MOVEit Transfer Exploitation (my API presentation recording)

🔥 KZbin ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

[@jjann54321]

It's so rare to find someone that's technical, experienced, well spoken and entertaining in this industry. Watching John's channel will make you spoiled quickly. Many channels of this "genre" have a host and a team of graphic artists and editors working in hopes of keeping their audience engaged and they are fighting for 2nd place at best. Thank you Mr. Hammond for all that you do for community. I can't imagine what your sleep schedule looks like.

[@RRahulRajput798]

1st as indexing starts with 0 ❤

[@DarkFaken]

Mate, thank you once again for your amazing lesson! You really are a pillar of this community

[@b3nx0]

John, you're KZbin content is absolutely fantastic! The depth of knowledge and the engaging way you present complex topics is truly impressive. I'm constantly learning something new and exciting from your videos. Keep up the amazing work!

[@Innocuils]

Watching now, clearly not through the video....but I seriously appreciate how you are going over this. Keep up the great work John!

[@accrevoke]

Progress / MOVEit has been using ancient designs and absolutely horrific security practices waiting to be exploited. Their MFT (managed file transfer) hasn't changed much since 2008, it's practically suicide to permit unauthenticated external access. Second runner up is Stonebench and JSCAPE, at least JSCAPE got some updates and is rarely "directly" open to external / public. For GoAnywhere, it's unfortunate, they are supposed to be a security first company, but I guess the team dropped the ball in their SaaS environment. And again, SaaS, just contracting out the liability to someone else :)

[@beng9145]

this is a BIG deal, always on top of John

[@0xMoha]

thank you john

[@katendemusa5747]

Do more on APIs please

[@sophiophile]

I mean, there isn't much to them, tbh. REST is very simple/limited. It all comes down to whether there is something about how data is handled on the backend of the API that allows an attack using the exposed endpoints.

[@4CHUX]

1

[@deadbeef2482]

dope!

[@HarvestHaven09]

🎉🎉🎉🎉

[@hackwithprogramming7849]

Give me ❤️

[@emoneymd5]

Move it was a file transfer vulnerability

[@JeffFranchetti]

Were the victim organizations using moveit “on premise” or in the cloud?

[@RJZN5Gaming]

How to i learn to use a new cve?

[@JeffFranchetti]

How did you get the IIS logs?

[@Kabodanki]

21min talk, 4min intro

[@Thebloggermustdie]

You're getting lazy man

[@emoneymd5]

What