Hacking on Medium
Passed the OSCP, lets be blunt for a minute

First off, the title is misleading, I do not know if I passed yet or not, so hopefully I do not jinx myself. However, I do know that I got…

Continue reading on Medium »

Hacking on Medium
Uncovering Host Validation Bypass through Connection State Attack

https://cdn-images-1.medium.com/max/1280/1*6-pVQ5exG_3jVt3IyCRNAQ.png
Host Header validation bypassed by the use of a connection state exploit | Host Header Injection Vulnerabilities

Continue reading on Offensive Black Hat Hacking & Security »

https://preview.redd.it/mb3v6a9knveb1.jpg?width=640&crop=smart&auto=webp&s=d46baff17851faa637a112b226c08d42ae62de79 submitted by /u/oxy1312
[link] [comments]

CVE-2023–32315: Administration Console authentication bypass

Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…Continue reading on Medium »
Read more...

CVE-2023–32315: Administration Console authentication bypass
https://codewithvamp.medium.com/cve-2023-32315-administration-console-authentication-bypass-c1429f8c4576?source=rss------bug_bounty-5

Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…Continue reading on Medium » (https://codewithvamp.medium.com/cve-2023-32315-administration-console-authentication-bypass-c1429f8c4576?source=rss------bug_bounty-5)

Hacking on Medium
The Legend of the Chupacabra

The Legend of El Chupacabra

Continue reading on Medium »

Hacking on Medium
WORLDCOIN : IS THERE MORE THAN MEETS THE EYE?

https://cdn-images-1.medium.com/max/1280/1*EQQJnH0qhd2YROYrUaCQWg.jpeg
Have you gone for Sam Altman’s free $50 for a harmless scan of your iris?

Continue reading on Medium »

Hacking on Medium
CVE-2023–32315: Administration Console authentication bypass

https://cdn-images-1.medium.com/max/706/1*HKR9GnATA2ksUzpH9wQL3w.png
Openfire is an open-source XMPP (Extensible Messaging and Presence Protocol) server that enables real-time communication through instant…

Continue reading on Medium »

Hacking on Medium
[ Bashed ] HTB Manual Walkthrough 2023 | Tonee

https://cdn-images-1.medium.com/max/795/1*g4k_RCszMcY8voiw8HBV6Q.png
Hi everyone!

Continue reading on Medium »

Hacking on Medium
7 Books to Listen to For Free

If you’re like me, you love to read.

Continue reading on Medium »

KitPloit - PenTest Tools!
Artemis - APK Infrastructure Investigator

https://blogger.googleusercontent.com/img/a/AVvXsEiEdNzcQYMJMbBm4obxOh2FiZMblR_TqC039tHdgdovO3v-7yHVbe0F37pOtbrzo4qkIfsr1tfxEZDPRxqwrBnaYqztmAUnRAQrUgCfJee8C50poShIJhCAo_GELZfjWbdSoYUfJj_Se033XS0xpqHQE2MugYDGpBFwEAUYU1FCNjX0nMFE7DyFFgjNNNTK=w640-h640
Overview

A tools for Find APK Infrastructure .

HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized our activities around the prevention of corporate, industrial, and laboratory cyber threats.
Installation

pip install -r requirements.txt
python main.py


Command Line Options


--help Display help
--path Required path of apk file
--manifest Display manifest informations
--infra Find all infra addresses included ip,domain ex. --infra ip,domain
--whoise Whoise all infra included ip,domain ex. --whoise ip,domain
--output Set output files ex. --output out.txt



Usage

Display Manifest

https://camo.githubusercontent.com/bcd003353815351fa409c135e088112c859333b28d585362a698476463ae0755/68747470733a2f2f61736369696e656d612e6f72672f612f3539323333322e737667

IP Whois

https://camo.githubusercontent.com/d03b875cbbbe31f1750214fdcd0beb8b1653e4e95b0e096c275b940d53ae5a3d/68747470733a2f2f61736369696e656d612e6f72672f612f3539323333352e737667

Example Usage:

1.Find infra(domain and ip) in sample4.apk and set output result into out.txt

python3 main.py --path sample4.apk --infra domain,ip --output out.txt


1. Investigate the Domain and IP on the APK

python3 main.py --path sample.apk --whois ip

Download Artemis