APT
@APT_Notes
12.5K subscribers
550 photos
27 videos
24 files
889 links
This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.iss.one/APT_Notes/6

Chat Link:
t.iss.one/APT_Notes_PublicChat
Download Telegram
About
Blog
Apps
Platform
Join
APT
12.5K subscribers
APT
CrimeFlare Bypass Hostname

This tool serves to search for the original IP behind websites that have been protected by CloudFlare, the information generated can be useful for further penetration. The information generated by this tool is as follows.

https://github.com/zidansec/CrimeFlare


#cloudflare #bypass #Tools
GitHub
zidansec/CrimeFlare
This tool can help you to see the real IP behind CloudFlare protected websites. - zidansec/CrimeFlare
318 views
APT
#bugbounty

https://www.xmind.net/m/eh9r7x/
Xmind
XML Attacks
A Mind Map about XML Attacks submitted by Harsh Bothra on Jun 17, 2021. Created with Xmind.
243 views
APT
2FA Bypass Techniques

#bugbountytip
#bugbounty
#infosec
270 viewsPaul Shmidt, 
APT
https://d3fend.mitre.org

#MITRE
233 viewsPaul Shmidt, 
APT
File Upload Mindmap

#Bugbounty #BugBountyTips
251 viewsPaul Shmidt, 
APT
#RedTeam
#BlueTeam
#OSINT
260 viewsPaul Shmidt, 
APT
Operator Handbook Red Team + OSINT + Blue Team Reference.pdf
3.1 MB
445 viewsPaul Shmidt, 
APT
PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service

https://github.com/hhlxf/PrintNightmare

#pentest
257 viewsPaul Shmidt, 
APT
CVE-2021-27850 Exploit


https://github.com/kahla-sec/CVE-2021-27850_POC

#exploit #pentest
GitHub
GitHub - kahla-sec/CVE-2021-27850_POC: A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated…
A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated remote code execution. - kahla-sec/CVE-2021-27850_POC
220 viewsPaul Shmidt, 
APT
🔥🔥🔥

Leveraging PrintNightmare to Abuse RBCD and DCSync the Domain

https://snovvcrash.github.io/2021/06/30/leveraging-printnightmare-to-abuse-rbcd.html

#pentest
snovvcrash@gh-pages:~$ _
Leveraging PrintNightmare to Abuse RBCD and DCSync the Domain
A relatively stealthy way to exploit PrintNightmare (CVE-2021-1675 / CVE-2021-34527) by configuring and abusing RBCD on a domain controller.
175 viewsPaul Shmidt, edited  
APT
Microsoft warns of critical PowerShell 7 code execution vulnerability

https://www.bleepingcomputer.com/news/security/microsoft-warns-of-critical-powershell-7-code-execution-vulnerability/

#vulnerability
BleepingComputer
Microsoft warns of critical PowerShell 7 code execution vulnerability
Microsoft warns of a critical .NET Core remote code execution vulnerability in PowerShell 7 caused by how text encoding is performed in in .NET 5 and .NET Core.
158 viewsPaul Shmidt, 
APT
Privilege escalation with polkit

How to get root on Linux with a seven-year-old bug


https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
#pentest
The GitHub Blog
Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug
polkit is a system service installed by default on many Linux distributions. It’s used by systemd, so any Linux distribution that uses systemd also uses polkit.
161 viewsPaul Shmidt, 
APT
AWS Pen-Testing Laboratory

https://github.com/juanjoSanz/aws-pentesting-lab

#pentest
172 viewsPaul Shmidt, 
APT
🚨🚨
I am starting the #BurpHacksForBounties series for 30 days, each day will share a Burp hack, which makes my working with Burp Suite easier.

Starting Monday. Stay tuned.

They will not be the ones you find on the internet 😉😉

#infosec #appsec #bugbounties #bugbountytips
173 viewsPaul Shmidt, 
APT
2FA bypass

https://www.xmind.net/m/8Hkymg/

#2fa #bypass #mindmap
Xmind
2FA Bypass Techniques
A Mind Map about 2FA Bypass Techniques submitted by Harsh Bothra on Jun 5, 2021. Created with Xmind.
194 viewsPaul Shmidt, 
APT
#BurpHacksForBounties - Day 1/30

Turbo intruder: Power of Python with Burp Suite Intruder.

I use it to tailor my pen-testing for a specific target and targetted #bugbounty

#infosec #appsec #bugbountytips #bugbountytip #security
How to - 🧵🙃👇
177 viewsPaul Shmidt, 
APT
1/n
Using: CE so that everyone can explore.
Intruder in CE is limited in multithreading, Turbo-Intruder can overcome that.
- Install through Extender
- Send req to the plugin.
161 viewsPaul Shmidt, edited  
APT
2/n
Once you send req to the plugin, a python editor will open. This will show a couple of existing python scripts to take reference from and to use.
159 viewsPaul Shmidt, edited  
APT
3/n
Details in comments.
Code: https://gist.github.com/r0hi7/47e3d47efaa1ee3df63a6e936dade787

Increase concurrency or can add pipeline.
Then click attack.
155 viewsPaul Shmidt, edited  
APT
n/n
You can do almost anything with Python inside Burp.
Eg.
- Handle custom login
- Tailored testing
- Filter out requests on "interesting" responses
- Scale your testing
- Add rate limiting, pipeline, etc

This approach can overcome intruder multithreading deficiencies in CE.
154 viewsPaul Shmidt,