RomBuster is a router exploitation (https://www.kitploit.com/search/label/Router%20Exploitation) tool that allows to disclosure network router admin password.
Features
Exploits vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in most popular routers such as D-Link, Zyxel, TP-Link and Huawei. Optimized to exploit multiple routers at one time from list with threading enabled. Simple CLI and API usage.
Installation
pip3 install git+https://github.com/EntySec/RomBuster
Basic usage
To use RomBuster just type rombuster in your terminal. exploitation tool that allows to disclosure network router admin password. optional arguments: -h, --help show this help message and exit -t, --threads Use threads for fastest work. -o OUTPUT, --output OUTPUT Output result to file. -i INPUT, --input INPUT Input file of addresses. -a ADDRESS, --address ADDRESS Single address. --shodan SHODAN Shodan API (https://www.kitploit.com/search/label/Shodan%20API) key for exploiting (https://www.kitploit.com/search/label/Exploiting) devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: rombuster [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

RomBuster is a router exploitation tool that allows to disclosure network
router admin password.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.

Examples
Exploiting single router Let's hack my router just for fun. rombuster -a 192.168.99.1 Exploiting routers from Internet Let's try to use Shodan search engine to exploit routers over Internet, we will use it with -t for fast exploitation. rombuster -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :) Exploiting routers from input file Let's try to use opened database of routers with -t for fast exploitation. rombuster -t -i routers.txt -o passwords.txt NOTE: It will exploit all routers in routers.txt list by their addresses and save all obtained passwords to passwords.txt.
API usage
RomBuster also has their own Python API that can be invoked by importing RomBuster to your code. from rombuster import RomBuster
Basic functions
There are all RomBuster basic functions that can be used to exploit specified router. exploit(address) - Exploit single router by given address.
Examples
Exploiting single router from rombuster import RomBuster

rombuster = RomBuster()
creds = rombuster.exploit('192.168.99.100')

print(creds)

Download RomBuster (https://github.com/EntySec/RomBuster)

Bug Bounty Program: Oddz Incentivised Testnet

Earn Up To $10,000 As RewardsContinue reading on oddz finance »
Read more...

Smart Contract Bug Bounty Program: Oddz Incentivised Testnet
https://medium.com/oddz-finance/bug-bounty-program-oddz-incentivised-testnet-1c345f604ed0?source=rss------bug_bounty-5

Earn Up To $10,000 As RewardsContinue reading on oddz finance » (https://medium.com/oddz-finance/bug-bounty-program-oddz-incentivised-testnet-1c345f604ed0?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
7 Unconventional Pieces of Password Wisdom

Challenging common beliefs about best practices in password hygiene.

Kali Linux Tutorials
EmailFinder : Search Emails From A Domain Through Search Engines

EmailFinder is a tool to search emails through Search Engines. The software is designed to check a company’s emails found in the search engines |_ Author: @JosueEncinar|_ Description: Search emails from a domain through search engines.|_ Version: 0.1b|_ Usage: emailfinder -d domain.com Installation > pip3 install emailfinder Upgrades are also available using > pip3 install emailfinder –upgrade Search […]

The post EmailFinder : Search Emails From A Domain Through Search Engines appeared first on Kali Linux Tutorials.

Hacking on Medium
Ready HTB Writeup

https://cdn-images-1.medium.com/max/1467/1*EyGr2nIqAvD6A5HIwMcPJQ.png
Hi everyone, this is my writeup for box “Ready” found on HackTheBox .

Continue reading on Medium »

Hacking on Medium
Ethical Hacking: Vulnerability Analysis — Notes

https://cdn-images-1.medium.com/max/2600/1*_GaMi6fpDPa6pi3y7Os5Fg.jpeg
This article is a collection of my personal notes taken while attending the courses entitled: Ethical Hacking: Vulnerability Analysis.

Continue reading on Medium »

KitPloit - PenTest Tools!
RomBuster - A Router Exploitation Tool That Allows To Disclosure Network Router Admin Password

https://1.bp.blogspot.com/--diL6TQbwUM/YND0_VNPE3I/AAAAAAAAc4Y/dRkFOFJub3kZalWmR47qhz3illsqPYEUQCNcBGAsYHQ/w640-h434/router_pass.jpg RomBuster is a router exploitation tool that allows to disclosure network router admin password. Features* Exploits vulnerabilities in most popular routers such as D-Link, Zyxel, TP-Linkand Huawei.
* Optimized to exploit multiple routers at one time from list with threading enabled.
* Simple CLI and API usage. Installationpip3 install git+https://github.com/EntySec/RomBusterBasic usageTo use RomBuster just type rombusterin your terminal.

exploitation tool that allows to disclosure network router admin password. optional arguments: -h, --help show this help message and exit -t, --threads Use threads for fastest work. -o OUTPUT, --output OUTPUT Output result to file. -i INPUT, --input INPUT Input file of addresses. -a ADDRESS, --address ADDRESS Single address. --shodan SHODAN Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: rombuster [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

RomBuster is a router exploitation tool that allows to disclosure network
router admin password.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye. ExamplesExploiting single router

Let's hack my router just for fun. rombuster -a 192.168.99.1Exploiting routers from Internet

Let's try to use Shodan search engine to exploit routers over Internet, we will use it with -tfor fast exploitation. rombuster -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgDNOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :)

Exploiting routers from input file

Let's try to use opened database of routers with -tfor fast exploitation. rombuster -t -i routers.txt -o passwords.txtNOTE: It will exploit all routers in routers.txtlist by their addresses and save all obtained passwords to passwords.txt. API usageRomBuster also has their own Python API that can be invoked by importing RomBuster to your code. from rombuster import RomBusterBasic functionsThere are all RomBuster basic functions that can be used to exploit specified router.

* exploit(address)- Exploit single router by given address. ExamplesExploiting single router from rombuster import RomBuster

rombuster = RomBuster()
creds = rombuster.exploit('192.168.99.100')

print(creds)Download RomBuster

HackTheBox or TryHackMe ?
https://www.reddit.com/r/Pentesting/comments/o7pq31/hackthebox_or_tryhackme/

<!-- SC_OFF -->I am curious about your opinions of these two, since I've heard some negativity about THM's support and ethics. That said, my goal is to break into the cyber security industry. I'm already studying for OSCP as I've used Kali for years, but I do lack lab environments / training. BTW, I have 25 years of IT experience. I was a Unix admin in the 90s, and spent 20+ years with Linux, and Cisco networking. My goal is to use that foundational knowledge, learn what's required for OSCP, and have a sandbox / lab I can use. Would HTB or THM be suitable? Would you choose one over the other? <!-- SC_ON --> submitted by /u/DuskThaw (https://www.reddit.com/user/DuskThaw)
[link] (https://www.reddit.com/r/Pentesting/comments/o7pq31/hackthebox_or_tryhackme/) [comments] (https://www.reddit.com/r/Pentesting/comments/o7pq31/hackthebox_or_tryhackme/)

hacking: security in practice
Your definition of hacking?

I would like to hear everybody's definition of hacking because I feel like the word is used very loosely and I want to know what this community considers it to be.

submitted by /u/Mouthybard25364
[link] [comments]

hacking: security in practice
Microsoft Azure Fundamentals (AZ-900) Free Training - Will Cover Full Course

Howdy everyone,

I'm doing free training on the Microsoft Azure Fundamentals Course (AZ-900). Will also be covering other Microsoft courses as well as courses from other vendors.

I will be covering the full AZ-900 course and my intention is to do this with other courses too. Really hoping this helps someone out there. This should be more than enough to be able to pass the Microsoft International Certification Exam and should also prove useful in the workplace for those that just want to learn more or those that need to troubleshoot something.

In case someone wants to point out that the AZ-900 specifically is also delivered for Free by Microsoft, yes I'm fully aware of that. You do however normally need to book that and can only attend on certain times. It also comes down to preference. Some people just connect better with other people's way of presenting something.

Have a look at my way of delivering and if you don't like it, well then don't watch it lol. I normally tend to go the extra mile with the topics. I don't just explain the theory you need to know for the exam but I also add a little extra. I also cover most topics practically by actually demonstrating them on the Microsoft Azure portal. :)

Enjoy!

Free Microsoft Azure AZ-900 Training!

submitted by /u/FunkyMonkey1360
[link] [comments]

Bypass go BRAAAAAAAAAA !!!!!

Hello to everyone, I hope you all are well in this pandemic.Continue reading on Medium »
Read more...