Hello ppl ! This is Gnana Aravind, with a new write-up on how i got my first Hall of Fame. So first of all a HOF is something like an…Continue reading on Medium » (https://aravind07.medium.com/my-first-hall-of-fame-d575cb919801?source=rss------bug_bounty-5)
hacking: security in practice
Why is kali so hated?
My best guess is because it’s the first thing everyone get instead of looking at the other options and skiddies think they are professional hacker after downloading it. Is this the reason or is there a different reason?
Apart from that I don’t understand why it’s so hated especially since it is a great distro for both experts and beginners alike.
submitted by /u/theUnholyVenom
[link] [comments]
Why is kali so hated?
My best guess is because it’s the first thing everyone get instead of looking at the other options and skiddies think they are professional hacker after downloading it. Is this the reason or is there a different reason?
Apart from that I don’t understand why it’s so hated especially since it is a great distro for both experts and beginners alike.
submitted by /u/theUnholyVenom
[link] [comments]
reddit
Why is kali so hated?
My best guess is because it’s the first thing everyone get instead of looking at the other options and skiddies think they are professional hacker...
hacking: security in practice
Is it hard to get into someone's phone through a video or link
I'm starting to get into this stuff and I'd like to know where to learn about getting into someone's phone through video or links. Is there a course or something to learn this stuff?
All I want to know is:- 1-creating fake links. 2-how to get into person's phone(have access to everything like it's my own) through the link or just a video.
Help a newbie, y'all have been in my place once before. Thanks in advance
submitted by /u/VoileGrace25
[link] [comments]
Is it hard to get into someone's phone through a video or link
I'm starting to get into this stuff and I'd like to know where to learn about getting into someone's phone through video or links. Is there a course or something to learn this stuff?
All I want to know is:- 1-creating fake links. 2-how to get into person's phone(have access to everything like it's my own) through the link or just a video.
Help a newbie, y'all have been in my place once before. Thanks in advance
submitted by /u/VoileGrace25
[link] [comments]
reddit
Is it hard to get into someone's phone through a video or link
I'm starting to get into this stuff and I'd like to know where to learn about getting into someone's phone through video or links. Is there a...
Bounty Hacker Tryhackme Walkthrough
Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups »
Read more...
Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups »
Read more...
Bounty Hacker Tryhackme Walkthrough
https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5
https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5
Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5)
Nimbus Bug Bounty Program #2
https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5
https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5
We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium » (https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5)
Attacking Active Directory as a Red Teamer or as an attacker
https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/AttackingAD) [comments] (https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/)
https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/AttackingAD) [comments] (https://www.reddit.com/r/redteamsec/comments/ppippu/attacking_active_directory_as_a_red_teamer_or_as/)
Nimbus Bug Bounty Program #2
We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium »
Read more...
We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium »
Read more...
DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover
A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹Installation from Binary The ez way! You can download a pre-built binary from releases page, just unpack and run! from Source NOTE: Go 1.16+ compiler should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest — or Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake▶ cd dnstake/cmd/dnstake▶ go build .▶ (sudo) mv dnstake /usr/local/bin Usage $ dnstake -h ·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ . ██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀· ▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄ ██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌ ▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀ (c) pwnesia.org — v0.0.1Usage: stdin | dnstake options dnstake -t HOSTNAME optionsOptions: -t, --target Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its helpExamples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram. Currently supported DNS providers, see here. References 1 https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/ License DNSTake is distributed under MIT. See LICENSE. Download Dnstake
Read more...
___________________________
@hacking_Attack
@Hacking_Video
A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹Installation from Binary The ez way! You can download a pre-built binary from releases page, just unpack and run! from Source NOTE: Go 1.16+ compiler should be installed & configured! Very quick & clean! ▶ go install github.com/pwnesia/dnstake/cmd/dnstake@latest — or Manual building executable from source code: ▶ git clone https://github.com/pwnesia/dnstake▶ cd dnstake/cmd/dnstake▶ go build .▶ (sudo) mv dnstake /usr/local/bin Usage $ dnstake -h ·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ . ██▪ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▪▀▄.▀· ▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▪▄█▀▀█ ▐▀▀▄·▐▀▀▪▄ ██. ██ ██▐█▌▐█▄▪▐█▐█▌·▐█ ▪▐▌▐█.█▌▐█▄▄▌ ▀▀▀▀▀• ▀▀ ; █▪ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀ (c) pwnesia.org — v0.0.1Usage: stdin | dnstake options dnstake -t HOSTNAME optionsOptions: -t, --target Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its helpExamples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram. Currently supported DNS providers, see here. References 1 https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/ License DNSTake is distributed under MIT. See LICENSE. Download Dnstake
Read more...
___________________________
@hacking_Attack
@Hacking_Video
DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover
http://www.kitploit.com/2021/09/dnstake-fast-tool-to-check-missing.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/09/dnstake-fast-tool-to-check-missing.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover