Download Nexfil (https://github.com/thewhiteh4t/nexfil)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Nexfil - OSINT Tool For Finding Profiles By Username

http://2.bp.blogspot.com/-LbSC0NQfxAM/YOJRwH9tGWI/AAAAAAAAfzc/yH9HhdSwfOARVoo7zVWah2bkAXdvdxZAwCK4BGAYYCw/w640-h320/nexfil_1-794324.jpeg
NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives.

If you like my work please star this project :D

If you find any errors or false positives or if you want to suggest more websites feel free to open an issue.
Features

* Fast, lookup can complete under 20 seconds
* Over 350 platforms are included
* Batch processing
* Usernames can be provided from commandline
* List of usernames can be provided from a file

* Results are automatically saved in txt file
* JSON and CSV file formats [Coming Soon]
* Proxy support [Coming Soon]
* Tor support [Coming Soon]

Installation

git clone https://github.com/thewhiteh4t/nexfil.git
cd nexfil
pip3 install -r requirements.txt

Usage

python3 nexfil.py -h
usage: nexfil.py [-h] [-u U] [-d D [D ...]] [-f F] [-l L] [-t T] [-v]

nexfil - Find social media profiles on the web | v1.0.0

optional arguments:
-h, --help show this help message and exit
-u U Specify username
-d D [D ...] Specify DNS Servers [Default : 1.1.1.1]
-f F Specify a file containing username list
-l L Specify multiple comma separated usernames
-t T Specify timeout [Default : 20]
-v Prints version

# Single username
python3 nexfil.py -u username

# Multiple *comma* separated usernames
python3 nexfil.py -l "user1, user2"

# Username list in a file
python3 nexfil.py -f users.txt

Demo

v1.0.0

http://3.bp.blogspot.com/-hRKwfHk1RPI/YOJRxtqgcNI/AAAAAAAAfzk/1w-oSxRi1K0LoWUUUj9d8luCa6dIFA2lgCK4BGAYYCw/w615-h640/nexfil_4_nexfil-701283.gif
Download Nexfil

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Instalação da ferramenta Ntopng

https://cdn-images-1.medium.com/max/600/0*1UnLTyPI3Bk73YeV.png
Ntopng é uma ferramenta passiva de monitoramento de rede focada em fluxos e estatísticas que podem ser obtidas a partir do tráfego…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

I see iSCSI — compromising DC backup

People aren’t kidding when they say “enumeration is key”. That’s actually how I was able to obtain access and download a company’s Domain…Continue reading on Medium »
Read more...

Pre-Denial Of Service (set-up 2FA on unverified account)

This is my first write-up , I’ll try to keep it short and simple.Continue reading on Medium »
Read more...

How I got my first Appreciation ?!

In a Responsible Disclosure Program.Continue reading on Medium »
Read more...

hacking: security in practice
Free Training on Windows Server 2019 Administration (WS-011) - Will Cover Full Course

Hi everyone,

I'm currently delivering training on Microsoft's WS-011 (Windows Server 2019 Administration) course. I'm also going to be doing training on most of their other courses for those that's interested. The training should be enough to be able to write the exam associated with each course plus it will greatly benefit you in the workplace.

I truly hope this helps someone out there that needs the help. I remember what it feels like wanting to learn something like these courses and needing to write the exams but not being able to find any resources, at least not any free ones that is.

I intend on doing this completely at no charge to help those that's sitting in the same boat I used to be in.

Free Training on Microsoft WS-011 (Server 2019)!

submitted by /u/Leather_Donut_7431
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
System / Software Hardening Best Practices Website

Hello everyone,

I was looking earlier at the best current practices for hardening my Firefox browser and wondering is there any website or forum that keeps a running account of what the best running configuration is security-wise for various hardware/software?

submitted by /u/leviathanjester
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any advice to start malware analysis?

I'd like to be a malware analyst when I grow up, but at the moment I still have to start university. I though decided to start getting into malwares since I got a decent experience into CTFs (especially in pwns and reverse). I found a book online (learning malware analysis, by Monnappa K A) and I was thinking on buying it, it is well recommended for beginners too. Now my questions are, has anyone read it already? Would you recommend it? Or even better, what would you recommend to get into malwares analysis as a beginner in the field?

Thanks in advance for your attention

submitted by /u/mattiaricciard
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is my Wifi Extender hacked?

Is it possible that my wifi extender is hacked? And if yes, what can I do about it? I didn’t have issues with it before, but now whenever I use I get a security warning from chrome, my computer ram and cpu is gets high for no reason, my computer uses energy even when asleep, websites won’t load even though there is a connection, and I constantly get disconnected from the wifi.

submitted by /u/wasta19
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jump start your cybersec journey

https://cdn-images-1.medium.com/max/680/1*ukRknxySPC1hsX5hZgeFvw.jpeg
With TryHackMe’s Pre-security path!

Continue reading on Tris Maguire »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Legit Deepweb Hacking Service?

Is it possible for a hacker to find out who is using my {stolen} phone? I know that the darn imei is still active but it’s considered low priority to the local PD (not to me I’m livid and stuck on petty at the moment). Anyone know of a legit hacking service (and have a link)? I’ve already tried http://ziagmjbpt47drkrk.onion/ and those guys never “reached out between 12-24 hours” as promised after I paid. Feel free to send in DMs thanks!

submitted by /u/T_Nic_Marie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Countering a university phishing attempt

https://external-preview.redd.it/Vt9f1vk-MjNcvqXbMFQ5es1n_87L9YXQbvE7M7Rgv1U.jpg?width=640&crop=smart&auto=webp&s=59799c7e778dcdc8219f5c450d3db1f6cb3e9659 submitted by /u/Illustrious_Seesaw17
[link] [comments]

hacking: security in practice
Advice?

I was raised in a toxic household and I’m pretty sure they hacked my laptop before I moved out and have access to all of my accounts, I’m trying to keep my personal life my personal life but any time I have to visit them for any reason they quote things I’ve posted on social media/things I’ve typed into my notes app on my iPhone despite blocking them and having never told them my usernames or personal email addresses, like they refer to things I’ve posted here on reddit and on twitter and facebook and comments I’ve made on youtube, the only contact they could have possibly had would be from hacking my chromebook, it almost seems they know my business more than I do, what do I do? Would buying a new chromebook and making all new accounts help? What about long-term accounts like facebook? I’ve got neumerous login notifications from locations I didnt log into no matter how many times I reset my password. This feels as tedious as recovering from identity theft, it’s so annoying

submitted by /u/NerdieBirdie93
[link] [comments]

hacking: security in practice
Connect to security camera server to view remote camera feeds

My parents are going on vacation and installed security cameras around the house, solely for the purpose of making sure i don't have my girlfriend over (I'm 20 going to school, working full time, am straight edge as can be, wtf?). I'm basically trying to see what the camera feeds are looking at, to make sure i don't have one chilling in my room or somewhere inside the house.

* The server is connected to our router via ethernet and has a single IP address, and the cameras are all connected to that server. Normally, it seems like I'd be able to log in to the server using the server's local IP (expected) but since I don't have the login I'm a bit restricted. Is there a way I can ssh into this server or something (i've tried using ssh to the local IP but it refuses connection)?
* I don't think any kind of brute force attack is possible because the login ip-blocks after 6 attempts (unless I spoof a new address every 6 attempts). Additionally, the server has the option to reset the password using a 'GUID' file, which I'm guessing is a file containing some string that is unique to the server, but this is risking leaving a trail.
* Is there a backdoor on the login page? It looks like there's an angular JS file making several references to userID and password from a scope, and if I can somehow access $scope I can return the values of the username and password which are accessible through the scope.

I'm not terribly versed in this stuff but I am versed in Python and know a bit of linux. I don't want to leave a trail by cutting wires or something. Correct me if I'm wrong, but this is 100% ethical. I'm dealing with abusive parents who I cannot simply talk to about this stuff. Help is greatly appreciated.

submitted by /u/seekingstars
[link] [comments]

Reflected XSS Through Insecure Dynamic Loading

Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...