itsmenaga (💥,💥)

Passionate Infosec Guy

Old School Bugbounty

[S3cur3Th1sSh1t @ShitSecure]

You got access to vsphere and want to compromise the Windows hosts running on that ESX? 💡

1) Create a clone into a new template of the target VM
2) Download the VMDK file of the template from the storage
3) Parse it with Volumiser, extract SAM/SYSTEM/SECURITY
(1/3)

[itsmenaga (💥,💥) @nagarockshard]

@techspence Run netexec

[spencer @techspence]

Let’s make Active Directory security education available to all!

List your favorite Active Directory security resources.

Plz share for reach!

[mgeeky | Mariusz Banach @mariuszbit]

🔥 Super excited to soon present my lifetime project publicly🤩

- 4yrs of R&D + 1y in commercial sale
- Weaponization of 95+ file types
- 140kLOC
- 20+ tools
- 10+ shellcode exec techniques (ts)
- 8 MSI ts
- 20+ LNK ts
- 30+ script/macro ts

⚡ Battle tested, low-profile arsenal

[itsmenaga (💥,💥) @nagarockshard]

@elonmusk Once come to
Old city Hyderabad

[Comet @Cometml]

💥 ANNOUNCEMENT: Opik v1.0 is released! 💥

Opik is an open source LLM evaluation framework for:

🔥 Implementing LLM-based metrics
🪲 Logging/debugging LLM traces
💯 Scoring, annotating, and versioning LLM data

And so much more. Check out the repo below.

[itsmenaga (💥,💥) @nagarockshard]

@Eternaldharma_ Jai shree Ram

[Brut 🇮🇳 @wtf_yodhha]

⚡ 6000+ Private Nuclei Templates ⚡
✅Download Now - https://t.co/byfX28QFee

#bugbounty #bugbountytips #ethicalhacking #infosec #CyberSecurity

[Ali @111xNagashy]

1-Subdomainer(contain sudfinder,amass whois mode,amass passive mode,crt/.sh,GitHub,gobuster,knockpy,)
2-chaos(Archived Data)
3-frogy(wayback,bbot,subfinder,findomain,https://t.co/4G5kTvUESf)
4-assetfinder (certspotter,hackertarget,threatcrowd,wayback ,bufferover,facebook)

[Kanhaiya Sharma @krishnsec]

If you have access to #jenkins dashboard
use below Script Console cmd for poc
```
def passwdFile = new File("/etc/passwd")
println passwdFile.text
```
#P1 #bugbountytips #bugbounty

[Paul Seekamp @nullenc0de]

Made a new tool for a test I was doing. Decided to share with everyone, added it to my toolbox, for sure. It's like having X-ray vision into JS files.

Crazy, some of the endpoints it pulled out that were never seen before.

https://t.co/xaBJhudBgY
Example:

[Paul Seekamp @nullenc0de]

I decided to take it a step further and make this a @nuclei template.

nuclei -target ./ -t /tmp/appdata.yaml

Looks like scary things are in appdata.

https://t.co/r94FjVugg8

[Punit 🧬 @0xAnuj]

Wants to automate Burp Scans?

Introducing Blinks 🔨:

- Automate Burp Scans in Headless mode
- Customizable HTML & XML reports
- Webhook integration for real-time alerts

https://t.co/EdnqzIhCih

#bugbountytips
#burpsuite #Pentesting #ethicalhacking

[Orange Tsai 🍊 @orange_8361]

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd

Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996

[itsmenaga (💥,💥) @nagarockshard]

@dirtycoder0124 @Bugcrowd Congratulations Vipin, More to come

[Justin Gardner @Rhynorater]

Dang @defparam's new Lemma project looks nuts.

[myexploit2600 @myexploit2600]

My notes from labbing AD Certificate Service exploitation.

There’s lots of great resources on this but I wanted to share my walkthrough on how to create a vulnerable certificate, common errors and how to exploit using either Certipy or Certify.

https://t.co/kelGFnEMCr

[itsmenaga (💥,💥) @nagarockshard]

@alanatiallari_ @SrBachchan As per mythology most of the Rakshas portray themselves as clone of a warrior

[Logan Goins @_logangoins]

I wrote a fun write-up on ADCS exploitation, including explanations and custom built examples of practical exploitation for all 13 ESC vulnerabilities. It's available on my blog: https://t.co/zZReyPgeMi

Hope this helps anyone who's interested in #activedirectory security :)

[Luke Stephens (hakluke) @hakluke]

It’s always worth checking for non-production route names such as:

qa
devenv
devenv1
devenv2
devenv3
preprod
pre-prod
test
testing
staging
stage
dev
development
deploy
slave
master
review
prod
uat
prep
version2

https://t.co/4cILVwLLqy