#BurpHacksForBounties - Day 25/30

Optimizing Burp Suite for better performance, these 4 simple steps and you would notice a big difference in performance.

#infosec #appsec #burp #security #bugbountytips #bugbounty

RemotePotato — Updated version (Cross session activation)

https://github.com/antonioCoco/RemotePotato0

#windows #privesc #lpe #pentest

DevSecCon24 - 2021

Playlist: https://www.youtube.com/playlist?list=PLKWDDWZ_ETtDbTF3Xibc2VagzgHbkoKpA
Source: https://www.devseccon.com/devseccon24-2021/

#devsecops

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
# https://github.com/aquasecurity/kube-bench

#k8s #YAML #KubeBench #KubernetesSecurity #cisSecurity #Kubernetes

#BurpHacksForBounties - Day 26/30

Красное сердцеUnderstand the different intruder attack types in Burp Suite

With visualizations at code level for better understanding.

Code level understanding in follow up thread 👇

#infosec #appsec #security #cybersecurity #bugbounty #bugbountytips

Linux LPE eBPF CVE-2021-3490

https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

#linux #privesc #lpe #cve

#BurpHacksForBounties - Day 28/30 - Super CSRF POC Generator Hack.


CSRF POC generator is only available in Burp Suite pro, but not anymore.

Use this -> https://github.com/merttasci/csrf-poc-generator by @mertistaken


#infosec #burp #appsec #security #bugbountytips #bugbountytip #cybersecurity

purpleteam - CLI component of OWASP PurpleTeam

https://github.com/purpleteam-labs/purpleteam

#PurpleTeam #OWASP

Active Directory ACEs abuse mindmap

#pentest #redteam #ad #mindmap

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

https://github.com/zcgonvh/EfsPotato

#windows #privesc #pentest

The path to code execution in the era of EDR, Next-Gen AVs, and AMSI

https://klezvirus.github.io/RedTeaming/AV_Evasion/CodeExeNewDotNet/

#av #bypass #EDR #AMSI