💣DDoS Tools
🔹Anevicon - Powerful UDP-based load generator, written in Rust.
🔗https://github.com/rozgo/anevicon
🔹D(HE)ater - D(HE)ater sends forged cryptographic handshake messages to enforce the Diffie-Hellman key exchange.
🔗https://github.com/Balasys/dheater
🔹HOIC - Updated version of Low Orbit Ion Cannon, has 'boosters' to get around common counter measures.
🔗https://sourceforge.net/projects/high-orbit-ion-cannon/
🔹Low Orbit Ion Canon (LOIC) - Open source network stress tool written for Windows.
🔗https://github.com/NewEraCracker/LOIC
🔹Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.
🔗https://github.com/649/Memcrashed-DDoS-Exploit
🔹SlowLoris - DoS tool that uses low bandwidth on the attacking side.
🔗https://github.com/gkbrk/slowloris
🔹T50 - Faster network stress tool.
🔗https://gitlab.com/fredericopissarra/t50/
🔹UFONet - Abuses OSI layer 7 HTTP to create/manage 'zombies' and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.
🔗https://github.com/epsylon/ufonet
Join:🟢@hacker_habesha🇪🇹
🔹Anevicon - Powerful UDP-based load generator, written in Rust.
🔗https://github.com/rozgo/anevicon
🔹D(HE)ater - D(HE)ater sends forged cryptographic handshake messages to enforce the Diffie-Hellman key exchange.
🔗https://github.com/Balasys/dheater
🔹HOIC - Updated version of Low Orbit Ion Cannon, has 'boosters' to get around common counter measures.
🔗https://sourceforge.net/projects/high-orbit-ion-cannon/
🔹Low Orbit Ion Canon (LOIC) - Open source network stress tool written for Windows.
🔗https://github.com/NewEraCracker/LOIC
🔹Memcrashed - DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API.
🔗https://github.com/649/Memcrashed-DDoS-Exploit
🔹SlowLoris - DoS tool that uses low bandwidth on the attacking side.
🔗https://github.com/gkbrk/slowloris
🔹T50 - Faster network stress tool.
🔗https://gitlab.com/fredericopissarra/t50/
🔹UFONet - Abuses OSI layer 7 HTTP to create/manage 'zombies' and to conduct different attacks using; GET/POST, multithreading, proxies, origin spoofing methods, cache evasion techniques, etc.
🔗https://github.com/epsylon/ufonet
Join:🟢@hacker_habesha🇪🇹
GitHub
GitHub - c0r0n3r/dheater: D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which…
D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clon...
❤2🔥1🥰1
✅HOW TO BYPASS OTP VERIFICATION
📝Bypass OTP verifications from Paypal, Instagram.. and many others, using a Discord Bot and telegram Bot or the private API.
🛠Tool List
🔗https://github.com/Oriyomi12/otp-bot
🔗https://github.com/jonahtanjz/OTP-Bot
🔗https://github.com/hahnavi/telbot-otp
🔗https://github.com/Master-Bruno/Hack-Telegram
🔗https://github.com/MR-ROGUE/anonymous_sms
🔗https://github.com/mddanish/Vulnerable-OTP-Application
🔗https://github.com/ghost-OTPBOT/ghost-OTPBOT.github.io
🔗https://github.com/GrabITOwner/GrabIT-OTPBOT
🔗https://github.com/CoinCeap/OTP-Bot-One-Time-Password-Verification-Bank-Paypal-Bypass-2-fa-main
Join:🟢@hacker_habesha🇪🇹
📝Bypass OTP verifications from Paypal, Instagram.. and many others, using a Discord Bot and telegram Bot or the private API.
🛠Tool List
🔗https://github.com/Oriyomi12/otp-bot
🔗https://github.com/jonahtanjz/OTP-Bot
🔗https://github.com/hahnavi/telbot-otp
🔗https://github.com/Master-Bruno/Hack-Telegram
🔗https://github.com/MR-ROGUE/anonymous_sms
🔗https://github.com/mddanish/Vulnerable-OTP-Application
🔗https://github.com/ghost-OTPBOT/ghost-OTPBOT.github.io
🔗https://github.com/GrabITOwner/GrabIT-OTPBOT
🔗https://github.com/CoinCeap/OTP-Bot-One-Time-Password-Verification-Bank-Paypal-Bypass-2-fa-main
Join:🟢@hacker_habesha🇪🇹
❤2🔥1👏1
💉The Ultimate SQLmap Tutorial: Master SQL Injection and Vulnerability Assessment!
📝SQL Injection is a type of cyber attack where malicious actors exploit vulnerabilities in web applications to inject malicious SQL code into backend databases. This can lead to the exposure of sensitive data, unauthorized access to systems, and even complete system compromise.
SQLmap is a powerful open-source tool used to automate the process of detecting and exploiting SQL Injection vulnerabilities in web applications. It is a command-line tool that can be used to enumerate databases, extract data, and even execute operating system commands on the underlying system.
🔗https://en.hacks.gr/2023/12/15/the-ultimate-sqlmap-tutorial-master-sql-injection-and-vulnerability-assessment/
Join:🟢@hacker_habesha🇪🇹
📝SQL Injection is a type of cyber attack where malicious actors exploit vulnerabilities in web applications to inject malicious SQL code into backend databases. This can lead to the exposure of sensitive data, unauthorized access to systems, and even complete system compromise.
SQLmap is a powerful open-source tool used to automate the process of detecting and exploiting SQL Injection vulnerabilities in web applications. It is a command-line tool that can be used to enumerate databases, extract data, and even execute operating system commands on the underlying system.
🔗https://en.hacks.gr/2023/12/15/the-ultimate-sqlmap-tutorial-master-sql-injection-and-vulnerability-assessment/
Join:🟢@hacker_habesha🇪🇹
❤2🔥1👏1
🟢WEB APPLICATION SECURITY TESTING COURSES
▫️Web Application Security Testing Encoding, Filtering & Evasion Basics (4.36GB)
▫️Web Application Penetration Testing File & Resource Attacks (4.61GB)
▫️Web Application Security Testing Web Service Security Testing (3.37GB)
▫️Web Application Security Testing Testing for Common Attacks (3.23GB)
▫️Web Application Security Testing CMS Security Testing (6.31GB)
🔗https://mega.nz/folder/byp2CIra#Jvj3A1qZCgUFeawGL_3Wxg
Join:🟢@hacker_habesha🇪🇹
▫️Web Application Security Testing Encoding, Filtering & Evasion Basics (4.36GB)
▫️Web Application Penetration Testing File & Resource Attacks (4.61GB)
▫️Web Application Security Testing Web Service Security Testing (3.37GB)
▫️Web Application Security Testing Testing for Common Attacks (3.23GB)
▫️Web Application Security Testing CMS Security Testing (6.31GB)
🔗https://mega.nz/folder/byp2CIra#Jvj3A1qZCgUFeawGL_3Wxg
Join:🟢@hacker_habesha🇪🇹
👍2❤1🥰1
🟢⚡Automatic Vulnerability Scanning for APIs Using OWASP ZAP (crAPI as an exmaple)
🕵️Vulnerability Scanning is the technique with which we will try to find vulnerabilities in the system and/or web application, API, Mobile App, using some sort of an automated scanner to get security misconfigurations.
⚒️there are many vulnerability scanners that are great tools to pentesters. Such as Acunetix, Netsparker, Nessus, Openvas, Burp Suite Professional, etc. But in this article we will be using the free and opensource OWASP ZAP as our Vulnerability Scanner.
⚙️APIs are a bit different than normal Web Applications and sometimes using Automated tools like Nikto won’t show us any good results.
🔗https://en.hacks.gr/2023/12/15/automatic-vulnerability-scanning-for-apis-using-owasp-zap-crapi-as-an-exmaple/
Join:🟢@hacker_habesha🇪🇹
🕵️Vulnerability Scanning is the technique with which we will try to find vulnerabilities in the system and/or web application, API, Mobile App, using some sort of an automated scanner to get security misconfigurations.
⚒️there are many vulnerability scanners that are great tools to pentesters. Such as Acunetix, Netsparker, Nessus, Openvas, Burp Suite Professional, etc. But in this article we will be using the free and opensource OWASP ZAP as our Vulnerability Scanner.
⚙️APIs are a bit different than normal Web Applications and sometimes using Automated tools like Nikto won’t show us any good results.
🔗https://en.hacks.gr/2023/12/15/automatic-vulnerability-scanning-for-apis-using-owasp-zap-crapi-as-an-exmaple/
Join:🟢@hacker_habesha🇪🇹
👍2❤1🤩1
⛏Virtual Host Enumeration for Uncovering Hidden Subdomains
📝Tools and Techniques for efficient virtual host discovery
🔗https://en.hacks.gr/2023/12/12/virtual-host-enumeration-for-uncovering-hidden-subdomains/
Join:🟢@hacker_habesha🇪🇹
📝Tools and Techniques for efficient virtual host discovery
🔗https://en.hacks.gr/2023/12/12/virtual-host-enumeration-for-uncovering-hidden-subdomains/
Join:🟢@hacker_habesha🇪🇹
👍5❤1👏1
⚡️Bypass SSL Pinning for Flutter
📝Flutter is an open source framework by Google for building beautiful, natively compiled, multi-platform applications from a single codebase.
When Flutter launched in 2018, it mainly supported mobile app development. Flutter now supports application development on six platforms: iOS, Android, the web, Windows, MacOS, and Linux.
🔗https://en.hacks.gr/2023/12/19/bypass-ssl-pinning-for-flutter/
Join:🟢@hacker_habesha🇪🇹
📝Flutter is an open source framework by Google for building beautiful, natively compiled, multi-platform applications from a single codebase.
When Flutter launched in 2018, it mainly supported mobile app development. Flutter now supports application development on six platforms: iOS, Android, the web, Windows, MacOS, and Linux.
🔗https://en.hacks.gr/2023/12/19/bypass-ssl-pinning-for-flutter/
Join:🟢@hacker_habesha🇪🇹
👍4❤1🥰1
🌍Hackers Search Engines
📝Security researchers, analysts, and others can use hacker-friendly search engines. In the field of security operations, these tools can help in the discovery of vulnerable devices, tracking of threats, planning for spear phishing simulations, and much more.
This list includes special search engines that assist security professionals in finding information on connected devices, private data on individuals (in a more curated manner than traditional search engines offer), breached credentials, and other topics.
🔗https://en.iguru.gr/shodan-pio-epikindyni-michani-anazitisis-ston-kosmo/
JOIN:🟢@hacker_habesha🇪🇹
📝Security researchers, analysts, and others can use hacker-friendly search engines. In the field of security operations, these tools can help in the discovery of vulnerable devices, tracking of threats, planning for spear phishing simulations, and much more.
This list includes special search engines that assist security professionals in finding information on connected devices, private data on individuals (in a more curated manner than traditional search engines offer), breached credentials, and other topics.
🔗https://en.iguru.gr/shodan-pio-epikindyni-michani-anazitisis-ston-kosmo/
JOIN:🟢@hacker_habesha🇪🇹
👍5👏1🤩1
📱Android Pentesting 101: A Novice’s Handbook to Getting Started
📝Android pentesting is the process of evaluating the security of an Android application by identifying its vulnerabilities and weaknesses. It involves analyzing the application’s source code, binary files, and network traffic to find security flaws. There are mainly 2 parts Static and Dynamic analysis
Static analysis involves examining an application’s code and configuration files without executing it, while dynamic analysis involves testing the application in a running state to observe its behavior and interactions. Both approaches are important for testing the security of an Android application.
🔗https://en.hacks.gr/2023/12/20/android-pentesting-101-a-novices-handbook-to-getting-started/
Join:🟢@hacker_habesha🇪🇹
📝Android pentesting is the process of evaluating the security of an Android application by identifying its vulnerabilities and weaknesses. It involves analyzing the application’s source code, binary files, and network traffic to find security flaws. There are mainly 2 parts Static and Dynamic analysis
Static analysis involves examining an application’s code and configuration files without executing it, while dynamic analysis involves testing the application in a running state to observe its behavior and interactions. Both approaches are important for testing the security of an Android application.
🔗https://en.hacks.gr/2023/12/20/android-pentesting-101-a-novices-handbook-to-getting-started/
Join:🟢@hacker_habesha🇪🇹
👍3🥰1
📚Practical Ethical Hacking from Beginning to Advance!
📝A Complete Free Course: Learn Ethical Hacking From Scratch!
🔗https://drive.google.com/drive/u/0/mobile/folders/1if6MCeBCj8sxWwJIKhtgwU0GBuBW8uLx?s=09&pli=1
Join:🟢@hacker_habesha🇪🇹
📝A Complete Free Course: Learn Ethical Hacking From Scratch!
🔗https://drive.google.com/drive/u/0/mobile/folders/1if6MCeBCj8sxWwJIKhtgwU0GBuBW8uLx?s=09&pli=1
Join:🟢@hacker_habesha🇪🇹
🔥2🥰1🤩1
⚠️DLL Hijacking Basics
📝DLL Hijacking is a type cyberattack where a malicious actor takes advantage of a system’s search order for dynamic link libraries (DLL) to load and execute malicious code instead of legitimate libraries. In other words, it refers to tricking a program to load a harmful code library instead of the intended safe one. Before going into details, let’s take a look at DLL Files.
🔗https://en.hacks.gr/2023/12/20/dll-hijacking-basics/
Join:🟢@hacker_habesha🇪🇹
📝DLL Hijacking is a type cyberattack where a malicious actor takes advantage of a system’s search order for dynamic link libraries (DLL) to load and execute malicious code instead of legitimate libraries. In other words, it refers to tricking a program to load a harmful code library instead of the intended safe one. Before going into details, let’s take a look at DLL Files.
🔗https://en.hacks.gr/2023/12/20/dll-hijacking-basics/
Join:🟢@hacker_habesha🇪🇹
🥰3👍1
🩸Exploit Eternal Blue (MS17–010) for Window 7 and higher (custom payload)
📝This article shows you how to exploit the MS17–010 vulnerability on Windows 7 or higher.
🔗https://en.hacks.gr/2023/12/22/exploit-eternal-blue-ms17-010-for-window-7-and-higher-custom-payload/
Join🟢@hacker_habesha🇪🇹
📝This article shows you how to exploit the MS17–010 vulnerability on Windows 7 or higher.
🔗https://en.hacks.gr/2023/12/22/exploit-eternal-blue-ms17-010-for-window-7-and-higher-custom-payload/
Join🟢@hacker_habesha🇪🇹
❤3🥰1
🟢This year we made a ranking with the most popular tools between January and December 2023.😋
The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration Testing, Advanced Vulnerability Management, Stealth Communication Techniques, Open-Source General Purpose Vulnerability Scanning, and more.🤗
Without going into further details, we have prepared a useful list of the most popular tools in Kitploit 2023:😋
🟢 (https://www.kitploit.com/2022/12/top-20-most-popular-hacking-tools-in.html)
Join:🟢@hacker_habesha🇪🇹
The tools of this year encompass a diverse range of cybersecurity disciplines, including AI-Enhanced Penetration Testing, Advanced Vulnerability Management, Stealth Communication Techniques, Open-Source General Purpose Vulnerability Scanning, and more.🤗
Without going into further details, we have prepared a useful list of the most popular tools in Kitploit 2023:😋
🟢 (https://www.kitploit.com/2022/12/top-20-most-popular-hacking-tools-in.html)
Join:🟢@hacker_habesha🇪🇹
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
❤2🔥1🥰1
🧰CrackMapexec | SMB & AD Enumeration Simplified!
📝Have you ever found yourself staring at a Windows network, wondering how to find vulnerabilities and security holes? Don’t worry, CrackMapExec is here to save the day! It’s like having a Swiss Army knife for your penetration testing needs.
🔗https://en.hacks.gr/2023/12/15/crackmapexec-smb-ad-enumeration-simplified/
Join:🟢@hacker_habesha🇪🇹
📝Have you ever found yourself staring at a Windows network, wondering how to find vulnerabilities and security holes? Don’t worry, CrackMapExec is here to save the day! It’s like having a Swiss Army knife for your penetration testing needs.
🔗https://en.hacks.gr/2023/12/15/crackmapexec-smb-ad-enumeration-simplified/
Join:🟢@hacker_habesha🇪🇹
❤3👍1
💣 Buffer Overflow
📝From memory structure and ROP to Linux and Windows 11 real examples.
🔹Part 1 https://en.hacks.gr/2023/10/28/buffer-overflow-part-i/
🔹Part 2 https://en.hacks.gr/2023/10/29/buffer-overflow-part-ii/
🔹Part 3 https://en.hacks.gr/2023/11/08/buffer-overflow-part-iii/
🔹Part 4 https://en.hacks.gr/2023/11/09/buffer-overflow-part-iv/
Join: 🟢@hacker_habesha🇪🇹
📝From memory structure and ROP to Linux and Windows 11 real examples.
🔹Part 1 https://en.hacks.gr/2023/10/28/buffer-overflow-part-i/
🔹Part 2 https://en.hacks.gr/2023/10/29/buffer-overflow-part-ii/
🔹Part 3 https://en.hacks.gr/2023/11/08/buffer-overflow-part-iii/
🔹Part 4 https://en.hacks.gr/2023/11/09/buffer-overflow-part-iv/
Join: 🟢@hacker_habesha🇪🇹
👍3🔥1