This tool is designed to enumerate users, password spray and perform brute force attacks (https://www.kitploit.com/search/label/Brute%20Force%20Attacks) against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users (https://www.kitploit.com/search/label/Enumerate%20Users) and validate their passwords via brute force/spraying attacks, while also failing to log any failed authentication (https://www.kitploit.com/search/label/Authentication) attempts. This tool is a weaponised version of a PoC demonstrated in the arstechnica research article (https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/%5D) which discusses the techniques utilised to exploit the endpoint. This endpoint is known to Microsoft (https://www.kitploit.com/search/label/Microsoft) however, in typical fashion it has been branded a feature, not a bug. This endpoint does enforce "smart locking" which can be bypassed by rotating IP.
Why Is This Unique? The SSO Autologon endpoint does not contain logging of any sort bar potentially updating the users "Last Logon" time. The following have been tested and contain no logs: AzureAD Sentinel Defender for Identity (Formerly Advanced Thread Protection) Defender for Cloud Apps Usage "] [-p|--password ""] [-U|--userlist ""] [-o|--outfile ""] Enumerate and abuse a sub-par Azure SSO endpoint. Arguments: -h --help Print help information -e --email Email address to query. Example: user@domain.com -p --password Password to spray. Example: Password123! -U --userlist Specify userlist to enumerate -o --outfile Specify outfile. Example: validated.txt'>$ ./SSOh-No -h usage: SSOh-No [-h|--help] [-e|--email ""] [-p|--password ""] [-U|--userlist ""] [-o|--outfile ""] Enumerate and abuse a sub-par Azure SSO endpoint. Arguments: -h --help Print help information -e --email Email address to query. Example: user@domain.com -p --password Password to spray. Example: Password123! -U --userlist Specify userlist to enumerate -o --outfile Specify outfile. Example: validated.txt Upcoming Features Proxy Implementation to bypass smart lock Password brute force (https://www.kitploit.com/search/label/Brute%20Force) from password lists (single user- No plans for password list brute force against a userlist)
Download SSOh-No (https://github.com/optionalCTF/SSOh-No)
___________________________
@hacking_Attack
@Hacking_Video
Why Is This Unique? The SSO Autologon endpoint does not contain logging of any sort bar potentially updating the users "Last Logon" time. The following have been tested and contain no logs: AzureAD Sentinel Defender for Identity (Formerly Advanced Thread Protection) Defender for Cloud Apps Usage "] [-p|--password ""] [-U|--userlist ""] [-o|--outfile ""] Enumerate and abuse a sub-par Azure SSO endpoint. Arguments: -h --help Print help information -e --email Email address to query. Example: user@domain.com -p --password Password to spray. Example: Password123! -U --userlist Specify userlist to enumerate -o --outfile Specify outfile. Example: validated.txt'>$ ./SSOh-No -h usage: SSOh-No [-h|--help] [-e|--email ""] [-p|--password ""] [-U|--userlist ""] [-o|--outfile ""] Enumerate and abuse a sub-par Azure SSO endpoint. Arguments: -h --help Print help information -e --email Email address to query. Example: user@domain.com -p --password Password to spray. Example: Password123! -U --userlist Specify userlist to enumerate -o --outfile Specify outfile. Example: validated.txt Upcoming Features Proxy Implementation to bypass smart lock Password brute force (https://www.kitploit.com/search/label/Brute%20Force) from password lists (single user- No plans for password list brute force against a userlist)
Download SSOh-No (https://github.com/optionalCTF/SSOh-No)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Azuro Launches a $30,000+ Bug Bounty on Immunefi
Azuro has launched a bug bounty on web3’s leading bug bounty platform Immunefi, with hackers being rewarded a maximum bounty of $21,500…Continue reading on Medium »
Read more...
Azuro has launched a bug bounty on web3’s leading bug bounty platform Immunefi, with hackers being rewarded a maximum bounty of $21,500…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
iPhone Hackers for Hire Online?
Are you afraid of your boyfriend, girlfriend, wife, husband, or a stranger hacking into your phone or PC?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
iPhone Hackers for Hire Online?
Are you afraid of your boyfriend, girlfriend, wife, husband, or a stranger hacking into your phone or PC?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hire the best iPhone Hackers from us
Why Choose Our Hackers for Hire?
Yes we know there are numerous hacking firms all over the world. Clients…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hire the best iPhone Hackers from us
Why Choose Our Hackers for Hire?
Yes we know there are numerous hacking firms all over the world. Clients…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hire the best iPhone Hackers from us
Why Choose Our Hackers for Hire? Yes we know there are numerous hacking firms all over the world. Clients…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
21 Million VPN user credentials Leaked in Telegram
https://cdn-images-1.medium.com/max/736/1*ev9W6D3bWW_wFEt8Cq_JgA.jpeg
In Short
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
21 Million VPN user credentials Leaked in Telegram
https://cdn-images-1.medium.com/max/736/1*ev9W6D3bWW_wFEt8Cq_JgA.jpeg
In Short
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
21 Million VPN user credentials Leaked in Telegram
In Short
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe : LazyAdmin write-up
https://cdn-images-1.medium.com/max/1394/1*y4qs7scDMNOqR-DA6wBfUA.png
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe : LazyAdmin write-up
https://cdn-images-1.medium.com/max/1394/1*y4qs7scDMNOqR-DA6wBfUA.png
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe : LazyAdmin write-up
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…
hacking: security in practice
I would like to ask about the Tor network and its usefulness in a potential situation
The Philippines recently elected the son of a former dictator (Marcos) into power. If he eventually decides to try and suppress the country, could my friend in the Philippines use the Tor browser to communicate with the outside world without worrying about being censored?
What would the government be able to see? Would they be able to notice that he's connecting to the Tor network, and interrogate him for it? If so, is there any workaround for this?
What are the security benefits, caveats, and dangers of using the Onion network for this purpose?
Stepping back a bit, what are the dangers of using social media normally? I don't know if it's fake news or panic news, but apparently, police are tracking down people who were active in opposing Marcos being elected. It feels fake to me, but I'd like to ask these questions just in case it ends up being true.
My friend has been moderately active on Facebook about opposing Marcos, but not so much that I could imagine the police coming after him. There are millions of people who contributed to the extent he did. Could he be in any danger? What could he do for his safety?
I don't know much about internet security and safety, and I thought this community would. Please say if this post is not appropriate for this subreddit, and I will remove it
submitted by /u/Skunko
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
I would like to ask about the Tor network and its usefulness in a potential situation
The Philippines recently elected the son of a former dictator (Marcos) into power. If he eventually decides to try and suppress the country, could my friend in the Philippines use the Tor browser to communicate with the outside world without worrying about being censored?
What would the government be able to see? Would they be able to notice that he's connecting to the Tor network, and interrogate him for it? If so, is there any workaround for this?
What are the security benefits, caveats, and dangers of using the Onion network for this purpose?
Stepping back a bit, what are the dangers of using social media normally? I don't know if it's fake news or panic news, but apparently, police are tracking down people who were active in opposing Marcos being elected. It feels fake to me, but I'd like to ask these questions just in case it ends up being true.
My friend has been moderately active on Facebook about opposing Marcos, but not so much that I could imagine the police coming after him. There are millions of people who contributed to the extent he did. Could he be in any danger? What could he do for his safety?
I don't know much about internet security and safety, and I thought this community would. Please say if this post is not appropriate for this subreddit, and I will remove it
submitted by /u/Skunko
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
I would like to ask about the Tor network and its usefulness in a...
The Philippines recently elected the son of a former dictator (Marcos) into power. If he eventually decides to try and suppress the country, could...
Azuro Launches a $30,000+ Bug Bounty on Immunefi
https://azuroprotocol.medium.com/azuro-launches-a-30-000-bug-bounty-on-immunefi-918142d0e9f9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://azuroprotocol.medium.com/azuro-launches-a-30-000-bug-bounty-on-immunefi-918142d0e9f9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Azuro Launches a $30,000+ Bug Bounty on Immunefi
Azuro has launched a bug bounty on web3’s leading bug bounty platform Immunefi, with hackers being rewarded a maximum bounty of $21,500 for…
Azuro has launched a bug bounty on web3’s leading bug bounty platform Immunefi, with hackers being rewarded a maximum bounty of $21,500…Continue reading on Medium » (https://azuroprotocol.medium.com/azuro-launches-a-30-000-bug-bounty-on-immunefi-918142d0e9f9?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Azuro Launches a $30,000+ Bug Bounty on Immunefi
Azuro has launched a bug bounty on web3’s leading bug bounty platform Immunefi, with hackers being rewarded a maximum bounty of $21,500 for…
Xml External Entity Web Application Vulnerability : Mechanisms Part
https://medium.com/@arshiadev/xml-external-entity-web-application-vulnerability-mechanisms-part-1ac069c4aeb3?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@arshiadev/xml-external-entity-web-application-vulnerability-mechanisms-part-1ac069c4aeb3?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Xml External Entity Web Application Vulnerability : Mechanisms Part
XML external entity attacks (XXEs) are fascinating vulnerabilities that target the XML parsers of an application. XXEs can be very…
XML external entity attacks (XXEs) are fascinating vulnerabilities that target the XML parsers of an application. XXEs can be very…Continue reading on Medium » (https://medium.com/@arshiadev/xml-external-entity-web-application-vulnerability-mechanisms-part-1ac069c4aeb3?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Xml External Entity Web Application Vulnerability : Mechanisms Part
XML external entity attacks (XXEs) are fascinating vulnerabilities that target the XML parsers of an application. XXEs can be very…
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SSOh-No - User Enumeration And Password Spraying Tool For Testing Azure AD
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPAGUnwLISOeAKG_H8ovlfsgHxS43aSvzxSyqxHElUFm8mgR25ygy2-NDVWZlCSPgddzOWfQFasHcnnwXRCZEKN7MoltMW_uj-OBN2EyRHX16jbZVG5ZTUEcHaUhVhh2LUbYEoB4UL2sVGARawYgvHoQJJ1FW3UGcRF_-LZ9EuUnlmqLLD2iQKa1LN/w640-h502/SSOh-No.png
This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365.
Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute force/spraying attacks, while also failing to log any failed authentication attempts.
This tool is a weaponised version of a PoC demonstrated in the arstechnica research article which discusses the techniques utilised to exploit the endpoint.
This endpoint is known to Microsoft however, in typical fashion it has been branded a feature, not a bug.
This endpoint does enforce "smart locking" which can be bypassed by rotating IP.
Why Is This Unique?
The SSO Autologon endpoint does not contain logging of any sort bar potentially updating the users "Last Logon" time.
The following have been tested and contain no logs:
* AzureAD
* Sentinel
* Defender for Identity (Formerly Advanced Thread Protection)
* Defender for Cloud Apps
Usage
$ ./SSOh-No -h usage: SSOh-No [-h|--help] [-e|--email "
Upcoming Features
* Proxy Implementation to bypass smart lock
* Password brute force from password lists (single user- No plans for password list brute force against a userlist)
Download SSOh-No
___________________________
@hacking_Attack
@Hacking_Video
SSOh-No - User Enumeration And Password Spraying Tool For Testing Azure AD
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPAGUnwLISOeAKG_H8ovlfsgHxS43aSvzxSyqxHElUFm8mgR25ygy2-NDVWZlCSPgddzOWfQFasHcnnwXRCZEKN7MoltMW_uj-OBN2EyRHX16jbZVG5ZTUEcHaUhVhh2LUbYEoB4UL2sVGARawYgvHoQJJ1FW3UGcRF_-LZ9EuUnlmqLLD2iQKa1LN/w640-h502/SSOh-No.png
This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365.
Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute force/spraying attacks, while also failing to log any failed authentication attempts.
This tool is a weaponised version of a PoC demonstrated in the arstechnica research article which discusses the techniques utilised to exploit the endpoint.
This endpoint is known to Microsoft however, in typical fashion it has been branded a feature, not a bug.
This endpoint does enforce "smart locking" which can be bypassed by rotating IP.
Why Is This Unique?
The SSO Autologon endpoint does not contain logging of any sort bar potentially updating the users "Last Logon" time.
The following have been tested and contain no logs:
* AzureAD
* Sentinel
* Defender for Identity (Formerly Advanced Thread Protection)
* Defender for Cloud Apps
Usage
$ ./SSOh-No -h usage: SSOh-No [-h|--help] [-e|--email "
Upcoming Features
* Proxy Implementation to bypass smart lock
* Password brute force from password lists (single user- No plans for password list brute force against a userlist)
Download SSOh-No
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
SSOh-No - User Enumeration And Password Spraying Tool For Testing Azure AD