Hacking with cURL: Unleash the CLI beast

Curl, or client URL is a command line tool that enables data exchange between a device and a server through a terminal. We can use this…Continue reading on Medium »
Read more...

Kali Linux Tutorials
AzureHound : Azure Data Exporter For BloodHound

AzureHound is a bloodHound data collector for Microsoft Azure.

Get AzureHound

Release Binaries

Download the appropriate binary for your platform from one of our Releases.

Rolling Release

The rolling release contains pre-built binaries that are automatically kept up-to-date with the mainbranch and can be downloaded from here.

Warning: The rolling release may be unstable.

Compiling

Prerequisites

* Go 1.18 or later

To build this project from source run the following:
go build -ldflags="-s -w -X github.com/bloodhoundad/azurehound/constants.Version=`git describe tags --exact-match 2> /dev/null || git rev-parse HEAD`"
Usage

Quickstart

Print all Azure Tenant data to stdout
❯ azurehound list -u "$USERNAME" -p "$PASSWORD" -t "$TENANT"
Print all Azure Tenant data to file
❯ azurehound list -u "$USERNAME" -p "$PASSWORD" -t "$TENANT" -o "mytenant.json"
Configure and start data collection service for BloodHound Enterprise
❯ azurehound configure
(follow prompts)

❯ azurehound start
CLI
❯ azurehound --help
AzureHound vx.x.x
Created by the BloodHound Enterprise team - https://bloodhoundenterprise.io

The official tool for collecting Azure data for BloodHound and BloodHound Enterprise

Usage:
azurehound [command]

Available Commands:
completion Generate the autocompletion script for the specified shell
configure Configure AzureHound
help Help about any command
list Lists Azure Objects
start Start Azure data collection service for BloodHound Enterprise

Flags:
-c, --config string AzureHound configuration file (default: /Users/dlees/.config/azurehound/config.json)
-h, --help help for azurehound
--json Output logs as json
-j, --jwt string Use an acquired JWT to authenticate into Azure
--log-file string Output logs to this file
--proxy string Sets the proxy URL for the AzureHound service
-r, --refresh-token string Use an acquired refresh token to authenticate into Azure
-v, --verbosity int AzureHound verbosity level (defaults to 0) [Min: -1, Max: 2]
--version version for azurehound

Use "azurehound [command] --help" for more information about a command.

Click Here To Download

Hacking with cURL: Unleash the CLI beast
https://manasharsh.medium.com/hacking-with-curl-unleash-the-cli-beast-fdf13ec342cc?source=rss------bug_bounty-5

Curl, or client URL is a command line tool that enables data exchange between a device and a server through a terminal. We can use this…Continue reading on Medium » (https://manasharsh.medium.com/hacking-with-curl-unleash-the-cli-beast-fdf13ec342cc?source=rss------bug_bounty-5)

hacking: security in practice
Python verification link redirects to login page how do I replicate this with requests

I am trying to make an account creation bot. However the verification link redirects to the login page. I don’t know how to replicate this with requests.

submitted by /u/skekm
[link] [comments]

hacking: security in practice
ExploitDB no updates

Hello, I was wondering if anyone had any information on the state of ExploitDB. It hasn't been updated in 2 months and I haven't found anything from Offensive Security about that.

Thank you !

submitted by /u/jaxoblefort
[link] [comments]

hacking: security in practice
How do I get the registers of a process in C++?

Hello, I'm making a program in C++ and I have to get the ESI register of a process in Windows and I have no idea of what to do.

submitted by /u/joaco2021
[link] [comments]

hacking: security in practice
My boss gave me a task to brainstorm: how to make a given PC temporary unusable or laggy, until a technitian figures out how to fix it?

So basically there is about a 60 seconds window to infiltrate a target PC.
My take is to unplug DisplayPort from gpu and plug it into motherboard.

Yes im that evil.

Is there any better solutions? It must be something harmless, more like a prank. I guess they're going to test our local IT guy if he can handle such stuff. Poor guy.

submitted by /u/tittypunchahoy
[link] [comments]

hacking: security in practice
Building Our Own Hacking Tool in Python (Getting a Shell)

submitted by /u/glum-platimium
[link] [comments]

hacking: security in practice
Velociraptor (Digital Forensics) A Blue-Teamer Tool, Still Cool Nonetheless!

Hey All,

Check out Velociraptor: https://docs.velociraptor.app/docs/overview/

Its an open source digital forensics tool for endpoint monitoring. I find its best paired with Sysmon to fetch whatever processes, connections, etc. Its a very lightweight tool and has an active community.

It comes with its own language: VQL (similar to SQL). VQL is a framework for creating highly customized artifacts which allow you to collect, query, and monitor almost any aspect of an endpoint, groups of endpoints, or an entire network. It can also be used to create continuous monitoring rules on the endpoint, as well as automate tasks on the server.

Super cool tool thats fun to play with.

submitted by /u/secanalyst1234
[link] [comments]