SecList for CyberStudents

Black Friday at Tryhackme. Get a 1-year premium subscription from Tryhackme at a 40% discount and you'll definitely get great results. An investment in education is an investment in the future!

#Tryhackme #BlackFriday

93 views09:04

https://posts.slayerlabs.com/double-hop/

#DoubleHop

88 viewsedited 11:25

SecList for CyberStudents

Forwarded from Suhayl.log

Blue teamni o'rganmoqchi bo'lganlar uchun TryHackMe SOC1 dan boshlanglar
albatta keyin SOC2
undan tashqari BTL1 sertifikatiga topshirishni mahlahat beraman (SOC1 da o'rgangan bilimlar va tajriba bilan topshirsa bo'ladi)
Keyingi qadam BTL2 faqat bu 2500$ maslahatim keyin hackthebox da Blueteam pathni qilib chiqish kerak

73 views12:54

SecList for CyberStudents

https://tryhackme.com/path/outline/webappredteaming

New learnig path Web App Red Teaming by Tryhackme

#Web #Pentest #Tryhackme

❤1

72 views04:39

SecList for CyberStudents

https://netwrix.com/en/cybersecurity-glossary/cyber-security-attacks/dcshadow-attack/

Netwrix

What Is a DCShadow Attack? Techniques, Risks & Defense | Netwrix

Learn how a DCShadow attack works, with focus on impact, detection, prevention and future trends.

67 views06:31

SecList for CyberStudents

https://www.crowdstrike.com/en-us/blog/cve-2020-1472-zerologon-security-advisory/

CrowdStrike.com

Zerologon (CVE-2020-1472): Overview, Exploit Steps and Prevention

Learn everything you need to know about the Microsoft exploit Zerologon, what we believe is the most critical Active Directory vulnerability discovered this year.

68 views06:32

SecList for CyberStudents

https://techcommunity.microsoft.com/blog/microsoft-security-blog/sam-name-impersonation/3042699

TECHCOMMUNITY.MICROSOFT.COM

SAM Name impersonation | Microsoft Community Hub

During the November security update cycle, Microsoft released a patch for two new vulnerabilities, CVE-2021-42287 and CVE-2021-42278. Both vulnerabilities...

75 views06:42

SecList for CyberStudents

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42278

Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42278

https://github.com/Ridter/noPac

https://www.secureworks.com/blog/nopac-a-tale-of-two-vulnerabilities-that-could-end-in-ransomware

GitHub

GitHub - Ridter/noPac: Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user - GitHub - Ridter/noPac: Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domai...

75 viewsedited 06:43

SecList for CyberStudents

Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42287

https://github.com/cube0x0/noPac

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42287

GitHub

GitHub - cube0x0/noPac: CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. - cube0x0/noPac

78 views06:45

SecList for CyberStudents

https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799/blob/main/exploit.py

GitHub

Exploit-CVE-2025-24799/exploit.py at main · MatheuZSecurity/Exploit-CVE-2025-24799

CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection - MatheuZSecurity/Exploit-CVE-2025-24799

80 views07:22

SecList for CyberStudents

https://github.com/dirkjanm/PKINITtools

https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/

#AD #RedTeam

85 viewsedited 08:51

SecList for CyberStudents

https://github.com/zer1t0/certi

GitHub

GitHub - zer1t0/certi: ADCS abuser

ADCS abuser. Contribute to zer1t0/certi development by creating an account on GitHub.

86 views08:57

SecList for CyberStudents

https://netwrix.com/en/resources/blog/what-is-the-kerberos-pac/

Netwrix

How the Kerberos PAC Works | Netwrix

Understand the role of the Kerberos PAC in identity authentication and learn how it supports secure access and integrity across Active Directory environments.

85 views10:51

SecList for CyberStudents

Forwarded from Social Engineering

👨‍💻 Bitrix Ultimate Pentest Guide.

• Автор этого материала собрал очень объемный гайд по пентесту CMS Bitrix, который включает в себя большое кол-во техник и различных методов. Вот содержание:

- Основы битриксологии:

➡

Встроенный WAF;

➡

Многосайтовость.
- Определение версии;
- Множественные эндпоинты для авторизации:

➡