Hacking on Medium
Pentester Lab Diaries

Started on Pentester Labs and let’s see where we go

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
amous Platforms to practice Pentesting

Tryhackme
https://tryhackme.com

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bypassing CSP

CSP stands for Content Security Policy. This is a response header that identifies what is authorised to load scripts, HTML elements and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Different Categories Of Hacking...

https://cdn-images-1.medium.com/max/1024/1*Mb80caxKmYb7ZbG00YeC6g.png
Hackers of computers have existed for a very long time. We have started to hear more and more about hacking as computers and the internet…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is Ethical Hacking? All You Need To Know

https://cdn-images-1.medium.com/max/650/1*9Budi8b_akNu-36GuWHHFw.jpeg
Whenever someone hears about hacking, they think it as unethical! But have you ever heard of ethical hacking? Here’s all you need to know.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Security-Red Teaming Operations Chapter-1

https://cdn-images-1.medium.com/max/600/0*nySiL4WE3rzjbhl5
Şeytani İkiz Saldırısı ile Wifi Hackleme

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
China-backed APT41 Hackers are back and they are targeting?

https://cdn-images-1.medium.com/max/728/0*yc_QWMbRdLtg7eDQ.jpg
The Chinese advanced persistent threat (APT) actor tracked as Winnti has targeted at least 13 organizations geographically spanning across…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Trust no one. Microsoft Windows exploited!

https://cdn-images-1.medium.com/max/1400/0*tHDKs_VgK1O9u514.jpg
Microsoft has confirmed the “Remote Code Execution” vulnerability that has been exploited in the “Microsoft Windows Support Diagnostic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack The Android Auto Backup For Apps Functionality?

https://cdn-images-1.medium.com/max/2600/0*HkJ_YHICmm7acoOM
In this post I’ll tell you how to get data from an app, customize it and then use the modified version on Android. Developers should be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
crAPI - Completely Ridiculous API

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEis8Xu-hQepJDB9yXVDyzUWXRoxOScdM39oll_pLGH4cOBL_49zxgvRn3w3Amh36goTYkPVaZuDmAw9c1bHHOTVh2DxUlBiBZ-Fg5rwccyhUhAbtxe_tmSP1si6dsMcG365i2UcWo6-kUYuSjrlKIgFj1ni-4teCxxRLDuGa6wSIEqnBg4WfRDYLhGm/w640-h360/crapi.jpg
completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.

crAPI is modern, built on top of a microservices architecture. When time has come to buy your first car, sign up for an account and start your journey. To know more about crAPI, please check crAPI's overview.
QuickStart Guide

Docker

You'll need to have Docker installed and running on your host system.

Using prebuilt images

You can use prebuilt images generated by our CI workflow.

*
To use the latest stable version.

* Linux Machine

curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d


* Windows Machine

curl.exe -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d


*
To use the latest development version

* Linux Machine

curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml

VERSION=develop docker-compose pull

VERSION=develop docker-compose -f docker-compose.yml --compatibility up -d


* Windows Machine

Visit http://localhost:8888
Note: All emails are sent to mailhog service by default and can be checked on http://localhost:8025 You can change the smtp configuration if required however all emails with domain example.com will still go to mailhog.

Vagrant

This option allows you to run crAPI within a virtual machine, thus isolated from your system. You'll need to have Vagrant and, for example VirtualBox installed.

1. Clone crAPI repository
$ git clone [REPOSITORY-URL]


2. Start crAPI Virtual Machine
$ cd deploy/vagrant && vagrant up


3. Visit http://192.168.33.20

Note: All emails are sent to mailhog service and can be checked on http://192.168.33.20:8025

Once you're done playing with crAPI, you can remove it completely from your system running the following command from the repository root directory

$ cd deploy/vagrant && vagrant destroy


For more deployment options visit the setup instructions for more details.

To know more about challenges in crAPI. Visit challenges
Download crAPI

Active Directory privesc and pivoting
https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/

*I posted this in r/ethicalhacking (https://www.reddit.com/r/ethicalhacking) as well, however I figured that this sub might be more fitted for this type of thread. I'm a junior penetration tester doing my first large-scale test on a big organization together with another junior colleague. We have gained system access to a member server via a share misconfiguration which allowed us to upload a webshell and get code execution from the web app that ran. We are sort of stuck right now and can't seem to find a way forward. No luck from dumping SAM, as there were no sessions from high-priv users. The only thing we got from that server was a DCC hash we couldn't crack. Other than that it was clean. We passed the local admin hash around to all servers in the domain, but nothing. The only set of domain credentials we have is one domain user, which we got from password spraying, and it doesn't have access to other interesting shares. Responder hasn't picked anything up, which is strange since LLMNR /mDNS isn't disabled. The user doesn't appear to have write access to any frequently used shares, so we see no point in planting link files all over. Kerberoasting yielded nothing as the service accounts seem to have incredibly strong passwords. We'd appreciate some tips on how to more forward, if anyone's got anything. We feel like owning one server has to be useful in further escalating our privileges. Then again, we're probably missing something since we're noobs. submitted by /u/memeabiding (https://www.reddit.com/user/memeabiding)
[link] (https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/) [comments] (https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/)

___________________________
@hacking_Attack
@Hacking_Video