APT

HackTheBox - PivotAPI https://youtu.be/FbTxPz_GA4o https://youtu.be/hzsGMj9C8Nw https://0xdf.gitlab.io/2021/11/06/htb-pivotapi.html #htb #writeup #ad #reverse

How to exploit CVE-2021-40539 on ManageEngine ADSelfService Plus 👤 by Antoine Cervoise, Wilfried Bécard ADSS offers multiple functionalities such as managing password policies for administrators or self password reset/account unlock for Active Directory users. In this article research team explore the details of several vulnerabilities that allow an unauthenticated attacker to execute arbitrary code on the server. 📝 Contents: • First steps • Authentication Bypass • Arbitrary file upload through the API • Arguments injection • Chaining everything together to get code execution • Conclusion https://www.synacktiv.com/publications/how-to-exploit-cve-2021-40539-on-manageengine-adselfservice-plus.html

ScoutSuite Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers, Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going through dozens of pages on the web consoles, Scout Suite presents a clear view of the attack surface automatically. # https://github.com/nccgroup/ScoutSuite # https://github.com/nccgroup/sadcloud #aws #azure #gcp #auditing #tool

LOLBAS Cmdl32.exe It's like a new certutil.exe but absolutely unheard of by any antivirus software! "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. #lolbin #lolbas

Django Debug Mode Bypass

https://target/login?next=/

https://target/admin
[301 to https://target/admin/login/?next=/admin/]

Change request to [POST]
[500 Django DEBUG mode and vary bad information]

#bugbounty #bugbountytips #bugbountytip

GitLab RCE — CVE-2021-22205 https://github.com/Al1ex/CVE-2021-22205 #gitlab #rce

From Zero to Domain Admin https://thedfirreport.com/2021/11/01/from-zero-to-domain-admin/ #blueteam #writeup

Cheat Sheet for Malware Analysis MalAPI.io Maps Windows APIs to common techniques used by malware. Filesec.io Stay up-to-date with the latest file extensions being used by attackers. #redteam #blueteam #DFIR #windows #winapi

https://twitter.com/SagieSec/status/1339514329780072448 #bloodhoud #ransomulator

Chrome Extensions for Bug Bounty Hunters 1) Wappalyzer 2) Shodan 3) HackTools 4) Penetration Testing Kit 5) Mitaka 6) HackerTarget 7) Snov.io 8) Hunter - Email Finder Extension 9) EditThisCookie 10) User-Agent Switcher 11) d3coder 12) Trufflehog 13) DotGit 14) Retire.js # https://securitytrails.com/blog/bug-bounty-hunting-browser-extensions #chrome #extensions #bugbounty

Best SSRF bypass http://127.1/ http://0000::1:80/ http://[::]:80/ http://2130706433/ http://whitelisted@127.0.0.1 http://0x7f000001/ http://017700000001 http://0177.00.00.01 #ssrf #bugbounty #bugbountytips

RID Hijacking: Maintaining access on Windows machines https://r4wsecurity.blogspot.com/2017/12/rid-hijacking-maintaining-access-on.html https://github.com/r4wd3r/RID-Hijacking #rid #hijack

🔥 Antivirus Bypass using EV Code Signing 🔥 Code signing is a method software publishers use to authenticate the programs they distribute to end-users. Basically, a code-signed program tells the end-user and an end-user’s computer that the program being installed/executed is from a legitimate software publisher. Digitally signed malware can bypass system protection mechanisms that install or launch only programs with valid signatures You can use the SignTool to sign file with a valid certificate Go Daddy. For example: signtool.exe sign /f t.me_secdevoops.pfx /p "*Aspider#" /t http://timestamp.digicert.com .\yourfile .exe This allows you to digitally sign PE binaries such as .exe, .cab, .dll, .ocx, .msi, .xpi and .xap files. Don't forget to share and subscribe #av #bypass #ev #signing #code

InvisibilityCloak Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C# visual studio project. https://github.com/xforcered/InvisibilityCloak #obfuscation #av #bypass

Confluence RCE — CVE-2021-26084 https://github.com/lleavesl/CVE-2021-26084 #confluecne #rce #cve

#job About Wallarm Join an exciting team that enjoys working and playing together. Wallarm is a well-funded technology startup in the San Francisco area. We continue to add new enterprise customers and grow our team. If you are bright, energetic, interested in cutting-edge tech, and want to make a difference in the company’s life, Wallarm is a place for you. About the role Are you someone that loves security and is a hacker at heart? Wallarm is looking for an eager and motivated Penetration Tester to join our Audit Security Team. This position will provide you the chance to work on identifying vulnerabilities across different software products and work collaboratively as part of the skilled and experienced pentest team.. If you have experience with penetration testing and a drive to learn check out below to learn more and apply! What you will do Develop and execute standard penetration tests to exploit vulnerabilities in the system. Help ensure software security, communicate security vulnerabilities of all severities to all affected stakeholders within the product organization. About you 3+ years of relevant experience (or an equivalent combination of education and experience sufficient to successfully perform the principal duties of the job) Experience with penetration testing Good critical thinking and problem solving skills Attention to detail Knowledge of security principles Good collaboration skills, applied successfully within team as well as with other areas Write in comments below, guys will write to you

Evading EDR with ScareCrow ScareCrow - Payload creation framework designed around EDR bypass. https://adamsvoboda.net/evading-edr-with-scarecrow/ https://www.grahamhelton.com/blog/scarecrow/ https://github.com/optiv/ScareCrow #edr_evasion #shellcode_loader #syscalls

Thread Stack Spoofing A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory. https://github.com/mgeeky/ThreadStackSpoofer #stackspoofing #av #evasion #inject #shellcode #bypass #edr