An opensource tool for scanning (https://www.kitploit.com/search/label/Scanning) Azure (https://www.kitploit.com/search/label/Azure) blob storage accounts for publicly opened blobs.
BlobHunter is a part of "Hunting Azure Blobs Exposes Millions of Sensitive Files" research:
https://www.cyberark.com/resources/threat-research-blog/hunting-azure-blobs-exposes-millions-of-sensitive-files
Overview
BlobHunter helps you identify Azure blob storage containers (https://www.kitploit.com/search/label/Containers) which store files that are publicly available to anyone with an internet connection.
The tool will help mitigate risk by identifying poorly configured containers that store sensitive data, which is specifically helpful in larger scale Azure subscriptions where there are a significant number of storage accounts that could be hard to track.
BlobHunter produces an informative csv result file that provides important details on each publicly opened container (https://www.kitploit.com/search/label/Container) in the scanned environment.
Requirements
Python 3.5+ Azure CLI requirements.txt packages Azure user with one of the following built-in roles (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles): Owner (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner) Contributor (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor) Storage Account Contributor (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#storage-account-contributor) Or any Azure user with a role that allows to perform the following Azure actions: Microsoft.Resources/subscriptions/read
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Storage/storageAccounts/read
Microsoft.Storage/storageAccounts/listkeys/action
Microsoft.Storage/storageAccounts/blobServices/containers/read
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read

Build

Example for installation on Ubuntu:
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash pip3 install -r requirements.txt
Usage
Simply run python3 BlobHunter.py
If you are not logged in in the Azure CLI, a browser window will be prompted at you for inserting your Azure user credentials.
References
For any question or feedback, please contact Daniel Niv (https://github.com/DanielNiv), Asaf Hecht (https://twitter.com/Hechtov) and CyberArk Labs.

Download BlobHunter (https://github.com/cyberark/BlobHunter)

BlobHunter - Find Exposed Data In Azure With This Public Blob Scanner

An opensource tool for scanning Azure blob storage accounts for publicly opened blobs. BlobHunter is a part of "Hunting Azure Blobs Exposes Millions of Sensitive Files" research: https://www.cyberark.com/resources/threat-research-blog/hunting-azure-blobs-exposes-millions-of-sensitive-filesOverview BlobHunter helps you identify Azure blob storage containers which store files that are publicly available to anyone with an internet connection. The tool will help mitigate risk by identifying poorly configured containers that store sensitive data, which is specifically helpful in larger scale Azure subscriptions where there are a significant number of storage accounts that could be hard to track. BlobHunter produces an informative csv result file that provides important details on each publicly opened container in the scanned environment. Requirements Python 3.5+ Azure CLI requirements.txt packages Azure user with one of the following built-in roles: Owner Contributor Storage Account Contributor Or any Azure user with a role that allows to perform the following Azure actions: Microsoft.Resources/subscriptions/readMicrosoft.Resources/subscriptions/resourceGroups/readMicrosoft.Storage/storageAccounts/readMicrosoft.Storage/storageAccounts/listkeys/actionMicrosoft.Storage/storageAccounts/blobServices/containers/readMicrosoft.Storage/storageAccounts/blobServices/containers/blobs/read Build Example for installation on Ubuntu: curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash pip3 install -r requirements.txt Usage Simply run python3 BlobHunter.py If you are not logged in in the Azure CLI, a browser window will be prompted at you for inserting your Azure user credentials. References For any question or feedback, please contact Daniel Niv, Asaf Hecht and CyberArk Labs. Download BlobHunter
Read more...

Hacking on Medium
The find command

https://cdn-images-1.medium.com/max/600/0*d72rtc_pfCRjwB5X.png
A learn-by-doing approach to the find command

Continue reading on Medium »

KitPloit - PenTest Tools!
BlobHunter - Find Exposed Data In Azure With This Public Blob Scanner

https://1.bp.blogspot.com/-4qMVd6j3NnM/YND2zg8oreI/AAAAAAAAc5g/4EW4Gi9rD6UzR3-JHP42oSk5q1pjiTq0QCNcBGAsYHQ/w640-h370/BlobHunter.png
An opensource tool for scanning Azure blob storage accounts for publicly opened blobs.
BlobHunter is a part of "Hunting Azure Blobs Exposes Millions of Sensitive Files" research:
https://www.cyberark.com/resources/threat-research-blog/hunting-azure-blobs-exposes-millions-of-sensitive-files
Overview

BlobHunter helps you identify Azure blob storage containers which store files that are publicly available to anyone with an internet connection.
The tool will help mitigate risk by identifying poorly configured containers that store sensitive data, which is specifically helpful in larger scale Azure subscriptions where there are a significant number of storage accounts that could be hard to track.
BlobHunter produces an informative csv result file that provides important details on each publicly opened container in the scanned environment.

Requirements

1.
Python 3.5+

2.
Azure CLI

3.
requirements.txtpackages

4.
Azure user with one of the following built-in roles:

* Owner
* Contributor
* Storage Account Contributor

Or any Azure user with a role that allows to perform the following Azure actions:

Microsoft.Resources/subscriptions/read
Microsoft.Resources/subscriptions/resourceGroups/read
Microsoft.Storage/storageAccounts/read
Microsoft.Storage/storageAccounts/listkeys/action
Microsoft.Storage/storageAccounts/blobServices/containers/read
Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read

Build

Example for installation on Ubuntu:

curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash

pip3 install -r requirements.txt

Usage

Simply run

python3 BlobHunter.py


If you are not logged in in the Azure CLI, a browser window will be prompted at you for inserting your Azure user credentials.
References

For any question or feedback, please contact Daniel Niv, Asaf Hecht and CyberArk Labs.
Download BlobHunter

hacking: security in practice
How to scan my local network for cameras and devices with angryipscanner?

I got everything except what to put in for the IP range. I tried my public IP for the first and then adding a larger number at the end for the final one. I can't find any living hosts, but I know for fact there are some. Can anyone help me out?

submitted by /u/o1blique1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
تحميل برنامج happy mod تهكير الالعاب

https://cdn-images-1.medium.com/max/600/0*QjhNAmT_NNMHUq6S.jpg
اقرأ ايضا:تحميل برنامج الاسطورة التحديث الاخير ostora tv 2021

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to set up Neovim 0.5 + Modern plugins (LSP, Treesitter, Fuzzy finder, etc)

https://cdn-images-1.medium.com/max/2544/1*VQKRM3hsEBpqso2h9gEMZQ.png
IDE-like features based on LSP and Treesitter, fuzzy finder, and status line

Continue reading on Dev as Life »

___________________________
@hacking_Attack
@Hacking_Video

Can you HACK it? Quick peek into the training colleges offer for ethical hacking.
https://www.reddit.com/r/Pentesting/comments/o82592/can_you_hack_it_quick_peek_into_the_training/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/L3av3NoTrac3s (https://www.reddit.com/user/L3av3NoTrac3s)
[link] (https://youtu.be/VlGghu0stbg) [comments] (https://www.reddit.com/r/Pentesting/comments/o82592/can_you_hack_it_quick_peek_into_the_training/)

___________________________
@hacking_Attack
@Hacking_Video

Recon for Low Performance Computers -The Poor Man Recon
https://rejinoldpearson.medium.com/recon-for-low-performance-computers-the-poor-man-recon-f73fb876168b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey all, My name is Rejinold Pearson. Today in this session we are gonna be setting up a high performance hacking lab that will speed up…Continue reading on Medium » (https://rejinoldpearson.medium.com/recon-for-low-performance-computers-the-poor-man-recon-f73fb876168b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Recommendations / Info for Down Under.

Seeking a heads up / pointed in the right direction for "online shopping" to make it over to NZ. Anyone , this year had some joy?

submitted by /u/kermit12345678
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Recon for Low Performance Computers -The Poor Man’s Recon

Hey all, My name is Rejinold Pearson. Today in this session we are gonna be setting up a high performance hacking lab that will speed up…Continue reading on Medium »
Read more...

Kali Linux Tutorials
BlueCloud : Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

BlueCloud , a Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small HELK + Velociraptor R&D lab. Use Cases EDR Testing lab Penetration […]

The post BlueCloud : Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video