Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking on Medium
碎碎念隨筆(一):駭客 & SSH & 初學 Linux 指令


日期:9/6 ~ 9/8

Continue reading on Medium »
Hacking on Medium
$3133.70 Google Dialogflow IDOR Vulnerability


Hey, Amazing Hackers, am Raidh Ĥere, Hope, you all are doing well.

Continue reading on Medium »
Hacking on Medium
HackTheBox Writeup — Schooled


Hello Guys , I am Faisal Husaini. My username on HTB is “fa1sal” . Also join me on discord.

Continue reading on Medium »
Hacking on Medium
How I Earned $400 IN 8min On Private H1 Program


Hi everyone, Calogero here, this is going to be a short write-up about a vuln that only took 8 minutes to find. So it has taken me a very…

Continue reading on Medium »
Deep Web
The DW isn’t as scary and exciting as it seems..

Although all those horror stories paint the dark web as some forum filled with gore and live videos of torture and such, dw does have this but it’s mainly a slightly worse 4chan. To get to an actual criminal site in the dw, you have to have certain URLs and even then the host is able to deny you access. Yes there’s ways to bypass those but with feds cracking down on the dw, it’s not as exhilarating anymore..

Edit - And as bone chilling as those horror stories sound, let’s be honest, they’re all BS.

submitted by /u/SCRXVM_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Switched Bug Bounty Platforms To See If The Hype Was True.

Hi InfoSec Community and fellow Hackers. I just wanted to share a quick story about coming out of your comfort zone, maybe someone else is…Continue reading on Medium »
Read more...
Pollenisator - Collaborative Pentest Tool With Highly Customizable Tools

Pollenisator is a tool aiming to assist pentesters and auditor automating the use of some tools/scripts and keep track of them. Written in python 3 Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc. Tools/scripts are separated into 4 categories : wave, Network/domain, IP, Port Objects are stored in a NoSQL DB (Mongo) Keep links between them to allow queries Objects can be created through parsers / manual input Business logic can be implemented (auto vuln referencing, item triggers, etc.) Many tools/scripts launch conditions are availiable to avoid overloading the target or the scanner. A GUI based on tcl/tkDocumentation Everything is the wiki, including installation Features Register your own tools Add command line options in your database. Create your own light plugin to parse your tool output. Use the objects Models to add, update or delete objects to the pentest inside plugins. Limit the number of parallel execution of noisy/heavy tools Define a recon/fingerprinting procedure with custom tools Choose a period to start and stop the tools Define your scope with domains and network IP ranges. Custom settings to include new hosts in the scope Keep results of all files generated through tools executions Start the given docker to implement numerous tools for LAN and Web pentest Collaborative pentests Split the work between your machines by starting one worker by computer you want to use. Tags ip or tools to show your team mates that you powned it. Take notes on every object to keep trace of your discoveries Follow tools status live Search in all your objects properties with the fitler bar. have a quick summary of all hosts and their open ports and check if some are powned. Reporting Create security defects on IPs and ports Make your plugins create defects directly so you don't have to Generate a Word report of security defects found. You can use your own template with extra work. Generate a Powerpoint report of security defects found. You can use your own template with extra work. Currently integrated tools IP / port recon : Nmap (Quick nmaps followed by thorough scan) Domain enumeration : Knockpy, Sublist3r, dig reverse, crtsh Web : WhatWeb, Nikto, http methods, Dirsearch LAN : Crackmapexec, eternalblue and bluekeep scan, smbmap, anonymous ftp, enum4linux Unknown ports : amap, nmap scripts Misc : ikescan, ssh_scan, openrelay Roadmap Change the architecture to an API based one Get rid of Celery Add flexibity for commands Improve UX Add more plugin and improve existing ones Add real support for users / authenticated commands Download Pollenisator
Read more...

___________________________
@hacking_Attack
@Hacking_Video
Pollenisator is a tool aiming to assist pentesters (https://www.kitploit.com/search/label/Pentesters) and auditor automating the use of some tools/scripts and keep track of them. Written in python 3 Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc. Tools/scripts are separated into 4 categories : wave, Network/domain, IP, Port Objects are stored in a NoSQL DB (Mongo) Keep links between them to allow queries Objects can be created through parsers / manual input Business logic can be implemented (auto vuln referencing, item triggers, etc.) Many tools/scripts launch conditions are availiable to avoid overloading the target or the scanner. A GUI based on tcl/tk
Documentation
Everything is the wiki (https://github.com/AlgoSecure/Pollenisator/wiki/_Sidebar), including installation (https://github.com/Algosecure/Pollenisator/wiki/Overview)
Features
Register your own tools Add command line (https://www.kitploit.com/search/label/Command%20Line) options in your database. Create your own light plugin to parse your tool output. Use the objects Models to add, update or delete objects to the pentest inside plugins. Limit the number of parallel execution of noisy/heavy tools Define a recon/fingerprinting procedure with custom tools Choose a period to start and stop the tools Define your scope with domains and network IP ranges. Custom settings to include new hosts in the scope Keep results of all files generated through tools executions Start the given docker to implement numerous tools for LAN and Web pentest Collaborative pentests Split the work between your machines by starting one worker by computer you want to use. Tags ip or tools to show your team mates that you powned it. Take notes on every object to keep trace of your discoveries Follow tools status live Search in all your objects properties with the fitler bar. have a quick summary of all hosts and their open ports (https://www.kitploit.com/search/label/Open%20Ports) and check if some are powned. Reporting Create security defects on IPs and ports Make your plugins create defects directly so you don't have to Generate a Word report of security defects found. You can use your own template with extra work. Generate a Powerpoint report of security defects found. You can use your own template with extra work. Currently integrated tools IP / port recon : Nmap (Quick nmaps followed by thorough scan) Domain enumeration (https://www.kitploit.com/search/label/Enumeration) : Knockpy, Sublist3r, dig reverse, crtsh Web : WhatWeb, Nikto, http methods, Dirsearch LAN : Crackmapexec, eternalblue (https://www.kitploit.com/search/label/Eternalblue) and bluekeep scan, smbmap, anonymous ftp, enum4linux Unknown ports : amap, nmap scripts Misc : ikescan, ssh_scan, openrelay
Roadmap
Change the architecture to an API based one Get rid of Celery Add flexibity for commands Improve UX Add more plugin and improve existing ones Add real support for users / authenticated commands

Download Pollenisator (https://github.com/AlgoSecure/Pollenisator)

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Play preinstalled pc games on a burned bluray disc.

I was wondering would it be possible to burn a game on a bluray disc and play it from there with auto start?

It's nice to put something on a disc and make yourself a collection, that way it would also save allot of HDD space.

Also don't want to waste money on a bluray burner and it won't even be possible.

submitted by /u/Morenob1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How did you learn hacking?

I personaly learned from hackthebox and tryhackme, but david nombal and network chuck videos helped a lot too. I wonder how other people learned.

submitted by /u/Puzzleheaded-Pea-683
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking on Medium
Switched Bug Bounty Platforms To See If The Hype Was True.


Hi InfoSec Community and fellow Hackers. I just wanted to share a quick story about coming out of your comfort zone, maybe someone else is…

Continue reading on Medium »
Hacking on Medium
Included has been Pwned!


Ok this was a really fun box despite a frustrating ending. This box is fairly simple to start off with provided you notice everything that…

Continue reading on Medium »
Hacking on Medium
How I De-Beeped my AC


A guide to permanently mute your disruptive electronic appliances

Continue reading on Geek Culture »
Hacking on Medium
HackTheBox — Schooled


As always, we start with nmap to discover open ports/services.

Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!Pollenisator - Collaborative Pentest Tool With Highly Customizable Tools





Pollenisator is a tool aiming to assist pentesters and auditor automating the use of some tools/scripts and keep track of them.

* Written in python 3
* Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc.
* Tools/scripts are separated into 4 categories : wave, Network/domain, IP, Port
* Objects are stored in a NoSQL DB (Mongo)
* Keep links between them to allow queries
* Objects can be created through parsers / manual input
* Business logic can be implemented (auto vuln referencing, item triggers, etc.)
* Many tools/scripts launch conditions are availiable to avoid overloading the target or the scanner.
* A GUI based on tcl/tk



Documentation

Everything is the wiki, including installation

Features

*
Register your own tools

* Add command line options in your database.
* Create your own light plugin to parse your tool output.
* Use the objects Models to add, update or delete objects to the pentest inside plugins.
* Limit the number of parallel execution of noisy/heavy tools

*
Define a recon/fingerprinting procedure with custom tools

* Choose a period to start and stop the tools
* Define your scope with domains and network IP ranges.
* Custom settings to include new hosts in the scope
* Keep results of all files generated through tools executions
* Start the given docker to implement numerous tools for LAN and Web pentest

*
Collaborative pentests

* Split the work between your machines by starting one worker by computer you want to use.
* Tags ip or tools to show your team mates that you powned it.
* Take notes on every object to keep trace of your discoveries
* Follow tools status live
* Search in all your objects properties with the fitler bar.
* have a quick summary of all hosts and their open ports and check if some are powned.

*
Reporting

* Create security defects on IPs and ports
* Make your plugins create defects directly so you don't have to
* Generate a Word report of security defects found. You can use your own template with extra work.
* Generate a Powerpoint report of security defects found. You can use your own template with extra work.

*
Currently integrated tools

* IP / port recon : Nmap (Quick nmaps followed by thorough scan)
* Domain enumeration : Knockpy, Sublist3r, dig reverse, crtsh
* Web : WhatWeb, Nikto, http methods, Dirsearch
* LAN : Crackmapexec, eternalblue and bluekeep scan, smbmap, anonymous ftp, enum4linux
* Unknown ports : amap, nmap scripts
* Misc : ikescan, ssh_scan, openrelay


Roadmap

* Change the architecture to an API based one
* Get rid of Celery
* Add flexibity for commands
* Improve UX
* Add more plugin and improve existing ones
* Add real support for users / authenticated commands



Download Pollenisator

___________________________
@hacking_Attack
@Hacking_Video