KitPloit - PenTest Tools!
Sigurlfind3R - A Reconnaissance Tool, It Fetches URLs From AlienVault's OTX, Common Crawl, URLScan, Github And The Wayback Machine

https://1.bp.blogspot.com/-6OPBPLmRp2w/YRCq1Im8lOI/AAAAAAAApr0/igeIZQYnNN4TnM-XCi_fJl2lb6d6jetcwCNcBGAsYHQ/w640-h446/sigurlfind3r.png
sigurlfind3r is a passive reconnaissance tool, it fetches known URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine.

DiSCLAIMER: fetching urls from github is a bit slow.
Usage

sigurlfind3r -h

This will display help for the tool.

_ _ __ _ _ _____
___(_) __ _ _ _ _ __| |/ _(_)_ __ __| |___ / _ __
/ __| |/ _` | | | | '__| | |_| | '_ \ / _` | |_ \| '__|
\__ \ | (_| | |_| | | | | _| | | | | (_| |___) | |
|___/_|\__, |\__,_|_| |_|_| |_|_| |_|\__,_|____/|_| v1.2.0
|___/

USAGE:
sigurlfind3r [OPTIONS]

OPTIONS:
-d, --domain domain to fetch urls for
-eS, --exclude-sources comma(,) separated list of sources to exclude
-f, --filter URL filtering regex
-iS, --include-subs include subdomains' urls
-lS, --list-sources list all the available sources
-nC, --no-color no color mode
-s --silent silent mode: output urls only
-uS, --use-sources comma(,) separated list of sources to use


Examples

Basic

sigurlfind3r -d tesla.com

Include Subdomains

sigurlfind3r -d tesla.com -is

Regex filter out URLs

sigurlfind3r -d tesla.com -f ".(jpg|jpeg|gif|png|ico|css|eot|tif|tiff|ttf|woff|woff2)"

Installation

From Binary

You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATHand you're ready to go.

From Source

sigurlfind3r requires go1.14+ to install successfully. Run the following command to get the repo

GO111MODULE=on go get -u -v github.com/signedsecurity/sigurlfind3r/cmd/sigurlfind3r

From Github

git clone https://github.com/signedsecurity/sigurlfind3r.git && \
cd sigurlfind3r/cmd/sigurlfind3r/ && \
go build; mv sigurlfind3r /usr/local/bin/ && \
sigurlfind3r -h

Post Installation

sigurlfind3r will work after installation. However, to configure sigurlfind3r to work with certain services - currently github - you will need to have setup API keys. The API keys are stored in the $HOME/.config/sigurlfind3r/conf.yamlfile - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services.

Example:

version: 1.1.0
sources:
- commoncrawl
- github
- otx
- urlscan
- wayback
keys:
github:
- d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39
- asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39

Contribution

Issues and Pull Requests are welcome!
Download Sigurlfind3R

Hacking on Medium
“Làm việc với … kiểu gì cũng lên chức đã là truyền thống”

Bài này nói về một sự kiện một công ty an ninh mạng hàng đầu của một nước bị hack. Câu trên là của vị Tổng giám đốc công ty đó, khi chat…

Continue reading on Medium »

Hacking on Medium
Prevention is the only cure to stay digitally safe…!!!

https://cdn-images-1.medium.com/max/600/1*Dd9UpvopmsZHHvxpjKjA9w.jpeg
Hello Readers, I am Prinal back again with the most vital topic i.e. Mobile Safety.

Continue reading on Medium »

Hacking on Medium
O Paradoxo do Aniversário & Ataque Sweet32!

https://cdn-images-1.medium.com/max/600/1*h6PNbMHNJ7YdUtK2MZGG2Q.jpeg
O Paradoxo do Aniversário

Continue reading on Medium »

Hacking on Medium
Tomghost Walkthrough — TryHackMe — Most Descriptive

https://cdn-images-1.medium.com/max/1400/0*HVXaFNVi9tsouSi7.png
This is my first writeup on medium and on any machine. Apologies in advance if I made some mistakes…

Continue reading on Medium »

Sigurlfind3R - A Reconnaissance Tool, It Fetches URLs From AlienVault's OTX, Common Crawl, URLScan, Github And The Wayback Machine

sigurlfind3r is a passive reconnaissance tool, it fetches known URLs from AlienVault's OTX, Common Crawl, URLScan, Github and the Wayback Machine. DiSCLAIMER: fetching urls from github is a bit slow.Usage sigurlfind3r -h This will display help for the tool. _ _ _ _ _ _ _() \ _ _ _ _ _| |/ _()\ _ _| |_ / _ _/ _| |/ _` | | | | '_| | |_| | '_ \ / _` | |_ \| '_|\_ \ | (_| | |_| | | | | _| | | | | (| |) | ||_/_|\_, |\_,_|_| |_|_| |_|_| |_|\_,_|_/|_| v1.2.0 |_/USAGE: sigurlfind3r OPTIONSOPTIONS: -d, --domain domain to fetch urls for -eS, --exclude-sources comma(,) separated list of sources to exclude -f, --filter URL filtering regex -iS, --include-subs include subdomains' urls -lS, --list-sources list all the available sources -nC, --no-color no color mode -s --silent silent mode: output urls only -uS, --use-sources comma(,) separated list of sources to use Examples Basic sigurlfind3r -d tesla.com Include Subdomains sigurlfind3r -d tesla.com -is Regex filter out URLs sigurlfind3r -d tesla.com -f ".(jpg|jpeg|gif|png|ico|css|eot|tif|tiff|ttf|woff|woff2)" Installation From Binary You can download the pre-built binary for your platform from this repository's releases page, extract, then move it to your $PATHand you're ready to go. From Source sigurlfind3r requires go1.14+ to install successfully. Run the following command to get the repo GO111MODULE=on go get -u -v github.com/signedsecurity/sigurlfind3r/cmd/sigurlfind3r From Github git clone https://github.com/signedsecurity/sigurlfind3r.git && \cd sigurlfind3r/cmd/sigurlfind3r/ && \go build; mv sigurlfind3r /usr/local/bin/ && \sigurlfind3r -h Post Installation sigurlfind3r will work after installation. However, to configure sigurlfind3r to work with certain services - currently github - you will need to have setup API keys. The API keys are stored in the $HOME/.config/sigurlfind3r/conf.yaml file - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services. Example: version: 1.1.0sources: - commoncrawl - github - otx - urlscan - waybackkeys: github: - d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39 - asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39 Contribution Issues and Pull Requests are welcome! Download Sigurlfind3R
Read more...

Find XSS in wide scope with kxss
https://sahandami.medium.com/find-xss-in-wide-scope-with-kxss-91f9573883c4?source=rss------bug_bounty-5

in this article we talk about automated testing to find xssContinue reading on Medium » (https://sahandami.medium.com/find-xss-in-wide-scope-with-kxss-91f9573883c4?source=rss------bug_bounty-5)

Sigurlfind3R - A Reconnaissance Tool, It Fetches URLs From AlienVault's OTX, Common Crawl, URLScan, Github And The Wayback Machine
http://www.kitploit.com/2021/08/sigurlfind3r-reconnaissance-tool-it.html

sigurlfind3r is a passive reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) tool, it fetches known URLs from AlienVault's OTX (https://otx.alienvault.com/), Common Crawl (https://commoncrawl.org/), URLScan (https://urlscan.io/), Github (https://github.com/) and the Wayback Machine (https://archive.org/web/). DiSCLAIMER: fetching urls from github is a bit slow.
Usage
sigurlfind3r -h This will display help for the tool. _ _ __ _ _ _____
___(_) __ _ _ _ _ __| |/ _(_)_ __ __| |___ / _ __
/ __| |/ _` | | | | '__| | |_| | '_ \ / _` | |_ \| '__|
\__ \ | (_| | |_| | | | | _| | | | | (_| |___) | |
|___/_|\__, |\__,_|_| |_|_| |_|_| |_|\__,_|____/|_| v1.2.0
|___/

USAGE:
sigurlfind3r [OPTIONS]

OPTIONS:
-d, --domain domain to fetch urls for
-eS, --exclude-sources comma(,) separated list of sources to exclude
-f, --filter URL filtering regex
-iS, --include-subs include subdomains' urls
-lS, --list-sources list all the available sources
-nC, --no-color no color mode
-s --silent silent mode: output urls only
-uS, --use-sources comma(,) separated list of sources to use

Examples

Basic
sigurlfind3r -d tesla.com
Include Subdomains
sigurlfind3r -d tesla.com -is
Regex filter out URLs
sigurlfind3r -d tesla.com -f ".(jpg|jpeg|gif|png|ico|css|eot|tif|tiff|ttf|woff|woff2)"
Installation

From Binary
You can download the pre-built binary (https://www.kitploit.com/search/label/Binary) for your platform from this repository's releases (https://github.com/signedsecurity/sigurlfind3r/releases/) page, extract, then move it to your $PATHand you're ready to go.
From Source
sigurlfind3r requires go1.14+ to install successfully. Run the following command to get the repo GO111MODULE=on go get -u -v github.com/signedsecurity/sigurlfind3r/cmd/sigurlfind3r
From Github
git clone https://github.com/signedsecurity/sigurlfind3r.git && \
cd sigurlfind3r/cmd/sigurlfind3r/ && \
go build; mv sigurlfind3r /usr/local/bin/ && \
sigurlfind3r -h
Post Installation
sigurlfind3r will work after installation (https://github.com/signedsecurity/sigurlfind3r#installation). However, to configure sigurlfind3r to work with certain services - currently github - you will need to have setup API keys. The API keys are stored in the $HOME/.config/sigurlfind3r/conf.yaml file - created upon first run - and uses the YAML format. Multiple API keys can be specified for each of these services. Example: version: 1.1.0
sources:
- commoncrawl
- github
- otx
- urlscan
- wayback
keys:
github:
- d23a554bbc1aabb208c9acfbd2dd41ce7fc9db39
- asdsd54bbc1aabb208c9acfbd2dd41ce7fc9db39
Contribution
Issues (https://github.com/signedsecurity/sigurlfind3r/issues) and Pull Requests (https://github.com/signedsecurity/sigurlfind3r/pulls) are welcome!

Download Sigurlfind3R (https://github.com/signedsecurity/sigurlfind3r)

hacking: security in practice
You can enjoy streaming your favorite Hulu shows in Canada without any hassle.

https://external-preview.redd.it/Z6BmOblFqkMS9yzQLQKdRq9-ohjr9rNIYuOJ72v6kT0.jpg?width=320&crop=smart&auto=webp&s=a1f8656349ec984400c284a6179fef5194164e19 submitted by /u/Affectionate-Fall520
[link] [comments]

hacking: security in practice
How to get packet from mobile game? (How to hack mobile game?)

Hello guys. I'm a student in computer science but I don't know anything about hacking.

Suddenly I wonder about mobile game hacking.

I think PC game is easier to get packet or do some stuff to hack because we can do many things in PC than mobile. (and there's wireshark.. or etc)

But If I want to hack mobile game where do I start?

Suppose, we play poker in mobile and I want to get packet to know other player's card.

In this situation, Is there any way to do it?

what's the process to do it?

submitted by /u/zxaq15
[link] [comments]

hacking: security in practice
Looks like Tempest attacks are back.

https://external-preview.redd.it/v4-A-5zuucQyOOnM5CuEarVR_hKgpvx9gv9P0brv0yg.jpg?width=640&crop=smart&auto=webp&s=d72107c20cea3e72f7893a9797eadfb94de77475 submitted by /u/AmokinKS
[link] [comments]