Clarification on Black Box Pentesting
https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/

<!-- SC_OFF -->Friends, Little Confused about Black Box Pentesting. In black box Penetration tester won't be getting any information about the target except an URL or an IP right? If the URL contains only just a Login Panel.
What steps he can do next. Social engineering or Bruteforcing. What Next? Can anyone tell me what to do in BlackBox at this situation. <!-- SC_ON --> submitted by /u/SecSolutions_16 (https://www.reddit.com/user/SecSolutions_16)
[link] (https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/)

HTTP PARAMETER POLLUTION
https://vardhanchalla652.medium.com/http-parameter-pollution-20b6fd8d53b8?source=rss------bug_bounty-5

Kali Linux Tutorials
Mediator : An Extensible, End-To-End Encrypted Reverse Shell With A Novel Approach To Its Architecture

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a “mediator” server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create plugins to expand the functionality of the […]

The post Mediator : An Extensible, End-To-End Encrypted Reverse Shell With A Novel Approach To Its Architecture appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Automating Burp Suite -1 | Capturing CSRF Token Via Macro

Using Burp’s Session Handling Rules with anti-CSRF Tokens
Read more...

Hacking on Medium
what is a vpn ? and why do you need it ?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Easy tips to maximize online security as you surf the internet..

what are the best ways to protect

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Biohazard

https://cdn-images-1.medium.com/max/1152/0*8nmpVZIWcyiYgpar.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CTF — HackTheBox — Monitors

https://cdn-images-1.medium.com/max/698/1*ZKKF1Sy6-imaxMj6WnyhSQ.png
IP de la machine Monitors : 10.129.0.0/16

Continue reading on ProHacktive »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How will the influence of artificial intelligence on cybersecurity?

https://cdn-images-1.medium.com/max/1000/0*XYpXna5HO_PWG7tN
The main principles of AI-friendly systems consist of collecting data, analysing them, deciding on findings and learning from findings…

Continue reading on Artificial Intelligence in Plain English »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
DARK WEB IS REALLY DARK OR ITS DEEP !?

I am not to take much of time , but I have very stupid questions , because In my life , I have never been into it . With combo of ques, I wanna say that , they are many bogymen stories ? They are many illegal stuffs on it ? They are many cp sorts , they are many chat rooms ? But the things which drive me into amazement is , dark web also have the info, docs , discussions , which no norm web has . It has whales into it , it has ahead information from world . Some people say , dark web has reality’s which gullible people of norm webs won’t believe , they say , people dread people because they donot want everybody in it to access vast ocean of realities . Is it guys , plz guide me through, I am asking from curiosity :)

submitted by /u/No_Atmosphere4679
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bucky - An Automatic S3 Bucket Discovery Tool

Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular Expression(Regex) to match the S3 bucket used as Content Delivery Network(CDN) and sends it to the Bucky Backend engine. The backend engine receives the data from addon and checks if the S3 bucket is publicly writeable or not. Bucky automatically uploads a text file as Proof Of Concept(PoC) if the bucket is vulnerable.Working Bucky addon sends the details of s3 bucket name discovered from a user visited web pages to backend engine. It uses AWS PHP SDK to discover misconfiguration. Users can also check for S3 bucket misconfiguration manually. All the results from automatic and manuall check are populated to dashboard. Checkout video https://vimeo.com/444442588 Installation git clone https://github.com/smaranchand/bucky.gitcd bucky Requirements: AWS Access Keys and PHP installation Get AWS Access Keys: https://console.aws.amazon.com/iam/home?#/security_credentials PHP installation: Install according to your OS, apt install php7.3 / brew install php7.3 Currently, Bucky addon is not published in the Firefox addon store; as soon as the addon will be published, the addon link will be provided. For now, users can manually load the addon into the browser to do so Open Firefox browser and visit about:debugging Click on "This Firefox" > Load Temporary Add-on Select the addon located at bucky/addon/bucky.js Add AWS Access keys: cd bucky/nano config.inc.php Add your AWS Access Key ID and Secret Access Key. (On-Line 57 and 61) Usage To use Bucky, load the Bucky addon to the browser and start backend engine. cd bucky/chmod +x run.sh./run.shThe backend engine runs on http://127.0.0.1:13337Browse websites, Bucky will discover S3 buckets automatically and will be reflected in the dashboard.Visit the above address to access Bucky dashboard. Screenshots Running Bucky Loading Addon User Interface All Buckets Manual Check POC By Bucky Note Bucky is not a perfect tool to discover S3 buckets, it is well known that Bucky lacks many feautres and it may fail to detect the misconfiguration sometimes. Certain changes and development are in pipeline. I really appreciate the feedbacks and contribution. Download Bucky
Read more...

___________________________
@hacking_Attack
@Hacking_Video

.NET Managed Injector Library
https://www.reddit.com/r/redteamsec/comments/np0o9p/net_managed_injector_library/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (https://github.com/enkomio/ManagedInjector) [comments] (https://www.reddit.com/r/redteamsec/comments/np0o9p/net_managed_injector_library/)

___________________________
@hacking_Attack
@Hacking_Video

Bucky - An Automatic S3 Bucket Discovery Tool
http://www.kitploit.com/2021/05/bucky-automatic-s3-bucket-discovery-tool.html

___________________________
@hacking_Attack
@Hacking_Video

Bucky is an automatic tool designed to discover (https://www.kitploit.com/search/label/Discover) S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon (https://www.kitploit.com/search/label/Firefox%20Addon) and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular Expression(Regex) to match the S3 bucket used as Content Delivery Network(CDN) and sends it to the Bucky Backend engine. The backend engine receives the data from addon and checks if the S3 bucket is publicly writeable or not. Bucky automatically uploads a text file as Proof Of Concept(PoC) if the bucket is vulnerable.
Working
Bucky addon sends the details of s3 bucket name discovered from a user visited web pages to backend engine. It uses AWS PHP SDK (https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/getting-started_installation.html) to discover misconfiguration. Users can also check for S3 bucket misconfiguration (https://www.kitploit.com/search/label/Misconfiguration) manually. All the results from automatic and manuall check are populated to dashboard. Checkout video https://vimeo.com/444442588
Installation
git clone https://github.com/smaranchand/bucky.git
cd bucky

Requirements: AWS Access (https://www.kitploit.com/search/label/Access) Keys and PHP installation Get AWS Access Keys: https://console.aws.amazon.com/iam/home?#/security_credentials PHP installation: Install according to your OS, apt install php7.3 / brew install php7.3 Currently, Bucky addon is not published in the Firefox (https://www.kitploit.com/search/label/Firefox) addon store; as soon as the addon will be published, the addon link will be provided. For now, users can manually load the addon into the browser to do so Open Firefox browser and visit about:debugging Click on "This Firefox" > Load Temporary Add-on Select the addon located at bucky/addon/bucky.js Add AWS Access keys: cd bucky/
nano config.inc.php
Add your AWS Access Key ID and Secret Access Key. (On-Line 57 and 61)

Usage
To use Bucky, load the Bucky addon to the browser and start backend engine. cd bucky/
chmod +x run.sh
./run.sh

The backend engine runs on http://127.0.0.1:13337
Browse websites, Bucky will discover S3 buckets automatically and will be reflected in the dashboard.
Visit the above address to access Bucky dashboard.

Screenshots
Running Bucky

___________________________
@hacking_Attack
@Hacking_Video