⚔️Pentest-Windows
🔰Windows11 Penetration Suite Toolkit

📌A Windows penetration testing environment that works out of the box.

⚠️This project was created for educational purposes and should not be used in environments without legal authorization.

🔗Link: https://lnkd.in/gtX3GbR8

🔖#infosec #cybersecurity #hacking #pentesting #security #infosec #cybersecurity #hacking #pentesting #security #oscp #ceh #nmap #infosec #hackingtools #networksecurity

🛠️Guide to Active Directory Hacking

📝Active Directory (AD) is a directory service developed by Microsoft to manage and store network information, offering a central location for access control and network security.

📰 Read more: https://en.iguru.gr/odigos-gia-active-directory-hacking/

🔖#infosec #cybersecurity #hacking #pentesting #security

🔍Top 10 Shodan Dorks

🔖#infosec #cybersecurity #hacking #pentesting #security

📊 𝗣𝗼𝗹𝗹 𝗧𝗶𝗺𝗲: 𝗔𝗿𝗲 𝗬𝗼𝘂 𝗥𝗲𝗮𝗱𝘆 𝗳𝗼𝗿 𝗣𝗿𝗼 𝗟𝗮𝗯𝘀? 📊

𝗛𝗲𝘆 𝗵𝗮𝗰𝗸𝗲𝗿𝘀! 👋 𝗟𝗲𝘁’𝘀 𝘀𝗲𝗲 𝘄𝗵𝗲𝗿𝗲 𝗲𝘃𝗲𝗿𝘆𝗼𝗻𝗲 𝘀𝘁𝗮𝗻𝗱𝘀 𝗶𝗻 𝘁𝗵𝗲𝗶𝗿 𝗵𝗮𝗰𝗸𝗶𝗻𝗴 𝗷𝗼𝘂𝗿𝗻𝗲𝘆! 𝗛𝗮𝗰𝗸 𝗧𝗵𝗲 𝗕𝗼𝘅’𝘀 𝗣𝗿𝗼 𝗟𝗮𝗯𝘀 𝗼𝗳𝗳𝗲𝗿 𝗿𝗲𝗮𝗹-𝘄𝗼𝗿𝗹𝗱 𝗿𝗲𝗱 𝘁𝗲𝗮𝗺𝗶𝗻𝗴 𝗶𝗻 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁𝘀 – 𝗮 𝗯𝗶𝗴 𝘀𝘁𝗲𝗽 𝘂𝗽 𝗶𝗳 𝘆𝗼𝘂’𝗿𝗲 𝗹𝗼𝗼𝗸𝗶𝗻𝗴 𝘁𝗼 𝘁𝗮𝗸𝗲 𝘆𝗼𝘂𝗿 𝘀𝗸𝗶𝗹𝗹𝘀 𝘁𝗼 𝘁𝗵𝗲 𝗻𝗲𝘅𝘁 𝗹𝗲𝘃𝗲𝗹.

🔍 𝗩𝗼𝘁𝗲 𝗮𝗻𝗱 𝘀𝗲𝗲 𝘄𝗵𝗲𝗿𝗲 𝘆𝗼𝘂 𝘀𝘁𝗮𝗻𝗱 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝘁𝘆! #𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 #𝗛𝗮𝗰𝗸𝗶𝗻𝗴 #𝗣𝗿𝗼𝗟𝗮𝗯𝘀 #𝗛𝗮𝗰𝗸𝗧𝗵𝗲𝗕𝗼𝘅

🪲 Bug Bounty Pro Tip: #H2C Upgrade Bypass

Target: Applications using HTTP/2 Cleartext (h2c) upgrades.

The Core Idea: Many Web Application Firewalls (WAFs) and reverse proxies process HTTP/1.1 but fail to correctly inspect traffic after it's upgraded to HTTP/2.

How to Test:

1. Find a target that accepts an Upgrade: h2c header (common in Java, gRPC, and some reverse proxies like Nginx).

2. Send an initial HTTP/1.1 request with the upgrade header:

GET / HTTP/1.1
Host: example.com
Upgrade: h2c
Connection: Upgrade

3. If the server agrees (responds with HTTP/1.1 101 Switching Protocols), the connection is now HTTP/2.

4. The Bypass: Craft and send malformed or smuggled HTTP/2 frames (e.g., with the :method header set to GET or POST). The downstream WAF may not parse this, allowing you to access internal endpoints or bypass security controls.

Why it works: The security boundary often only exists at the HTTP/1.1 layer. Once upgraded, your HTTP/2 traffic might be forwarded directly to the backend without inspection.

#BugBounty #Hacking #WebSecurity #WAFBypass #HTTP2

🕸️𝗢𝗦𝗘𝗗 𝗡𝗼𝘁𝗲𝘀:
(𝗢𝗳𝗳𝗲𝗻𝘀𝗶𝘃𝗲 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝘅𝗽𝗹𝗼𝗶𝘁 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗲𝗿)

📋List:

•x86 Intel Assembly
•Portable Executable File Format
•WinDBG
•WinDbg Automation with Python
•IDA
•Stack Overflows
•SEH Overflows
•EggHunters
•Reverse Engineering For Bugs
•DEP Bypass
•ASLR Bypass
•Format Strings Vulnerabilities
•Practicing

Link 🔗:-
https://zeyadazima.com/notes/osednotes/

🔖#infosec #cybersecurity #hacking #pentesting #security

🔖Top 25 JavaScript path files used to store sensitive information in Web Application⬇️

01. /js/config.js
02. /js/credentials.js
03. /js/secrets.js
04. /js/keys.js
05. /js/password.js
06. /js/api_keys.js
07. /js/auth_tokens.js
08. /js/access_tokens.js
09. /js/sessions.js
10. /js/authorization.js
11. /js/encryption.js
12. /js/certificates.js
13. /js/ssl_keys.js
14. /js/passphrases.js
15. /js/policies.js
16. /js/permissions.js
17. /js/privileges.js
18. /js/hashes.js
19. /js/salts.js
20. /js/nonces.js
21. /js/signatures.js
22. /js/digests.js
23. /js/tokens.js
24. /js/cookies.js
25. /js/topsecr3tdonotlook.js

#InfoSec #CyberSecurity #Hacking #BugBounty #bugbountyTools #bugbountytips #Pentest #Fuzzing