Fuzz 403ing endpoints (https://www.kitploit.com/search/label/Endpoints) for bypasses
Follow on twitter! @intrudir
This tool will check the endpoint with a couple of headers (https://www.kitploit.com/search/label/Headers) such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path.
e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/
Usage
usage: 403fuzzer.py [-h] [-u URL] [-m {GET,POST,PUT,PATCH}] [-d DATA_PARAMS] [-c COOKIES] [-H HEADER] [-p PROXY] [-hc HC] [-hl HL] [-sf] [--save SAVE] [-sh] [-su]

use this script to fuzz endpoints that return a 401/403

optional arguments:
-h, --help show this help message and exit
-u URL, --url URL Specify the target URL
-m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH}
Specify the HTTP method/verb
-d DATA_PARAMS, --data DATA_PARAMS
Specify data to send with the request.
-c COOKIES, --cookies COOKIES
Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah")
-H HEADER, --header HEADER
Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com"
-p PROXY, --proxy PROXY
Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080)
-hc HC Hide response code from output, single or comma separated
-hl HL Hide response length from output, single or comma separated
-sf, --smart Enable the smart filter
--save SAVE Saves stuff to a file when you get your specified response code
-sh, --skip-headers Skip testing bypass headers
-su, --skip-urls Skip testing path payloads

Basic examples
python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html

___________________________
@hacking_Attack
@Hacking_Video

Specify cookies to use in requests:
(minus the cookie (https://www.kitploit.com/search/label/Cookie) header name) Examples: --cookies "cookie1=blah"
-c "cookie1=blah; cookie2=blah"

Specify a method/verb and body data to send
403fuzzer.py -u https://example.com -m POST -d "param1=blah¶m2=blah2"
403fuzzer.py -u https://example.com -m PUT -d "param1=blah¶m2=blah2"

Specify custom headers to use with every request
Maybe you need to add some kind of auth header like Authorization: bearer Specify -H "header: value" for each additional header you'd like to add: 403fuzzer.py -u https://example.com -H "Some-Header: blah" -H "Authorization: Bearer 1234567"

Specify a proxy to use
Useful if you wanna proxy through Burp 403fuzzer.py -u https://example.com --proxy http://127.0.0.1:8080

Skip sending header payloads or url payloads
# skip sending headers payloads
403fuzzer.py -u https://example.com -sh
403fuzzer.py -u https://example.com --skip-headers

# Skip sending path normailization payloads
403fuzzer.py -u https://example.com -su
403fuzzer.py -u https://example.com --skip-urls

Hide response code/length
Provide comma delimited lists without spaces. Examples: # Hide response codes
403fuzzer.py -u https://example.com -hc 403,404,400

# Hide response lengths of 638
403fuzzer.py -u https://example.com -hl 638

Smart filter feature!
Based on response code and length. If it sees a response 8 times or more it will automatically mute it. repeats are changeable in the code until I add an option to specify it in flag NOTE: Can't be used simultaneously with -hc or -hl (yet) # toggle smart filter on
403fuzzer.py -u https://example.com --smart

Save requests for matching response code
Will save to a file named saved.txt Useful for later inspection # save requests where the response code matched 200
403fuzzer.py -u https://example.com --save 200

TODO:
Add other methods/verbs for bypass, e.g. POST requests Maybe add an output file option for 200 OKs Looking for ideas. Ping me on twitter! @intrudir

Download 403Fuzzer (https://github.com/intrudir/403fuzzer)

___________________________
@hacking_Attack
@Hacking_Video

SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor - Check Point Research
https://www.reddit.com/r/redteamsec/comments/nrb4pe/sharppanda_chinese_apt_group_targets_southeast/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor/) [comments] (https://www.reddit.com/r/redteamsec/comments/nrb4pe/sharppanda_chinese_apt_group_targets_southeast/)

___________________________
@hacking_Attack
@Hacking_Video

More macOS Installers Flaws for Post-Exploitation
https://www.reddit.com/r/Pentesting/comments/nrd0h0/more_macos_installers_flaws_for_postexploitation/

submitted by /u/dinobyt3s (https://www.reddit.com/user/dinobyt3s)
[link] (https://medium.com/tenable-techblog/more-macos-installer-flaws-c868d9067eb3) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd0h0/more_macos_installers_flaws_for_postexploitation/)

___________________________
@hacking_Attack
@Hacking_Video

Introduction to NMap (beginner friendly)
https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/

submitted by /u/_CryptoCat23 (https://www.reddit.com/user/_CryptoCat23)
[link] (https://www.youtube.com/watch?v=8RhCnOhQlGc) [comments] (https://www.reddit.com/r/Pentesting/comments/nrd42w/introduction_to_nmap_beginner_friendly/)

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/Usage usage: 403fuzzer.py -h -u URL -m {GET,POST,PUT,PATCH} -d DATA\_PARAMS -c COOKIES -H HEADER -p PROXY -hc HC -hl HL -sf --save SAVE -sh -suuse this script to fuzz endpoints that return a 401/403optional arguments: -h, --help show this help message and exit -u URL, --url URL Specify the target URL -m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH} Specify the HTTP method/verb -d DATA_PARAMS, --data DATA_PARAMS Specify data to send with the request. -c COOKIES, --cookies COOKIES Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah") -H HEADER, --header HEADER Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com" -p PROXY, --proxy PROXY Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080) -hc HC Hide response code from output, single or comma separated -hl HL Hide response length from output, single or comma separated -sf, --smart Enable the smart filter --save SAVE Saves stuff to a file when you get your specified response code -sh, --skip-headers Skip testing bypass headers -su, --skip-urls Skip testing path payloads Basic examples python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html Specify cookies to use in requests: (minus the cookie header name) Examples: --cookies "cookie1=blah"-c "cookie1=blah; cookie2=blah" Specify a method/verb and body data to send 403fuzzer.py -u https://example.com -m POST -d "param1=blah¶m2=blah2"403fuzzer.py -u https://example.com -m PUT -d "param1=blah¶m2=blah2" Specify custom headers to use with every request Maybe you need to add some kind of auth header like Authorization: bearer Specify -H "header: value" for each additional header you'd like to add: 403fuzzer.py -u https://example.com -H "Some-Header: blah" -H "Authorization: Bearer 1234567" Specify a proxy to use Useful if you wanna proxy through Burp 403fuzzer.py -u https://example.com --proxy http://127.0.0.1:8080 Skip sending header payloads or url payloads # skip sending headers payloads403fuzzer.py -u https://example.com -sh403fuzzer.py -u https://example.com --skip-headers# Skip sending path normailization payloads403fuzzer.py -u https://example.com -su403fuzzer.py -u https://example.com --skip-urls Hide response code/length Provide comma delimited lists without spaces. Examples: # Hide response codes403fuzzer.py -u https://example.com -hc 403,404,400 # Hide response lengths of 638403fuzzer.py -u https://example.com -hl 638 Smart filter feature! Based on response code and length. If it sees a response 8 times or more it will automatically mute it. repeats are changeable in the code until I add an option to specify it in flag NOTE: Can't be used simultaneously with -hc or -hl (yet) # toggle smart filter on403fuzzer.py -u https://example.com --smart Save requests for matching response code Will save to a file named saved.txt Useful for later inspection # save requests where the response code matched 200403fuzzer.py -u https://example.com --save 200 TODO: Add other methods/verbs for bypass, e.g. POST requests Maybe add an output file option for 200 OKs Looking for ideas. Ping me on twitter! @intrudir Download 403Fuzzer
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Colonial Pipeline Attack Is Your Boardroom Wake-Up Call

Why business leaders must adopt a risk-led approach to cybersecurity.

Learn about Linux cronjobs and how to interact with crontab
https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/

Many sysadmin use cron jobs for backup or maintenance purposes. But they are not maintained actively and it could become a vulnerable vector to gain a root shell and you can configure it to set up backdoors. Learn more about it https://www.secjuice.com/linux-basics-cron-jobs/ submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/) [comments] (https://www.reddit.com/r/redteamsec/comments/nreo5h/learn_about_linux_cronjobs_and_how_to_interact/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I got hacked

https://cdn-images-1.medium.com/max/2315/1*_lMUYwfBmyn6SktKy_HreQ.jpeg
A short story from my everyday life, about how a small misunderstanding can lead to big difference.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phone Number OSINT

https://cdn-images-1.medium.com/max/1186/1*uTRl2lUqSEnJ6ERq0vWnWg.png
How to perform phone number osint using some really great tools and websites without spending a single penny on shady websites

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

___________________________
@hacking_Attack
@Hacking_Video