tl;dr:Continue reading on Medium » (https://medium.com/@anti.kimono/rooting-jenkins-remote-code-execution-on-a-live-bug-bounty-target-fc2c12d89a2e?source=rss------bug_bounty-5)
Chaining Attacks to exploit a development dashboard accessible publicly!
https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium » (https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5)
https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium » (https://medium.com/@abbyx0r/last-month-while-working-with-a-customer-on-a-red-team-engagement-we-stumbled-upon-a-low-hanging-5f8514d8e6b0?source=rss------bug_bounty-5)
Smap - A Drop-In Replacement For Nmap Powered By Shodan.Io
http://www.kitploit.com/2022/08/smap-drop-in-replacement-for-nmap.html
http://www.kitploit.com/2022/08/smap-drop-in-replacement-for-nmap.html
Smap is a replica of Nmap which uses shodan.io's free API for port scanning. It takes same command line (https://www.kitploit.com/search/label/Command%20Line) arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap.
Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection Supports all nmap's output formats Service and version fingerprinting Makes no contact to the targets Installation Binaries You can download a pre-built binary (https://www.kitploit.com/search/label/Binary) from here (https://github.com/s0md3v/Smap/releases) and use it right away. Manual go install -v github.com/s0md3v/smap/cmd/smap@latest Confused or something not working? For more detailed instructions, click here (https://github.com/s0md3v/Smap/wiki/FAQ#how-do-i-install-smap) AUR pacakge Smap is available on AUR as smap-git (https://aur.archlinux.org/packages/smap-git) (builds from source) and smap-bin (https://aur.archlinux.org/packages/smap-bin) (pre-built binary). Homebrew/Mac Smap is also avaible on Homebrew (https://formulae.brew.sh/formula/smap). brew update
brew install smap
Usage Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iL are ignored. If you are unfamiliar with Nmap, here's how to use Smap. Specifying targets smap 127.0.0.1 127.0.0.2
You can also use a list of targets, seperated by newlines. smap -iL targets.txt
Supported formats 1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR
Output Smap supports 6 output formats which can be used with the -o* as follows smap example.com -oX output.xml
If you want to print the output to terminal, use hyphen (-) as filename. Supported formats oX // nmap's xml format
oG // nmap's greppable format
oN // nmap's default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json
Note: Since Nmap doesn't scan/display vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and tags, that data is not available in nmap's formats. Use -oS to view that info. Specifying ports Smap scans (https://www.kitploit.com/search/label/Scans) these 1237 ports (https://gist.githubusercontent.com/s0md3v/3e953e8e15afebc1879a2245e74fc90f/raw/1e20288e9bef43b60f7306b6f7e23044dabd9b8c/shodan_ports.txt) by default. If you want to display results for certain ports, use the -p option. smap -p21-30,80,443 -iL targets.txt
Considerations Since Smap simply fetches existent port data from shodan.io, it is super fast but there's more to it. You should use Smap if: You want vulnerability detection a super fast port scanner results for most common ports (top 1237) no connections to be made to the targets You are okay with not being able to scan IPv6 addresses results being up to 7 days old a few false negatives
Download Smap (https://github.com/s0md3v/smap/)
Features Scans 200 hosts per second Doesn't require any account/api key Vulnerability detection Supports all nmap's output formats Service and version fingerprinting Makes no contact to the targets Installation Binaries You can download a pre-built binary (https://www.kitploit.com/search/label/Binary) from here (https://github.com/s0md3v/Smap/releases) and use it right away. Manual go install -v github.com/s0md3v/smap/cmd/smap@latest Confused or something not working? For more detailed instructions, click here (https://github.com/s0md3v/Smap/wiki/FAQ#how-do-i-install-smap) AUR pacakge Smap is available on AUR as smap-git (https://aur.archlinux.org/packages/smap-git) (builds from source) and smap-bin (https://aur.archlinux.org/packages/smap-bin) (pre-built binary). Homebrew/Mac Smap is also avaible on Homebrew (https://formulae.brew.sh/formula/smap). brew update
brew install smap
Usage Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iL are ignored. If you are unfamiliar with Nmap, here's how to use Smap. Specifying targets smap 127.0.0.1 127.0.0.2
You can also use a list of targets, seperated by newlines. smap -iL targets.txt
Supported formats 1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR
Output Smap supports 6 output formats which can be used with the -o* as follows smap example.com -oX output.xml
If you want to print the output to terminal, use hyphen (-) as filename. Supported formats oX // nmap's xml format
oG // nmap's greppable format
oN // nmap's default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json
Note: Since Nmap doesn't scan/display vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and tags, that data is not available in nmap's formats. Use -oS to view that info. Specifying ports Smap scans (https://www.kitploit.com/search/label/Scans) these 1237 ports (https://gist.githubusercontent.com/s0md3v/3e953e8e15afebc1879a2245e74fc90f/raw/1e20288e9bef43b60f7306b6f7e23044dabd9b8c/shodan_ports.txt) by default. If you want to display results for certain ports, use the -p option. smap -p21-30,80,443 -iL targets.txt
Considerations Since Smap simply fetches existent port data from shodan.io, it is super fast but there's more to it. You should use Smap if: You want vulnerability detection a super fast port scanner results for most common ports (top 1237) no connections to be made to the targets You are okay with not being able to scan IPv6 addresses results being up to 7 days old a few false negatives
Download Smap (https://github.com/s0md3v/smap/)
Chaining Attacks to exploit a development dashboard accessible publicly!
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium »
Read more...
Last month while working with a customer on a red team engagement, we stumbled upon a low hanging fruit (vulnerability). It was an IOT…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
A simple JSON token opens an attack surface
https://cdn-images-1.medium.com/max/2000/0*4HGznG2RfB01LAn_.jpg
Or express-validator to the rescue!
Continue reading on Geromics »
A simple JSON token opens an attack surface
https://cdn-images-1.medium.com/max/2000/0*4HGznG2RfB01LAn_.jpg
Or express-validator to the rescue!
Continue reading on Geromics »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
ROPemporium “ret2win”
https://cdn-images-1.medium.com/max/1312/1*p_RVC4307Vf3cma_JWMczg.png
ret2win is the first of 8 challenges in which you can learn ROP (return oriented programming)
Continue reading on Medium »
ROPemporium “ret2win”
https://cdn-images-1.medium.com/max/1312/1*p_RVC4307Vf3cma_JWMczg.png
ret2win is the first of 8 challenges in which you can learn ROP (return oriented programming)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Advanced JavaScript Tips And Tricks To Make You A Better Programmer
https://cdn-images-1.medium.com/max/2600/0*7-V5eyVOreVRSwUm
Make your JavaScript codes more professional and incredible with these tips and tricks
Continue reading on Medium »
Advanced JavaScript Tips And Tricks To Make You A Better Programmer
https://cdn-images-1.medium.com/max/2600/0*7-V5eyVOreVRSwUm
Make your JavaScript codes more professional and incredible with these tips and tricks
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Can the Metaverse be Hacked? Cybersecurity Issues in the Metaverse
https://cdn-images-1.medium.com/max/2500/1*68r-7nElJGv10JS3YBQiSQ.png
A lot of writings have focused on the prospects and opportunities in the metaverse. As much as it is nice to look forward to these…
Continue reading on Coinmonks »
Can the Metaverse be Hacked? Cybersecurity Issues in the Metaverse
https://cdn-images-1.medium.com/max/2500/1*68r-7nElJGv10JS3YBQiSQ.png
A lot of writings have focused on the prospects and opportunities in the metaverse. As much as it is nice to look forward to these…
Continue reading on Coinmonks »
hacking: security in practice
Pool on the roof - August 08, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
Pool on the roof - August 08, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
reddit
Pool on the roof - August 08, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF...
hacking: security in practice
Detailed look at another (attempted) spear phishing attack against defi protocol
The founder gives details in this thread:
https://twitter.com/AlexSmirnov__/status/1555586334378676225
Identified and prevented damage in this case. This is probably how so many 'mysterious' crypto hacks happen.
Also, use of documents (PDF, Word, Excel) is becoming very common. Avg user thinks 'EXE files could be viruses, but document is safe'.
submitted by /u/fap_fap_fap_fapper
[link] [comments]
Detailed look at another (attempted) spear phishing attack against defi protocol
The founder gives details in this thread:
https://twitter.com/AlexSmirnov__/status/1555586334378676225
Identified and prevented damage in this case. This is probably how so many 'mysterious' crypto hacks happen.
Also, use of documents (PDF, Word, Excel) is becoming very common. Avg user thinks 'EXE files could be viruses, but document is safe'.
submitted by /u/fap_fap_fap_fapper
[link] [comments]
reddit
Detailed look at another (attempted) spear phishing attack against...
The founder gives details in this...