KitPloit - PenTest Tools!
Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns

https://1.bp.blogspot.com/-fMvlStr5Pkk/YRvgsg3WiFI/AAAAAAAAqtM/aROefZ6A8ycBvdLqdeAd6IoAhWV8bOHNACNcBGAsYHQ/s16000/jsleak.png
jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.
How to install

Directly:

{your package manager} install pkg-config libpcre++-dev
go get github.com/0xTeles/jsleak/v2/jsleak


Compiled: release page

How to use

Usage of jsleak:
-json string
[+] Json output file
-pattern string
[+] File contains patterns to test
-verbose
[+] Verbose Mode


Demo

cat urls.txt | jsleak -pattern regex.txt
[+] Url: http://localhost/index.js
[+] Pattern: p([a-z]+)ch
[+] Match: peach


To Do

* Fix output
* Add more patterns
* Add stdin
* Implement JSON input
* Fix patterns
* Implement PCRE

Regex list

* https://github.com/odomojuli/RegExAPI
* https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt

Inspired by

* Necessity
* https://github.com/0x240x23elu/JSScanner
* https://github.com/KaioGomesx/JSScanner

Thanks

@fepame, @gustavorobertux, @Jhounx, @arthurair_es
Download Jsleak

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Steal $600,000,000

https://cdn-images-1.medium.com/max/1800/0*Dw2BqTKwGgmjEhAO
The biggest crypto news of the last weeks? A $612 million hack of Poly Network, a decentralized finance platform that allows different…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Revelada nueva vulnerabilidad de seguridad sin parche en FortiWeb WAF de Fortinet.

https://cdn-images-1.medium.com/max/1000/0*bs-JLTTC7RiIpkzB
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Aprende todo sobre el ataque ARP Poisoning y protégete.

https://cdn-images-1.medium.com/max/862/0*-_0SnrTCgvs7urPX
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Passed eJPT as a 15 year old & AMA!!!
https://www.reddit.com/r/Pentesting/comments/p77l21/passed_ejpt_as_a_15_year_old_ama/

submitted by /u/StrawberryShaker2005 (https://www.reddit.com/user/StrawberryShaker2005)
[link] (https://www.reddit.com/r/eLearnSecurity/comments/p77j9t/passed_ejpt_as_a_15_year_old_ama/) [comments] (https://www.reddit.com/r/Pentesting/comments/p77l21/passed_ejpt_as_a_15_year_old_ama/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a password hash be reversed if you know the hashing algorithm?

Let's use clock arithmetic and pretend our hashing function is f(x)=5*x. If we want to generate a hash for 5. f(5)=25, and the hash we have would be 3. With enough computing power, I assume that we could attempt to reverse the hashing algorithm until we get the original value, right? Thanks for your input!

submitted by /u/280-Z
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Paramount T-Mobile Data Breach

https://cdn-images-1.medium.com/max/1920/1*CQb4UjSdckM_SvrFFvuLwQ.jpeg
It comes as no surprise that T-mobile has yet again been made to look like a careless provider for its customers. This is the 6th major…

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
T-Mobile Hacked.

T-Mobile was recently hacked by someone on the dark web who claims to have stolen sensitive data, including phone numbers, names, social…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Piracy Scientific Journals

Never been on the Deep web, but was scrolling cause of curious. A lot of you mentioned pirating papers, but why would you need/ go through all the trouble for that? Don't Sci-Hub and LibGen already exist on the Normal web?

submitted by /u/delloskill
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nimplant : A Cross-Platform Implant Written In Nim

Nimplant is a cross-platform (Linux & Windows) implant written in Nim as a fun project to learn about Nim and see what it can bring to the table for red team tool development. Currently, Nimplant lacks extensive evasive tradecraft; however, overtime Nimplant will become much more sophisticated. Installation To install Nimplant, you’ll need Mythic installed […]

The post Nimplant : A Cross-Platform Implant Written In Nim appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why Secure Your E-commerce Business Now??

https://cdn-images-1.medium.com/max/1280/0*lVBm0fvjv8_RHBpB
In the times of Covid-19, we have observed a significant increase in the e-commerce industry. People are shifting more towards the virtual…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Account Takeover via Access Token Leakage

Hello guys! My name is Tuhin Bose (@tuhin1729). I am currently working as a Chief Information Security Officer and Infosec trainer at DSPH…Continue reading on Medium »
Read more...

Account Takeover via Access Token Leakage
https://tuhin1729.medium.com/account-takeover-via-access-token-leakage-687276953408?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video