Kali Linux TutorialsDorkify : Perform Google Dork Search
Dorkify perform Google Dork Search. Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific strings of text within search results such as finding specific versions of vulnerable Web applications. Users can utilize commands to get other specific search results.

MENU 

* Google Search
* URL Search
* Books
* Music Downloads
* Information
* Dork Hacks!

Features

Dorkify can :

* Perfom a (Google/URL) search
* Find specific link with keywords in URL/Title/Website
* Search for Books
* Extract mp3/mp4 download links
* Perform deep scan on definitions and informations
* Get details on Stocks/Maps/Weather
* Find vulnerable WordPress sites
* Search for Usernames and Password list
* Find vulnerable Web servers
* Find vulnerable CCTV’s
* Find open FTP Servers

More features with stronger results will come out in v 2.21

INSTALLATION

Python 3.6 or higher is required

git clone https://github.com/hhhrrrttt222111/Dorkify.git
cd Dorkify
python3 -m pip install -r requirements.txt

USAGE

python3 dorkify.py –help
usage: dorkify.py [-h]
[–cli | –wp | –up | –cam |
–ftp | -v | -s SEARCH |
-b BOOK | -mu MUSIC | -m MAPS |
-w WEATHER | -i INFO | -d DEFINE |
-st STOCKS | –intitle INTITLE |
–inurl INURL | –site SITE]
optional arguments:
-h, –help show this help message and exit
–cli Run the Command Line version of Dorkify
–wp WordPress sites vulnerabilities
–up Find vulnerable Usernames and Passwords
–cam Find vulnerable CCTV cameras
–ftp Find open FTP Servers
-v, –version Version
-s SEARCH, –search SEARCH
Do a Google search
-b BOOK, –book BOOK Search for a book or author
-mu MUSIC, –music MUSIC
Search for songs or artists
-m MAPS, –maps MAPS Find maps of a city
-w WEATHER, –weather WEATHER
Check weather of a city
-i INFO, –info INFO Get Information
-d DEFINE, –define DEFINE
Define a term
-st STOCKS, –stocks STOCKS
Search for Stock of a company with Ticker value
–intitle INTITLE Search for a keywords in website title
–inurl INURL Search for a keywords in website URL
–site SITE Search for a Site

Run Dorkify

python3 dorkify.py –cli


Download

Kali Linux TutorialsBeaconEye : Hunts Out CobaltStrike Beacons And Logs Operator Command Output
BeaconEye scans running processes for active Cobalt Strike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.

How It Works

BeaconEye will scan live processes or MiniDump files for suspected CobaltStrike beacons. In live process mode, BeaconEye optionally attaches itself as a debugger and will begin monitoring beacon activity for C2 traffic (HTTP/HTTPS beacons supported currently).

The AES keys used for encrypting C2 data and mallable profile are decoded on the fly, which enables BeaconEye to extract and decrypt beacon’s output when commands are sent via the operator.

A log folder of activity is created per process relative to the current directory where BeaconEye is executed from.

Usage

BeconEye by @EthicalChaos
CobaltStrike beacon hunter and command monitoring tool x86_64
-v, –verbose Display more verbose output instead of just
information on beacons found
-m, –monitor Attach to and monitor beacons found when scanning
live processes
-f, –filter=VALUE Filter process list with names starting with x (
live mode only)
-d, –dump=VALUE A folder to use for MiniDump mode to scan for
beacons (files with *.dmp or *.mdmp)
-h, –help Display this help

Features

* A per process log folder
* Dumps beacon config
* Displays output from most beacon commands
* Saves screenshots
* Detects standalone and injected beacons
* Detects beacons masked with built in sleep_mask
* Scan running processes or Minidumps offline

Caveats

BeaconEye can detect all beacon types but only monitor HTTP/HTTPS beacons. At present, only command output is decoded and not command requests. See TODO list below for a full list of intended features.

BeaconEye should be considered ALPHA, I’m keen to get feedback on 4.x beacons that cannot be detected or where the malleable C2 profile has not been parsed correctly resulting in incorrect decoding of output.


Download

HTTP CRASH COURSE

Hey ,hi guys here vishnu vardhan . Myself im a cybersecurity researcher . Here we discuss about the how web works .Continue reading on Medium »
Read more...

HTTP CRASH COURSE
https://vardhanchalla652.medium.com/http-crash-course-88e7de97c01c?source=rss------bug_bounty-5

Hey ,hi guys here vishnu vardhan . Myself im a cybersecurity researcher . Here we discuss about the how web works .Continue reading on Medium » (https://vardhanchalla652.medium.com/http-crash-course-88e7de97c01c?source=rss------bug_bounty-5)

Announcing the SynFutures Bug Bounty Program winners for Arbitrum and BSC networks
https://medium.com/synfutures/announcing-the-synfutures-bug-bounty-program-winners-for-arbitrum-and-bsc-networks-1b2f9036c0dc?source=rss------bug_bounty-5

Greetings SynFutures Family!Continue reading on SynFutures » (https://medium.com/synfutures/announcing-the-synfutures-bug-bounty-program-winners-for-arbitrum-and-bsc-networks-1b2f9036c0dc?source=rss------bug_bounty-5)

Announcing the SynFutures Bug Bounty Program winners for Arbitrum and BSC networks

Greetings SynFutures Family!Continue reading on SynFutures »
Read more...

hacking: security in practice
Locked out of snap

How can someone bypass the phone verification I changed my number and email since I made a snap, I got my password but jt said it need two factor since it's on a new device, how can I get around that

submitted by /u/Sharp-Direction1166
[link] [comments]

hacking: security in practice
Random file opened without me opening it

I have the cracked version of DOOM on my PC and today I noticed a certain file show up in Recent files. It was named 'tutorial_weak_point_maykr_zombie.bk2'

I did not open this file and have not played DOOM in about a month. Is this a concern?

submitted by /u/AwareSuperCC
[link] [comments]

Hacking on Medium
LandOrc — Audited and Secured


In 2016, Ethereum chain split due to a code vulnerability exploited by an attacker that put millions of dollars of funds at risk. A…

Continue reading on Medium »

Hacking on Medium
Persist and Live on Windows Systems


So congrats you got NT AUTHORITY\SYSTEM on a Windows computer, however, this begs the question; Now what? Today I want to walk you through…

Continue reading on Medium »

Hacking on Medium
CSAW — Poems for you


To give a quick Backstory this challenge was one of the csaw qualifiers. I didn’t have time to solve many other challenges however i took…

Continue reading on Medium »

Hacking on Medium
Learn Linux Privilege Escalation the fun way!


I was the one procrastinating, making it more difficult than it is. But then asked myself, why Linux privilege escalation seems hard?

Continue reading on Medium »

Hacking on Medium
Guard has been Pwned!


Hacking this machine was incredibly fun and it didn’t take very long. Lets get straight in to it. First thing I always like to check is…

Continue reading on Medium »

Peirates - Kubernetes Penetration Testing Tool
http://www.kitploit.com/2021/09/peirates-kubernetes-penetration-testing.html

___________________________
@hacking_Attack
@Hacking_Video

What is Peirates?
Peirates, a Kubernetes (https://www.kitploit.com/search/label/Kubernetes) penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service accounts, obtain further code execution, and gain control of the cluster.
Where do I run Peirates?
You run Peirates from a container (https://www.kitploit.com/search/label/Container) running on Kubernetes.
Does Peirates attack a Kubernetes cluster?
Yes, it absolutely does. Talk to your lawyer and the cluster owners before using this tool in a Kubernetes cluster.
Who creates Peirates?
InGuardians' CTO Jay Beale first conceived of Peirates and put together a group of InGuardians developers to create it with him, including Faith Alderson, Adam Crompton and Dave Mayer. Faith convinced us to all learn Golang, so she could implement the tool's use of the kubectl (https://www.kitploit.com/search/label/Kubectl) library (https://www.kitploit.com/search/label/Library) from the Kubernetes project. Adam persuaded the group to use a highly-interactive user interface. Dave brought contagious enthusiasm. Together, these four developers implemented attacks and began releasing this tool that we use on our penetration tests.
Do you welcome contributions?
Yes, we absolutely do. Submit a pull request and/or reach out to contact@inguardians.com (mailto:contact@inguardians.com).
What license is this released under?
Peirates is released under the GPLv2 license.
Modules

Building and Running
If you just want the peirates binary (https://www.kitploit.com/search/label/Binary) to start attacking things, grab the latest release from the releases page (https://github.com/inguardians/peirates/releases). However, if you want to build from source, read on! Get peirates go get -v "github.com/inguardians/peirates"
Get libary sources if you haven't already (Warning: this will take almost a gig of space because it needs the whole kubernetes repository) go get -v "k8s.io/kubectl/pkg/cmd" "github.com/aws/aws-sdk-go"
Build the executable cd $GOPATH/github.com/inguardians/peirates
./build.sh
This will generate an executable file named peirates in the same directory.

Download Peirates (https://github.com/inguardians/peirates)

___________________________
@hacking_Attack
@Hacking_Video