KitPloit - PenTest Tools!
Http-Request-Smuggling - HTTP Request Smuggling Detection Tool

http://4.bp.blogspot.com/-0F43QJIxJv0/YP8gmvnwTrI/AAAAAAAAor0/fIIkAZ9M2kUwA_7B2E3t7OwPvtAtYAipQCK4BGAYYCw/w640-h360/http-request-smuggling_1_thumbnail-753652.png HTTP request smuggling is a high severity vulnerability which is a technique where an attacker smuggles an ambiguous HTTP request to bypass security controls and gain unauthorized access to performs malicious activities, the vulnerability was discovered back in 2005 by watchfire and later in August 2019 it re-discovered by James Kettle - (albinowax) and presented at DEF CON 27 and Black-Hat USA, to know more about this vulnerability you can refer his well-documented research blogs at Portswigger website. So the idea behind this security tool is to detect HRS vulnerability for a given host and the detection happens based on the time delay technique with the given permutes, so to know more about this tool I'll highly encourage you to read my blog post about this tool. Technical OverviewThe tool is written using python and to use this tool you must have python version 3.x installed in your local machine. It takes the input of either one URL or list of URLs which you need to provide in a text file and by following the HRS vulnerability detection technique the tool has built-in payloads which has around 37 permutes and detection payloads for both CL.TE and TE.CL and for every given host it will generate the attack request object by using these payloads and calculates the elapsed time after receiving the response for each request and decides the vulnerability but most of the time chances are it can be false positive, so to confirm the vulnerability you can use burp-suite turbo intruder and try your payloads. Security ConsentIt's quite important to know some of the legal disclaimers before scanning any of the targets, you should have proper authorization before scanning any of the targets otherwise I suggest do not use this tool to scan an unauthorized target because to detect the vulnerability it sends multiple payloads for multiple times by using (--retry) option which means if something goes wrong then there is a possibility that backend socket might get poisoned with the payloads and any genuine visitors of that particular website might end up seeing the poisoned payload rather seeing the actual content of the website. So I'll highly suggest taking proper precautions before scanning any of the target website otherwise you will face some legal issue. Installationgit clone https://github.com/anshumanpattnaik/http-request-smuggling.git
cd http-request-smuggling
pip3 install -r requirements.txt Optionsusage: smuggle.py [-h] [-u URL] [-urls URLS] [-t TIMEOUT] [-m METHOD]
[-r RETRY]

HTTP Request Smuggling vulnerability detection tool

optional arguments:
-h, --help show this help message and exit
-u URL, --url URL set the target url
-urls URLS, --urls URLS
set list of target urls, i.e (urls.txt)
-t TIMEOUT, --timeout TIMEOUT
set socket timeout, default - 10
-m METHOD, --method METHOD
set HTTP Methods, i.e (GET or POST), default - POST
-r RETRY, --retry RETRY
set the retry count to re-execute the payload, default
- 2 Scan one Urlpython3 smuggle.py -u Scan list of Urlspython3 smuggle.py -urls ImportantIf you feel the detection payload needs to change to make it more accurate then you can update the payload in payloads.json file of detection array. "detection": [
{
"type": "CL.TE",
"payload": "\r\n1\r\nZ\r\nQ\r\n\r\n",
"content_length": 5
},
{
"type": "TE.CL",
"payload": "\r\n0\r\n\r\n\r\nG",
"content_length": 6
}
] Download Http-Request-Smuggling

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vega

https://cdn-images-1.medium.com/max/813/0*PdMOhy69rPYVUWFN.png
PwnTillDwn!!
IP: 10.150.150.222
OS: Linux
Room link: https://online.pwntilldawn.com/Target/Show/3
Credits:
https://www.wizlynxgroup.com/…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Have another way load NTLM on CS? Not want used Mimikatz
https://www.reddit.com/r/redteamsec/comments/p3c5gy/have_another_way_load_ntlm_on_cs_not_want_used/

Wonder if have another way to do it? Something like make_token but with NTLM To load NTLM hash with Mimikatz sekurlsa::pth I think it's to noisy submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/p3c5gy/have_another_way_load_ntlm_on_cs_not_want_used/) [comments] (https://www.reddit.com/r/redteamsec/comments/p3c5gy/have_another_way_load_ntlm_on_cs_not_want_used/)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounties Versus Penetration Testing

Pros and Cons of different types of cybersecurity testing servicesContinue reading on Cloud Security »
Read more...

The Origin Of Business logic vulnerabilities

Learn how they occur so you can recognise them!Continue reading on Medium »
Read more...

How I do subdomain take over in ten minutes?
https://medium.com/@muhammetuslu78/how-i-do-subdomain-take-over-in-ten-minutes-b034f84d28d0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I found my first critical bug in ten minutes. But how?Continue reading on Medium » (https://medium.com/@muhammetuslu78/how-i-do-subdomain-take-over-in-ten-minutes-b034f84d28d0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Planet fitness social engeneering.

So my annually fee was coming up, total of $39 for the year + 22 a month for the membership.

Decided to try an experiment. Had my account with insufficient funds for a couple days, went in armed with my bank statement, and a screenshot of my balance when I had $89 in it.

Coded quick app for my phone, one that went straight to the screen shot of $80 in my account, walked in and asked what the hell?

Showed them the numerous attempts that planet fitness made to charge my account, and the bank account balance showing more than sufficient funding.

After some back and forth between the charges and the screenshot, the manager waives the $39 fee.

Not proud of this but as a homeless man, I need to take every oppertunity I can to save a buck.

submitted by /u/Captain-Crunch1989
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
not asking but

could some1 tell me how to hack @impact on instagram. if you could it for me that’d be cool too. put on their story “hacked ez”

submitted by /u/Alt_Verse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Comprehensive Timeline of all DeFi Hacks/Exploits/Rugpulls in 2021 (constantly updated)

https://cdn-images-1.medium.com/max/1200/0*YHJVpZTXs2Lhdfdx.jpg
TL;DR: go to this Google Doc (https://docs.google.com/document/d/1LbX6uCAKsrvzHuAe2MegOQpcDk1B_Ank71kcPtjz2h4/edit?usp=sharing) that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

This meme is funny and true
https://www.reddit.com/r/redteamsec/comments/p3hi4g/this_meme_is_funny_and_true/

submitted by /u/R3dd3v3l (https://www.reddit.com/user/R3dd3v3l)
[link] (https://i.redd.it/lijl6gdke2h71.png) [comments] (https://www.reddit.com/r/redteamsec/comments/p3hi4g/this_meme_is_funny_and_true/)

___________________________
@hacking_Attack
@Hacking_Video

How I found read/write access to the personal data of 3 million users of an E-commerce website?
https://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is Prashant Singh, a cybersecurity researcher. This is my first bug bounty write-up. Just a small contribution from my end to the…Continue reading on Medium » (https://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bandlab on android?

Is there any way I can get an .apk file or something to get bandlab on my android device?

submitted by /u/bis82
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learning how to CTF

I’m new to hacking, atm I’m doing a udemy course which is pretty good. Just wondering if I would have to learn hacking specifically for CTF’s?

submitted by /u/99nug
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
+Infinity Stone — Vulnhub

https://cdn-images-1.medium.com/max/600/1*vRF-YLx0Zf8iQDYkC_uAeQ.png
Infinity stone is another CTF box from vulnhub that is based off the Avengers. The goal is to find all infinity stones to gain root…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video