hackspace

DeFi / Crypto - $181M jacked from Beanstalk, but the attacker only kept $76M. A malicious governance proposal was pushed through by a flash loan, and the attacker then voted to transfer all the assets to themself, but not before donating $250K to the Ukraine…

53 views10:14

hackspace

https://github.com/Ignitetechnologies/BurpSuite-For-Pentester

GitHub

GitHub - Ignitetechnologies/BurpSuite-For-Pentester: This cheatsheet is built for the Bug Bounty Hunters and penetration testers…

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite". - ...

52 views02:22

hackspace

https://reconshell.com/windows-red-team-cheat-sheet/

53 views03:04

hackspace

Google Dorks for WSO2 RCE exploit

inurl:"/carbon/admin/login.jsp"
inurl:"/authenticationendpoint/login.do"
inurl:"devportal/apis"
intitle:"API Publisher- Login"
intitle:"WSO2 Management Console"

49 views03:10

hackspace

Video recordings from OffensiveCon 2022 are now online:

https://youtube.com/c/OffensiveCon

47 viewsedited 03:12

hackspace

Threat_Spotlight_Conti_Ransomware_Group_Behind_the_Karakurt_Hacking.pdf

2.2 MB

Threat Spotlight Conti Ransomware Group Behind the Karakurt Hacking Team

52 views03:17

hackspace

GitHub - p0dalirius/DumpSMBShare: A script to dump files and folders remotely from a Windows SMB share.
https://github.com/p0dalirius/DumpSMBShare

GitHub

GitHub - p0dalirius/DumpSMBShare: A python script to dump files and folders remotely from a Windows SMB share.

A python script to dump files and folders remotely from a Windows SMB share. - p0dalirius/DumpSMBShare

51 views03:23

hackspace

Google Dorks for WSO2 RCE exploit inurl:"/carbon/admin/login.jsp" inurl:"/authenticationendpoint/login.do" inurl:"devportal/apis" intitle:"API Publisher- Login" intitle:"WSO2 Management Console"

https://github.com/hakivvi/CVE-2022-29464

GitHub

GitHub - hakivvi/CVE-2022-29464: WSO2 RCE (CVE-2022-29464) exploit and writeup.

WSO2 RCE (CVE-2022-29464) exploit and writeup. Contribute to hakivvi/CVE-2022-29464 development by creating an account on GitHub.

54 views06:20

hackspace

https://krebsonsecurity.com/2022/04/leaked-chats-show-lapsus-stole-t-mobile-source-code/

Krebs on Security

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times…

55 views12:46

hackspace

GitHub - Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
https://github.com/Dec0ne/KrbRelayUp

GitHub

GitHub - Dec0ne/KrbRelayUp: KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP…

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). - Dec0ne/KrbRelayUp

58 views21:13

hackspace

😅

51 views06:41

hackspace

https://blog.blockmagnates.com/how-to-master-google-hacking-dorking-bd9b6e3d28fa

Medium

How to master Google Hacking (Dorking)

Google hacking, sometimes, referred to as Google Dorking, is an information-gathering technique used by an attacker leveraging advanced…