In0ri - Defacement Detection With Deep Learning

In0ri is a defacement detection system utilizing a image-classification convolutional neural network. Introduction When monitoring a website, In0ri will periodically take a screenshot of the website then put it through a preprocessor that will resize the image down to 250x250px and numericalize the image before passing it onto the classifier. The core of the classifier is a convolutional neural network that is trained to detect the defacement of a website. If the monitored website is indeed, defaced, In0ri will send out warnings via email to the user.Requirement Python3 (version >=3.6) Docker Docker-compose Installation Cloning the repository git clone https://github.com/J4FSec/In0ri.gitcd In0ri Configuring email credentials to send notifications and agent keys from Edit the file FlaskApp/sendEmail.py EMAIL_ADDRESS = "foo@gmail.com"EMAIL_PASSWORD = "$uper$ecurePa$$word" Configure Telegram notification Edit the file chatbot.py CHAT_ID= 'foo' # Channel ID to send notifications toTOKEN = 'bar' # Bot token retrieved from @BotFather Starting In0ri docker-compose up -d Usage There's two ways to deploy and using In0ri: Running off crontab by periodically visiting the url. Internal agent running off the web server First Method: URL Check Visit the WebUI on https://<serverIP>:8080/ and click on "Register" then fill in the form and submit it. Second Method: Internal Agent Visit the WebUI on https://<serverIP>:8080/ and click on "Register" then fill in the form and submit it. Click on "Create Agent" then fill in the form and check your email for the Agent's key. On the web server that you wants to be monitored by In0ri, download the Agent folder from Github repository Installing the required packages for the internal Agent python3 -m pip install watchdogpython3 -m pip install requests Edit the file config.json in the same folder as agent nano config.json A key is sent to your email after registering the Agent on the WebUI rootPath is the root directory of the web application that you want to be monitored exludePath are the subfolders that you wants excluded from the scans apiServer is the URL to the API server of In0ri serverIP is the IP of the API server of In0ri { "id":"01", "key":"123123123", "rootPath":"/var/www/html", "excludePath":"", "apiServer":"http://<serverIP>:8088/checkdeface"} And run the Agent: python3 agent.py References Model training is handled by Shu Authors In0ri is built by Echidna with the help of Cu64 and Klone. Contributing Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change. Download In0ri
Read more...

Modelling and Detecting Lateral Movement
https://www.reddit.com/r/redteamsec/comments/oqciuf/modelling_and_detecting_lateral_movement/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://arxiv.org/pdf/2105.13442.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/oqciuf/modelling_and_detecting_lateral_movement/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
In0ri - Defacement Detection With Deep Learning

https://1.bp.blogspot.com/-37Gj6hYYBwE/YPifykm91UI/AAAAAAAAjUE/HMeWGZxigQEHDTmjKnmvF4eLBAUKfZ6cwCNcBGAsYHQ/w640-h640/logo_transparent.png
In0ri is a defacement detection system utilizing a image-classification convolutional neural network.

Introduction

When monitoring a website, In0ri will periodically take a screenshot of the website then put it through a preprocessor that will resize the image down to 250x250px and numericalize the image before passing it onto the classifier. The core of the classifier is a convolutional neural network that is trained to detect the defacement of a website. If the monitored website is indeed, defaced, In0ri will send out warnings via email to the user.
Requirement

* Python3 (version >=3.6)
* Docker
* Docker-compose

Installation

Cloning the repository

git clone https://github.com/J4FSec/In0ri.git
cd In0ri

Configuring email credentials to send notifications and agent keys from

Edit the file FlaskApp/sendEmail.py

EMAIL_ADDRESS = "foo@gmail.com"
EMAIL_PASSWORD = "$uper$ecurePa$$word"

Configure Telegram notification

Edit the file chatbot.py

CHAT_ID= 'foo' # Channel ID to send notifications to
TOKEN = 'bar' # Bot token retrieved from @BotFather

Starting In0ri

docker-compose up -d

Usage

There's two ways to deploy and using In0ri:

* Running off crontab by periodically visiting the url.
* Internal agent running off the web server

First Method: URL Check

Visit the WebUI on https://and click on "Register" then fill in the form and submit it.

Second Method: Internal Agent

Visit the WebUI on https://and click on "Register" then fill in the form and submit it.

Click on "Create Agent" then fill in the form and check your email for the Agent's key.

On the web server that you wants to be monitored by In0ri, download the Agent folder from Github repository

Installing the required packages for the internal Agent

python3 -m pip install watchdog
python3 -m pip install requests

Edit the file config.jsonin the same folder as agent

nano config.json

A keyis sent to your email after registering the Agent on the WebUI rootPathis the root directory of the web application that you want to be monitored exludePathare the subfolders that you wants excluded from the scans apiServeris the URL to the API server of In0ri serverIPis the IP of the API server of In0ri
{
"id":"01",
"key":"123123123",
"rootPath":"/var/www/html",
"excludePath":"",
"apiServer":"http://
And run the Agent:

python3 agent.py

References

Model training is handled by Shu

Authors

In0ri is built by Echidna with the help of Cu64 and Klone.

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Download In0ri

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tools to reset your computer password when you have no USB backups or ways to format the hard disk.

[Note: There is a disclaimer below]

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Pueden espiarnos los gobiernos y los ciberdelincuentes?

https://cdn-images-1.medium.com/max/2600/1*WljTKs4MX02yqiqbVPIpMA.jpeg
Mito o realidad sobre el espionaje informático a gran escala o de manera individual.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Полезные Telegram-боты 2021 часть 2

https://cdn-images-1.medium.com/max/800/0*Tdtjw-HUFk22qfiR.jpg
Привет любителям ботов, захотелось дополнить статью “Часть 1 тык” еще полезными работающими ботами.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Being productive in OSCP and beyond

https://cdn-images-1.medium.com/max/2000/0*37vXg0bWcgerIjpI.jpg
Get the most of yourself, and your environment

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Where can I find where hackers leaked data info?

Here in my country , hackers leaked an website of credit protection with millions of info.

After that , I had some weird calls and people trying to scam me like never before. They new all my info and even treated my dad. I need to know if my data was there so I can built a case against the company that leaked my info. I’m pretty sure it comes from that( one call almost imply that to me )

submitted by /u/Optimal_Bet4620
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Network basics
https://www.reddit.com/r/Pentesting/comments/oqezrx/network_basics/

Hey guys I'm a beginner and i wanna know where to learn networking for penetration testing, should i take ccna course (free course without a cert) or just take it from anywhere else? submitted by /u/Leo-non (https://www.reddit.com/user/Leo-non)
[link] (https://www.reddit.com/r/Pentesting/comments/oqezrx/network_basics/) [comments] (https://www.reddit.com/r/Pentesting/comments/oqezrx/network_basics/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Find lost device with imei and ip

Hi, I recently lost my device,currently the battery is empty but I managed to get the imei and the last ip adress from Google find my phone. I had GPS location and mobile data enabled. Which is the best way to find my device . The model is samsung galaxy a8 2018 model and I hasn't any samsung account connected unfortunately. Thank you all for your time, I would appreciate any kind of help.

submitted by /u/FV_Master
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Breaking into my old iPhone 6

I have an old iPhone 6, and I really can’t remember the passcode. I’ve tried breaking into it a bunch of times with all of the passcodes I can remember, but no luck— I’m locked out.

I believe it’s either running some version of IOS 12 or 13, most likely 12.5 or 13.0. (Not sure though.)

Is there any way to break into it? It has a few years of really treasured memories in it. :c

submitted by /u/heiwaone
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Secrete to Learning Anything Fast

https://cdn-images-1.medium.com/max/2600/1*7xaxgU5gLqGTgA9JB7XZDw.jpeg
It’s not unique. Secrete. Magic. It just works!

Continue reading on Upskilling »

___________________________
@hacking_Attack
@Hacking_Video

You will never be able to register or login at redacted.com

Hello, It’s me Bikram Kharal from Nepal.I am infosec learner and engineering student.Continue reading on Medium »
Read more...

You will never be able to register or login at redacted.com
https://medium.com/@themarkib/you-will-never-be-able-to-register-or-login-at-redacted-com-a775831c3bc4?source=rss------bug_bounty-5