Automated Docker TCP Socket Host Takeover : https://t.co/k45lyTaMi3
GitHub
AbsoZed/DockerPwn.py
Python automation of Docker.sock abuse. Contribute to AbsoZed/DockerPwn.py development by creating an account on GitHub.
Presentation of HTTP Desync Attacks will be at Black Hat Europe next week. New content includes a novel desync technique, major automation improvements, a defensive case-study, and updated bounty figures https://t.co/QCKbOqg1aZ
Blackhat
Black Hat Europe 2019
Check if a server is running any vulnerable services
wget https://raw(.)githubusercontent(.)com/vulnersCom/nmap-vulners/master/vulners.nse -O /usr/share/nmap/scripts/vulners.nse && nmap --script-updatedb
All done, now you can do a scan with
nmap -sV --script vulners <target>
wget https://raw(.)githubusercontent(.)com/vulnersCom/nmap-vulners/master/vulners.nse -O /usr/share/nmap/scripts/vulners.nse && nmap --script-updatedb
All done, now you can do a scan with
nmap -sV --script vulners <target>
https://medium.com/@rudrasarkar/how-i-hacked-92k-users-information-using-open-s3-bucket-6471b30c1cf5
Medium
How I hacked 92k users Information using open s3 bucket
First of all this is my biggest hack I did in my life.The website I found few day ago while I am looking for bus ticket.After booking Bus…