Hacking on Medium
[TryHackMe]- Bounty Hacker

https://cdn-images-1.medium.com/max/1219/1*IxUScBh5Cl5SLQCQsAwzBw.png
Langkah pertama lakukan enumerasi pada 10.10.130.216 dengan cara melakukan scanning pada port (Nmap) dan juga scanning directory…

Continue reading on Medium »

Hacking on Medium
История жизни и смерти хакера, взломавшего пентагон и NASA в 15 лет

https://cdn-images-1.medium.com/max/1052/1*mhOy3CmqObQXDzK2X4td6w.png
Как правило, хакеры стараются вести скрытный образ жизни и соблюдать анонимность. Многим это удается, но некоторые из них обретают…

Continue reading on Medium »

Hacking on Medium
Subdomain Enumeration Methodology

How i enumerate subdomains with custom script

Continue reading on Medium »

Deep Web
Block DX as a Crypto Currency Provider for TOR Transactions?

first time user. is it good to use a decentralized bitcoin exchange to transact on deep web? does this track my identity? I'm doubtly to use coinbase on transacting because they use KYC.

https://blockdx.com/

submitted by /u/St3gm4
[link] [comments]

Deep Web
Take a look at private by design Decentralised e-commerce without third parties:

submitted by /u/Cyberpunk-News
[link] [comments]

hacking: security in practice
A missing/runaway child

Hi all,

Someone recently posted about a missing and runaway child. Is it possible to somehow track and find their location through social media, etc.? Also if this is not the right place, could someone direct to me correct subreddit? Thank you.

d

submitted by /u/diamondplatter
[link] [comments]

Hacking on Medium
Editing metadata with gThumb!

https://cdn-images-1.medium.com/max/1358/1*119wQ5kiTqYUMKhM5DdYPg.png
We have learnt about metadata and stuff in one of the previous blog post. Today we’ll see how to edit metadata using a free software…

Continue reading on Medium »

Gitrecon - OSINT Tool To Get Information From A Github Profile And Find GitHub User'S Email Addresses Leaked On Commits
http://www.kitploit.com/2021/03/gitrecon-osint-tool-to-get-information.html

OSINT tool to get information from a github profile and find GitHub user's email (https://www.kitploit.com/search/label/Email) addresses leaked (https://www.kitploit.com/search/label/Leaked) on commits.
How does this work? GitHub uses the email address associated with a GitHub account to link commits and other activity to a GitHub profile. When a user makes commits to public repos their email address is usually published in the commit and becomes publicly accessible, if you know where to look. GitHub provide some instructions (https://help.github.com/articles/setting-your-email-in-git/) on how to prevent this from happening, but it seems that most GitHub users either don't know or don't care that their email address may be exposed. Finding a GitHub user's email address is often as simple as looking at their recent events (https://developer.github.com/v3/activity/events/) via the GitHub API. Idea and text from Nick Drewe (https://twitter.com/nickdrewe). Source: https://thedatapack.com/tools/find-github-user-email/
Prerequisites
Python 3 (https://www.python.org/download/releases/3.0/)
Installation
git clone https://github.com/GONZOsint/gitrecon.git
cd gitrecon/
python3 -m pip install -r requirements.txt It is possible to use a Github (https://github.com/settings/tokens)access (https://www.kitploit.com/search/label/Access) token by editing line 23 of the gitrecon.py file token = ''

Usage usage: gitrecon.py [-h] [-a] [-o] username

positional arguments:
username

optional arguments:
-h, --help show this help message and exit
-a, --avatar download avatar pic
-o, --output save output as json

Features

Profile info
Username Name User ID Avatar url Email Location Bio Company Blog Gravatar ID Twitter username Followers Following Created at Updated at
Extract Orgs

Search for leaked emails (https://www.kitploit.com/search/label/Emails) on commits

Prevention To avoid this type of leaks, certain configurations can be made on Github: Settings url: https://github.com/settings/emails ✔️ Keep my email addresses private ✔️ Block command line (https://www.kitploit.com/search/label/Command%20Line) pushes that expose my email

Download Gitrecon (https://github.com/GONZOsint/gitrecon)

KitPloit - PenTest Tools!
Gitrecon - OSINT Tool To Get Information From A Github Profile And Find GitHub User'S Email Addresses Leaked On Commits

https://1.bp.blogspot.com/-TVj_xGLK8uo/YFetv2Kx4sI/AAAAAAAAVqo/pf-2O5YwobEUpy41JZPfUbLH0CIdK1H_ACNcBGAsYHQ/w640-h342/gitrecon_1.png
OSINT tool to get information from a github profile and find GitHub user's email addresses leaked on commits.

How does this work?

GitHub uses the email address associated with a GitHub account to link commits and other activity to a GitHub profile. When a user makes commits to public repos their email address is usually published in the commit and becomes publicly accessible, if you know where to look.

GitHub provide some instructions on how to prevent this from happening, but it seems that most GitHub users either don't know or don't care that their email address may be exposed.

Finding a GitHub user's email address is often as simple as looking at their recent events via the GitHub API.

Idea and text from Nick Drewe.

Source: https://thedatapack.com/tools/find-github-user-email/
Prerequisites

* Python 3
Installation

git clone https://github.com/GONZOsint/gitrecon.git
cd gitrecon/
python3 -m pip install -r requirements.txt

It is possible to use a Github access token by editing line 23 of the gitrecon.py file
token = '<access'


Usage
usage: gitrecon.py [-h] [-a] [-o] username

positional arguments:
username

optional arguments:
-h, --help show this help message and exit
-a, --avatar download avatar pic
-o, --output save output as json

https://1.bp.blogspot.com/-MjL9aMffXC4/YFetfcc-ogI/AAAAAAAAVqg/kJ7Zc5zMdyQBI6Z2n7hMkT2IngDZxg9MwCNcBGAsYHQ/w640-h342/gitrecon_1.png
Features

*
Profile info

* Username
* Name
* User ID
* Avatar url
* Email
* Location
* Bio
* Company
* Blog
* Gravatar ID
* Twitter username
* Followers
* Following
* Created at
* Updated at

*
Extract Orgs

*
Search for leaked emails on commits

Prevention

To avoid this type of leaks, certain configurations can be made on Github:

Settings url: https://github.com/settings/emails

*
✔️
Keep my email addresses private
*
✔️
Block command line pushes that expose my email
Download Gitrecon

Black Hat Ethical Hacking
Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes FlawsPost Views: 45
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
Reading Time: 1 Minute
Thrive Themes has recently patched vulnerabilities in its WordPress plugins and legacy Themes – but attackers are targeting those who haven’t yet applied security updates.
Attackers are actively exploiting two recently-patched vulnerabilities in a popular suite of tools for WordPress websites from marketing platform Thrive Themes.

Thrive Themes offers various products to help WordPress websites “convert visitors into leads and customers.” Its suite of products, called Thrive Suite, includes a lineup of Legacy Themes – tools to help change the layout and design of WordPress websites – as well as various plugins. These plugins offer various website development and visual functionalities, including Thrive Architect, which helps site owners create website landing pages, and Thrive Comments, which helps them implement engaging comments sections.

Two vulnerabilities were discovered across both these Legacy Themes and plugins, and patches were subsequently released on March 12. The flaws could be chained together to allow unauthenticated attackers ultimately upload arbitrary files on vulnerable WordPress sites – allowing for website compromise.
See Also: Hobby Lobby Exposes Customer Data in Cloud Misconfiguration However, despite patches being released, researchers are seeing a wave of exploits attempts begin – and they warn that more than 100,000 WordPress sites using Thrive Themes products may still be vulnerable.

“We are seeing these vulnerabilities being actively exploited in the wild, and we urge users to update to the latest versions available immediately since they contain a patch for these vulnerabilities,” according to Chloe Chamberland, threat analyst with Wordfence on Wednesday.

Below are a list of affected versions of Thrive Themes Legacy Themes and plugins, according to Wordfence:

* All Legacy Themes, including Rise, Ignition, and others | Version < 2.0.0
* Thrive Optimize | Version < 1.4.13.3
* Thrive Comments | Version < 1.4.15.3
* Thrive Headline Optimizer | Version < 1.3.7.3
* Thrive Themes Builder | Version < 2.2.4
* Thrive Leads Version | < 2.3.9.4
* Thrive Ultimatum Version | < 2.3.9.4
* Thrive Quiz Builder Version | < 2.3.9.4
* Thrive Apprentice | Version < 2.3.9.4
* Thrive Architect | Version < 2.6.7.4
* Thrive Dashboard | Version < 2.3.9.3
See Also: Offensive Security Tool: Skipfish The FlawsThe more critical of the two flaws ranks 10 out of 10 on the CVSS scale, and exists in Thrive Themes Legacy Themes. These themes feature the ability to automatically compress images during uploads – however this functionality was insecurely implemented, said Chamberland.

“Thrive ‘Legacy’ Themes register a REST API endpoint to compress images using the Kraken image optimization engine,” said Chamberland. “By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote URL and overwrite an existing file on the site with it or create a new file. This includes executable PHP files that contain malicious code.”

Another, less-severe vulnerability exists in Thrive Themes plugins. This error stems from an insecure implementatio[...]