Any good checklists for a workstation security audit?
https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/

I'm looking at potentially running a security audit for a company's internal network machines. Are there any good guides/checklists out there that help or anything you can share from your own experience as I've not done one before. In my mind I would be aiming to cover things like unauthenticated access to the network (e.g. plugging I'm a device into a network port in their office), plugging in a rubber ducky into a machine and seeing if I can get anything there. We'd also be looking at authenticated access so checking what access a user has vs what they should have to see if permissions aren't well configured. Any other things? submitted by /u/stevieboy1984 (https://www.reddit.com/user/stevieboy1984)
[link] (https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/) [comments] (https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How no javascript on Browser makes system more secure?

In torr browser the Javascript is removed in safest mode. How no javascript makes website more secure?

submitted by /u/Cybercops786
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
BEST DNM TO EVER EXIST....

Out of these contenders, who you got?

View Poll

submitted by /u/DrDankHaze
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why should you use RustScan instead of nmap? Introduction to RustScan

Hello everyone,

I hope you all are doing great, In this video, I'll be showing you how you can use RustScan, RustScan is a modern day port scanning tool and it is a lot faster than nmap, Hope you guys learn something from it! Peace!

PS. I am very close to 1k Subs, It would be appreciated if you support the channel! Thanks!

https://www.youtube.com/watch?v=WBk9CpsC23E

submitted by /u/Vedant-Bhalgama
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses
http://www.kitploit.com/2021/06/403fuzzer-fuzz-403401ing-endpoints-for.html

___________________________
@hacking_Attack
@Hacking_Video

Fuzz 403ing endpoints (https://www.kitploit.com/search/label/Endpoints) for bypasses
Follow on twitter! @intrudir
This tool will check the endpoint with a couple of headers (https://www.kitploit.com/search/label/Headers) such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path.
e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/
Usage
usage: 403fuzzer.py [-h] [-u URL] [-m {GET,POST,PUT,PATCH}] [-d DATA_PARAMS] [-c COOKIES] [-H HEADER] [-p PROXY] [-hc HC] [-hl HL] [-sf] [--save SAVE] [-sh] [-su]

use this script to fuzz endpoints that return a 401/403

optional arguments:
-h, --help show this help message and exit
-u URL, --url URL Specify the target URL
-m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH}
Specify the HTTP method/verb
-d DATA_PARAMS, --data DATA_PARAMS
Specify data to send with the request.
-c COOKIES, --cookies COOKIES
Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah")
-H HEADER, --header HEADER
Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com"
-p PROXY, --proxy PROXY
Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080)
-hc HC Hide response code from output, single or comma separated
-hl HL Hide response length from output, single or comma separated
-sf, --smart Enable the smart filter
--save SAVE Saves stuff to a file when you get your specified response code
-sh, --skip-headers Skip testing bypass headers
-su, --skip-urls Skip testing path payloads

Basic examples
python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html

___________________________
@hacking_Attack
@Hacking_Video

Specify cookies to use in requests:
(minus the cookie (https://www.kitploit.com/search/label/Cookie) header name) Examples: --cookies "cookie1=blah"
-c "cookie1=blah; cookie2=blah"

Specify a method/verb and body data to send
403fuzzer.py -u https://example.com -m POST -d "param1=blah¶m2=blah2"
403fuzzer.py -u https://example.com -m PUT -d "param1=blah¶m2=blah2"

Specify custom headers to use with every request
Maybe you need to add some kind of auth header like Authorization: bearer Specify -H "header: value" for each additional header you'd like to add: 403fuzzer.py -u https://example.com -H "Some-Header: blah" -H "Authorization: Bearer 1234567"

Specify a proxy to use
Useful if you wanna proxy through Burp 403fuzzer.py -u https://example.com --proxy http://127.0.0.1:8080

Skip sending header payloads or url payloads
# skip sending headers payloads
403fuzzer.py -u https://example.com -sh
403fuzzer.py -u https://example.com --skip-headers

# Skip sending path normailization payloads
403fuzzer.py -u https://example.com -su
403fuzzer.py -u https://example.com --skip-urls

Hide response code/length
Provide comma delimited lists without spaces. Examples: # Hide response codes
403fuzzer.py -u https://example.com -hc 403,404,400

# Hide response lengths of 638
403fuzzer.py -u https://example.com -hl 638

Smart filter feature!
Based on response code and length. If it sees a response 8 times or more it will automatically mute it. repeats are changeable in the code until I add an option to specify it in flag NOTE: Can't be used simultaneously with -hc or -hl (yet) # toggle smart filter on
403fuzzer.py -u https://example.com --smart

Save requests for matching response code
Will save to a file named saved.txt Useful for later inspection # save requests where the response code matched 200
403fuzzer.py -u https://example.com --save 200

TODO:
Add other methods/verbs for bypass, e.g. POST requests Maybe add an output file option for 200 OKs Looking for ideas. Ping me on twitter! @intrudir

Download 403Fuzzer (https://github.com/intrudir/403fuzzer)

___________________________
@hacking_Attack
@Hacking_Video

SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor - Check Point Research
https://www.reddit.com/r/redteamsec/comments/nrb4pe/sharppanda_chinese_apt_group_targets_southeast/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/) [comments] (https://www.reddit.com/r/redteamsec/comments/nrb4pe/sharppanda_chinese_apt_group_targets_southeast/)

___________________________
@hacking_Attack
@Hacking_Video

More macOS Installers Flaws for Post-Exploitation
https://www.reddit.com/r/Pentesting/comments/nrd0h0/more_macos_installers_flaws_for_postexploitation/

submitted by /u/dinobyt3s (https://www.reddit.com/user/dinobyt3s)
[link] (https://medium.com/tenable-techblog/more-macos-installer-flaws-c868d9067eb3) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd0h0/more_macos_installers_flaws_for_postexploitation/)

___________________________
@hacking_Attack
@Hacking_Video

Introduction to NMap (beginner friendly)
https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/

submitted by /u/_CryptoCat23 (https://www.reddit.com/user/_CryptoCat23)
[link] (https://www.youtube.com/watch?v=8RhCnOhQlGc) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/)

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/Usage usage: 403fuzzer.py -h -u URL -m {GET,POST,PUT,PATCH} -d DATA\_PARAMS -c COOKIES -H HEADER -p PROXY -hc HC -hl HL -sf --save SAVE -sh -suuse this script to fuzz endpoints that return a 401/403optional arguments: -h, --help show this help message and exit -u URL, --url URL Specify the target URL -m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH} Specify the HTTP method/verb -d DATA_PARAMS, --data DATA_PARAMS Specify data to send with the request. -c COOKIES, --cookies COOKIES Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah") -H HEADER, --header HEADER Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com" -p PROXY, --proxy PROXY Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080) -hc HC Hide response code from output, single or comma separated -hl HL Hide response length from output, single or comma separated -sf, --smart Enable the smart filter --save SAVE Saves stuff to a file when you get your specified response code -sh, --skip-headers Skip testing bypass headers -su, --skip-urls Skip testing path payloads Basic examples python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html Specify cookies to use in requests: (minus the cookie header name) Examples: --cookies "cookie1=blah"-c "cookie1=blah; cookie2=blah" Specify a method/verb and body data to send 403fuzzer.py -u https://example.com -m POST -d "param1=blah¶m2=blah2"403fuzzer.py -u https://example.com -m PUT -d "param1=blah¶m2=blah2" Specify custom headers to use with every request Maybe you need to add some kind of auth header like Authorization: bearer Specify -H "header: value" for each additional header you'd like to add: 403fuzzer.py -u https://example.com -H "Some-Header: blah" -H "Authorization: Bearer 1234567" Specify a proxy to use Useful if you wanna proxy through Burp 403fuzzer.py -u https://example.com --proxy http://127.0.0.1:8080 Skip sending header payloads or url payloads # skip sending headers payloads403fuzzer.py -u https://example.com -sh403fuzzer.py -u https://example.com --skip-headers# Skip sending path normailization payloads403fuzzer.py -u https://example.com -su403fuzzer.py -u https://example.com --skip-urls Hide response code/length Provide comma delimited lists without spaces. Examples: # Hide response codes403fuzzer.py -u https://example.com -hc 403,404,400 # Hide response lengths of 638403fuzzer.py -u https://example.com -hl 638 Smart filter feature! Based on response code and length. If it sees a response 8 times or more it will automatically mute it. repeats are changeable in the code until I add an option to specify it in flag NOTE: Can't be used simultaneously with -hc or -hl (yet) # toggle smart filter on403fuzzer.py -u https://example.com --smart Save requests for matching response code Will save to a file named saved.txt Useful for later inspection # save requests where the response code matched 200403fuzzer.py -u https://example.com --save 200 TODO: Add other methods/verbs for bypass, e.g. POST requests Maybe add an output file option for 200 OKs Looking for ideas. Ping me on twitter! @intrudir Download 403Fuzzer
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Colonial Pipeline Attack Is Your Boardroom Wake-Up Call

Why business leaders must adopt a risk-led approach to cybersecurity.

Learn about Linux cronjobs and how to interact with crontab
https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/

Many sysadmin use cron jobs for backup or maintenance purposes. But they are not maintained actively and it could become a vulnerable vector to gain a root shell and you can configure it to set up backdoors. Learn more about it https://www.secjuice.com/linux-basics-cron-jobs/ submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/) [comments] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/)

___________________________
@hacking_Attack
@Hacking_Video