Introduction to Empire 4.0
https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/
submitted by /u/DLLCoolJ (https://www.reddit.com/user/DLLCoolJ)
[link] (https://youtu.be/zFlsxrGMScE) [comments] (https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/)
https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/
submitted by /u/DLLCoolJ (https://www.reddit.com/user/DLLCoolJ)
[link] (https://youtu.be/zFlsxrGMScE) [comments] (https://www.reddit.com/r/redteamsec/comments/ofh750/introduction_to_empire_40/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled
https://1.bp.blogspot.com/-FSNANG-Fi0E/YN5oTHMZrcI/AAAAAAAAfkc/-ZgohKgHw_IPd2jvPrLHtPGulW4iqyHugCNcBGAsYHQ/w640-h528/GitDump_3_poc.png
GitDump dumps the source code from .git when the directory traversal is disabled
Requirements
* Python3
Tested on
* Windows
* Kali Linux
What it does
* Dump source code from website/.git directory when directory traversal is disabled.
How it works
* Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.).
* Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc.
* Download idx and pack files.
* Now you can run git checkout -- . to retrieve source code.
How to Use
* python3 git-dump.py https://website.com/.git/
* Create the output directory and dump all the .git files in it.
* After running above script type:
* It will recover all source code.
TODO
* Search through git repository for secrets by digging deep into commit history and branches.
Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)
Download GitDump
GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled
https://1.bp.blogspot.com/-FSNANG-Fi0E/YN5oTHMZrcI/AAAAAAAAfkc/-ZgohKgHw_IPd2jvPrLHtPGulW4iqyHugCNcBGAsYHQ/w640-h528/GitDump_3_poc.png
GitDump dumps the source code from .git when the directory traversal is disabled
Requirements
* Python3
Tested on
* Windows
* Kali Linux
What it does
* Dump source code from website/.git directory when directory traversal is disabled.
How it works
* Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.).
* Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc.
* Download idx and pack files.
* Now you can run git checkout -- . to retrieve source code.
How to Use
* python3 git-dump.py https://website.com/.git/
* Create the output directory and dump all the .git files in it.
* After running above script type:
cd output && git checkout -- .* It will recover all source code.
TODO
* Search through git repository for secrets by digging deep into commit history and branches.
Credits Sean B. Palmer for his index file parser. (https://github.com/sbp/gin)
Download GitDump
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe: Ignite — Writeup
https://cdn-images-1.medium.com/max/600/0*ZaGYW2XTbs87wVjj.png
Today, we will explain how to use a well known CVE to exploit a vulnerable CMS. The machine we use is called Ignite, and is available here.
Continue reading on Medium »
TryHackMe: Ignite — Writeup
https://cdn-images-1.medium.com/max/600/0*ZaGYW2XTbs87wVjj.png
Today, we will explain how to use a well known CVE to exploit a vulnerable CMS. The machine we use is called Ignite, and is available here.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking Basics for EVERYONE (Even for “N00bs”)
https://cdn-images-1.medium.com/max/824/1*1xQIcXZHHUFPXCi2sCkjfA.png
Easy to understand (extremely) beginner friendly crash course on cybersec prerequisites by THM.
Continue reading on Medium »
Hacking Basics for EVERYONE (Even for “N00bs”)
https://cdn-images-1.medium.com/max/824/1*1xQIcXZHHUFPXCi2sCkjfA.png
Easy to understand (extremely) beginner friendly crash course on cybersec prerequisites by THM.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Heist-HTB-Writeup
https://cdn-images-1.medium.com/max/600/0*9gb3Wugo0gN6P0Yu.png
Today I ‘m gonna solve this windows machine.
Continue reading on Medium »
Heist-HTB-Writeup
https://cdn-images-1.medium.com/max/600/0*9gb3Wugo0gN6P0Yu.png
Today I ‘m gonna solve this windows machine.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Suplanting Antonio Banderas
https://cdn-images-1.medium.com/max/996/1*GTnrd0qviylron8EAEpIww.jpeg
How to impersonate any Spanish actor thanks to a programming glitch
Continue reading on Geek Culture »
Suplanting Antonio Banderas
https://cdn-images-1.medium.com/max/996/1*GTnrd0qviylron8EAEpIww.jpeg
How to impersonate any Spanish actor thanks to a programming glitch
Continue reading on Geek Culture »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Flash news! SideCopy Malware Campaigns Targeting Entities in India. — CyberWorkx
https://cdn-images-1.medium.com/max/733/0*N155mIdZTTyK4FHW
Researchers from Cisco’s Talos intelligence has observed a SideCopy malware extending its campaign against Indian entities with the…
Continue reading on Medium »
Flash news! SideCopy Malware Campaigns Targeting Entities in India. — CyberWorkx
https://cdn-images-1.medium.com/max/733/0*N155mIdZTTyK4FHW
Researchers from Cisco’s Talos intelligence has observed a SideCopy malware extending its campaign against Indian entities with the…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
Found a podcast I thought I’d share for those interested in the Silk Road
https://open.spotify.com/episode/09v8uDwuTOpQmgqlM6ty9k?si=XxUiovQnS_OGwX4q84_Chg&dl_branch=1
https://podcasts.apple.com/us/podcast/the-way-podcast/id1501033629?i=1000518818542
Sharing this for people who are into podcasts. I’ll copy and paste the description for those people:
In 2011 the Silk Road paved the way for selling drugs on the dark web. Here, anyone anywhere could buy any drugs they wanted safely and anonymously. What looked like an innocent libertarian marketplace for users had a dark underbelly. Eileen Ormsby, journalist and author of 8 books covering the dark web came on the show to discuss what was the Silk Road. Ormsby covered everything from law enforcement, to Dread Pirate Roberts, and even the Mongoose.
submitted by /u/Arebranchestreehands
[link] [comments]
Found a podcast I thought I’d share for those interested in the Silk Road
https://open.spotify.com/episode/09v8uDwuTOpQmgqlM6ty9k?si=XxUiovQnS_OGwX4q84_Chg&dl_branch=1
https://podcasts.apple.com/us/podcast/the-way-podcast/id1501033629?i=1000518818542
Sharing this for people who are into podcasts. I’ll copy and paste the description for those people:
In 2011 the Silk Road paved the way for selling drugs on the dark web. Here, anyone anywhere could buy any drugs they wanted safely and anonymously. What looked like an innocent libertarian marketplace for users had a dark underbelly. Eileen Ormsby, journalist and author of 8 books covering the dark web came on the show to discuss what was the Silk Road. Ormsby covered everything from law enforcement, to Dread Pirate Roberts, and even the Mongoose.
submitted by /u/Arebranchestreehands
[link] [comments]
Deep Web
Tips and tricks ? Help :)
Hi everyone i am very interested in browsing the deep web, just to look at pages and see the weird side of the internet, I have no plans to do anything illegal but only to read something fun and exciting, I am also super interested in IT security, so I want the highest security I can get for myself, now that I'm going to explore the web, so it's for my own security and to learn about IT security and to make myself anonymous, and yes I know you can not be 100% safe / anonymous.
what should I use / do? :)
submitted by /u/UNISPEKT
[link] [comments]
Tips and tricks ? Help :)
Hi everyone i am very interested in browsing the deep web, just to look at pages and see the weird side of the internet, I have no plans to do anything illegal but only to read something fun and exciting, I am also super interested in IT security, so I want the highest security I can get for myself, now that I'm going to explore the web, so it's for my own security and to learn about IT security and to make myself anonymous, and yes I know you can not be 100% safe / anonymous.
what should I use / do? :)
submitted by /u/UNISPEKT
[link] [comments]
reddit
Tips and tricks ? Help :)
Hi everyone i am very interested in browsing the deep web, just to look at pages and see the weird side of the internet, I have no plans to do...
Deep Web
Please Help my Dog [urgent]
So I am no longer able to afford my dogs medicine from the vet due to unforeseen circumstances, and I will now give a bit of backstory.
My dog was diagnosed with Cushing disease and he needs a medicine known as trilostane/vetoryl. It costs me 95 dollars every 15 days and I'm not able to keep this up. He is an older dog and I'm not sure if he will be able to handle coming off his meds.
I tried to use a cheaper online pharmacy but my veterinarian won't transfer the prescription out to anywhere because he wants to keep the very profitable client that is my poor dog named Dutch.
I know this may be dancing the line in terms of rules, but do you guys know of any pharmacies on the deep web that may carry this sort of thing? Normally I wouldn't even ask but I don't know where to look. I've ordered various things for myself on the deep web but unfortunately and unsurprisingly, generic dog meds are not a popular category on the marketplaces I normally use.
submitted by /u/ShermanWert
[link] [comments]
Please Help my Dog [urgent]
So I am no longer able to afford my dogs medicine from the vet due to unforeseen circumstances, and I will now give a bit of backstory.
My dog was diagnosed with Cushing disease and he needs a medicine known as trilostane/vetoryl. It costs me 95 dollars every 15 days and I'm not able to keep this up. He is an older dog and I'm not sure if he will be able to handle coming off his meds.
I tried to use a cheaper online pharmacy but my veterinarian won't transfer the prescription out to anywhere because he wants to keep the very profitable client that is my poor dog named Dutch.
I know this may be dancing the line in terms of rules, but do you guys know of any pharmacies on the deep web that may carry this sort of thing? Normally I wouldn't even ask but I don't know where to look. I've ordered various things for myself on the deep web but unfortunately and unsurprisingly, generic dog meds are not a popular category on the marketplaces I normally use.
submitted by /u/ShermanWert
[link] [comments]
reddit
Please Help my Dog [urgent]
So I am no longer able to afford my dogs medicine from the vet due to unforeseen circumstances, and I will now give a bit of backstory. My dog...
hacking: security in practice
Acquisition platforms for mid-market software exploits? (US)
Preface by saying I consider myself a noob as such most of what I research revolves around what would be considered "mid-market" or industry-specific software (fewer eyes on it, better for learning). I've sort of sat a couple of exploits of different enterprise software (chained, but fully developed), but I have no idea what I can do with them. Is there any vanilla method to get compensated for these exploits that would otherwise not be acquired through regular channels like ZDI? I understand I wouldn't be drowning in cash but student loans are going to kick in soon for me, so yeah, money
submitted by /u/base64_drop
[link] [comments]
Acquisition platforms for mid-market software exploits? (US)
Preface by saying I consider myself a noob as such most of what I research revolves around what would be considered "mid-market" or industry-specific software (fewer eyes on it, better for learning). I've sort of sat a couple of exploits of different enterprise software (chained, but fully developed), but I have no idea what I can do with them. Is there any vanilla method to get compensated for these exploits that would otherwise not be acquired through regular channels like ZDI? I understand I wouldn't be drowning in cash but student loans are going to kick in soon for me, so yeah, money
submitted by /u/base64_drop
[link] [comments]
reddit
Acquisition platforms for mid-market software exploits? (US)
Preface by saying I consider myself a noob as such most of what I research revolves around what would be considered "mid-market" or...
hacking: security in practice
Parrot OS Security: OVA or normal installation?
I want to get started with Parrot OS since I prefer it over Kali and I plan on using it in Virtual Box on top of my Windows installation. Is it worth downloading the standard ISO and install it inside of VBox or is is better to use the pre-made OVA to minimise work? Do I lose anything if I choose the OVA?
submitted by /u/KingWaffleIII
[link] [comments]
Parrot OS Security: OVA or normal installation?
I want to get started with Parrot OS since I prefer it over Kali and I plan on using it in Virtual Box on top of my Windows installation. Is it worth downloading the standard ISO and install it inside of VBox or is is better to use the pre-made OVA to minimise work? Do I lose anything if I choose the OVA?
submitted by /u/KingWaffleIII
[link] [comments]
reddit
Parrot OS Security: OVA or normal installation?
I want to get started with Parrot OS since I prefer it over Kali and I plan on using it in Virtual Box on top of my Windows installation. Is it...