Reconky - A Great Content Discovery Bash Script For Bug Bounty Hunters Which Automate Lot Of Task And Organized It

Reconky is a script written in bash to automate the task of recon and information gathering.This Bash Script allows you to collect some information that will help you identify what to do next and where to look for the required target.Usage./reconky.sh <domain.com>Main-Features It will Gathers Subdomains with assetfinder and Sublist3r Duplex check for subdomains using amass Enumerates subdomains on a target domain through dictionary attack using knockpy searchs for alive domains using Httprobe Investigates for feasible subdomain takeover Scans for open ports using nmap Pulls and Assembls all possible parameters found in wayback_url data Pulls and compilis json/js/php/aspx/ files from wayback output Runs eyewitness against all the compiled(alive) domains Installation & Requirements Download the install script from https://github.com/ShivamRai2003/Reconky-Automated_Bash_Script/blob/main/reconky.sh DEMO Authors and Thanks This script makes use of tools developped by the following people Cyber Mentor Tom Hudson - Tomonomnom OWASP Ahmed Aboul-Ela - Aboul3la Gianni Amato FortyNorth Security Gordon Lyon Note : this tool tested on the kali linux 2021.2 live image. If install.sh does not run kindly install all the tools manually described in that.So that directory problem will not occur and make sure all the tools can be run globally from any directory for that use symbolic link. Happy Hunting Note : Run with Caution. Pull Request and New Ideas Is Welcome. Download Reconky-Automated_Bash_Script
Read more...

Hacking on Medium
Hack This Site: Basic Web Challenges — Level 8

https://cdn-images-1.medium.com/max/1237/1*zOEqL_Tm6Lv0DnQ2LGIONA.png
Hello and welcome to HaXeZ, today we are looking at Hack This Site Basic Web Challenge level 8. This challenge requires you to perform a…

Continue reading on Medium »

Dark Reading: Attacks/Breaches
In the Hybrid Future, Secure Everything Like You're Never Going Back

Security practices must change to reflect the reality that remote/hybrid work is the new norm. Here are three risk mitigation measures for a remote-first world.

Dark Reading: Attacks/Breaches
How to Bust Through Barriers for a More Diverse Cybersecurity Workforce

Diversity is the topic du jour, but cybersecurity professionals of color still face a lot of hurdles to enter and grow within the industry. Organizations such as Blacks in Cybersecurity are providing some of these under-represented groups with a voice.

Dark Reading: Attacks/Breaches
Researchers Play Leading Role in Detecting Cloud Misconfiguration

A new report finds 62% of cloud misconfiguration incidents are reported by independent researchers before criminals can find them.

Dark Reading: Attacks/Breaches
33% of Reported Phishing Emails Prove Malicious or Suspect

A new analysis from F-Secure details commonly used phishing phrases and methods seen in attacks.

Dark Reading: Attacks/Breaches
Microsoft Warns of Vuln That Allowed Access to Azure Infrastructure

Microsoft ran a five-year-old component that allowed vulnerability researchers to punch through the isolation that normally protects cloud tenants, researchers found.

Dark Reading: Attacks/Breaches
REvil Ransomware Group's Sudden Re-emergence Sparks Concerns

Some had hoped the notorious Russia-based group had been pressured to quit for good after a couple of especially egregious attacks on US targets earlier this year.

Dark Reading: Attacks/Breaches
First Initiatives for the First National Cyber Director

The US appointed Chris Inglis as the first National Cyber Director (NCD). Here are three key problems he must now address.

Dark Reading: Attacks/Breaches
IAM Stakeholders: The Business Operations Point of View

As the number of identities managed by enterprise skyrockets, organizations are taking steps to better align security and identity.

Dark Reading: Attacks/Breaches
Sidewalk Malware Tied to China-Linked Espionage Group

The Sidewalk backdoor has been connected to the Grayfly espionage group and seen in attacks in Asia and North America.

Dark Reading: Attacks/Breaches
How Can I Reduce the Chances of My Company Getting Hit by Ransomware?

A few cyber-hygiene best practices can get you started.

Dark Reading: Attacks/Breaches
Application Security a Growing Priority Among Security Pros

A Dark Reading survey finds most IT and security managers would rather wait to deploy applications than risk security flaws.

Dark Reading: Attacks/Breaches
Piratica Is Back at Hack For Troops' Fundraising Event

All proceeds from global Capture the Flag event go toward tech investments and IT reskilling programs for U.S. veterans.

Dark Reading: Attacks/Breaches
Steel Root Inc. Announces College Scholarship Promoting Cybersecurity Education

Scholarship provides $10,000 in financial support to help underprivileged youth; highlights growing demand for skilled applicants in field of cybersecurity.

Dark Reading: Attacks/Breaches
UN Confirms April 2021 Data Breach

UN official also confirms further attacks connected to the initial breach have been detected and are under investigation.

Dark Reading: Attacks/Breaches
Recent Breaches Underscore High Healthcare Security Risk

Healthcare institutions in California and Arizona are sending breach notification letters after attackers compromised thousands of patients' data.

Dark Reading: Attacks/Breaches
Groove Ransomware Gang Tries New Tactic to Attract Affiliates

The threat group, which leaked some 500,000 credentials for Fortinet SSL VPN devices, views ransomware as just one way to profit from compromised networks, experts say.