KitPloit - PenTest Tools!
SharpML - Machine Learning Network Share Password Hunting Toolkit

http://2.bp.blogspot.com/-bnswL8b17XE/YUOtLIMkM8I/AAAAAAAAuxA/H9jWrcQoCV03t652i677JpvyBFl1gqvFQCK4BGAYYCw/w640-h400/SharpML_1_sharpml_logic-785687.png
SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C#.

The tool is discussed in more detail on our blog here, but is summarised below also:

SharpML is C# and Python based tool that performs a number of operations with a view to mining file shares, querying Active Directory for users, dropping an ML model and associated rules, perfoming Active Directory authentication checks, with a view to automating the process of hunting for passwords in file shares by feeding the mined data into the ML model.
The ML model is written in Python, and has been developed using a custom algorithm to identify likelyhoods of passwords. The model has been compiled with PyInstaller and sits as resource file in the C# wrapper, which interops between itself, the data and the model. The program logic can be seen below:

http://2.bp.blogspot.com/-bnswL8b17XE/YUOtLIMkM8I/AAAAAAAAuxA/H9jWrcQoCV03t652i677JpvyBFl1gqvFQCK4BGAYYCw/w640-h400/SharpML_1_sharpml_logic-785687.png

Currently it allows for a single file share to be assessed.

You will need to have read access to the file share you are targeting, after which the tool will perform its activities mostly autonomously.

There a compiled release in the release section, and it is to be noted that this tool is currently a PoC and subject to numerous improvements.

Usage:

cmd.exe

C:\> SharpML.exe -u \\fileshare\d$


Cobalt Strike

> execute-assembly SharpML.exe -u \\fileshare\d$


Authors

Marco Valentini

Tom Kallo

To Do

* When SharpML is run it will attempt to verify all users that it finds. If a restrictive domain lockout policy exits, it may attempt to verify users multiple times and lock the account out in event of multiple failed authentications
* Some file size limitations need to be implemented in order for larger text based files not to cause a bottle neck when copying the raw data
* Select the option of running multiple file shares simultaneously. By implementing an automatic share finder, allow SharpML to be completely autonomous and scour the whole network
* Improve some program logic, including further options such as the choice of cehcking against 10,000 most common passwords or not
Download SharpML

___________________________
@hacking_Attack
@Hacking_Video

Why it’s Important to Find and Fix even Non-Critical Bugs?
https://levelup.gitconnected.com/why-its-important-to-find-and-fix-even-non-critical-bugs-7abc08d81b1f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

As a developer, I’ve encountered these kinds of bugs regularly in my programming life, and I’m sure you do too. Sadly, most companies…Continue reading on Level Up Coding » (https://levelup.gitconnected.com/why-its-important-to-find-and-fix-even-non-critical-bugs-7abc08d81b1f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Expect The Unexpected: Discovering fresh ZeroDay for Bounty
https://sinsinology.medium.com/expect-the-unexpected-discovering-fresh-zeroday-for-bounty-d074f3175847?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Special program announced anyone who find a vulnerability in their scope of IP addresses will be rewarded an enormous bountyContinue reading on Medium » (https://sinsinology.medium.com/expect-the-unexpected-discovering-fresh-zeroday-for-bounty-d074f3175847?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
10 Types of Web Vulnerabilities that are Often Missed - Detectify Labs

https://external-preview.redd.it/rwXMc5XFvQSDShujxQ9vVQm0SbV463-JeDX7bOFADqs.jpg?width=640&crop=smart&auto=webp&s=8c5b5d3aed4e3297a6b24d85cbdce6df9bd842b9 submitted by /u/intheclairdelune
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Generating desired random numbers

Yesterday, I was watching TechWithTim's video about how random module in python works. He said if the seed was same, the sequence will be the same, that got me into thinking. is it possible to know the seed of the sequence by seeing the actual sequence? and after doing some research (googling) I found out that many random number generators use Seed x 8 modulo 11to generate random numbers. If I had a sequence like 1,3,4,2,1,2,3,2is it possible to find what the seed value was fed into the formula to create this pattern?

submitted by /u/Bharath1910
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DirSearch : A Go Implementation Of Dirsearch

DirSearch software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go’s concurrency model, channels, and so forth.

Purpose

DirSearch takes an input URL ( -urlparameter ) and a wordlist ( -wordlistparameter ), it will then perform concurrent HEADrequests using the lines of the wordlist as paths and files eventually brute forcing folders and files on a web server.

It supports a custom file extension ( -ext, default to php) and other optional arguments:

Usage of dirsearch:
-200only
If enabled, will only display responses with 200 status code.
-consumers int
Number of concurrent consumers. (default 8)
-ext string
File extension. (default “php”)
-maxerrors int
Maximum number of errors to get before killing the program. (default 20)
-url string
Base URL to start enumeration from.
-wordlist string
Wordlist file to use for enumeration. (default “dict.txt”)

Compilation

go get github.com/evilsocket/dirsearch
cd dirsearch
make get_glide
make install_dependencies
make build
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
AES256_Passwd_Store : Secure Open-Source Password Manager

AES256_Passwd_Store script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file.

This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file’s data using the algorithm’s hash as the AES-256 key.

When providing the ‘scrypt’ argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely generated salt is base64 encoded and prepended to each database file’s encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data.

When using the change password parameter/-cp the script will decrypt the database file’s data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.

Example Usage Using Script As The Hashing Algorithm

Create a database file

python3 aespasswd_store.py -a scrypt -c

Change master password for a database file

python3 aespasswd_store.py -a scrypt -cp

Edit a database file

python3 aespasswd_store.py -a scrypt -e

Query data from within the database file

python3 aespasswd_store.py -a scrypt -q

Examples

# Add entry to the database/modify existing data:
pass_id1=password
pass_id2=password
pass_id3=password
# Delete existing data:
pass_id1=delete
pass_id2=delete
# -q parameter: Query data (entering nothing dumps all data):
pass_id1
pass_id3
# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Wordlistgen : Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths

Wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application’s context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists.

Installation

If you don’t have Go installed, “go” do that!

go get -u github.com/ameenmaali/wordlistgen

Usage

wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as:

$ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123

Get unique URL components from a file of URLs and/or paths:

cat hosts.txt | wordlistgen

Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file:

cat hosts.txt | wordlistgen -qv > urlComponents.txt

wordlistgen works at it’s best when chained with other tools, such as @tonnomnom’s waybackurls :

cat hosts.txt | waybackurls | wordlistgen
Download

___________________________
@hacking_Attack
@Hacking_Video

Belt Finance Logic Error Bug Fix Postmortem
https://medium.com/immunefi/belt-finance-logic-error-bug-fix-postmortem-39308a158291?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/belt-finance-logic-error-bug-fix-postmortem-39308a158291?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Announcing the BugBounty program
https://medium.com/human-protocol/announcing-the-bugbounty-program-5b14ef620173?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video