online to set it up

submitted by /u/AGJ2310-YT-TTV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My First Bounty in Hackerone

Hi my name is jagannath mohanty .i want to tell you my first bounty of hackerone lets jump the bug reported it was user/email enumeration…Continue reading on Medium »
Read more...

My First Bounty in Hackerone
https://medium.com/@jagannathrajput2003/my-first-bounty-in-hackerone-cd8ce37c245?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi my name is jagannath mohanty .i want to tell you my first bounty of hackerone lets jump the bug reported it was user/email enumeration…Continue reading on Medium » (https://medium.com/@jagannathrajput2003/my-first-bounty-in-hackerone-cd8ce37c245?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cryptojacking: a hands-on guide for pentesters
https://www.reddit.com/r/Pentesting/comments/uipesd/cryptojacking_a_handson_guide_for_pentesters/

___________________________
@hacking_Attack
@Hacking_Video