Pierre 🇪🇨 | Alpha Cybersecurity

Cyber Threat Intelligence Analyst • Threat Hunter • Java Programmer•

[Pierre 🇪🇨 | Alpha Cybersecurity @alpha_cybersec]

@LaarBox El ID del envío es UIO1389263033.

[Pierre 🇪🇨 | Alpha Cybersecurity @alpha_cybersec]

@LaarBox @LaarBox cómo puede ser posible que el paquete que pedí hace más de un mes no haya llegado aún. Encima que lo de aduana pague el 6 de diciembre. Y me siguen diciendo que está en la bodega temporal. Cada vez que me comunico por Whatsapp se demoran horas en pasarme con un agente.

[Pierre 🇪🇨 | Alpha Cybersecurity @alpha_cybersec]

📷 Big shoutout to @ECCUniversity for an incredible CTF challenge! 📷📷
Thank you, EC-Council University, for this fantastic opportunity! 📷 #CyberSecurity #CTF #EthicalHacking #CyberSkills #eccu #ECCouncilUniversityCTF #CyberChallenge #ECCouncilUniversity

[Smukx.E @5mukx]

Malware Analysis series by @cocomelonckz

Part 1 : https://t.co/esgRmT1IUy
Part 2 : https://t.co/gIqd3I9YCF
Part 3 : https://t.co/Sf1XqrZMQ1
Part 4 : https://t.co/sNqItO1TCs
Part 6 : https://t.co/flsy9q9MAM
Part 7 : https://t.co/KaPxMdlfLc
Part 8 : https://t.co/i31lilgTXW

#malware #analysis #pwn

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🧑‍💻CloakQuest3r - Uncover the true IP address of websites safeguarded by Cloudflare & Others

📄CloakQuest3r is a powerful Python tool meticulously crafted to uncover the true IP address of websites safeguarded by Cloudflare and other alternatives, a widely adopted web security and performance enhancement service. Its core mission is to accurately discern the actual IP address of web servers that are concealed behind Cloudflare's protective shield. Subdomain scanning is employed as a key technique in this pursuit. This tool is an invaluable resource for penetration testers, security professionals, and web administrators seeking to perform comprehensive security assessments and identify vulnerabilities that may be obscured by Cloudflare's security measures.

📒Checkout on Github
https://t.co/dm67tEWyAc

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Binni Shah @binitamshah]

Attacking UNIX Systems via CUPS (Part I) : https://t.co/wnPJuB085D

[Het Mehta @hetmehtaa]

CAPTCHA Bypass Methods

[HADESS @Hadess_security]

Attacking MongoDB
https://t.co/0sWiXH8FRF

Other Series👇
HTTP Security Header: https://t.co/vityvV9HjA

#mongodb #devops #devsecops #database #nosql

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🔰 Sql Injection - WAF Bypass using TOR

sqlmap -r request.txt --time-sec=10 --tor --tor-type=SOCKS5 --check-tor

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp #bookmyshow

[Coffin @lostsec_]

try this google dork to find senstive files on website:
site:*.dell.com (ext:doc OR ext:docx OR ext:pdf OR ext:rtf OR ext:ppt OR ext:pptx OR ext:csv OR ext:xls OR ext:xlsx OR ext:txt OR ext:xml OR ext:json OR ext:zip OR ext:rar OR ext:log OR ext:bak OR ext:conf OR ext:sql)

[Scott Sutherland @_nullbind]

This is very useful, worth the read for red teamers. https://t.co/OVPjLpbB7Y

[Intigriti @intigriti]

A list of the most used Google dorks to use on your targets! 🤠

What others can you add? 🤔

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚨 Find Spring Boot servers with Shodan 🚨
By @sw33tLie

Search for the following favicon hash in Shodan to find Spring Boot servers deployed in the target organization:

org:YOUR_TARGET http.favicon.hash:116323821

Then check for exposed actuators. If /env is available, you can probably achieve RCE. If /heapdump is accessible, you may find private keys and tokens.

In case you are unfamiliar with Spring Boot technology, do not worry. Here’s a quick 101.

Spring Boot is an open source Java-based framework used to build stand-alone spring applications based on the concepts of micro services.

Spring Boot Actuator is a mechanism of interacting with them using a web interface. They are typically mapped to URL such as:

https://t.co/KvoJCmpVSZ
https://t.co/Z5Fktgrmkp
etc.
Here’s an example of exposed /env actuator

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[Tony @TJ_Null]

The moment for those who have been waiting for it. I have released my pentest template for Obsidian:

https://t.co/sFxSOfB0zk

This template includes better structure, tags, and more techniques that I use on engagements, hackthebox, and in PEN-200.

[Joe Stocker @ITguySoCal]

during a recent forensic investigation, threat actors were proxying traffic through an Amazon API in order to enumerate user accounts in Microsoft Entra ID
To see if this activity is present in your environment, look for user agent beginning with the string "AmazonAPIGateway"

[Gi7w0rm @Gi7w0rm]

Bad news for the onion network.
German prosecutors have been able to deanon Tor users since at least 2022 by tapping Tor Nodes over long time and then doing a timing analysis. Journalists saw documents related to at least one court case where this method was successful 4 times.

[Traceix @usetraceix]

Today we are releasing our FREE: "Introduction to x86 Assembly" educational course!

This FREE course covers registers, the stack, writing code, and compiling that code!

With a detailed breakdown on registers, sections, and the stack this FREE course is perfect!

Links👇

[Intigriti @intigriti]

💡 BugBountyTip:

Did you know that if Jenkins was left incorrectly configured, it could allow you to signup for an account and sometimes even provide you access to the CI/CD pipeline, build logs and even Jenkins Groovy console?

Routes to check:
• /signup
• /jenkins/signup

[HADESS @Hadess_security]

Resetting Hardware for Red Teamer
https://t.co/ackBEXJ0c2

Imagine the intricate ballet of power cycles—five deliberate resets, each one a calculated step towards revealing a device’s most guarded secrets.
Cheatsheet Repo:
https://t.co/ceTVHxxdBX

#redteam #ics #iot #hardware

[John Hammond @_JohnHammond]

Using NTDS.dit and the SYSTEM data from Windows registry to find and crack domain user password hashes -- nothing fancy, impacket and hashcat, but with a slight twist of "multi-factor authentication" fatigue... and a subtle teaser for an upcoming CTF 👀 https://t.co/lTcuVTWYSh