Configuration

Token
domain - Your custom domain length - Length of the tokens (default 5) The token character set is ascii upper & lower, and digits. The length can be modified to meet needs such as constrained space for a payload. The number of tokens per length is listed below. 1 - 62 2 - 3844 3 - 238328 4 - 14776336 5 - 916132832 ssl - Configure payloads for https vs http ``server` - domain or IP of the Mole token server default_tags - list of default tags to add to all tokens. Useful for per-project/client tokens.
Server
api_key - API key used to authenticate requests to the mole API dns_addr - IP address used to respond to DNS queries db_conn - SQLAlchemy (https://www.sqlalchemy.org/) database URL (https://docs.sqlalchemy.org/en/13/core/engines.html). Default is a SQLite db in the root directory sqlite:///mole.db static_responses - list of DNS static response key/value pairs web_port - configure the listening web port dns_port -configure the listening dns port
Notifications
All notifications have an enabled flag that determines whether or not to trigger the notification on an interaction. Each notification plugin has its own configuration items. mailgun - configure domain, to, from, and api_key to enable mailgun (https://www.mailgun.com/) email notifications slack - token and channel webhook - generic POST webhook
Issues/Bugs
I'm sure there are many, please create a new issue (https://github.com/ztgrace/mole/issues) and fill out the template as best as you can for quick triage.

Download Mole (https://github.com/ztgrace/mole)

Cross Site Port Attack - A Stranger’s Call
https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f?source=rss------bug_bounty-5

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/cross-site-port-attack-a-strangers-call-c2467f93792f?source=rss------bug_bounty-5)

Cross Site Port Attack - A Stranger’s Call

Summary :Continue reading on Medium »
Read more...

hacking: security in practice
How did Huawei hack African Union? Looking for technical analysis

I'm very interested in African Union data breach caused by Huawei implementation of new IT system. Is there any technical research I can look up for in-depth analysis?

submitted by /u/morethanafunworld
[link] [comments]

hacking: security in practice
A threat actor exploited 11 zero-day flaws in 2020 campaigns

https://b.thumbs.redditmedia.com/teBa5vebmIjnsisevVI3PbicHKi78V482EFYmNKc2IU.jpg submitted by /u/meatlicious
[link] [comments]

hacking: security in practice
Using Wfuzz as an alternative to burp intruder?

hi, i am trying to solve this lab https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses , which requires the burp intruder to test for each character using two payload positions and cluster bomb attack type and grep the "welcome back" conditional response. community version of burpsuite however has a time throttle and is incredibly slow. I am trying to use Wfuzz to do this but i dont have any idea. I also read somewhere that this could also be done using http fuzz module of patator. some insight please?

submitted by /u/julong98
[link] [comments]

Hacking on Medium
How to Hack Web Applications?

https://cdn-images-1.medium.com/max/1920/1*C5Noomz7xXD3c8mBRx9vUw.jpeg
Make a difference in your organization’s web application security

Continue reading on Medium »

Hacking on Medium
Arkam — Hackthebox Writeup

https://cdn-images-1.medium.com/max/608/1*JwCV7qM4UQ94TY5LPlbflQ.png
Arkham is a Medium-difficulty box that I picked up in order to get familiar with deserialisation vulnerabilities for the OSWE exam.

Continue reading on Medium »

Hacking on Medium
How to hack a wordpress or joomla site in seconds using jok3r framework

jok3r framework also known as wordpress and joomla nightmare

Continue reading on Medium »

How I made it to Google HOF?
https://sudhanshur705.medium.com/how-i-made-it-to-google-hof-f1cec85fdb1b?source=rss------bug_bounty-5

Heyyy Everyoneeee,Continue reading on Medium » (https://sudhanshur705.medium.com/how-i-made-it-to-google-hof-f1cec85fdb1b?source=rss------bug_bounty-5)

COFF object file loader and in-memory injector PoC (like Cobalt Strike's BOF feature)
https://www.reddit.com/r/redteamsec/comments/m9xsgi/coff_object_file_loader_and_inmemory_injector_poc/

submitted by /u/0xPat (https://www.reddit.com/user/0xPat)
[link] (https://github.com/0xpat/COFFInjector) [comments] (https://www.reddit.com/r/redteamsec/comments/m9xsgi/coff_object_file_loader_and_inmemory_injector_poc/)

Deep Web
I heard that a version of wikipedia but uncensored exists on the dark web, does anyone have the url?

like an uncensored version of wikipedia, idk what it's named, but I'm interested in looking for whatever interesting stuff there could be, so anyone have a link?

submitted by /u/J_l2703
[link] [comments]