Search Forums

(Advanced Search)


Forum Statistics
» Members: 101
» Latest member: UNKbin
» Forum threads: 147
» Forum posts: 211

Full Statistics

Online Users
There is currently 1 user online
» 0 Member(s) | 1 Guest(s)

Latest Threads
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-21-2026, 12:30 PM
» Replies: 0
» Views: 21
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-19-2026, 12:30 PM
» Replies: 0
» Views: 29
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-18-2026, 12:30 PM
» Replies: 0
» Views: 39
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-17-2026, 12:30 PM
» Replies: 0
» Views: 39
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-12-2026, 12:30 PM
» Replies: 0
» Views: 28
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-10-2026, 12:30 PM
» Replies: 0
» Views: 25
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-09-2026, 12:30 PM
» Replies: 0
» Views: 23
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-08-2026, 12:30 PM
» Replies: 0
» Views: 28
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-06-2026, 12:30 PM
» Replies: 0
» Views: 40
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
06-04-2026, 12:30 PM
» Replies: 0
» Views: 49

 

JSMON CLI - Find ALL hidden API endpoints directly from JavaScript files


Web & Bug Bounty    No Replies

hashXploiter, 04-26-2025, 09:23 PM

JSMON CLI is a command-line interface for interacting with the jsmon.sh web application. It provides a convenient way to access various features of JSMON directly from your terminal.

Features

  • Upload URLs for scanning
  • Rescan previously scanned URLs
  • Upload and scan files
  • View scan results
  • Manage domains
  • Set up and manage cron jobs for automated scanning
  • Compare JavaScript responses
  • View user profile and usage information

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

403 Bypass Techniques


Web & Bug Bounty    No Replies

hashXploiter, 03-23-2025, 01:15 PM

extensive and updated reference for 403 (Forbidden) bypass techniques and tricks for bug bounty hunters and penetration testers.

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

Caido - A lightweight web security auditing toolkit


Web & Bug Bounty    No Replies

hashXploiter, 03-23-2025, 01:11 PM

[Image: landing_image.M1TLlug_.png]

Installing Caido on Windows

  • Download the Caido installer package for Windows from the dashboard or Github repository.
  • Open the downloaded package and follow the prompts to install Caido on your system.
  • Once the installation is complete, you can launch Caido from the Start menu or by searching for it in the Windows search bar.
Installing Caido on Linux

  • Download the Caido installer package for Linux from the dashboard or Github repository.
  • Open a terminal and navigate to the directory where the downloaded package is located.
  • Use the command sudo dpkg -i <package-name> to install Caido.
  • Once the installation is complete, you can launch Caido by running the caido command in the terminal.
Installing Caido on MacOS
  • Download the Caido installer package for macOS from the dashboard or Github repository.
  • Open the downloaded package and follow the prompts to install Caido on your system.
  • Once the installation is complete, you can launch Caido from the Applications folder or by searching for it in Spotlight.

Link : You are not allowed to view links. Register or Login to view.
You are not allowed to view links. Register or Login to view.


  Open Thread

HackTheBox: Vintage Discussion


Red Team Labs    No Replies

Paul.Barber, 03-11-2025, 10:38 PM

Machine: You are not allowed to view links. Register or Login to view.

IP: 10.10.11.45
Authentication Server Creds: P.Rosa / Rosaisbest12


As usual, I Tried common methods such as SMB/LDAP brute Forcing using NetExec (nxc), but got error because the server responded with "STATUS_NOT_SUPPORTED,". This indicates that NTLM was not supported. Then i tried to obtain the Kerberos ticket (.ccache) file using the following command and got the ticket.

root@kali /home/bob/Desktop/HTB/Vintage$ PYTHONWARNINGS='ignore' impacket-getTGT vintage.htb/P.Rosa:'Rosaisbest123' -dc-ip 10.10.11.45               
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies
Saving ticket in P.Rosa.ccache


  Open Thread

Cypher Hack the Box


Red Team Labs    3 Replies

hashXploiter, 03-06-2025, 02:38 PM

Cypher Hack the Box -  (Medium) - Linux

-- > user.txt


ssh [email protected]

Pass: Hidden Content


--> root.txt

Hidden Content


  Open Thread

Bypassing AMSI and Evading AV Detection with SpecterInsight


Red Teaming & Exploitation    No Replies

hashXploiter, 03-05-2025, 05:27 PM

New AMSI Bypss Technique Modifying CLR.DLL in Memory 

[Image: bypassing-amsi-and-av-parameters.png?w=1...=100&ssl=1]



[Image: bypassing-amsi-and-av-detection-hirustot...=100&ssl=1]

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

Linux Essential For Cyber security


Linux Security    No Replies

hashXploiter, 03-05-2025, 05:19 PM

[Image: GlNcUnoXMAMGqQt?format=jpg&name=medium]

Link : You are not allowed to view links. Register or Login to view.


  Open Thread

HTB - DarkCorp | Insane


Red Team Labs    3 Replies

hashXploiter, 03-04-2025, 05:48 PM

[Image: DarkCorp.png?resize=1024%2C832&ssl=1]
DIFFICULTY: Insane

Link :
Hidden Content


  Open Thread

HackTheBox | Titanic


Red Team Labs    2 Replies

hashXploiter, 03-04-2025, 05:43 PM

[Image: Titanic.png?resize=1024%2C832&ssl=1]
Level - Easy
Link : Hidden Content


  Open Thread

Brainstorm - AI directory fuzzing


Web & Bug Bounty    No Replies

hashXploiter, 03-03-2025, 11:23 AM

A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery

Combines traditional web fuzzing techniques with AI-powered path generation to discover hidden endpoints, files, and directories in web applications.

Reference: You are not allowed to view links. Register or Login to view.

Github : You are not allowed to view links. Register or Login to view.

[Image: screenshot.png?raw=true]


  Open Thread