Kali Linux Tutorials
Volatility GUI : GUI For Volatility Forensics Tool

This is a GUI for Volatility forensics tool written in PyQT5. Prerequisites 1- Installed version of Volatility. 2- Install PyQT5. sudo apt-get install python3-pyqt5 3- Download Volatility GUI Configuration From the downloaded Volatility GUI, edit config.py file to specify 1- Python 2 bainary name or python 2 absolute path in python_bin. 2- Volatility binary absolute path in volatility_bin_loc. Then […]

The post Volatility GUI : GUI For Volatility Forensics Tool appeared first on Kali Linux Tutorials.

Hacking on Medium
Best Hacking Gadgets For Ethical Hackers

https://cdn-images-1.medium.com/max/2000/0*4pPS_DRqKJ9oj7Ci.jpg
Checkout some amazing gadgets for ethical hackers.

Continue reading on TheCyberGrabs »

Hacking on Medium
TAMUctf 2021 — Rust App LFI to Memory

TamuCTF

Continue reading on Medium »

KitPloit - PenTest Tools!
HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners

http://4.bp.blogspot.com/-BJlVYH49uKs/YNEgVQkPoaI/AAAAAAAAdSc/DhcgJDPJ6-AM0XlSFVMyEnfpKv2EVeAEwCK4BGAYYCw/w640-h404/HoneyCreds_1_honeycreds_screenshot-728277.png

HoneyCreds network credential injection to detect responder and other network poisoners.
Requirements

Requires Python 3.6+ (tested on Python 3.9)
smbprotocol
cffi
splunk-sdk


Installation

git clone https://github.com/Ben0xA/HoneyCreds.git
cd HoneyCreds
pip3 install -r requirements.txt


Running

python3 honeycreds.py


Settings

It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password.

Change these in honeycreds.conf

Choose a legit looking username

def_username = 'honeycreds'

This can match your current Short Domain

def_domain = 'XQQX'

Make this whatever you want. Note: HTTP requests will send this in plaintext

def_password = 'This is a honey cred account.'

The FQDN. Leave .local at the end.

def_fqdn = 'xqqx.local'

The hostname that DOES NOT EXIST but looks legit.

def_hostname = 'HNECRD01'

The log file and location

def_logfile = 'honeycreds.log'

Ability to turn SMB or HTTP on or off. Set to "OFF" to turn off.

SMB = 'ON'
HTTP = 'ON'

The time to pause in seconds between requests.

SMB_SLEEP = 5
HTTP_SLEEP = 12
Download HoneyCreds

Install Burp Suite [v2021.5.2] Pro on Windows
https://medium.com/@sherlock297/install-burp-suite-v2021-5-2-pro-on-windows-eaa2bcd4894f?source=rss------bug_bounty-5

Steps to Install Latest Burp Suite Pro v2021.5.2 on Windows.Continue reading on Medium » (https://medium.com/@sherlock297/install-burp-suite-v2021-5-2-pro-on-windows-eaa2bcd4894f?source=rss------bug_bounty-5)

How to find out about vulnerabilities in web applications before attackers

Haven’t seen you for a long time, right?Continue reading on Medium »
Read more...

Install Burp Suite [v2021.5.2] Pro on Windows

Steps to Install Latest Burp Suite Pro v2021.5.2 on Windows.Continue reading on Medium »
Read more...

Deep Web
suicide video - suicide? real?

https://external-preview.redd.it/dP_bKLDluS8rN9KWBTuAnrmgUsMaUSAPFzBhhZwIKqc.jpg?width=320&crop=smart&auto=webp&s=16dfc6d8c149f34401089b7a2ffa3d4974d09c3e submitted by /u/cat-fraud
[link] [comments]

Deep Web
News articles on dark web dolls

A few weeks ago there was a post here about the famous "lolita slave dolls" and the consensus seemed to be that it was just another dark web urban myth based on the creepypasta, and all content/photos are fake. I cant find the post/comment anymore but a user mentioned this did in fact occur in Mexico a couple of years ago and dealings took place through the dark/deep web.

I've looked all over and apart from the odd youtube comment all I could find was a facebook article on the story - I am unable to read spanish so I can´t be sure if it is fake or not. I will link below.

Has anyone heard of something similar/is the story fake?

https://www.facebook.com/notihora/posts/1432680000171986

https://www.facebook.com/587859931331082/posts/encuentran-siete-jovencitas-vivas-sin-brazos-ni-piernas-en-cuernavacala-tarde-de/1539683559482043/

submitted by /u/dylstan
[link] [comments]

Elevating Cross-Frame Scripting (why it matters more than experts think…)
https://ethr.medium.com/elevating-cross-frame-scripting-why-it-matters-more-than-experts-think-be6dd7ffc78c?source=rss------bug_bounty-5

Are you able to hijack the source of an iFrame, or execute JavaScript inside? This attack (called an XFS attack) typically is considered…Continue reading on Medium » (https://ethr.medium.com/elevating-cross-frame-scripting-why-it-matters-more-than-experts-think-be6dd7ffc78c?source=rss------bug_bounty-5)

hacking: security in practice
Script that can download videos

I was wondering if anyone on here could make a script that will download videos from a web page.

Specifically this page https://www.cbtnuggets.com/learn/it-training/playlist/nrn:playlist:certification:5e0a78b76be15b00159a71d1/1?autostart=1

I want to download the entire course so I can watch offline on my laptop.

submitted by /u/aspiller98
[link] [comments]

Elevating Cross-Frame Scripting (why it matters more than experts think…)

Are you able to hijack the source of an iFrame, or execute JavaScript inside? This attack (called an XFS attack) typically is considered…Continue reading on Medium »
Read more...

Kali Linux Tutorials
Aggrokatz : An Aggressor Plugin Extension For Cobalt Strike Which Enables Pypykatz To Interface With The Beacons Remotely

aggrokatz is an Aggressor plugin extension for CobaltStrike which enables pypykatz to interface with the beacons remotely.The current version of aggrokatz allows pypykatz to parse LSASS dump files and Registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon (Cobalt Strike is already there anyhow). In the future this project aims […]

The post Aggrokatz : An Aggressor Plugin Extension For Cobalt Strike Which Enables Pypykatz To Interface With The Beacons Remotely appeared first on Kali Linux Tutorials.