User Interface

___________________________
@hacking_Attack
@Hacking_Video

All Buckets

___________________________
@hacking_Attack
@Hacking_Video

Manual Check

___________________________
@hacking_Attack
@Hacking_Video

POC By Bucky

___________________________
@hacking_Attack
@Hacking_Video

 Note
Bucky is not a perfect tool to discover S3 buckets, it is well known that Bucky lacks many feautres and it may fail to detect the misconfiguration sometimes. Certain changes and development are in pipeline. I really appreciate the feedbacks and contribution.

Download Bucky (https://github.com/smaranchand/bucky)

Hacking on Medium
TryHackMe | Inclusion Walkthrough

https://cdn-images-1.medium.com/max/600/1*DieS-NJomwwgf4YFFFshRg.png
This is a simple beginner-level Local file Inclusion box.

Continue reading on Medium »

Hacking on Medium
Campagne di spionaggio e hacking: Russia e USA

https://cdn-images-1.medium.com/max/2600/0*GzeCSolerdPrgx2y
Campagne di spionaggio e hacking: mentre Microsoft avvisa che il gruppo APT Nobelium — il collettivo hacker legato all’intelligence russa…

Continue reading on Medium »

KitPloit - PenTest Tools!
Bucky - An Automatic S3 Bucket Discovery Tool

https://1.bp.blogspot.com/-O352SOa1o_4/YKr9ChNIEQI/AAAAAAAAWTM/22RX84MJFgIh7kqHMbTUIgbRzuO3JSKdQCNcBGAsYHQ/w640-h360/bucky_1_bucky.gif Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular Expression(Regex) to match the S3 bucket used as Content Delivery Network(CDN) and sends it to the Bucky Backend engine. The backend engine receives the data from addon and checks if the S3 bucket is publicly writeable or not. Bucky automatically uploads a text file as Proof Of Concept(PoC) if the bucket is vulnerable. WorkingBucky addon sends the details of s3 bucket name discovered from a user visited web pages to backend engine. It uses AWS PHP SDK to discover misconfiguration. Users can also check for S3 bucket misconfiguration manually. All the results from automatic and manuall check are populated to dashboard.

Checkout video https://vimeo.com/444442588 Installationgit clone https://github.com/smaranchand/bucky.git
cd bucky Requirements: AWS Access Keys and PHP installation

Get AWS Access Keys: https://console.aws.amazon.com/iam/home?#/security_credentials

PHP installation: Install according to your OS, apt install php7.3 / brew install php7.3

Currently, Bucky addon is not published in the Firefox addon store; as soon as the addon will be published, the addon link will be provided.

For now, users can manually load the addon into the browser to do so

1. Open Firefox browser and visit about:debugging
2. Click on "This Firefox" > Load Temporary Add-on
3. Select the addon located at bucky/addon/bucky.js

Add AWS Access keys: cd bucky/
nano config.inc.php
Add your AWS Access Key ID and Secret Access Key. (On-Line 57 and 61) UsageTo use Bucky, load the Bucky addon to the browser and start backend engine. cd bucky/
chmod +x run.sh
./run.sh

The backend engine runs on http://127.0.0.1:13337
Browse websites, Bucky will discover S3 buckets automatically and will be reflected in the dashboard.
Visit the above address to access Bucky dashboard. ScreenshotsRunning Bucky https://1.bp.blogspot.com/-2Kwn7gT4B7M/YKr9JlaCEmI/AAAAAAAAWTQ/j-dckAiReS89cKWK59cOrVsqcLoknpWZwCNcBGAsYHQ/w640-h376/bucky_2_run_bucky.png Loading Addon https://1.bp.blogspot.com/-XWrmfHwmfCQ/YKr9OfbxAmI/AAAAAAAAWTU/w3m8uHa45VUxPRLNJ-KA3OjL5lFASgiAACNcBGAsYHQ/w640-h390/bucky_3_bucky_addon.png User Interface https://1.bp.blogspot.com/-A-1BtnIkr-s/YKr9TyR63cI/AAAAAAAAWTc/1z5vittO5508nF37yBoIxAkNBg-WFv5LACNcBGAsYHQ/w640-h330/bucky_4_dashboard_loading.png All Buckets https://1.bp.blogspot.com/-nPqS2p8e-tM/YKr9aM3x82I/AAAAAAAAWTk/7u8TiU68xDk-x6zm_MNtVGDRZ8rSTeccQCNcBGAsYHQ/w640-h180/bucky_5_all_buckets.png Manual Check https://1.bp.blogspot.com/-FMvC1FNTUDg/YKr9gDRx8JI/AAAAAAAAWTs/-foEUvXlGtoV5TyCAAXqmPG0lENlH3lUACNcBGAsYHQ/w640-h132/bucky_6_manual_check.png POC By Bucky https://1.bp.blogspot.com/-khx11UPiAAs/YKr9jpAdbUI/AAAAAAAAWTw/tReojqUYM8Ut5AZ0mizewet-5l_BkipkACNcBGAsYHQ/w640-h170/bucky_7_vulnerable_poc.png NoteBucky is not a perfect tool to discover S3 buckets, it is well known that Bucky lacks many feautres and it may fail to detect the misconfiguration sometimes. Certain changes and development are in pipeline. I really appreciate the feedbacks and contribution. Download Bucky

___________________________
@hacking_Attack
@Hacking_Video

Escalating SSRF to Accessing all user PII information by aws metadata
https://notifybugme.medium.com/escalating-ssrf-to-accessing-all-user-pii-information-by-aws-metadata-aabcfd5a3e0e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

FreeCourseSite – Download Udemy Paid Courses For Free
Vue 3, Nuxt.js and Django: A Rapid Guide – Advanced

Vue 3, Nuxt.js and Django: A Rapid Guide – Advanced
VueJS with Typescript, Nuxt.js, Vuetify, Composition API, DRF 3.1, Docker, Redis, Stripe, Frontend & Backend Filtering

What you’ll learn

Vue 3, Nuxt.js and Django: A Rapid Guide – Advanced
*

Use Docker
*

Login with HttpOnly Cookies and Multiple user Scopes
*

Caching with Redis
*

Paying with Stripe
*

Different types of Users
*

VueJS with Typescript
*

NuxtJS with Typescript
*

Use Vuetify
Requirements

*

Good understanding of VueJS
*

Good understanding of Python and Django
Description
Learn how to create an Ambassador App using VueJS, Nuxt.js, and Django Rest Framework. We will build 3 frontend apps Admin, Ambassador, and Checkout and they will consume a big Django API.

In Django you will learn:

* How to create APIs with Django Rest Framework
* Use Docker
* Create protected routes
* Login with HttpOnly Cookies
* Login with Scopes
* Use Redis
* Use Stripe
* Sending Emails
* Filter Cached products

In this Vue you will learn:

* Use Vue with Typescript
* Learn how to use Nuxt.js with Typescript
* Use Vuex
* How to use Composition API and Options API
* Use Vuetify
* Create public and private routes
* Pay with Stripe

I’m a FullStack Developer with 10+ years of experience. I’m obsessed with clean code and I try my best that my courses have the cleanest code possible.

My teaching style is very straightforward, I will not waste too much time explaining all the ways you can create something or other unnecessary information to increase the length of my lectures. If you want to learn things rapidly then this course is for you.

I also update my courses regularly over time because I don’t want them to get outdated. So you can expect more content over time from just one course with better video and audio quality.

If you have any coding problems I will offer my support within 12 hours when you post the question. I’m very active when trying to help my students.

So what are you waiting for, give this course a try and you won’t get disappointed.
Who this course is for:

* Developers that want to learn new concepts fast
*
Last updated 4/2021
Content From: https://www.udemy.com/course/vue-django-advanced/
Download Now Nuxt.js – Vue.js on Steroids Complete Course
The post Vue 3, Nuxt.js and Django: A Rapid Guide – Advanced appeared first on FreeCourseSite - Download Udemy Paid Courses For Free.

FreeCourseSite – Download Udemy Paid Courses For Free
Software Ethical Hacking – Crack Software like A Pro

Software Ethical Hacking – Crack Software like A Pro
Learn how to reverse, debug and patch and Crack Serial Keys of Application programs
What you’ll learn

Software Ethical Hacking – Crack Software like A Pro
*

Introduction to x64dbg and Detect it Easy (DIE)
*

Setting up your cracking workspace and workflow
*

Basic Steps of x64dbg Debugger
*

Stepping Into Calls Functions of x64dbg
*

What are Breakpoints in Software Cracking
*

Reversing Jumps in Software
*

How to patch a Command-Line Software program
*

Summary of Cracking Software Workflow
*

Introduction to cracking Graphical User Interface Based Programs
*

Analyzing the PE for a Graphical User Interface Based program
*

Cracking the Serial Key of Any Application using BP on string
Requirements

*

C++ programming Skills
Description
In this course, you will get the world of crack software are familiar and hack legal software. This software has different levels from beginner level to advanced and can be reverse engineering to step-by-step, to teach you. This course is also for other areas related to reverse engineering, such as analysis of malware, etc.

Making the exploit, and test the software. At the end of this course, you will be able to gauge the effectiveness of software packers, obfuscation, and anti-debugging protection and also to have a good idea of how to implement extra countermeasures to improve the security of software. In this course, you will get the world of crack software are familiar and hack legal software.

This software has different levels from beginner level to advanced and can be reverse engineering to step-by-step, to teach you. This course is also for other areas related to reverse engineering, such as analysis of malware, etc. making the exploit, and test, the software. At the end of this course, you will be able to gauge the effectiveness of software packers, obfuscation, and anti-debugging protection and also to have a good idea of how to implement extra countermeasures to improve the security of software.
Who this course is for:

* Beginners and Intermediate
*
Last updated 4/2021
Content From: https://www.udemy.com/course/software-ethical-hacking-crack-software-like-a-pro/
Download Now Mobile Hacking Fundamentals for 2021
The post Software Ethical Hacking – Crack Software like A Pro appeared first on FreeCourseSite - Download Udemy Paid Courses For Free.