Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Ldsview - Offline search tool for LDAP directory dumps in LDIF format

https://1.bp.blogspot.com/-KsblZpficuY/YIeqPDTSqII/AAAAAAAAV-0/6umMakPVSdgVrYUu_HffpXu4Rk7qQm1QwCNcBGAsYHQ/w640-h338/lsdsisfs.png
Offline search tool for LDAP directory dumps in LDIF format.

Features

* Fast and memory efficient parsing of LDIF files
* Build ldapsearchcommands to extract an LDIF from a directory
* Show directory structure
* UAC and directory time format translation
Config

Config options can be passed as CLI flags, environment variables, or via a config file courtsey of viper. Reference the project's documentation for all of the different ways you can supply configuration.

* By default, ldsviewwill look for a file called .ldsview.{json,toml,yaml}in the user's home directory
* Environment variables with a prefix of LDSVIEWwill be read in by the application

Usage

Detailed usage information is available via the --helpflag or the helpcommand for ldsviewand all subcommands.

Search Syntax

ldsview's search mechanism is based on the entityfilter project. Detailed information about search filter syntax can be found in that project's README.

Examples

* Build ldapsearchcommand to extract LDIF files from a directory: ldsview cmdbuilder
* The command will prompt you for any information needed
* Have the following ready:
* Directory host FQDN or IP
* Domain DN
* User to run as
* User's password
* Quickly find a specific entity in an LDIF file: ldsview -f myfile.ldif entity myuser
* Parse UAC flag from AD: ldsview uac 532480
* Search LDIF file: ldsview -f myfile.ldif search "adminCount:=1,sAMAccountName:!=krbtgt"
* This command will return all entities with an adminCountof 1 that are not krbtgt
* -ican be used to limit which attributes are returned from matching entities
* --tdcwill translate directory timestamps into a human readable format
Tools Directory

Additional tools and utilities for managing LDIFs:

Makefile: Place the Makefile in the same directory as your exported LDIF and run make.

>> make -j9 LDIF=./my.domain.ldif

This will split and create the following default LDIFs:

* users.ldif
* computers.ldif
* groups.ldif
* domain_admin.ldif
* poss_svc_accnts.ldif
* pass_not_reqd.ldif
* pass_cant_change.ldif
* users_dont_expire.ldif
* trusted_4_delegation.ldif
* preauth_not_reqd.ldif
* password_expired.ldif
* trust2auth4delegation.ldif
Download Ldsview

16 views16:16

Ldsview - Offline search tool for LDAP directory dumps in LDIF format

Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translationConfig Config options can be passed as CLI flags, environment variables, or via a config file courtsey of viper. Reference the project's documentation for all of the different ways you can supply configuration. By default, ldsview will look for a file called .ldsview.{json,toml,yaml} in the user's home directory Environment variables with a prefix of LDSVIEW will be read in by the application Usage Detailed usage information is available via the --help flag or the help command for ldsview and all subcommands. Search Syntax ldsview's search mechanism is based on the entityfilter project. Detailed information about search filter syntax can be found in that project's README. Examples Build ldapsearch command to extract LDIF files from a directory: ldsview cmdbuilder The command will prompt you for any information needed Have the following ready: Directory host FQDN or IP Domain DN User to run as User's password Quickly find a specific entity in an LDIF file: ldsview -f myfile.ldif entity myuser Parse UAC flag from AD: ldsview uac 532480 Search LDIF file: ldsview -f myfile.ldif search "adminCount:=1,sAMAccountName:!=krbtgt" This command will return all entities with an adminCount of 1 that are not krbtgt -i can be used to limit which attributes are returned from matching entities --tdc will translate directory timestamps into a human readable format Tools Directory Additional tools and utilities for managing LDIFs: Makefile: Place the Makefile in the same directory as your exported LDIF and run make. >> make -j9 LDIF=./my.domain.ldif This will split and create the following default LDIFs: users.ldif computers.ldif groups.ldif domain_admin.ldif poss_svc_accnts.ldif pass_not_reqd.ldif pass_cant_change.ldif users_dont_expire.ldif trusted_4_delegation.ldif preauth_not_reqd.ldif password_expired.ldif trust2auth4delegation.ldif Download Ldsview
Read more...

13 views16:17

Hacking Articles Tips Tricks Videos Tutorials

11 views17:08

Hacking Articles Tips Tricks Videos Tutorials

11 views17:08

Hacking Articles Tips Tricks Videos Tutorials

11 views17:08

Hacking Articles Tips Tricks Videos Tutorials

9 views17:08

Hacking Articles Tips Tricks Videos Tutorials

9 views17:08

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
Apache Druid 0.20.0 Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Apache Druid 0.20.0 Remote Command Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 17:08

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Montiorr 1.7.6m Cross Site Scripting

https://4.bp.blogspot.com/-5kb4UTwsKkE/WWlvjussFoI/AAAAAAAAIQs/uqojaqb90NcMo4ROOoH-c5uvdKeDdbGswCLcBGAs/s1600/h94.png
Montiorr version 1.7.6m suffers from a cross site scripting vulnerability via a file upload.

MD5 | f585a3504139898906468d253c6f7c04

Download

# Exploit Title: Montiorr 1.7.6m - File Upload to XSS
# Date: 25/4/2021
# Exploit Author: Ahmad Shakla
# Software Link: https://github.com/Monitorr/Monitorr
# Tested on: Kali GNU/Linux 2020.2
# Detailed Bug Description : https://arabcyberclub.blogspot.com/2021/04/monitor-176m-file-upload-to-xss.html

An attacker can preform an XSS attack via image upload

Steps :

1)Create a payload with the following format :
>x .png

2) Install the database by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/_install.php

3)Register for a new account on the server by going to the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php?action=register

4)Login with your credentials on the following link :
https://monitorr.robyns-petshop.thm/assets/config/_installation/vendor/login.php

5)Go to the following link and upload the payload :
https://monitorr.robyns-petshop.thm/settings.php#services-configuration

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Montiorr 1.7.6m Cross Site Scripting

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

9 viewsedited 17:08

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
WordPress WPGraphQL 1.3.5 Denial Of Service

https://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png
WordPress WPGraphQL plugin version 1.3.5 suffers from a denial of service vulnerability.

MD5 | b056ef8ea18d2bea4ced3577a57735c3

Download
# Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service
# Author: Dolev Farhi
# Date: 2021-04-12
# Vendor Homepage: https://www.wpgraphql.com/
# Version: 1.3.5
# Tested on: Ubuntu
"""
This attack uses duplication of fields amplified by GraphQL batched queries, resulting in server OOM and MySQL connection errors.
"""

import sys
import requests
def usage():
print('* WordPress GraphQL 1.3.5 Denial of Service *')
print('python {}
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

WordPress WPGraphQL 1.3.5 Denial Of Service

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

12 viewsedited 17:08

Hacking Articles Tips Tricks Videos Tutorials

Exploit Collector
VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

VMware vRealize Operations Manager Server-Side Request Forgery / Code Execution

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

12 viewsedited 17:08

Hacking Articles Tips Tricks Videos Tutorials

Photo