https://github.com/roughiz/Webmin-1.910-Exploit-Script/blob/master/webmin_exploit.py

Exploit for webmin version 1.910

🔥 Forensics artifacts collection | inquisitor


GUI va CLI ko`rinishida ishlovchi raqamli ekspertiza uchun ishlatiladigan ochiq kodli windows os uchun dastur.

TOP servislar , resurslar haqida , loglar , event va tizimdagi muhim ma`lumotlarni aniqlash uchun ishlatiladi.

Telegram kanalimiz : @best_master_uz_official

https://ab57.ru/cmdlist/icacls.html


https://ss64.com/nt/icacls.html

icacls for manage for Windows file system

this command need for Privilage Escalation

Reference: https://github.com/minio/minio/security/advisories/ghsa-6xvq-wj2x-3h3q

Vuln: Information Disclosure

Severity: Critical

CVE-2023-28432

#POC #Pentest #Minio

POC —> https://www.exploit-db.com/exploits/51734

Minio 2022-07-29T19-40-48Z - Path traversal

CVE-2022-35919

#POC #Pentest #Minio

CVE-2025-30208 affects #Vite (prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, 4.5.10). When exposed to the network (--host flag), it allows arbitrary file read: /etc/passwdor C:\Windows\win.ini by appending ?raw?? or ?import&raw??.

PoC: https://1.2.3.4/etc/passwd?raw??

#BugBounty

↳ JavaScript Static Analysis - Locate Dangerous Functions

• An open-source analysis tool to detect vulnerabilities in code is Semgrep. You can configure your own detection rules or use rules created by the community.

• Interesting functions and properties in JavaScript are for example:

Element.innerHTML eval() window.postMessage() window.addEventListener() window.localStorage window.sessionStorage document.cookie

#bugbounty #pentest #bugbountyTips

Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It is used to manage and organize computers, users, and resources within a network. AD provides authentication and authorization services, allowing administrators to control access to network resources efficiently.

Key Components of Active Directory:

1. Domain Controller (DC) – A server that stores AD data and handles authentication.

2. Organizational Units (OUs) – Logical containers for organizing users, groups, and computers.

3. Groups & Users – Define permissions and access control.

4. Group Policy (GPO) – Used to enforce security settings and configurations.

5. Forest & Domains – A hierarchical structure that organizes multiple AD domains.

Образование и опыт:
Опыт работы 2–5 лет в сфере сетевой безопасности.
Глубокие знания сетевых протоколов и технологий (BGP, OSPF, VLAN, IPsec).
Навыки и знания:
Администрирование и настройка SIEM-систем (Splunk, QRadar).
Опыт работы с WAF, DLP, PAM, IAM.
Работа с NGFW (Next-Gen Firewall) и межсетевыми экранами (FortiGate, Palo Alto, Cisco ASA).
Анализ уязвимостей и тестирование на проникновение (pentest).
Опыт работы с Linux/Windows на продвинутом уровне.
Желательные сертификаты:
Cisco CCNP Security
Fortinet NSE 4-7

@sherzodubaydullaev

Yoki Junior Network Engineer bo'lsa ham bo'ladi