#BurpHacksForBounties - Day 26/30

Красное сердцеUnderstand the different intruder attack types in Burp Suite

With visualizations at code level for better understanding.

Code level understanding in follow up thread 👇

#infosec #appsec #security #cybersecurity #bugbounty #bugbountytips

Linux LPE eBPF CVE-2021-3490

https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

#linux #privesc #lpe #cve

#BurpHacksForBounties - Day 28/30 - Super CSRF POC Generator Hack.


CSRF POC generator is only available in Burp Suite pro, but not anymore.

Use this -> https://github.com/merttasci/csrf-poc-generator by @mertistaken


#infosec #burp #appsec #security #bugbountytips #bugbountytip #cybersecurity

purpleteam - CLI component of OWASP PurpleTeam

https://github.com/purpleteam-labs/purpleteam

#PurpleTeam #OWASP

Active Directory ACEs abuse mindmap

#pentest #redteam #ad #mindmap

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

https://github.com/zcgonvh/EfsPotato

#windows #privesc #pentest

The path to code execution in the era of EDR, Next-Gen AVs, and AMSI

https://klezvirus.github.io/RedTeaming/AV_Evasion/CodeExeNewDotNet/

#av #bypass #EDR #AMSI

RedTeam n00b Tip:

If you're on a Linux box and need to port scan without nmap, try netcat.

nc -zv 10.11.12.13 1-65535 2>&1 | grep succeeded

Or loop through a list of targets:

for target in $(cat targets.txt); do nc -zv $target 1-65535 2>&1 | grep succeeded; done

#redteam #scan #pentest

IDOR Techniques

https://www.xmind.net/m/CSKSWZ/

#IDOR #bugbountytips

Kubernetes Hardening Guidance

The NSA and CISA have published today a Kubernetes security-hardening guide

https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/1/CTR_KUBERNETES%20HARDENING%20GUIDANCE.PDF

#kubernetes #hardening #security