Hacking on Medium
Hackthebox SOLIDSTATE Walkthrough (NO Metasploit) OSCP Prep.

https://cdn-images-1.medium.com/max/600/1*n29MVAdxJyuIkys_kvPTQw.png
Box Details

Continue reading on Medium »

How can create a secured server for my website? What is RADAR™?
https://www.reddit.com/r/Pentesting/comments/ma22yt/how_can_create_a_secured_server_for_my_website/

submitted by /u/sharathhegde (https://www.reddit.com/user/sharathhegde)
[link] (https://www.reddit.com/r/Pentesting/comments/ma22yt/how_can_create_a_secured_server_for_my_website/) [comments] (https://www.reddit.com/r/Pentesting/comments/ma22yt/how_can_create_a_secured_server_for_my_website/)

KitPloit - PenTest Tools!
Subcert - An Subdomain Enumeration Tool, That Finds All The Subdomains From Certificate Transparency Logs

https://1.bp.blogspot.com/-ifuLylKVBn4/YFekXwfEkJI/AAAAAAAAVqY/ZzyiGtyqGHIy_IhqcmpvndduZXZAModcgCNcBGAsYHQ/w640-h186/Subcert_1_subcert.png
Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs.
Setup

Step 1: Install Python 3
apt-get install python3-pip

Step 2: Clone the Repository
git clone https://github.com/A3h1nt/Subcert.git

Step 3: Install Dependencies
pip3 install -r requirements.txt

Step 4: Move the Directory to /opt
mv subcert /opt/

Step 5: Add an alias in .bashrc to run the script from anywhere
alias subcert="python3 /opt/subcert/subcert.py"

Demo
Contribute

* Improve Code
* Suggestions
* Report Bugs

Contact Me

You can contact me regarding anything at A3h1nt
Download Subcert

hacking: security in practice
Immediately redirecting to external website in google docs

Is there a way to immediately redirect someone to an external website, say an Ip grabber for instance, upon their opening of a google doc? Im trying to trace a malicious email I received that has a little more info about me than I’m comfortable with included in it. Any and all help would be greatly appreciated, Thank you!

submitted by /u/marchambone
[link] [comments]

hacking: security in practice
Extract owner's information of any public Google document

https://b.thumbs.redditmedia.com/f5pp18Kw5WwXugDXZlegnbOKc0I3hbOrjB4xBWxaYdk.jpg Github repo link : https://github.com/Malfrats/xeuledoc
It's working on :

* Google Docs
* Google Spreadsheets
* Google Slides
* Google Drawning
* Google My Maps
* Google Apps Script
* Google Jamboard

https://i.redd.it/1rpsmhb0h8o61.gif

submitted by /u/mxrchreborn
[link] [comments]

Subcert - An Subdomain Enumeration Tool, That Finds All The Subdomains From Certificate Transparency Logs
http://www.kitploit.com/2021/03/subcert-subdomain-enumeration-tool-that.html

Subcert is a subdomain enumeration (https://www.kitploit.com/search/label/Subdomain%20Enumeration) tool, that finds all the valid subdomains (https://www.kitploit.com/search/label/Subdomains) from certificate transparency (https://www.kitploit.com/search/label/Certificate%20Transparency) logs.
Setup

Step 1: Install Python 3
apt-get install python3-pip

Step 2: Clone the Repository
git clone https://github.com/A3h1nt/Subcert.git

Step 3: Install Dependencies
pip3 install -r requirements.txt

Step 4: Move the Directory to /opt
mv subcert /opt/

Step 5: Add an alias in .bashrc to run the script from anywhere
alias subcert="python3 /opt/subcert/subcert.py"

Demo

Contribute
Improve Code Suggestions Report Bugs
Contact Me
You can contact me regarding anything at A3h1nt (https://twitter.com/A3h1nt)

Download Subcert (https://github.com/A3h1nt/Subcert)

Vajra - A Highly Customi zable Target And Scope Based Automated Web Hacking Framework To Automate Boring Recon Tasks
http://www.kitploit.com/2021/03/vajra-highly-customi-zable-target-and.html

An automated web hacking framework (https://www.kitploit.com/search/label/Hacking%20Framework) for web applications
Detailed insight about Vajra can be found at
https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 
About Vajra

  Vajra is an automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing. Vajra has highly customizable (https://www.kitploit.com/search/label/Customizable) target scope based scan feature. Instead of running all the scan on target, it runs only those scan selected by you which will minimize unnecessary traffic and stores output in one place at CouchDB. Vajra uses most common open source tools which every Bug Hunter runs during their testing on target. It does all the stuffs through web browser with very simple UI that makes it absolute beginner friendly (https://www.kitploit.com/search/label/Beginner%20Friendly) framework. Analyzing your data from scan result is very important in Bug Bounty. The chances of missing anything is less only if you could visualize your data in proper way and Vajra does so with a lot of filters. I created this project for my personal use (about 6 months ago) but looking at its usefulness, I decided to make it open-source so that it can save your time and can get some more improvement from community.
Currently, I added only 27 unique bug bounty feature to it but more will be added in near future.

Visit this URL for Demo: https://hackwithproxy.tech/login None of the scan will work in demo website. Username: root password: toor
Demo

 
Key Features
Highly target specific scan Run multiple scans in parallel Highly customizable scan based on user requirements Absolute beginner friendly Web UI Fast (as it is Asynchronous) Export result in CSV or directly copy to clipboard Telegram Notification
What Vajra does
Subdomain Scan with IP, Status Code and Title. Subdomain Takeover (https://www.kitploit.com/search/label/Subdomain%20Takeover) Scan Port Scan Endpoints Discovery Endpoints with Parameter Discovery 24/7 Monitor Subdomains 24/7 Monitor JavaScript Templates Scan using Nuclei Fuzz endpoints to find hidden endpoints or critical files (e.g .env) Extract JavaScripts Fuzz with Custom Generated wordlist Extracts Secrets (e.g api keys, hidden javascripts endpoints) Checks for Broken Links Filter Endpoints based on extensions Favicon Hash Github Dorks CORS Scan CRLF Scan 403 Bypasser Find Hidden Parameters Google Hacking Shodan Search Queries Extract Hidden Endpoints from JavaScript Create target based Custom Wordlist Vulnerability (https://www.kitploit.com/search/label/Vulnerability) Scan CVE Scan CouchDB to store all scan output
Total Scans

Result of Scan

Found Subdomains