Daniel

unintentional software vulnerability stumbler

[Daniel @0xdsm]

@bbeyondtwosouls @infoaespabr espero que dê tudo de errado 🙏

[Daniel @0xdsm]

@K4L1_FS @r0nycosta Sobre a detecção, o artigo fala que não da pra detectar de forma nativa (Event Log Viewer, por exemplo), e sim temos que usar soluções de monitoramento que suportem o tráfego LDAP. Ele fala sobre o Netwrix Threat Prevention já que o artigo é deles, mas devem haver outras opções

[Daniel @0xdsm]

@K4L1_FS @r0nycosta - Artigo sobre a ferramenta
https://t.co/1UoGqvnbJ1

- Documentação da Microsoft sobre o LDAP Ping
https://t.co/MZnKSSNcq1

[Daniel @0xdsm]

@K4L1_FS @r0nycosta Analisando o código do repositório, ele aparentemente usa o mecanismo de "LDAP Ping" do Active Directory. No fim, ele faz a seguinte pesquisa:

(&(NtVer=\06\00\00\00)(AAC=\10\00\00\00)(User=user))

E compara os hex da resposta, onde "17 00" se existe e "19 00" se não.

[inferigang @inferigang]

Our member @MatheuzSecurity ' article is also available now in the fourth edition of tmpout, follow the link to check it out.

https://t.co/MUb7oS2zXJ

[Daniel @0xdsm]

A little tip if you want to start two emulated devices with Objection and don't know how. Since Objection does not have a flag for specifying the device, you can forward the 27042/3 ports and start multiple Objection instances.

[Daniel @0xdsm]

@jeetbhdr @fr4vian That’s not my point. You can read in my Tweet there is a good “initial reason” to report to VDPs. Hunting in public programs can be a bit harder, so, if you want to start to get some private programs, go to VDPs and make sure to send good reports and wait for some invites.

[Daniel @0xdsm]

@0xCazurii @joo_elsaka Intigriti

[Daniel @0xdsm]

Giving bug bounty another chance, let's see how it goes. All reports are for public programs since I don't have access to private programs yet xD

2 mobile
2 web

[Daniel @0xdsm]

@llucasduartee O dono do post apareceu e esclareceu que era em programa de bug bounty. Se não tivesse seria crime ué kkkkkk

[Daniel @0xdsm]

@pqcorvo No início do post está bem exposto que era em um programa de bug bounty, acho que faltou leitura da sua parte.

Uma dúvida, o correto então é criar contas falsas em instituições financeiras então? Não entendi a ideia ainda.

[Daniel @0xdsm]

Bypassing protections of a banking app just to learn: https://t.co/rNECIiS2zb

[Daniel @0xdsm]

I recently wrote two articles for a community that I'm a member of. If you're interested, you can read them through the links below and join the community via our Discord link: https://t.co/gNlaF91dOz

Discovering a 0-day Authenticated RCE on my router: https://t.co/uF13KQ4g7H

[inferigang @inferigang]

We have now an open Discord community! Feel free to join us to learn and share your knowledge with other computing enthusiasts.

Join us on Discord:
https://t.co/4b9CALdzFm

Per aspera ad inferi!

[Daniel @0xdsm]

I tested it on a website that uses https://t.co/GwhLj8vjJW as a protection feature, I don't know if this applies to other libraries.

[Daniel @0xdsm]

If you're having problems using DevTools on websites that do not allow its use through libraries, such as disable-devtool, use DevTools itself and block the URL in the Network tab 🤓

[Daniel @0xdsm]

@raphamorims Esse tipo de feature, nesse caso, poder usar o mouse para clicar sobre o comando, selecionar o texto e poder apagar, enfim... como se fosse um "editor de texto".