KitPloit - PenTest Tools!
SharpSCCM - A C# Utility For Interacting With SCCM

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6ZAdfuaPhsN8-Kjti8hbHR8EUdvBLdswDeoEUlXN9lj2_ugapQxtx0ypnqqNIX5uPuXyOZbuY8eajHXuwp1E6bqHZmdml3QhPbVll-_Gu4APgiFi1utmsv8NtTfuF7Lr3mLsD1C9MmPh9HKIdgHFLu8_n27MfNDiQ-wbnXIpejMvm_K4HCdmpQkFeoQ/w640-h432/h121.png
SharpSCCM is a post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager (a.k.a. ConfigMgr, formerly SCCM) for lateral movement and credential gathering without requiring access to the SCCM administration console GUI.

SharpSCCM was initially created to execute user hunting and lateral movement functions ported from PowerSCCM (by @harmj0y, @jaredcatkinson, @enigma0x3, and @mattifestation) and now contains additional functionality to gather credentials and abuse newly discovered attack primitives for coercing NTLM authentication in SCCM sites where automatic site-wide client push installation is enabled.

Please visit the wiki for documentation detailing how to build and use SharpSCCM.
Author

Chris Thompson is the primary author of this project. Duane Michael (@subat0mik) and Evan McBroom (@mcbroom_evan) are active contributors as well. Please feel free to reach out on Twitter (@_Mayyhem) with questions, ideas for improvements, etc., and on GitHub with issues and pull requests.

Warning

This tool was written as a proof of concept in a lab environment and has not been thoroughly tested. There are lots of unfinished bits, terrible error handling, and functions I may never complete. Please be careful and use at your own risk.
Download SharpSCCM

___________________________
@hacking_Attack
@Hacking_Video

P1 Bug — Leaked Zendesk Token in GitHub

Version en EspañolContinue reading on Medium »
Read more...

How I made the Hall of Fame in Few minutes

Hello Awesome INFOSEC COMMUNITY, I hope you all doing well! This Write-up is about how I made the hall of fame in 10 minutes. Today I’m…Continue reading on Medium »
Read more...

P1 Bug — Leaked Zendesk Token in GitHub
https://medium.com/@red_darkin/p1-bug-leaked-zendesk-token-in-github-46e97b734e8d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Version en EspañolContinue reading on Medium » (https://medium.com/@red_darkin/p1-bug-leaked-zendesk-token-in-github-46e97b734e8d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Got the Hall of Fame in Few minutes
https://medium.com/@Onkarborude07/how-i-made-the-hall-of-fame-in-few-minutes-5831161d35be?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Awesome INFOSEC COMMUNITY, I hope you all doing well! This Write-up is about how I got the hall of fame in few minutes. Today I’m…Continue reading on Medium » (https://medium.com/@Onkarborude07/how-i-made-the-hall-of-fame-in-few-minutes-5831161d35be?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
P1 Bug — Leaked Zendesk Token in GitHub

https://cdn-images-1.medium.com/max/600/1*pIw77EvkJy71sXy_DkS_Qg.png
Version en Español

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ice — THM(easy)

https://cdn-images-1.medium.com/max/1009/1*P_iKu-JQqxKidXQzz7zUFA.png
Sequel to blue, is a windows machine with poorly configured settings.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Millones de dispositivos Android aún no tienen parches para fallas en la GPU de Mali

https://cdn-images-1.medium.com/max/1673/0*Zwe8WRMLOjGKT8u5
Un conjunto de cinco fallas de seguridad de gravedad media en el controlador de GPU Mali de Arm ha permanecido sin parches en los…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A GPU security flaw makes millions of Android devices vulnerable

https://cdn-images-1.medium.com/max/2600/1*I5OvAq5DbqZJS6Cb0TqXJg.png
Thanks to these vulnerabilities a malicious attacker has the ability to gain non-privileged user access to the device, execute native code

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone learning ethical hacking as a hobby?

I started a couple of months ago, but I feel I can be more productive in learning everything, currently going through a Udemy course which uses kali, any other suggestions ?

I read the post that suggests CTF, I feel like I’m no where close to that level

submitted by /u/kindessissupreme
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Docker Hub repositories hide over 1,650 malicious containers

https://external-preview.redd.it/YqYFxoe9_0XeXEwJBpjkSWmFnnMH8BWnkWYQrqZIe8U.jpg?width=640&crop=smart&auto=webp&s=b5f1c0da70c546f195f80509bcce90c9ddc76f64 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video