all of the other commands using reasonable defaults. You’ll still want to check out the non-default options of each command, but this is a great place to start.AWSaccess-keysLists active access keys for all users. Useful for cross referencing a key you found with which in-scope account it belongs to.AWSbucketsLists the buckets in the account and gives you handy commands for inspecting them further.AWSecrList the most recently pushed image URI from all repositories. Use the loot file to pull selected images down with docker/nerdctl for inspection.AWSendpointsEnumerates endpoints from various services. Scan these endpoints from both an internal and external position to look for things that don’t require authentication, are misconfigured, etc.AWSenv-varsGrabs the environment variables from services that have them (App Runner, ECS, Lambda, Lightsail containers, Sagemaker are supported. If you find a sensitive secret, use cloudfox iam-simulatorAND pmapperto see who has access to them.AWSfilesystemsEnumerate the EFS and FSx filesystems that you might be able to mount without creds (if you have the right network access). For example, this is useful when you have ec:RunInstancebut not iam:PassRole.AWSiam-simulatorLike pmapper, but uses the IAM policy simulator. It uses AWS’s evaluation logic, but notably, it doesn’t consider transitive access via privesc, which is why you should also always also use pmapper.AWSinstancesEnumerates useful information for EC2 Instances in all regions like name, public/private IPs, and instance profiles. Generates loot files you can feed to nmap and other tools for service enumeration.AWSinventoryGain a rough understanding of size of the account and preferred regions.AWSoutbound-assumed-rolesList the roles that have been assumed by principals in this account. This is an excellent way to find outbound attack paths that lead into other accounts.AWSpermissionsEnumerates IAM permissions associated with all users and roles. Grep this output to figure out what permissions a particular principal has rather than logging into the AWS console and painstakingly expanding each policy attached to the principal you are investigating.AWSprincipalsEnumerates IAM users and Roles so you have the data at your fingertips.AWSrole-trustsEnumerates IAM role trust policies so you can look for overly permissive role trusts or find roles that trust a specific service.AWSroute53Enumerate all records from all route53 managed zones. Use this for application and service enumeration.AWSsecretsList secrets from SecretsManager and SSM. Look for interesting secrets in the list and then see who has access to them using use cloudfox iam-simulatorand/or pmapper.Azureinstances-mapEnumerates useful information for Compute instances in all available resource groups and subscriptionsAzurerbac-mapEnumerates Role Assignments for all tenants Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
FUD-UUID-Shellcode - Another shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness

https://blogger.googleusercontent.com/img/a/AVvXsEiOoS9-KAM1wjbweAaKJkoRz3eRYelIMOxkWtHgmYbaBjijf3Wb9j25ANPxkZ2dP9cki8QuvWkYkh2Fle5EPvBhi1ibG68a6ab7Vx6X73n9ARCY0MbmQCUbLnMnfFyoj33ouIGiPzaD9X73mdcFwhRYBZF8AucAJP1XmMZ1tB81JFVqib_OjYErHO5UHg=w640-h492 IntroductionAnother shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness :). How it worksShellcode generation*
Firstly, generate a payload in binary format( using either CobaltStrikeor msfvenom) for instance, in msfvenom, you can do it like so( the payload I'm using is for illustration purposes, you can use whatever payload you want ): msfvenom -p windows/messagebox -f raw -o shellcode.bin*
Then convert the shellcode( in binary/raw format ) into a UUIDstring format using the Python3 script, bin_to_uuid.py: ./bin_to_uuid.py -p shellcode.bin > uuid.txt* xorencrypt the UUIDstrings in the uuid.txtusing the Python3 script, xor_encryptor.py. ./xor_encryptor.py uuid.txt > xor_crypted_out.txt*
Copy the C-stylearray in the file, xor_crypted_out.txt, and paste it in the C++ file as an array of unsigned chari.e. unsigned char payload[]{your_output_from_xor_crypted_out.txt}ExecutionThis shellcode injection technique comprises the following subsequent steps:

* First things first, it allocates virtual memory for payload execution and residence via VirtualAlloc* It xordecrypts the payload using the xorkey value
* Uses UuidFromStringAto convert UUIDstrings into their binary representation and store them in the previously allocated memory. This is used to avoid the usage of suspicious APIs like WriteProcessMemoryor memcpy.
* Use EnumChildWindowsto execute the payload previously loaded into memory( in step 1 ) What makes it unique?* It doesn't use standard functions like memcpyor WriteProcessMemorywhich are known to raise alarms to AVs/EDRs, this program uses the Windows API function called UuidFromStringAwhich can be used to decode data as well as write it to memory( Isn't that great folks? And please don't say "NO!" :) ).
* It uses the function call obfuscation trick to call the Windows API functions
* Lastly, because it looks unique :) ( Isn't it? :) ) Important* You have to change the xorkey(row 86) to what you wish. This can be done in the ./xor_encryptor.pypython3 script by changing the KEYvariable.
* You have to change the default executable filenamevalue(row 90) to your filename.
* The command for compiling is provided in the C++ file( around the top ). NB: mingwwas used but you can use whichever compiler you prefer. :) CompilemakeProof-of-Concept( PoC )https://blogger.googleusercontent.com/img/a/AVvXsEhzfHoGJWNFUM80qupxwsRz7JX3RNC8GxQJc_Knr5bNfZLCDYBBlADwVRwb8znyR4yXCem5_DBsRLcYlGzoyELZcEDS42kWFKESj0x3l02rZU0NnMildnqNfln2BIGGm_OXiOFSJmbJA8eIoZCGLbmLQpWREjsj0o-1JzRNeKwdBOUEof3PrzeRwBKT2A=w640-h388 Static Analysishttps://blogger.googleusercontent.com/img/a/AVvXsEh6vvsTa7MIU-XN5oXpZicyW5_LV2lpOHSHvMMDcVGZAcQIGTBZXLaLKqZOKJGbH84VRFgLudtFyxIV14KMgoxlxd1KdllFI7Wi3ulJIEo9fCINaJuuCTFxxexyM76UOw9xeF0L9iiEhaTCbTJkQTMkznwU0GE9bA7qsXCNJbrRMeib_Qey6BrZTTpiIw=w640-h344 AV Scan resultsThe binary was scanned using antiscan.me on 01/08/2022. https://blogger.googleusercontent.com/img/a/AVvXsEhUzsKspqlku91Phvw7oYMtpTSnFZl02ZeWj88VaklJotBY4jgMBdW8-0PYrhuxoyRewJB4m6SErAbpY1kES0oZSeOKfgr2bCQBJs58kQ57UBwdA7RoyLZdZDfLcV3amJ2VN3eONr7Zes7fp2dLyKt5BQ35KRmlNmDGEhiYxd37NYTljLCxeBs8aU72qA=w640-h516 Creditshttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method/ Download FUD-UUID-Shellcode

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection in GraphQL

Hello friends I’m Ahmed Gad This Is First Write-Up I Hope you like ItContinue reading on Medium »
Read more...

The story of a [P5] that lead me to a [P3] find

Helloo,Continue reading on Medium »
Read more...

How Hackers manage to steal your cookies by XSS vulnerability? with example

Hello hackers today we will talk about interesting topic How hackers manage to steal cookies from users by XSS attack.Continue reading on Medium »
Read more...

lmao
https://www.reddit.com/r/redteamsec/comments/y2zk32/lmao/

submitted by /u/ApepeApepeApepe (https://www.reddit.com/user/ApepeApepeApepe)
[link] (https://twitter.com/lpha3ch0/status/1580552810239705088?s=20&t=IE8we4FXdxGXcB4OMvE4VA) [comments] (https://www.reddit.com/r/redteamsec/comments/y2zk32/lmao/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Rooting Kioptrix Level 1

https://cdn-images-1.medium.com/max/805/1*UFqiRVBaD5yo4w9aj0Pghg.png
Today, we are going root a really simple machine of VulnHub, This machine is old and has bunch of ways of rooting but it helped me learn…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Modifying Mango collateral was possible for the attacker — $100 million Exploit

https://cdn-images-1.medium.com/max/705/1*2DBx78vKKdkQ-GVqGWYcqg.jpeg
It’s comparable to a lending-borrowing race because if your collateral is overvalued, you may borrow against it, which is what they did.

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack Wifi using Wifi-Pineapple

https://cdn-images-1.medium.com/max/1400/1*wxx9feHFUltcZnuD9QkXaQ.jpeg
WIFI

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top crypto hacks in 2022 so far — mid October update

https://cdn-images-1.medium.com/max/1254/1*QeYm-2nC_JYwMRR01lvjxg.jpeg
With most of its valuation wiped out this year alone, the crypto space has simultaneously reached an apex when it comes to cyberattacks.

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

The story of a [P5] that lead me to a [P3] find
https://medium.com/@nireshpandian19/the-story-of-a-p5-that-lead-me-to-a-p3-find-3f8a5ea2c6e1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Helloo,Continue reading on Medium » (https://medium.com/@nireshpandian19/the-story-of-a-p5-that-lead-me-to-a-p3-find-3f8a5ea2c6e1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How Hackers manage to steal your cookies by XSS vulnerability? with example
https://medium.com/@ziadbahaa91/how-hackers-manage-to-steal-your-cookies-by-xss-vulnerability-with-example-8012c3d9cfc0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello hackers today we will talk about interesting topic How hackers manage to steal cookies from users by XSS attack.Continue reading on Medium » (https://medium.com/@ziadbahaa91/how-hackers-manage-to-steal-your-cookies-by-xss-vulnerability-with-example-8012c3d9cfc0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video