Or express-validator to the rescue!Continue reading on Geromics » (https://medium.com/geromics/a-simple-json-token-opens-an-attack-surface-5a968a0f0f96?source=rss------bug_bounty-5)
Rooting Jenkins: Remote Code Execution on a live bug bounty target
tl;dr:Continue reading on Medium »
Read more...
tl;dr:Continue reading on Medium »
Read more...
Rooting Jenkins: Remote Code Execution on a live bug bounty target
https://medium.com/@anti.kimono/rooting-jenkins-remote-code-execution-on-a-live-bug-bounty-target-fc2c12d89a2e?source=rss------bug_bounty-5
https://medium.com/@anti.kimono/rooting-jenkins-remote-code-execution-on-a-live-bug-bounty-target-fc2c12d89a2e?source=rss------bug_bounty-5
tl;dr:Continue reading on Medium » (https://medium.com/@anti.kimono/rooting-jenkins-remote-code-execution-on-a-live-bug-bounty-target-fc2c12d89a2e?source=rss------bug_bounty-5)
Chaining Attacks to exploit a development dashboard accessible publicly!
https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium » (https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5)
https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium » (https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5)
Smap - A Drop-In Replacement For Nmap Powered By Shodan.Io
http://www.kitploit.com/2022/08/smap-drop-in-replacement-for-nmap.html
http://www.kitploit.com/2022/08/smap-drop-in-replacement-for-nmap.html
Smap is a replica of Nmap which uses shodan.io's free API for port scanning. It takes same command line (https://www.kitploit.com/search/label/Command%20Line) arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap.
Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection Supports all nmap's output formats Service and version fingerprinting Makes no contact to the targets Installation Binaries You can download a pre-built binary (https://www.kitploit.com/search/label/Binary) from here (https://github.com/s0md3v/Smap/releases) and use it right away. Manual go install -v github.com/s0md3v/smap/cmd/smap@latest Confused or something not working? For more detailed instructions, click here (https://github.com/s0md3v/Smap/wiki/FAQ#how-do-i-install-smap) AUR pacakge Smap is available on AUR as smap-git (https://aur.archlinux.org/packages/smap-git) (builds from source) and smap-bin (https://aur.archlinux.org/packages/smap-bin) (pre-built binary). Homebrew/Mac Smap is also avaible on Homebrew (https://formulae.brew.sh/formula/smap). brew update
brew install smap
Usage Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iL are ignored. If you are unfamiliar with Nmap, here's how to use Smap. Specifying targets smap 127.0.0.1 127.0.0.2
You can also use a list of targets, seperated by newlines. smap -iL targets.txt
Supported formats 1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR
Output Smap supports 6 output formats which can be used with the -o* as follows smap example.com -oX output.xml
If you want to print the output to terminal, use hyphen (-) as filename. Supported formats oX // nmap's xml format
oG // nmap's greppable format
oN // nmap's default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json
Note: Since Nmap doesn't scan/display vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and tags, that data is not available in nmap's formats. Use -oS to view that info. Specifying ports Smap scans (https://www.kitploit.com/search/label/Scans) these 1237 ports (https://gist.githubusercontent.com/s0md3v/3e953e8e15afebc1879a2245e74fc90f/raw/1e20288e9bef43b60f7306b6f7e23044dabd9b8c/shodan_ports.txt) by default. If you want to display results for certain ports, use the -p option. smap -p21-30,80,443 -iL targets.txt
Considerations Since Smap simply fetches existent port data from shodan.io, it is super fast but there's more to it. You should use Smap if: You want vulnerability detection a super fast port scanner results for most common ports (top 1237) no connections to be made to the targets You are okay with not being able to scan IPv6 addresses results being up to 7 days old a few false negatives
Download Smap (https://github.com/s0md3v/smap/)
Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection Supports all nmap's output formats Service and version fingerprinting Makes no contact to the targets Installation Binaries You can download a pre-built binary (https://www.kitploit.com/search/label/Binary) from here (https://github.com/s0md3v/Smap/releases) and use it right away. Manual go install -v github.com/s0md3v/smap/cmd/smap@latest Confused or something not working? For more detailed instructions, click here (https://github.com/s0md3v/Smap/wiki/FAQ#how-do-i-install-smap) AUR pacakge Smap is available on AUR as smap-git (https://aur.archlinux.org/packages/smap-git) (builds from source) and smap-bin (https://aur.archlinux.org/packages/smap-bin) (pre-built binary). Homebrew/Mac Smap is also avaible on Homebrew (https://formulae.brew.sh/formula/smap). brew update
brew install smap
Usage Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iL are ignored. If you are unfamiliar with Nmap, here's how to use Smap. Specifying targets smap 127.0.0.1 127.0.0.2
You can also use a list of targets, seperated by newlines. smap -iL targets.txt
Supported formats 1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR
Output Smap supports 6 output formats which can be used with the -o* as follows smap example.com -oX output.xml
If you want to print the output to terminal, use hyphen (-) as filename. Supported formats oX // nmap's xml format
oG // nmap's greppable format
oN // nmap's default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json
Note: Since Nmap doesn't scan/display vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and tags, that data is not available in nmap's formats. Use -oS to view that info. Specifying ports Smap scans (https://www.kitploit.com/search/label/Scans) these 1237 ports (https://gist.githubusercontent.com/s0md3v/3e953e8e15afebc1879a2245e74fc90f/raw/1e20288e9bef43b60f7306b6f7e23044dabd9b8c/shodan_ports.txt) by default. If you want to display results for certain ports, use the -p option. smap -p21-30,80,443 -iL targets.txt
Considerations Since Smap simply fetches existent port data from shodan.io, it is super fast but there's more to it. You should use Smap if: You want vulnerability detection a super fast port scanner results for most common ports (top 1237) no connections to be made to the targets You are okay with not being able to scan IPv6 addresses results being up to 7 days old a few false negatives
Download Smap (https://github.com/s0md3v/smap/)
Chaining Attacks to exploit a development dashboard accessible publicly!
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium »
Read more...
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
A simple JSON token opens an attack surface
https://cdn-images-1.medium.com/max/2000/0*4HGznG2RfB01LAn_.jpg
Or express-validator to the rescue!
Continue reading on Geromics »
A simple JSON token opens an attack surface
https://cdn-images-1.medium.com/max/2000/0*4HGznG2RfB01LAn_.jpg
Or express-validator to the rescue!
Continue reading on Geromics »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
ROPemporium “ret2win”
https://cdn-images-1.medium.com/max/1312/1*p_RVC4307Vf3cma_JWMczg.png
ret2win is the first of 8 challenges in which you can learn ROP (return oriented programming)
Continue reading on Medium »
ROPemporium “ret2win”
https://cdn-images-1.medium.com/max/1312/1*p_RVC4307Vf3cma_JWMczg.png
ret2win is the first of 8 challenges in which you can learn ROP (return oriented programming)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Advanced JavaScript Tips And Tricks To Make You A Better Programmer
https://cdn-images-1.medium.com/max/2600/0*7-V5eyVOreVRSwUm
Make your JavaScript codes more professional and incredible with these tips and tricks
Continue reading on Medium »
Advanced JavaScript Tips And Tricks To Make You A Better Programmer
https://cdn-images-1.medium.com/max/2600/0*7-V5eyVOreVRSwUm
Make your JavaScript codes more professional and incredible with these tips and tricks
Continue reading on Medium »