Forum Statistics
» Members: 101
» Latest member: UNKbin
» Forum threads: 147
» Forum posts: 211
Full Statistics
Online Users
There is currently 1 user online» 0 Member(s) | 1 Guest(s)
Latest Threads
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-21-2026, 12:30 PM
» Replies: 0
» Views: 21
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-19-2026, 12:30 PM
» Replies: 0
» Views: 29
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-18-2026, 12:30 PM
» Replies: 0
» Views: 39
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-17-2026, 12:30 PM
» Replies: 0
» Views: 39
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-12-2026, 12:30 PM
» Replies: 0
» Views: 28
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-10-2026, 12:30 PM
» Replies: 0
» Views: 25
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-09-2026, 12:30 PM
» Replies: 0
» Views: 23
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-08-2026, 12:30 PM
» Replies: 0
» Views: 28
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-06-2026, 12:30 PM
» Replies: 0
» Views: 40
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-04-2026, 12:30 PM
» Replies: 0
» Views: 49
JSMON CLI - Find ALL hidden API endpoints directly from JavaScript files
Web & Bug Bounty
No Replies
hashXploiter , 04-26-2025, 09:23 PM
JSMON CLI is a command-line interface for interacting with the jsmon.sh web application. It provides a convenient way to access various features of JSMON directly from your terminal.
Features
Upload URLs for scanning
Rescan previously scanned URLs
Upload and scan files
View scan results
Manage domains
Set up and manage cron jobs for automated scanning
Compare JavaScript responses
View user profile and usage information
Link: You are not allowed to view links. Register or Login to view.
Open Thread
Reply
Caido - A lightweight web security auditing toolkit
Web & Bug Bounty
No Replies
hashXploiter , 03-23-2025, 01:11 PM
Installing Caido on Windows
Download the Caido installer package for Windows from the dashboard or Github repository.
Open the downloaded package and follow the prompts to install Caido on your system.
Once the installation is complete, you can launch Caido from the Start menu or by searching for it in the Windows search bar.
Installing Caido on Linux
Download the Caido installer package for Linux from the dashboard or Github repository.
Open a terminal and navigate to the directory where the downloaded package is located.
Use the command sudo dpkg -i <package-name> to install Caido.
Once the installation is complete, you can launch Caido by running the caido command in the terminal.
Installing Caido on MacOS Download the Caido installer package for macOS from the dashboard or Github repository.
Open the downloaded package and follow the prompts to install Caido on your system.
Once the installation is complete, you can launch Caido from the Applications folder or by searching for it in Spotlight.
Link : You are not allowed to view links. Register or Login to view.
You are not allowed to view links. Register or Login to view.
Open Thread
Reply
HackTheBox: Vintage Discussion
Red Team Labs
No Replies
Paul.Barber , 03-11-2025, 10:38 PM
Machine: You are not allowed to view links. Register or Login to view.
IP: 10.10.11.45
Authentication Server Creds: P.Rosa / Rosaisbest12
As usual, I Tried common methods such as SMB/LDAP brute Forcing using NetExec (nxc), but got error because the server responded with "STATUS_NOT_SUPPORTED,". This indicates that NTLM was not supported. Then i tried to obtain the Kerberos ticket (.ccache) file using the following command and got the ticket.
root@kali /home/bob/Desktop/HTB/Vintage$ PYTHONWARNINGS='ignore' impacket-getTGT vintage.htb/P.Rosa:'Rosaisbest123' -dc-ip 10.10.11.45
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies
Saving ticket in P.Rosa.ccache
Open Thread
Reply
Brainstorm - AI directory fuzzing
Web & Bug Bounty
No Replies
hashXploiter , 03-03-2025, 11:23 AM
A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
Combines traditional web fuzzing techniques with AI-powered path generation to discover hidden endpoints, files, and directories in web applications.
Reference: You are not allowed to view links. Register or Login to view.
Github : You are not allowed to view links. Register or Login to view.
Open Thread
Reply