KitPloit - PenTest Tools!
Raider - Web Authentication Testing Framework

https://1.bp.blogspot.com/-KdwnRderKgk/YRIVZzXdH_I/AAAAAAAAptY/G-XTJAQilzElnjUnRVYyxMObyYQ0HLveACNcBGAsYHQ/w640-h314/Web%2BAuthentication%2BTesting%2BFramework.png This is a framework designed to test authentication for web applications. While web proxies like ZAProxy and Burpsuite allow authenticated tests, they don't provide features to test the authentication process itself, i.e. manipulating the relevant input fields to identify broken authentication. Most authentication bugs in the wild have been found by manually testing it or writing custom scripts that replicate the behaviour. Raider aims to make testing easier, by providing the interface to interact with all important elements found in modern authentication systems. FeaturesRaider has the goal to support most of the modern authentication systems, and here are some features that other tools don't offer:

* Unlimited authentication steps
* Unlimited inputs/outputs for each step
* Ability to conditionally decide the next step
* Running arbitrary operations when receiving the response
* Easy to write custom operations and plugins How does it workRaider treats the authentication as a finite state machine. Each authentication step is a different state, with its own inputs and outputs. Those can be cookies, headers, CSRF tokens, or other pieces of information.

Each application needs its own configuration file for Raider to work. The configuration is written in Hylang. The language choice was done for multiple reasons, mainly because it's a Lisp dialect embedded in Python.

Using Lisp was necessarily since sometimes the authentication can get quite complex, and using a static configuration file would've not been enough to cover all the details. Lisp makes it easy to combine code and data, which is exactly what was needed here.

By using a real programming language as a configuration file gives Raider a lot of power, and with great power comes great responsibility. Theoretically one can write entire malware inside the application configuration file, which means you should be careful what's being executed, and not to use configuration files from sources you don't trust. Raider will evaluate everything inside the .hy files, which means if you're not careful you could shoot yourself in the foot and break something on your system. InstallationRaider is available on PyPi: $ pip3 install --user raider Raider's philosophyRaider was developed with the following goals:

* To abstract authentication concepts using Python objects.
* To support most modern web authentication features.
* To make it easy to add new features for users.

And if you're looking at the code and willing to contribute, keep those in mind:

* The simpler and cleaner the code, the better.
* New features should be implemented as Pluginsand Operationsif possible.
* The hyfilesshould stay as minimal as possible, while still allowing the user to get creative. In the future parts of this code could be autogenerated. The Documentation is available on Read the Docs.Download Raider

___________________________
@hacking_Attack
@Hacking_Video

How to Avoid Blockchain Blackhats on Discord
https://medium.com/immunefi/how-to-avoid-blockchain-blackhats-on-discord-78e4f278c4a2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Discord and Telegram are the two most common means of communication in crypto, which means they’re the two most common means blackhats…Continue reading on Immunefi » (https://medium.com/immunefi/how-to-avoid-blockchain-blackhats-on-discord-78e4f278c4a2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to Avoid Blockchain Blackhats on Discord

Discord and Telegram are the two most common means of communication in crypto, which means they’re the two most common means blackhats…Continue reading on Immunefi »
Read more...

OAK Network Launches Bug Bounty Program

We welcome white hat hackers in crypto community to help identify code bugs and earn rewards in DOTContinue reading on OAK Network »
Read more...

OAK Network Launches Bug Bounty Program
https://medium.com/oak-blockchain/oak-network-launches-bug-bounty-program-451fc206100a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We welcome white hat hackers in crypto community to help identify code bugs and earn rewards in DOTContinue reading on OAK Network » (https://medium.com/oak-blockchain/oak-network-launches-bug-bounty-program-451fc206100a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers Publish Classified Documents Stolen from Lithuanian Ministry of Foreign Affairs

https://external-preview.redd.it/B_gCc_ocV88zldTYI4lIOG5XjIhLvRzi6UX8urYP4ks.jpg?width=640&crop=smart&auto=webp&s=45bd910af9fd0792560bc38de8b934c414ec43f5 submitted by /u/caffcaff_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can't log in my old Myspace

Is there any to delete my old Myspace? I've tried guessing old passwords, and I don't have access to the e-mail I used for it. Myspace help is nonexistent.

submitted by /u/REX1009
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DCG 201 Hacking Guide For S*x Workers

https://cdn-images-1.medium.com/max/752/1*XUTSBYaZsj0tvyv1e6msNg.png
Greetings! Welcome to the first of a series of Privacy & Security guides we are focusing on various special interest groups and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Facebook Hacking Course for Beginners

Ethical hacking , Learn How to hack and Secure Facebook Account from hackers by Learning Their Techniques .

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Brute Forcing & Protecting an FTP Server

https://cdn-images-1.medium.com/max/600/0*Yhrt5earGHFEg9yO
Performing a Brute force attack on an FTP server and then securing the server against Brute Froce attacks.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacker claims to steal data of 100 million T-mobile customers

https://external-preview.redd.it/OoDG236Cc1xX46kStc9uGrVoOl0Ww5hbaQwZ6LiFt0M.jpg?width=640&crop=smart&auto=webp&s=64b6884782a8e908cf6a65d303c15229faaa88cc submitted by /u/boppinmule
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video