Search Forums

(Advanced Search)


Forum Statistics
» Members: 104
» Latest member: profecia
» Forum threads: 148
» Forum posts: 220

Full Statistics

Online Users
There are currently 11 online users.
» 0 Member(s) | 11 Guest(s)

Latest Threads
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
08-06-2026, 12:30 PM
» Replies: 0
» Views: 16
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
08-05-2026, 12:30 PM
» Replies: 0
» Views: 31
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
08-04-2026, 12:30 PM
» Replies: 0
» Views: 31
Xalgorix — Open-source AI...
Forum: AI in Pentesting & Defense
Last Post: hashXploiter
08-02-2026, 07:00 PM
» Replies: 0
» Views: 36
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
08-02-2026, 12:30 PM
» Replies: 0
» Views: 35
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
08-01-2026, 12:30 PM
» Replies: 0
» Views: 34
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
07-31-2026, 12:30 PM
» Replies: 0
» Views: 37
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
07-30-2026, 12:30 PM
» Replies: 0
» Views: 44
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
07-29-2026, 12:30 PM
» Replies: 0
» Views: 47
HackerOne Disclosed Repor...
Forum: Research Papers/Vulnerability reports
Last Post: hashXploiter
07-28-2026, 12:30 PM
» Replies: 0
» Views: 48

 

MEDUSA


Mobile, IoT & Embedded Security    No Replies

hashXploiter, 04-29-2025, 06:59 PM

MEDUSA is an extensible and modularized framework that automates processes and techniques practiced during the dynamic analysis of Android and iOS Applications.

It can be used to:

  • Intercept common API calls by using ready made modules
  • Automate the creation of complex Frida scripts
  • Inspect the application's memory
  • Manage and categorise hooks by adding them in to modules
  • Automate long-taking / boring processes
[Image: logo.svg]
Link : You are not allowed to view links. Register or Login to view.
Wiki : You are not allowed to view links. Register or Login to view.


  Open Thread

JSMON CLI - Find ALL hidden API endpoints directly from JavaScript files


Web & Bug Bounty    No Replies

hashXploiter, 04-26-2025, 09:23 PM

JSMON CLI is a command-line interface for interacting with the jsmon.sh web application. It provides a convenient way to access various features of JSMON directly from your terminal.

Features

  • Upload URLs for scanning
  • Rescan previously scanned URLs
  • Upload and scan files
  • View scan results
  • Manage domains
  • Set up and manage cron jobs for automated scanning
  • Compare JavaScript responses
  • View user profile and usage information

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

403 Bypass Techniques


Web & Bug Bounty    No Replies

hashXploiter, 03-23-2025, 01:15 PM

extensive and updated reference for 403 (Forbidden) bypass techniques and tricks for bug bounty hunters and penetration testers.

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

Caido - A lightweight web security auditing toolkit


Web & Bug Bounty    No Replies

hashXploiter, 03-23-2025, 01:11 PM

[Image: landing_image.M1TLlug_.png]

Installing Caido on Windows

  • Download the Caido installer package for Windows from the dashboard or Github repository.
  • Open the downloaded package and follow the prompts to install Caido on your system.
  • Once the installation is complete, you can launch Caido from the Start menu or by searching for it in the Windows search bar.
Installing Caido on Linux

  • Download the Caido installer package for Linux from the dashboard or Github repository.
  • Open a terminal and navigate to the directory where the downloaded package is located.
  • Use the command sudo dpkg -i <package-name> to install Caido.
  • Once the installation is complete, you can launch Caido by running the caido command in the terminal.
Installing Caido on MacOS
  • Download the Caido installer package for macOS from the dashboard or Github repository.
  • Open the downloaded package and follow the prompts to install Caido on your system.
  • Once the installation is complete, you can launch Caido from the Applications folder or by searching for it in Spotlight.

Link : You are not allowed to view links. Register or Login to view.
You are not allowed to view links. Register or Login to view.


  Open Thread

HackTheBox: Vintage Discussion


Red Team Labs    No Replies

Paul.Barber, 03-11-2025, 10:38 PM

Machine: You are not allowed to view links. Register or Login to view.

IP: 10.10.11.45
Authentication Server Creds: P.Rosa / Rosaisbest12


As usual, I Tried common methods such as SMB/LDAP brute Forcing using NetExec (nxc), but got error because the server responded with "STATUS_NOT_SUPPORTED,". This indicates that NTLM was not supported. Then i tried to obtain the Kerberos ticket (.ccache) file using the following command and got the ticket.

root@kali /home/bob/Desktop/HTB/Vintage$ PYTHONWARNINGS='ignore' impacket-getTGT vintage.htb/P.Rosa:'Rosaisbest123' -dc-ip 10.10.11.45               
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies
Saving ticket in P.Rosa.ccache


  Open Thread

Cypher Hack the Box


Red Team Labs    3 Replies

hashXploiter, 03-06-2025, 02:38 PM

Cypher Hack the Box -  (Medium) - Linux

-- > user.txt


ssh [email protected]

Pass: Hidden Content


--> root.txt

Hidden Content


  Open Thread

Bypassing AMSI and Evading AV Detection with SpecterInsight


Red Teaming & Exploitation    No Replies

hashXploiter, 03-05-2025, 05:27 PM

New AMSI Bypss Technique Modifying CLR.DLL in Memory 

[Image: bypassing-amsi-and-av-parameters.png?w=1...=100&ssl=1]



[Image: bypassing-amsi-and-av-detection-hirustot...=100&ssl=1]

Link: You are not allowed to view links. Register or Login to view.


  Open Thread

Linux Essential For Cyber security


Linux Security    No Replies

hashXploiter, 03-05-2025, 05:19 PM

[Image: GlNcUnoXMAMGqQt?format=jpg&name=medium]

Link : You are not allowed to view links. Register or Login to view.


  Open Thread

HTB - DarkCorp | Insane


Red Team Labs    3 Replies

hashXploiter, 03-04-2025, 05:48 PM

[Image: DarkCorp.png?resize=1024%2C832&ssl=1]
DIFFICULTY: Insane

Link :
Hidden Content


  Open Thread

HackTheBox | Titanic


Red Team Labs    2 Replies

hashXploiter, 03-04-2025, 05:43 PM

[Image: Titanic.png?resize=1024%2C832&ssl=1]
Level - Easy
Link : Hidden Content


  Open Thread