A framework for identifying and exploiting (https://www.kitploit.com/search/label/Exploiting) out-of-band (OOB) vulnerabilities.
Installation & Setup
Mole Install
Python >= 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in config.yml (must be the same for the client and server)
DNS Configuration
You'll need to configure the DNS records in your registrar to point to your mole server. Minimally, you'll need an A record for the name server and an NS record configured. Mole can be configured to host other configuration options.
Mailgun (Optional)
Mailgun requires DNS entries to enable the service: https://help.mailgun.com/hc/en-us/articles/203637190-How-Do-I-Add-or-Delete-a-Domain-
TLS
Currently Mole does not support TLS natively. To implement TLS, use a reverse (https://www.kitploit.com/search/label/Reverse) proxy such as nginx (https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/) to terminate the TLS connection and forward traffic (https://www.kitploit.com/search/label/Traffic) to the Mole server.
Burp Suite Extension
The Burp Suite Extension (https://www.kitploit.com/search/label/Burp%20Suite%20Extension) requires a separate Python 2.7 virtual environment due to the latest version of Jython only supporting 2.7. Below are the instructions for setting up the virtual environment and configuring the Extension. Create a new python2.7 virtualenv for burp/jython, virtualenv -p /usr/bin/python2.7 burp_venv Load the venv, source ./burp_venv/bin/activate Install the required packages, ./burp_venv/bin/pip -r requirements Configure the Python Environment by downloading and selecting the jython-standalone jar. Set the "Folder for loading modules" to the full path to burp_venv/lib/python2.7/site-packages that was created in steps 1-3.
Installation & Setup
Mole Install
Python >= 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in config.yml (must be the same for the client and server)
DNS Configuration
You'll need to configure the DNS records in your registrar to point to your mole server. Minimally, you'll need an A record for the name server and an NS record configured. Mole can be configured to host other configuration options.
Mailgun (Optional)
Mailgun requires DNS entries to enable the service: https://help.mailgun.com/hc/en-us/articles/203637190-How-Do-I-Add-or-Delete-a-Domain-
TLS
Currently Mole does not support TLS natively. To implement TLS, use a reverse (https://www.kitploit.com/search/label/Reverse) proxy such as nginx (https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/) to terminate the TLS connection and forward traffic (https://www.kitploit.com/search/label/Traffic) to the Mole server.
Burp Suite Extension
The Burp Suite Extension (https://www.kitploit.com/search/label/Burp%20Suite%20Extension) requires a separate Python 2.7 virtual environment due to the latest version of Jython only supporting 2.7. Below are the instructions for setting up the virtual environment and configuring the Extension. Create a new python2.7 virtualenv for burp/jython, virtualenv -p /usr/bin/python2.7 burp_venv Load the venv, source ./burp_venv/bin/activate Install the required packages, ./burp_venv/bin/pip -r requirements Configure the Python Environment by downloading and selecting the jython-standalone jar. Set the "Folder for loading modules" to the full path to burp_venv/lib/python2.7/site-packages that was created in steps 1-3.
Set the Extension type to Python and select the mole_burp_extension.py file from the mole project directory.
Click Next and if all goes well, there will be no errors on the load screen.
Configuration
Token
domain - Your custom domain length - Length of the tokens (default 5) The token character set is ascii upper & lower, and digits. The length can be modified to meet needs such as constrained space for a payload. The number of tokens per length is listed below. 1 - 62 2 - 3844 3 - 238328 4 - 14776336 5 - 916132832 ssl - Configure payloads for https vs http ``server` - domain or IP of the Mole token server default_tags - list of default tags to add to all tokens. Useful for per-project/client tokens.
Server
api_key - API key used to authenticate requests to the mole API dns_addr - IP address used to respond to DNS queries db_conn - SQLAlchemy (https://www.sqlalchemy.org/) database URL (https://docs.sqlalchemy.org/en/13/core/engines.html). Default is a SQLite db in the root directory sqlite:///mole.db static_responses - list of DNS static response key/value pairs web_port - configure the listening web port dns_port -configure the listening dns port
Notifications
All notifications have an enabled flag that determines whether or not to trigger the notification on an interaction. Each notification plugin has its own configuration items. mailgun - configure domain, to, from, and api_key to enable mailgun (https://www.mailgun.com/) email notifications slack - token and channel webhook - generic POST webhook
Issues/Bugs
I'm sure there are many, please create a new issue (https://github.com/ztgrace/mole/issues) and fill out the template as best as you can for quick triage.
Download Mole (https://github.com/ztgrace/mole)
Token
domain - Your custom domain length - Length of the tokens (default 5) The token character set is ascii upper & lower, and digits. The length can be modified to meet needs such as constrained space for a payload. The number of tokens per length is listed below. 1 - 62 2 - 3844 3 - 238328 4 - 14776336 5 - 916132832 ssl - Configure payloads for https vs http ``server` - domain or IP of the Mole token server default_tags - list of default tags to add to all tokens. Useful for per-project/client tokens.
Server
api_key - API key used to authenticate requests to the mole API dns_addr - IP address used to respond to DNS queries db_conn - SQLAlchemy (https://www.sqlalchemy.org/) database URL (https://docs.sqlalchemy.org/en/13/core/engines.html). Default is a SQLite db in the root directory sqlite:///mole.db static_responses - list of DNS static response key/value pairs web_port - configure the listening web port dns_port -configure the listening dns port
Notifications
All notifications have an enabled flag that determines whether or not to trigger the notification on an interaction. Each notification plugin has its own configuration items. mailgun - configure domain, to, from, and api_key to enable mailgun (https://www.mailgun.com/) email notifications slack - token and channel webhook - generic POST webhook
Issues/Bugs
I'm sure there are many, please create a new issue (https://github.com/ztgrace/mole/issues) and fill out the template as best as you can for quick triage.
Download Mole (https://github.com/ztgrace/mole)
Cross Site Port Attack - A Stranger’s Call
https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f?source=rss------bug_bounty-5
https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f?source=rss------bug_bounty-5
Summary :Continue reading on Medium » (https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f?source=rss------bug_bounty-5)
hacking: security in practice
How did Huawei hack African Union? Looking for technical analysis
I'm very interested in African Union data breach caused by Huawei implementation of new IT system. Is there any technical research I can look up for in-depth analysis?
submitted by /u/morethanafunworld
[link] [comments]
How did Huawei hack African Union? Looking for technical analysis
I'm very interested in African Union data breach caused by Huawei implementation of new IT system. Is there any technical research I can look up for in-depth analysis?
submitted by /u/morethanafunworld
[link] [comments]
reddit
How did Huawei hack African Union? Looking for technical analysis
I'm very interested in African Union data breach caused by Huawei implementation of new IT system. Is there any technical research I can look up...
hacking: security in practice
A threat actor exploited 11 zero-day flaws in 2020 campaigns
https://b.thumbs.redditmedia.com/teBa5vebmIjnsisevVI3PbicHKi78V482EFYmNKc2IU.jpg submitted by /u/meatlicious
[link] [comments]
A threat actor exploited 11 zero-day flaws in 2020 campaigns
https://b.thumbs.redditmedia.com/teBa5vebmIjnsisevVI3PbicHKi78V482EFYmNKc2IU.jpg submitted by /u/meatlicious
[link] [comments]
reddit
A threat actor exploited 11 zero-day flaws in 2020 campaigns
Posted in r/hacking by u/meatlicious • 2 points and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Using Wfuzz as an alternative to burp intruder?
hi, i am trying to solve this lab https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses , which requires the burp intruder to test for each character using two payload positions and cluster bomb attack type and grep the "welcome back" conditional response. community version of burpsuite however has a time throttle and is incredibly slow. I am trying to use Wfuzz to do this but i dont have any idea. I also read somewhere that this could also be done using http fuzz module of patator. some insight please?
submitted by /u/julong98
[link] [comments]
Using Wfuzz as an alternative to burp intruder?
hi, i am trying to solve this lab https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses , which requires the burp intruder to test for each character using two payload positions and cluster bomb attack type and grep the "welcome back" conditional response. community version of burpsuite however has a time throttle and is incredibly slow. I am trying to use Wfuzz to do this but i dont have any idea. I also read somewhere that this could also be done using http fuzz module of patator. some insight please?
submitted by /u/julong98
[link] [comments]