Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking on Medium
How I was able to find 100+ XSS in United nations Bug Bounty Program


Hey Guys so this is my first blog . so i thought maybe give it try to show people how you could find bugs in a easy way

Continue reading on Medium »
Hacking on Medium
Capture The Flag (CTF) Toolkit


A list of my most used tools for a CTF engagement.

Continue reading on Medium »
Hacking on Medium
My first Hall of Fame


Hello ppl ! This is Gnana Aravind, with a new write-up on how i got my first Hall of Fame. So first of all a HOF is something like an…

Continue reading on Medium »
Hacking on Medium
Hacking Nespresso Expert Machine To Brew Coffee Using Custom Applications Via Bluetooth


Nespresso Expert machine has the Bluetooth ability which officially can be used only by Nespresso mobile app and it does not offer any API…

Continue reading on Medium »
Bounty Hacker Tryhackme Walkthrough

Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups »
Read more...
Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/bounty-hacker-tryhackme-walkthrough-8f8e0c65827d?source=rss------bug_bounty-5)
We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium » (https://nimbusplatform.medium.com/nimbus-bug-bounty-program-2-8a91eda03e72?source=rss------bug_bounty-5)
Nimbus Bug Bounty Program #2

We are happy to announce the #2 edition of our Bug Bounty Program on Hacken Platform.Continue reading on Medium »
Read more...
DNSTake - A Fast Tool To Check Missing Hosted DNS Zones That Can Lead To Subdomain Takeover

A fast tool to check missing hosted DNS zones that can lead to subdomain takeover. What is a DNS takeover? DNS takeover vulnerabilities occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹Installation from Binary The ez way! You can download a pre-built binary from releases page, just unpack and run! from Source NOTE: Go 1.16+ compiler should be installed & configured! Very quick & clean! go install github.com/pwnesia/dnstake/cmd/dnstake@latest — or Manual building executable from source code: git clone https://github.com/pwnesia/dnstake cd dnstake/cmd/dnstake go build . (sudo) mv dnstake /usr/local/bin Usage $ dnstake -h ·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ . ██ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▀▄.▀· ▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▄█▀▀█ ▐▀▀▄·▐▀▀▄ ██. ██ ██▐█▌▐█▄▐█▐█▌·▐█ ▐▌▐█.█▌▐█▄▄▌ ▀▀▀▀▀• ▀▀ ; █ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀ (c) pwnesia.org — v0.0.1Usage: stdin | dnstake options dnstake -t HOSTNAME optionsOptions: -t, --target Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its helpExamples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake Workflow DNSTake use RetryableDNS client library to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable to be taken over. More or less like this in form of a diagram. Currently supported DNS providers, see here. References 1 https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/ License DNSTake is distributed under MIT. See LICENSE. Download Dnstake
Read more...

___________________________
@hacking_Attack
@Hacking_Video
A fast tool to check missing hosted DNS zones that can lead to subdomain takeover.
What is a DNS takeover?
DNS takeover vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) occur when a subdomain (subdomain.example.com) or domain has its authoritative nameserver set to a provider (e.g. AWS Route 53, Akamai, Microsoft Azure, etc.) but the hosted zone has been removed or deleted. Consequently, when making a request for DNS records (https://www.diggui.com/#type=A&hostname=github.technology&nameserver=public&public=8.8.8.8&specify=&clientsubnet=&tcp=def&transport=def&mapped=def&nssearch=def&trace=def&recurse=def&edns=def&dnssec=def&subnet=def&cookie=def&all=def&cmd=def&question=def&answer=def&authority=def&additional=def&comments=def&stats=def&multiline=def&short=def&colorize=on) the server responds with a SERVFAIL error. This allo ws an attacker to create the missing hosted zone on the service that was being used and thus control all DNS records for that (sub)domain.¹
Installation

from Binary
The ez way! You can download a pre-built binary from releases page (https://github.com/pwnesia/dnstake/releases), just unpack and run!
from Source
NOTE: Go 1.16+ compiler (https://golang.org/doc/install) should be installed & configured! Very quick & clean! go install github.com/pwnesia/dnstake/cmd/dnstake@latest
— or
Manual building executable from source code: git clone https://github.com/pwnesia/dnstake
cd dnstake/cmd/dnstake
go build .
(sudo) mv dnstake /usr/local/bin
Usage
Define single target host/list to check -c, --concurrent Set the concurrency level (default: 25) -s, --silent Suppress errors and/or clean output -h, --help Display its help Examples: dnstake -t (sub.)domain.tld dnstake -t hosts.txt cat hosts.txt | dnstake subfinder -silent -d domain.tld | dnstake ">$ dnstake -h

·▄▄▄▄ ▐ ▄ .▄▄ ·▄▄▄▄▄ ▄▄▄· ▄ •▄ ▄▄▄ .
██ ██ •█▌▐█▐█ ▀.•██ ▐█ ▀█ █▌▄▌▀▄.▀·
▐█· ▐█▌▐█▐▐▌▄▀▀▀█▄▐█.▄█▀▀█ ▐▀▀▄·▐▀▀
██. ██ ██▐█▌▐█▄▐█▐█▌·▐█ ▐▌▐█.█▌▐█▄▄▌
▀▀▀▀▀• ▀▀ ; █ ▀▀▀▀ ▀▀▀ ▀ ▀ ·▀ ▀ ▀▀▀

(c) pwnesia.org — v0.0.1

Usage:
[stdin] | dnstake [options]
dnstake -t HOSTNAME [options]

Options:
-t, --target Define single target host/list to check
-c, --concurrent Set the concurrency level (default: 25)
-s, --silent Suppress errors and/or clean output
-h, --help Display its help

Examples:
dnstake -t (sub.)domain.tld
dnstake -t hosts.txt
cat hosts.txt | dnstake
subfinder -silent -d domain.tld | dnstake
Workflow
DNSTake use RetryableDNS client library (https://github.com/projectdiscovery/retryabledns) to send DNS queries. Initial engagement using Google & Cloudflare DNS as the resolver, then check & fingerprinting (https://www.kitploit.com/search/label/Fingerprinting) the nameservers of target host — if there is one, it will resolving the target host again with its nameserver IPs as resolver, if it gets weird DNS status response (other than NOERROR/NXDOMAIN), then it's vulnerable (https://www.kitploit.com/search/label/Vulnerable) to be taken over. More or less like this (https://0xpatrik.com/content/images/2018/08/ns_automation-2.png) in form of a diagram. Currently supported DNS providers, see here (https://github.com/indianajson/can-i-take-over-dns/blob/97104102c8ce911fd978521c703f26e1c547c613/README.md#dns-providers).
References
[1] https://github.com/indianajson/can-i-take-over-dns#what-is-a-dns-takeover https://0xpatrik.com/subdomain-takeover-ns/
License
DNSTake is distributed (https://www.kitploit.com/search/label/Distributed) under MIT. See LICENSE.

Download Dnstake (https://github.com/pwnesia/dnstake)

___________________________
@hacking_Attack
@Hacking_Video