Kali Linux Tutorials
WAF-A-MoLE : A Guided Mutation-Based Fuzzer For ML-based Web Application Firewalls

WAF-A-MoLE is a guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool for assessing the robustness of your product by letting WAF-A-MoLE […]

The post WAF-A-MoLE : A Guided Mutation-Based Fuzzer For ML-based Web Application Firewalls appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
S3-Account-Search : S3 Account Search

S3-Account-Search tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket (s3:getObject). Permission to list the contents of the bucket (s3:ListBucket). Additionally, you will need a role that you can […]

The post S3-Account-Search : S3 Account Search appeared first on Kali Linux Tutorials.

Introduction to Empire 4.0
https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/

submitted by /u/DLLCoolJ (https://www.reddit.com/user/DLLCoolJ)
[link] (https://youtu.be/zFlsxrGMScE) [comments] (https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/)

KitPloit - PenTest Tools!
GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled

https://1.bp.blogspot.com/-FSNANG-Fi0E/YN5oTHMZrcI/AAAAAAAAfkc/-ZgohKgHw_IPd2jvPrLHtPGulW4iqyHugCNcBGAsYHQ/w640-h528/GitDump_3_poc.png
GitDump dumps the source code from .git when the directory traversal is disabled
Requirements

* Python3

Tested on

* Windows
* Kali Linux

What it does

* Dump source code from website/.git directory when directory traversal is disabled.

How it works

* Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.).
* Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc.
* Download idx and pack files.
* Now you can run git checkout -- . to retrieve source code.

How to Use

* python3 git-dump.py https://website.com/.git/
* Create the output directory and dump all the .git files in it.
* After running above script type: cd output && git checkout -- .
* It will recover all source code.

TODO

* Search through git repository for secrets by digging deep into commit history and branches.

Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)
Download GitDump

Hacking on Medium
TryHackMe: Ignite — Writeup

https://cdn-images-1.medium.com/max/600/0*ZaGYW2XTbs87wVjj.png
Today, we will explain how to use a well known CVE to exploit a vulnerable CMS. The machine we use is called Ignite, and is available here.

Continue reading on Medium »

Hacking on Medium
Hacking Basics for EVERYONE (Even for “N00bs”)

https://cdn-images-1.medium.com/max/824/1*1xQIcXZHHUFPXCi2sCkjfA.png
Easy to understand (extremely) beginner friendly crash course on cybersec prerequisites by THM.

Continue reading on Medium »

Hacking on Medium
So today I am gonna make a writeup about Traverxec machine on HackTheBox platform.

https://cdn-images-1.medium.com/max/700/0*GEmatL1X3iuvJnxb.jpeg
Scanning

Continue reading on Medium »

Hacking on Medium
Heist-HTB-Writeup

https://cdn-images-1.medium.com/max/600/0*9gb3Wugo0gN6P0Yu.png
Today I ‘m gonna solve this windows machine.

Continue reading on Medium »

Hacking on Medium
Suplanting Antonio Banderas

https://cdn-images-1.medium.com/max/996/1*GTnrd0qviylron8EAEpIww.jpeg
How to impersonate any Spanish actor thanks to a programming glitch

Continue reading on Geek Culture »

Hacking on Medium
Flash news! SideCopy Malware Campaigns Targeting Entities in India. — CyberWorkx

https://cdn-images-1.medium.com/max/733/0*N155mIdZTTyK4FHW
Researchers from Cisco’s Talos intelligence has observed a SideCopy malware extending its campaign against Indian entities with the…

Continue reading on Medium »

Deep Web
Found a podcast I thought I’d share for those interested in the Silk Road

https://open.spotify.com/episode/09v8uDwuTOpQmgqlM6ty9k?si=XxUiovQnS_OGwX4q84_Chg&dl_branch=1

https://podcasts.apple.com/us/podcast/the-way-podcast/id1501033629?i=1000518818542

Sharing this for people who are into podcasts. I’ll copy and paste the description for those people:

In 2011 the Silk Road paved the way for selling drugs on the dark web. Here, anyone anywhere could buy any drugs they wanted safely and anonymously. What looked like an innocent libertarian marketplace for users had a dark underbelly. Eileen Ormsby, journalist and author of 8 books covering the dark web came on the show to discuss what was the Silk Road. Ormsby covered everything from law enforcement, to Dread Pirate Roberts, and even the Mongoose.

submitted by /u/Arebranchestreehands
[link] [comments]

Deep Web
Tips and tricks ? Help :)

Hi everyone i am very interested in browsing the deep web, just to look at pages and see the weird side of the internet, I have no plans to do anything illegal but only to read something fun and exciting, I am also super interested in IT security, so I want the highest security I can get for myself, now that I'm going to explore the web, so it's for my own security and to learn about IT security and to make myself anonymous, and yes I know you can not be 100% safe / anonymous.

what should I use / do? :)

submitted by /u/UNISPEKT
[link] [comments]