1/n
Unzipping setting is disabled by default in Burp Proxy, enable it like this.

Link to stokfredrik blog on Burp Suite:

https://portswigger.net/blog/burp-suite-tips-from-power-user-and-hackfluencer-stok

A must-read for beginners.

red shadow - Lightspin AWS Vulnerability Scanner

https://reconshell.com/red-shadow-lightspin-aws-vulnerability-scanner/

#PrivilegeEscalation #exploit #Exploitation #AWS
#Vulnerability #Scanner

charlotte – fully undetected shellcode launcher

#shellcode #msfvenom #XOR #ShellcodeLauncher #CobaltStrike #Payload

https://reconshell.com/charlotte-fully-undetected-shellcode-launcher/

owerHub - post exploitation tool based on a web application

https://reconshell.com/powerhub-post-exploitation-tool-based-on-a-web-application/

#PowerHub #PowerSploit #PowerView #Kerberos #LPE #PowerShell

#BurpHacksForBounties - Day 5/30

Check intruder, repeater, sequencer, etc response in one shot instead of every time sending the response to browser.

A short but important trick

VMware Exploitation
A collection of links related to VMware escape exploit

https://github.com/xairy/vmware-exploitation

#vmware

🚨🚨 #BurpHacksForBounties - Day 6/30

Burp Suite and firefox 🔥🦊 match made in heaven.

Read the shortcomings of in-built browser and how to make firefox silent.
Down here 👇🍺

#infosec #appsec #burp #security #bugbounty #bugbountytips

0/n
First of all, why?
Why use Firefox if Burp Suite has Chromium browser built-in?

This is because :
- Burp inbuilt chromium does not persist settings on each different run.
- Plugin reinstallation each time
- Can't disable local CORS checks
- It's not flexible etc.

CVE-2021-26411 + CVE-2021-26900 chain


#Vulnerability
#RCE

Got a S3 bucket but don't know who is the owner?

Use the below command to check the bucket owner

aws s3api get-bucket-acl --bucket bucket-name

#bugbountytip #bugbountytips #infosec #AWS

#BurpHacksForBounties - Day 7/30

Macro: A recorded session in Burp Suite

Part 1: What, How & Why?
Part 2: How to use to automate testing?

#infosec #ppsec #bugbounty #bugbountytips #security #burp

1/n
Macros in Burp suite are set of recorded requests.

You create that recorded requests by passing request/(s) through proxy first and then selecting set of requests to add to a Macro.

To create a Macro: Project Options -> Sessions -> Macro