Tales from a failed bug bounty hunter
https://beefaaubee.medium.com/tales-from-a-failed-bug-bounty-hunter-b33f6b42bcc6?source=rss------bug_bounty-5

This isn’t just typical write-up rather my path towards bug bounty and how it had changed my thoughts on approaching…Continue reading on Medium » (https://beefaaubee.medium.com/tales-from-a-failed-bug-bounty-hunter-b33f6b42bcc6?source=rss------bug_bounty-5)

Godehashed - Tool That Uses The Dehashed.Com API To Search For Compromised Assets
http://www.kitploit.com/2021/03/godehashed-tool-that-uses-dehashedcom.html

A golang (https://www.kitploit.com/search/label/golang) tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis.
Dehashed API
You must supply the tool an api key. See apikey_template.txt for example.
Installation
To install the tool in CLI run the following command. Your $GOPATH must already be set. go get https://github.com/an00byss/godehashed
Usage
./godehashed -s email (https://www.kitploit.com/search/label/Email) -i apikey.txt -e SOMEDOMAIN -o leaks.csv Godehashed Usage():
-e string
Email we are searching for
-i string
Name of apikey to import.
-n string
Name we are searching for.
-o string
Outfile file name, will output in CSV Format.
-p int
Phone number we are searching for
-s string
Specify what we are searching for: "name", "email", "phone", "username" or "list". Then add corresponding switch.
-u string
Username we are searching for
-l list
Search a list of emails.
Search Term Examples Email godehashed -s email -i apikey.txt -e SOMEDOMAIN.com -o leaks.csv List godehashed -s list -e email -i apikey.txt -l list.txt -o leaks.csv Username godehashed -s username -i apikey.txt -u USERNAME -o leaks.csv Name godehashed -s name -i apikey.txt -n "Name" -o leaks.csv Phone godehashed -s phone (https://www.kitploit.com/search/label/Phone) -i apikey.txt -p "phonenumber" -o leaks.csv
Notice
[!] Legal disclaimer: Usage of godehashed for attacking targets without
prior mutual consent is illegal. It is the end user's responsibility
to obey all applicable local, state and federal laws. Developers assume
no liability and are not responsible for any misuse or damage caused.


Download Godehashed (https://github.com/an00byss/godehashed)

KitPloit - PenTest Tools!
Godehashed - Tool That Uses The Dehashed.Com API To Search For Compromised Assets

https://1.bp.blogspot.com/-Ki2-6wpKaFw/YFeeRzX61vI/AAAAAAAAVpI/MJshaKgBJOAcDb2V4GpL2_RW5DKY6Jm5QCNcBGAsYHQ/w640-h160/godehashed_1_screenshot.jpeg
A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis.
Dehashed API

You must supply the tool an api key. See apikey_template.txt for example.

Installation

To install the tool in CLI run the following command. Your $GOPATH must already be set.

go get https://github.com/an00byss/godehashed

Usage

./godehashed -s email -i apikey.txt -e SOMEDOMAIN -o leaks.csv
Godehashed Usage():
-e string
Email we are searching for
-i string
Name of apikey to import.
-n string
Name we are searching for.
-o string
Outfile file name, will output in CSV Format.
-p int
Phone number we are searching for
-s string
Specify what we are searching for: "name", "email", "phone", "username" or "list". Then add corresponding switch.
-u string
Username we are searching for
-l list
Search a list of emails.
Search Term Examples Email godehashed -s email -i apikey.txt -e SOMEDOMAIN.com -o leaks.csvList godehashed -s list -e email -i apikey.txt -l list.txt -o leaks.csvUsername godehashed -s username -i apikey.txt -u USERNAME -o leaks.csvName godehashed -s name -i apikey.txt -n "Name" -o leaks.csvPhone godehashed -s phone -i apikey.txt -p "phonenumber" -o leaks.csv
Notice
[!] Legal disclaimer: Usage of godehashed for attacking targets without
prior mutual consent is illegal. It is the end user's responsibility
to obey all applicable local, state and federal laws. Developers assume
no liability and are not responsible for any misuse or damage caused.

Download Godehashed

eJPT Certification Review
https://www.reddit.com/r/Pentesting/comments/mbd7f6/ejpt_certification_review/

<!-- SC_OFF -->The eLearnSecurity Junior Penetration Tester (eJPT) penetration testing practical certification provided by eLearnSecurity, a cyber security company that develops cyber security courses that are delivered electronically and that allow students to obtain corresponding certifications. I decided to sign up for this certification a couple of years before obtaining my OSCP certification as a lot of people recommended this course as a start. https://steflan-security.com/elearnsecurity-junior-penetration-tester-review/ <!-- SC_ON --> submitted by /u/cantchooseone96 (https://www.reddit.com/user/cantchooseone96)
[link] (https://www.reddit.com/r/Pentesting/comments/mbd7f6/ejpt_certification_review/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbd7f6/ejpt_certification_review/)

Godehashed - Tool That Uses The Dehashed.Com API To Search For Compromised Assets

A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis.Dehashed API You must supply the tool an api key. See apikey_template.txt for example. Installation To install the tool in CLI run the following command. Your $GOPATH must already be set. go get https://github.com/an00byss/godehashed Usage ./godehashed -s email -i apikey.txt -e SOMEDOMAIN -o leaks.csv Godehashed Usage():-e string Email we are searching for -i string Name of apikey to import. -n string Name we are searching for. -o string Outfile file name, will output in CSV Format. -p int Phone number we are searching for -s string Specify what we are searching for: "name", "email", "phone", "username" or "list". Then add corresponding switch. -u string Username we are searching for-l list Search a list of emails. Search Term Examples Email godehashed -s email -i apikey.txt -e SOMEDOMAIN.com -o leaks.csv List godehashed -s list -e email -i apikey.txt -l list.txt -o leaks.csv Username godehashed -s username -i apikey.txt -u USERNAME -o leaks.csv Name godehashed -s name -i apikey.txt -n "Name" -o leaks.csv Phone godehashed -s phone -i apikey.txt -p "phonenumber" -o leaks.csv Notice ! Legal disclaimer: Usage of godehashed for attacking targets withoutprior mutual consent is illegal. It is the end user's responsibilityto obey all applicable local, state and federal laws. Developers assumeno liability and are not responsible for any misuse or damage caused. Download Godehashed
Read more...

hacking: security in practice
Is there a database/search engine of default values?

I came a cross a fd.* subdomain and it took me some time until i found out it was an azure "frontdoor" subdomain, is there a website where i can search for default values such as this?(and also default passwords, file naming on specific technologies, extensions meaning, etc.)

It seems like a really useful thing IMO and i would be kind of surprise if there is no such place on the internet (and maybe i will create my own, who knows)

Thanks in advance!

submitted by /u/shitpost2021
[link] [comments]

Needing of pentest software
https://www.reddit.com/r/Pentesting/comments/mbdoo4/needing_of_pentest_software/

<!-- SC_OFF -->I used to use a pen testing application a few years ago, i cant remember what it is called, so i'm looking for other free options. I have tried Burp, OWASP ZAP, w3af and none of them are what i"m looking for. trying to find a free or trial version of any other application that can do proper pen testing, I'm open to all options. ​ TIA <!-- SC_ON --> submitted by /u/TheX3R0 (https://www.reddit.com/user/TheX3R0)
[link] (https://www.reddit.com/r/Pentesting/comments/mbdoo4/needing_of_pentest_software/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbdoo4/needing_of_pentest_software/)

Kali Linux Tutorials
Reverse Shell Generator : Hosted Reverse Shell Generator With A Ton Of Functionality

Hosted Reverse Shell generator with a ton of functionality. Features Generate common listeners and reverse shells Raw mode to cURL shells to your machine. Button to increment the listening port number by 1 URI and Base64 encoding LocalStorage to persist your configuration Dark and Light Modes Dev It’s recommended to use the netlify dev command […]

The post Reverse Shell Generator : Hosted Reverse Shell Generator With A Ton Of Functionality appeared first on Kali Linux Tutorials.

Calling to all Pen Testers!!
https://www.reddit.com/r/Pentesting/comments/mbek6e/calling_to_all_pen_testers/

<!-- SC_OFF -->I am looking to add top talent to our UK offensive security team. I have positions at all technical levels and across various specialisms here at NCC Group. If you are an experienced Pen Tester based in the UK and interested in what we could offer you please feel free to reach out to me on [belle.kyriacou@nccgroup.com (mailto:belle.kyriacou@nccgroup.com)](mailto:belle.kyriacou@nccgroup.com (mailto:belle.kyriacou@nccgroup.com)) <!-- SC_ON --> submitted by /u/BelleKyriacou (https://www.reddit.com/user/BelleKyriacou)
[link] (https://www.reddit.com/r/Pentesting/comments/mbek6e/calling_to_all_pen_testers/) [comments] (https://www.reddit.com/r/Pentesting/comments/mbek6e/calling_to_all_pen_testers/)

Hacking on Medium
Making decent money on our porn sites. 18+ only.

https://cdn-images-1.medium.com/max/1920/0*NSAqmtXOt8-Di1-v.jpg
Greetings! Hackfreaks here. It turns out that you can not only strange your boa constrictor, but also earn decent money on this. Today we…

Continue reading on Medium »

Hacking on Medium
How to hack a phone easily and remotely

To snoop your partner’s activities on their phone, several methods will be discussed. Because of this video guide, you can now learn how…

Continue reading on Medium »