pickpocket

Obsessed with Infosec

[Bob Pony @TheBobPony]

Run apps made for .NET Framework 2.0 and 3.x in Windows 11 Version 26H1 (down to Windows 8.x) without installing .NET 3.5.

Copy this below into a text editor and save as a .reg file then open it, if successful .NET framework 2.0 and 3.x apps should open without issue:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework]
"OnlyUseLatestCLR"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework]
"OnlyUseLatestCLR"=dword:00000001

[👑 OFJAAAH → ofjaaah.com @ofjaaah]

Use NextJS? Recon ✨

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

Cred = https://t.co/4hiJXDNlmU

#infosec #cybersec #bugbountytips

[pickpocket @pickpocket001]

@halbess @xabdul https://t.co/0c81C5cxzU

[🕳 @sekurlsa_pw]

“Fully automated windows credentials dumper, from SAM (classic passwords) and WINHELLO (pins)1️⃣. Runs from a linux machine with a mounted win drive.”

1️⃣ Doesn’t work if system’s TPM protects the keys.

hashcat -m 1000 <sam>
hashcat -m 28100 <pin>

#hashes #hashcat

[pickpocket @pickpocket001]

@h4x0r_dz https://t.co/dbNCT8IXtu

[Matt Johansen @mattjay]

These demos show a container being able to read /etc/shadow via docker run or docker build commands.

They're pulling specifically crafted images with the exploit preloaded

[Matt Johansen @mattjay]

A new container escape vulnerability just dropped.

It gives an attacker the ability to hop from container to host OS via runc.

[pickpocket @pickpocket001]

@XHackerx007 @GodfatherOrwa @Bugcrowd https://t.co/GxxtfN6qXP

[Sprocket Security @SprocketSec]

Crawl every SMB shares on every target system for juicy information with MANSPIDER!

File types supported:
✅ PDF
✅ DOCX
✅ XLSX
✅ PPTX
✅ any text-based format
✅ and many more!

Install today 👇

https://t.co/U1f40onkxV

[haksec.io @haksecio]

How to enumerate hosts using WordPress with @pdiscoveryio's httpx 👇

[shubs @infosec_au]

Our team at @assetnote has published the blog post on the Progress WS_FTP RCE (CVE-2023-40044). It was fun to find an RCE in the middleware layer (IIS HTTP Module), and it was also quite surprising that the exploit did not require authentication: https://t.co/W7MdGNXvLH

[Intigriti @intigriti]

Here are top 3 most popular tools for RCE vulnerabilities! 😎️

A thread! 🧵👇

[☣ KitPloit - Hacker Tools @KitPloit]

Pinkerton - An JavaScript File Crawler And Secret Finder Developed In Python https://t.co/NDVDdCr9bL

[fortunato lodari @flodari]

AD: Local Admin to Domain Admin

It doesn't matter if you don't see active sessions, always look in the Kerberos cache.

query session VS klist sessions

Don't attempt an LSASS DUMP, move on!

GIUDA 2023090500
Now FUD again

https://t.co/BSltXqY5M8

#redteam #adprivesc #kerberos #lsass

[Today Cyber News @TodayCyberNews]

CVE-2023-43770
mail server Roundcube
*
usage:
python https://t.co/sCUe062ool -e [email protected] -p Attack3rPwd -t [email protected]
*
POC exploit
https://t.co/cBvicyjF02

👀 Check Out Old Tweets Of @TodayCyberNews

#cybersecurity #BugBounty #infosec #CVE

[HackGit @hack_git]

VcenterKit

Vcenter Comprehensive Penetration and Exploitation Toolkit

https://t.co/m8uIJjm21q

#infosec #pentesting #redteam

[X @TheMsterDoctor1]

Carnage - File Upload (Extension Bypass)
-
Using various techniques, this tool will try to bypass file upload restrictions. See video below for more information.
-
Repo: https://t.co/uSaoDn83h1
-
Video: https://t.co/PpytnlAy2o
-
-
#cybersecurity #bugbountytips #CTF #infosecurity

[Dark Web Intelligence @DailyDarkWeb]

TGSCAN

Streamline Your Telegram Searches: Find Channels, Groups, and Chat History Effortlessly.

https://t.co/rnSxacWU71

#cybersecurity #OSINT

[Rémi GASCOU (Podalirius) @podalirius_]

I wrote a new tool to extract all the Bitlocker recovery keys of computers enrolled in a Windows domain 🥳

This is really useful in postexploitation or system administration (to backup keys for example). Export in XLSX, SQLITE, JSON

https://t.co/Srd5FErWrZ

Here is an example: