You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡
1) Create a clone into a new template of the target VM
2) Download the VMDK file of the template from the storage
3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY
(1/3)
💥 ANNOUNCEMENT: Opik v1.0 is released! 💥
Opik is an open source LLM evaluation framework for:
🔥 Implementing LLM-based metrics
🪲 Logging/debugging LLM traces
💯 Scoring, annotating, and versioning LLM data
And so much more. Check out the repo below.
If you have access to #jenkins dashboard
use below Script Console cmd for poc
```
def passwdFile = new File("/etc/passwd")
println passwdFile.text
```
#P1#bugbountytips#bugbounty
Made a new tool for a test I was doing. Decided to share with everyone, added it to my toolbox, for sure. It's like having X-ray vision into JS files.
Crazy, some of the endpoints it pulled out that were never seen before.
https://t.co/xaBJhudBgY
Example:
I decided to take it a step further and make this a @nuclei template.
nuclei -target ./ -t /tmp/appdata.yaml
Looks like scary things are in appdata.
https://t.co/r94FjVugg8
Wants to automate Burp Scans?
Introducing Blinks 🔨:
- Automate Burp Scans in Headless mode
- Customizable HTML & XML reports
- Webhook integration for real-time alerts
https://t.co/EdnqzIhCih
#bugbountytips#burpsuite#Pentesting#ethicalhacking
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
My notes from labbing AD Certificate Service exploitation.
There’s lots of great resources on this but I wanted to share my walkthrough on how to create a vulnerable certificate, common errors and how to exploit using either Certipy or Certify.
https://t.co/kelGFnEMCr
I wrote a fun write-up on ADCS exploitation, including explanations and custom built examples of practical exploitation for all 13 ESC vulnerabilities. It's available on my blog: https://t.co/zZReyPgeMi
Hope this helps anyone who's interested in #activedirectory security :)