Hello folks! I’m back again with my another writeup. This writeup is about Microsoft Hall of fame that I am able to find Information…Continue reading on Medium » (https://dewangpanchal98.medium.com/microsoft-bug-bounty-writeup-5ee4a7264dbf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Game files

Any tips for editing game files on iOS?

Any comments are appreciated.

submitted by /u/GUI0004
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blazing fast Word tables

https://cdn-images-1.medium.com/max/1680/1*us3ll_8OMoYH3qE8NsQJzA.jpeg
Word tables have a million handy uses, from organizing tabular data to building an attractive page layout.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Bypassing EDR real-time injection detection logic
https://www.reddit.com/r/redteamsec/comments/n7n2l9/bypassing_edr_realtime_injection_detection_logic/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.redbluepurple.io/offensive-research/bypassing-injection-detection) [comments] (https://www.reddit.com/r/redteamsec/comments/n7n2l9/bypassing_edr_realtime_injection_detection_logic/)

___________________________
@hacking_Attack
@Hacking_Video

Incident response playbooks
https://www.reddit.com/r/redteamsec/comments/n7n63a/incident_response_playbooks/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://docs.microsoft.com/en-us/security/compass/incident-response-playbooks) [comments] (https://www.reddit.com/r/redteamsec/comments/n7n63a/incident_response_playbooks/)

___________________________
@hacking_Attack
@Hacking_Video

Red-Detector - Scan Your EC2 Instance To Find Its Vulnerabilities Using Vuls.io
http://www.kitploit.com/2021/05/red-detector-scan-your-ec2-instance-to.html

___________________________
@hacking_Attack
@Hacking_Video

Scan your EC2 instance to find its vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) using Vuls (https://vuls.io/en/). Audit your EC2 instance to find security misconfigurations (https://www.kitploit.com/search/label/Misconfigurations) using Lynis (https://cisofy.com/solutions/#lynis). Scan your EC2 instance for signs of a rootkit (https://www.kitploit.com/search/label/Rootkit) using Chkrootkit (http://www.chkrootkit.org/). 

___________________________
@hacking_Attack
@Hacking_Video

Requirements
Configured AWS account with the EC2 actions mentioned below. The policy containing these requirements (https://www.kitploit.com/search/label/Requirements) can be found in red-detector-policy.json. Actions details: Required action premission Why it is required "AttachVolume" Enables attaching the volume with the taken snapshot to the EC2 instance that is being used for the vulnerabilities scan. "AuthorizeSecurityGroupIngress" Enables attaching security group to the EC2 instance. Contains IP premmisions to ssh port and a random port generated for the scan UI access. "DescribeInstances" Enables access (https://www.kitploit.com/search/label/Access) to the clients EC2 instances details. "CreateKeyPair" Enables the creation of a key pair that is being used as the key of the EC2 instance. "CreateTags" Enabled the creation of Tags on the Volume and Snapshot. "DescribeRegions" Enables access to the clients active regions to enable the user select the relevant one for the scan. "RunInstances" Enables the creation of an EC2 instance under the users client. "ReportInstanceStatus" Enables getting the current status of the created EC2 instance to make sure it is running. "DescribeSnapshots" Enables getting the current status of the taken snapshot to make sure it is available. "DescribeImages" Enables querying AMI's to get the latest Ubuntu AMI. "DescribeVolumeStatus" Enables getting the current status of the volume being created. "DescribeVolumes" Enables getting details about a volume. "CreateVolume" Enables the creation of a volume, in order to attach it the taken snapshot and attach it to the EC2 instance used for the vulnerabilities scan. "DescribeAvailabilityZones" Enables access to the clients active availability zones to select one for the created volume that is being attach to the EC2 instance. "DescribeVpcs" Enables getting the clients default vpc. Used for the EC2s security group generation. "CreateSecurityGroup" Enables the creation of a security group that is being attached to the EC2 instance. "CreateSnapshot" Enables taking a snapshot. Used to take a snapshot of the chosen EC2 instance. "DeleteSnapshot" Enables deleting the stale snapshot was created during the process Running EC2 instance - Make sure you know the region and instance id of the EC2 instance you would like to scan. Supported versions: Ubuntu: 14, 16, 18, 19, 20 Debian: 6, 8, 9 Redhat: 7, 8 Suse: 12 Amazon: 2 Oracle: 8
Installation
sudo git clone https://github.com/lightspin-tech/red-detector.git
pip3 install -r requirements.txt
Usage

Interactive
python3 main.py
Command arguments
usage: main.py [-h] [--region REGION] [--instance-id INSTANCE_ID] [--keypair KEYPAIR] [--log-level LOG_LEVEL]

optional arguments:
-h, --help show this help message and exit
--region REGION region name
--instance-id INSTANCE_ID EC2 instance id
--keypair KEYPAIR existing key pair name
--log-level LOG_LEVEL log level
Flow
Run main.py. Region selection: use default region (us-east-1) or select a region. Notice that if the selected region does not contain any EC2 instances you will be asked to choose another region. EC2 inatance-id selection: you will get a list of all EC2 instances ids under your selected region and you will be asked to choose the inatance you would like to scan. Make sure to choose a valide answer (the number left to the desired id). Track the process progress... It takes about 30 minutes. Get a link to your report!
Troubleshooting

verbouse logging
python3 main.py --log-level DEBUG
scanners databases update process
connect to the EC2 instance created ssh ubuntu@PUBLICIP -i KEYPAIR.pem watch the progress tail /var/log/user-data.log

Download Red-Detector (https://github.com/lightspin-tech/red-detector)

___________________________
@hacking_Attack
@Hacking_Video

Red-Detector - Scan Your EC2 Instance To Find Its Vulnerabilities Using Vuls.io

Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/). Audit your EC2 instance to find security misconfigurations using Lynis (https://cisofy.com/solutions/#lynis). Scan your EC2 instance for signs of a rootkit using Chkrootkit (http://www.chkrootkit.org/). Requirements Configured AWS account with the EC2 actions mentioned below. The policy containing these requirements can be found in red-detector-policy.json. Actions details: Required action premission Why it is required "AttachVolume" Enables attaching the volume with the taken snapshot to the EC2 instance that is being used for the vulnerabilities scan. "AuthorizeSecurityGroupIngress" Enables attaching security group to the EC2 instance. Contains IP premmisions to ssh port and a random port generated for the scan UI access. "DescribeInstances" Enables access to the clients EC2 instances details. "CreateKeyPair" Enables the creation of a key pair that is being used as the key of the EC2 instance. "CreateTags" Enabled the creation of Tags on the Volume and Snapshot. "DescribeRegions" Enables access to the clients active regions to enable the user select the relevant one for the scan. "RunInstances" Enables the creation of an EC2 instance under the users client. "ReportInstanceStatus" Enables getting the current status of the created EC2 instance to make sure it is running. "DescribeSnapshots" Enables getting the current status of the taken snapshot to make sure it is available. "DescribeImages" Enables querying AMI's to get the latest Ubuntu AMI. "DescribeVolumeStatus" Enables getting the current status of the volume being created. "DescribeVolumes" Enables getting details about a volume. "CreateVolume" Enables the creation of a volume, in order to attach it the taken snapshot and attach it to the EC2 instance used for the vulnerabilities scan. "DescribeAvailabilityZones" Enables access to the clients active availability zones to select one for the created volume that is being attach to the EC2 instance. "DescribeVpcs" Enables getting the clients default vpc. Used for the EC2s security group generation. "CreateSecurityGroup" Enables the creation of a security group that is being attached to the EC2 instance. "CreateSnapshot" Enables taking a snapshot. Used to take a snapshot of the chosen EC2 instance. "DeleteSnapshot" Enables deleting the stale snapshot was created during the process Running EC2 instance - Make sure you know the region and instance id of the EC2 instance you would like to scan. Supported versions: Ubuntu: 14, 16, 18, 19, 20 Debian: 6, 8, 9 Redhat: 7, 8 Suse: 12 Amazon: 2 Oracle: 8 Installation sudo git clone https://github.com/lightspin-tech/red-detector.gitpip3 install -r requirements.txt Usage Interactive python3 main.py Command arguments usage: main.py -h --region REGION --instance-id INSTANCE\_ID --keypair KEYPAIR --log-level LOG\_LEVELoptional arguments: -h, --help show this help message and exit --region REGION region name --instance-id INSTANCE_ID EC2 instance id --keypair KEYPAIR existing key pair name --log-level LOG_LEVEL log level Flow Run main.py. Region selection: use default region (us-east-1) or select a region. Notice that if the selected region does not contain any EC2 instances you will be asked to choose another region. EC2 inatance-id selection: you will get a list of all EC2 instances ids under your selected region and you will be asked to choose the inatance you would like to scan. Make sure to choose a valide answer (the number left to the desired id). Track the process progress... It takes about 30 minutes. Get a link to your report! Troubleshooting verbouse logging python3 main.py --log-level DEBUG scanners databases update process connect to the EC2 instance created ssh ubuntu@PUBLICIP -i KEYPAIR.pem watch the progress tail /var/log/user-data.log Download Red-Detector
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Don’t remember the password to my Windows Vista

I found my old Windows Vista laptop but I don’t remember the password to neither my private user account or the administrator inlog. Is there any way to access or bypass this without loosing anything saved on the computer and without a cd or usb?

submitted by /u/Calm_horror
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Windows Privilege Escalation - Autorun

Windows allows users to set specific programs to automatically start whenever the system boots, the list of programs that have this functionality enabled is stored in the Windows Registry. Although this feature can be very handy if startup programs are setup with improper permissions it may allow attackers to escalate privileges, as these programs are executed as SYSTEM.

https://steflan-security.com/windows-privilege-escalation-exploiting-autorun/

submitted by /u/cantchooseone96
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

[FREE GIFT] SQL Injections Unlocked Course — Not a Promotion
https://www.reddit.com/r/Pentesting/comments/n7p1nb/free_gift_sql_injections_unlocked_course_not_a/

¶ Disclaimer - No Catch LOL. It's Actually Free. I am so grateful to everyone in the community ♥️ for making my SQL Injection Course the no. 1 result in the whole udemy platform. Many people gave awesome reviews but this one made me do this giveaway today: https://ibb.co/cgH8bvj I feel that I was able to help some people in a positive way who wanted to learn SQL Injection, but were quite not understanding the topic. That day I decided to create a SQL Injection Course, I am not a presentation guy but tried my best. Last time I did this giveaway about over 7 months ago, Many signed up and I learnt myself a lot when people asked questions. I feel there are much more people today on the community compared to how much there were before. So I made my course free again for all and of-course - IT'S FOR 3 DAYS from this post becuase of UDEMY LIMITS. Link with coupon: https://www.udemy.com/course/sql-injections-unlocked-sqli-web-attacks/?couponCode=8MAY-SQLI 👍 UNLIMITED REDEMPTIONS Enjoy & Keep Going :) ~ Avinash Yadav submitted by /u/avinash986 (https://www.reddit.com/user/avinash986)
[link] (https://www.reddit.com/r/Pentesting/comments/n7p1nb/free_gift_sql_injections_unlocked_course_not_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/n7p1nb/free_gift_sql_injections_unlocked_course_not_a/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Invoke-Stealth : Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux. Requirements Powershell 4.0 or higher Bash* Python 3* *Required to […]

The post Invoke-Stealth : Simple And Powerful PowerShell Script Obfuscator appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Cook : A Customizable Wordlist And Password Generator

Cook is a customizable wordlist and password generator. Easily create permutations and combinations of words with predefined sets of extensions, words and patterns/function to create complex endpoints, wordlists and passwords. Easy UX, Checkout Usage. Installation Usage Basic Permutation Advance Permutation Customizing tool Predefined Sets Extension Sets Words Sets Character sets – Use it like crunch […]

The post Cook : A Customizable Wordlist And Password Generator appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video