Phoenix — HackTheBox — Web App Penetration Testing — Writeup
https://0x1rootjkqsta.medium.com/phoenix-hackthebox-web-app-penetration-testing-writeup-ebc53d573629?source=rss------bug_bounty-5

Hello guys I am back to posting another writeup. So let’s start talking instead of wasting our time.Continue reading on Medium » (https://0x1rootjkqsta.medium.com/phoenix-hackthebox-web-app-penetration-testing-writeup-ebc53d573629?source=rss------bug_bounty-5)

Phoenix — HackTheBox — Web App Penetration Testing — Writeup

Hello guys I am back to posting another writeup. So let’s start talking instead of wasting our time.Continue reading on Medium »
Read more...

Docker Containers Security Series
https://www.reddit.com/r/redteamsec/comments/up09ly/docker_containers_security_series/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/docker-containers-security/) [comments] (https://www.reddit.com/r/redteamsec/comments/up09ly/docker_containers_security_series/)

Dark Reading: Attacks/Breaches
Linux, OpenSSF Champion Plan to Improve Open Source Security

The White House and tech industry pledge $150 million over two years to boost open source resiliency and supply chain security.

Dark Reading: Attacks/Breaches
CISO Shares Top Strategies to Communicate Security's Value to the Biz

In a keynote address at Black Hat Asia in Singapore this week, CISO and former NASA security engineer George Do discussed his go-to model for measuring security effectiveness – and getting others in the organization to listen.

Dark Reading: Attacks/Breaches
Black Hat Asia: Democracy's Survival Depends on Taming Technology

The conference opens with stark outlook on the future of global democracy — currently squeezed between Silicon Valley and China.

Dark Reading: Attacks/Breaches
US Agrees to International Electronic Cybercrime Evidence Swap

The Budapest Convention is a multinational coalition that agrees to share electronic evidence across international jurisdictions to track down cybercriminals.

Hacking on Medium
Nomad Hacker Skills

If you want to become nomad hacker, you need to learn some skills and spent some time of learning new things. First of all we need general…

Continue reading on Medium »

Hacking on Medium
EW SKuzzy: 1 VM Walkthrough

https://cdn-images-1.medium.com/max/720/0*hIuZSpcGvcEymeTq
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Use Brain Hacking to Your Advantage

https://cdn-images-1.medium.com/max/2600/0*syU6L0-M-9RMSEID
Are you confused about what “brain hacking” really means? Can you use it to enhance your brain’s power?

Continue reading on Medium »

hacking: security in practice
We're hackers who just published books with No Starch Press. AUA/ Ask us anything!

EDIT (5:15 ET/2:15 PT): That's a wrap! Thanks all for joining us and sticking around while we got the back-end issues sorted out. Be sure to check out Hacking APIs and Practical Social Engineering. Both 25% off until midnight PT with the code AMA25 at nostarch.com!

EDIT (3:55 ET/12:55 PT): We've run into some technical issues with our authors' replies. We'll be reposting them from this account in the meantime. Thanks for all the questions. Keep them coming!

Live from the BSides Knoxville security conference are two well-known hackers who both have books out this month: Corey Ball (u/hAPI_hacker), author of Hacking APIs, and Joe Gray (u/theosintion), author of Practical Social Engineering.

Corey is a cybersecurity consulting manager at Moss Adams, where he leads the pentesting team. He's got over a decade of infosec experience in different industries, including aerospace, agribusiness, energy, fintech, govt. services, and healthcare, and holds the OSCP, CCISO, CEH, CISA, CISM, CRISC, and CGEIT industry certifications.

Joe is a threat hunter / intelligence engineer, and founder of The OSINTion, which provides OSINT and OPSEC training. He's also co-organizer of BSides Knoxville, a member of the Password Inspection Agency (who won the TraceLabs OSINT Search Party at DEFCON 28), and he recently authored the OSINT and OPSEC tools DECEPTICON Bot & WikiLeaker. He holds certifications in CISSP-ISSMP, GCIH, GSNA, and OSWP.

So ask u/hAPI_hacker and u/theosintion anything, Reddit! They'll be here starting at 3:00PM ET/12:00PM PT.

P.S. In honor of the occasion we're knocking 25% off the cost of their books — Hacking APIs and Practical Social Engineering — until midnight PT if you use coupon code AMA25 at https://nostarch.com/.

submitted by /u/NoStarchPress
[link] [comments]

KitPloit - PenTest Tools!
RogueAssemblyHunter - Rogue Assembly Hunter Is A Utility For Discovering 'Interesting' .NET CLR Modules In Running Processes

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnX4gTzlwZor20D3_2p7SYKwV6GV39LQl_Qrw2ol0FxLRrq7kGVPOPPG_ULcLD8hr1BJTX4BUMfWifRRAMZ3Xui0omP6xCSTfwBRdZMKgjTfkWzJGHHwQ9MrIUtt3x3bKl4HhzN6vy5_9dc45MSf6jQrNXC0Bp7jYM45pcFtRdqQXSOGFwjc--nXrW/s16000/RogueAssemblyHunter.png Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.

* Author: @bohops
* License: MIT
* Project: https://github.com/bohops/RogueAssemblyHunter Background.NET is a very powerful and capable development platform and runtime framework for building and running .NET managed applications. Over the last several years, .NET has been adopted by Red Teams (and likes thereof) for instrumenting tradecraft to support offensive operations. In particular, the shift from offensive PowerShell to .NET was a logical leap (for many) due to the increased optics and opportunistic visibility present in PowerShell v5+. As such, .NET offensive tooling and tradecraft has been successfully used to evade host-based defensive capabilities, bypass application control, and to build/stage/deliver/execute malicious code (similar to PowerShell).

From a prevention perspective, Microsoft is doing more to combat .NET instrumented threats and to minimize the overall .NET attack surface. For example, Microsoft has added AMSI inspection capabilities in .NET Framework 4.8, and WDAC/WLDP mechanisms are quite effective. From a detection/response perspective, further visibility and introspection into the .NET ecosystem is always advantageous for discovering new ways to combat .NET-focused threats.

In 2017, Joe Desimone (@dez_) wrote a fantastic article called Hunting For In-Memory .NET Attacks. Still relevant today, the article outlines modern .NET attack vectors as well as on-demand and event-based techniques for detection. Accompanying the article, Joe released a tool (Get-ClrReflection) to proactively detect (and retrieve) in-memory .NET CLR modules that lack a proper disk reference. Inspired by Joe's work and taking advantage of the introspection capabilities of the CLRMD runtime diagnostics library (+ subsequent data access capabilities of mscordacwks.dll), Rogue Assembly Hunter was created to:

* Inspect (all) running .NET ('managed') processes for interesting CLR modules (e.g. module(s) that form an 'assembly')
* Inspect a single .NET ('managed') process (by PID) for interesting CLR modules
* Watch for newly spawned processes and attempt to inspect for interesting CLR modules
* Support several 'hunt' capabilities to discover in-memory loaded modules, signature status of modules (if loaded from disk), modules loaded from interesting directories, and imposter modules (e.g. fake file references).
* Support CLR module export functionality (a quick port from Get-ClrReflection)
* Inspire more interesting tooling and tradecraft Major Requirements & Dependencies* Run under a privileged user/process context
* .NET Framework 4.6.1+
* .NET CLRMD - Microsoft.Diagnostics.Runtime Introspection Library (NuGet Package)
* ILMerge - Static Linker (NuGet Package)
* ...and supporting NuGet packages in Visual Studio. Notes, Tips, & Caveats* Run as a privileged user with high/system integrity.
* 'Hunts' are experimental and not guaranteed to provide complete/correct results. Beware of false positives (e.g. signed modules) and validate accordingly.
* RogueAssemblyHunter uses the CLRMD to connect to live processes, which could introduce interesting results.
* Due to the scanning nature of RogueAssemblyHunter, there is a possibility of race conditions and missed results. Consider tuning with the --checks and --sleep switches to help (especially in 'watch' mode). In some cases, it may be difficult to 'catch' a parti[...]