Deep Web
Dr. Matthew Falder a Geophysics Professor That Was Also a Notorious Pedophile on the Deep Web

https://a.thumbs.redditmedia.com/bqONHMK9ONj8oc_PP7DpPp3wEdlyi8LuG1iflStz3e0.jpg submitted by /u/CockandBallTorturexO
[link] [comments]

hacking: security in practice
How is NK is able to hack into western corporations like sony being a isolated country?

This is a very high level question.

They are isolated from the rest of the world, if their intention is to only harm other countries why isn't their fiber optic cables are cut.

Is their network tied to China which might explain they are un-touchable almost?

submitted by /u/throttlemaster77
[link] [comments]

hacking: security in practice
Reaver WPS- is this old news? Alternatives to it?

is it still relevant to this day? Is there anything better that runs on kali linux? Reaver appears to be a dead horse since pretty much all router firmwares seem to lock it out after 1 or 2 tries with it. Is there anything that works with routers of this era? I keep getting the 60 second error or the recieve timeout occured error nonstop with nearly everything, even when I have confirmed my card is in monitor mode. Is there anything better application for this?

Also, just for the mod's sake, I am using my own equipment for this. Nothing evil. I am simply asking for a more relevant program to do this task. Don't cut my head off.

submitted by /u/National-Scale
[link] [comments]

Kali Linux Tutorials
Strafer : A Tool To Detect Potential Infections In Elasticsearch Instances

Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named “STRAFER” to detect potential infections in the Elasticsearch instances. The tool allows security researchers, penetration testers, and threat intelligence experts to detect compromised […]

The post Strafer : A Tool To Detect Potential Infections In Elasticsearch Instances appeared first on Kali Linux Tutorials.
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Web archive.

https://cdn-images-1.medium.com/max/1264/1*mhXsEMG0JaMli74UWqkkew.png
Have you ever wondered that what happens to your deleted posts on social media? Well, deletion of data is a big topic for itself. Some…

Continue reading on Medium »

Hacking on Medium
Hacking your way into the local ‘product’ design scene — A cheatsheet

https://cdn-images-1.medium.com/max/2600/0*tz7b7WHn_MeJ1P2W
Over the past couple of quarters, it’s been great to see tech and the startup scene in Pakistan pick up pace. Even with a mutating virus…

Continue reading on UX Planet »

Hacking on Medium
Terminal Escape injection

A terminal escape sequence is a special sequence of characters that is printed (like any other text). But, if the terminal understands the…

Continue reading on Medium »

Hacking on Medium
Social Engineering: The Art of Human Hacking

https://cdn-images-1.medium.com/max/2600/0*MXTVMzPEGla_q12t
A Look into the World of Social Engineering!!

Continue reading on Medium »

Mole - A Framework For Identifying And Exploiting Out-Of-Band Application Vulnerabilities

A framework for identifying and exploiting out-of-band (OOB) vulnerabilities. Installation & Setup Mole Install Python >= 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in config.yml (must be the same for the client and server) DNS Configuration You'll need to configure the DNS records in your registrar to point to your mole server. Minimally, you'll need an A record for the name server and an NS record configured. Mole can be configured to host other configuration options. Mailgun (Optional) Mailgun requires DNS entries to enable the service: https://help.mailgun.com/hc/en-us/articles/203637190-How-Do-I-Add-or-Delete-a-Domain- TLS Currently Mole does not support TLS natively. To implement TLS, use a reverse proxy such as nginx to terminate the TLS connection and forward traffic to the Mole server. Burp Suite Extension The Burp Suite Extension requires a separate Python 2.7 virtual environment due to the latest version of Jython only supporting 2.7. Below are the instructions for setting up the virtual environment and configuring the Extension. Create a new python2.7 virtualenv for burp/jython, virtualenv -p /usr/bin/python2.7 burp_venv Load the venv, source ./burp_venv/bin/activate Install the required packages, ./burp_venv/bin/pip -r requirements Configure the Python Environment by downloading and selecting the jython-standalone jar. Set the "Folder for loading modules" to the full path to burp_venv/lib/python2.7/site-packages that was created in steps 1-3. Click Add Set the Extension type to Python and select the mole_burp_extension.py file from the mole project directory. Click Next and if all goes well, there will be no errors on the load screen.Configuration Token domain - Your custom domain length - Length of the tokens (default 5) The token character set is ascii upper & lower, and digits. The length can be modified to meet needs such as constrained space for a payload. The number of tokens per length is listed below. 1 - 62 2 - 3844 3 - 238328 4 - 14776336 5 - 916132832 ssl - Configure payloads for https vs http ``server` - domain or IP of the Mole token server default_tags - list of default tags to add to all tokens. Useful for per-project/client tokens. Server api_key - API key used to authenticate requests to the mole API dns_addr - IP address used to respond to DNS queries db_conn - SQLAlchemy database URL. Default is a SQLite db in the root directory sqlite:///mole.db static_responses - list of DNS static response key/value pairs web_port - configure the listening web port dns_port -configure the listening dns port Notifications All notifications have an enabled flag that determines whether or not to trigger the notification on an interaction. Each notification plugin has its own configuration items. mailgun - configure domain, to, from, and api_key to enable mailgun email notifications slack - token and channel webhook - generic POST webhook Issues/Bugs I'm sure there are many, please create a new issue and fill out the template as best as you can for quick triage. Download Mole
Read more...

KitPloit - PenTest Tools!
Mole - A Framework For Identifying And Exploiting Out-Of-Band Application Vulnerabilities

https://1.bp.blogspot.com/-G4SnmIGlQ1g/YE6MCgPm1LI/AAAAAAAAVng/_Ts1qiMQNIQ2n2PWo7PYVmpCvzYo0XjiwCNcBGAsYHQ/w640-h400/OOB.png A framework for identifying and exploiting out-of-band (OOB) vulnerabilities. Installation & SetupMole InstallPython >= 3.6 virtualenv -p /usr/bin/python3 venvsource venv/bin/activate./venv/bin/pip3 install -r requirements.txtgit submodule update --init --recursiveSet an API key in config.yml(must be the same for the client and server) DNS ConfigurationYou'll need to configure the DNS records in your registrar to point to your mole server. Minimally, you'll need an Arecord for the name server and an NSrecord configured.

Mole can be configured to host other configuration options. Mailgun (Optional)Mailgun requires DNS entries to enable the service: https://help.mailgun.com/hc/en-us/articles/203637190-How-Do-I-Add-or-Delete-a-Domain- TLSCurrently Mole does not support TLS natively. To implement TLS, use a reverse proxy such as nginx to terminate the TLS connection and forward traffic to the Mole server. Burp Suite ExtensionThe Burp Suite Extension requires a separate Python 2.7 virtual environment due to the latest version of Jython only supporting 2.7. Below are the instructions for setting up the virtual environment and configuring the Extension.

1. Create a new python2.7 virtualenv for burp/jython, virtualenv -p /usr/bin/python2.7 burp_venv2. Load the venv, source ./burp_venv/bin/activate3. Install the required packages, ./burp_venv/bin/pip -r requirements4. Configure the Python Environment by downloading and selecting the jython-standalone jar.
5. Set the "Folder for loading modules" to the full path to burp_venv/lib/python2.7/site-packagesthat was created in steps 1-3. https://1.bp.blogspot.com/-53z9NzOrDJo/YE6MWNHzX2I/AAAAAAAAVnk/vjsFi57Qg9YEKk_5xmVQcnd7M4-nSpwjACNcBGAsYHQ/w640-h238/mole_1_burp_python_env.png 1. Click Add https://1.bp.blogspot.com/-uBrtnM3EiHw/YE6Ma0ftquI/AAAAAAAAVns/3ETgB3ZJkuMfH-GuIjL7MGcmdmg-9u8FQCNcBGAsYHQ/s16000/mole_2_burp_ext_add_1.png 1. Set the Extension type to Pythonand select the mole_burp_extension.pyfile from the mole project directory. https://1.bp.blogspot.com/-di2NDO2EU64/YE6MgarjeII/AAAAAAAAVnw/28mwlrkC4ngOnDOfCxSC_qEOpY2CYWoVwCNcBGAsYHQ/w640-h198/mole_3_burp_ext_add_2.png 1. Click Next and if all goes well, there will be no errors on the load screen. https://1.bp.blogspot.com/-YRA2FrXk5Bc/YE6Mk7RCZxI/AAAAAAAAVn0/qBMtUW1YmEwOoGPcLT6zUISOJAMbjO5QACNcBGAsYHQ/w640-h168/mole_4_burp_ext_success.png ConfigurationTokendomain- Your custom domain length- Length of the tokens (default 5)

The token character set is ascii upper & lower, and digits. The length can be modified to meet needs such as constrained space for a payload. The number of tokens per length is listed below.

* 1 - 62
* 2 - 3844
* 3 - 238328
* 4 - 14776336
* 5 - 916132832 ssl- Configure payloads for httpsvs http``server` - domain or IP of the Mole token server default_tags- list of default tags to add to all tokens. Useful for per-project/client tokens. Serverapi_key- API key used to authenticate requests to the mole API dns_addr- IP address used to respond to DNS queries db_conn- SQLAlchemy database URL. Default is a SQLite db in the root directory sqlite:///mole.dbstatic_responses- list of DNS static response key/value pairs web_port- configure the listening web port dns_port-con[...]

figure the listening dns port NotificationsAll notifications have an enabledflag that determines whether or not to trigger the notification on an interaction. Each notification plugin has its own configuration items. mailgun- configure domain, to, from, and api_keyto enable mailgun email notifications slack- tokenand channelwebhook- generic POST webhook Issues/BugsI'm sure there are many, please create a new issue and fill out the template as best as you can for quick triage. Download Mole

Mole - A Framework For Identifying And Exploiting Out-Of-Band Application Vulnerabilities
http://www.kitploit.com/2021/03/mole-framework-for-identifying-and.html

A framework for identifying and exploiting (https://www.kitploit.com/search/label/Exploiting) out-of-band (OOB) vulnerabilities.
Installation & Setup

Mole Install
Python >= 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in config.yml (must be the same for the client and server)
DNS Configuration
You'll need to configure the DNS records in your registrar to point to your mole server. Minimally, you'll need an A record for the name server and an NS record configured. Mole can be configured to host other configuration options.
Mailgun (Optional)
Mailgun requires DNS entries to enable the service: https://help.mailgun.com/hc/en-us/articles/203637190-How-Do-I-Add-or-Delete-a-Domain-
TLS
Currently Mole does not support TLS natively. To implement TLS, use a reverse (https://www.kitploit.com/search/label/Reverse) proxy such as nginx (https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/) to terminate the TLS connection and forward traffic (https://www.kitploit.com/search/label/Traffic) to the Mole server.
Burp Suite Extension
The Burp Suite Extension (https://www.kitploit.com/search/label/Burp%20Suite%20Extension) requires a separate Python 2.7 virtual environment due to the latest version of Jython only supporting 2.7. Below are the instructions for setting up the virtual environment and configuring the Extension. Create a new python2.7 virtualenv for burp/jython, virtualenv -p /usr/bin/python2.7 burp_venv Load the venv, source ./burp_venv/bin/activate Install the required packages, ./burp_venv/bin/pip -r requirements Configure the Python Environment by downloading and selecting the jython-standalone jar. Set the "Folder for loading modules" to the full path to burp_venv/lib/python2.7/site-packages that was created in steps 1-3.