bash_profile - Bash profile file for all users
bash_rc - Bash_rc file
full-timeline.csv - Timeline of all files in the following directories: /home/* + var/www/* + /tmp/ + /dev/shm/ + /bin + /sbin
bin-dir-timeline - Timeline of all files in /bin
binhashes.txt - Hash of all executable files under $PATH variable
btmp-lastlog.txt - btmp last log
console-error-log.txt - This were all the errors from the script is forwarded to
cpuinfo.txt - CPU info
dev-shm-dir-timeline - Timeline of all files in /dev/shm/
df.txt - Information about the file system on which each FILE resides,or all file systems by default.
dhcp.txt - Resolver configuration file resolv.conf
executables-list.tx t - All ELF files on disk with +x attribute
group.txt - List of groups and the members belonging to each group
home-dir-timeline - Timeline of all files in /home/*
host.conf.txt - Resolver configuration file host.conf
hosts.allow.txt - Host access control file hosts.allow
hosts.deny.txt - Host access control file hosts.deny
hosts.txt - Static table lookup for hostnames /etc/hosts
ifconfig.txt - ifconfig -a Output
iptables.txt - Tables of IPv4 and IPv6 packet filter rules in the Linux kernel.
lastbad.txt - Records failed login attempts
lastlog.txt - The most recent login of all users or of a given user
last.txt - History of all logins and logouts
lsmod.txt - Kernel modules are currently loaded
lsof-processes.txt - List of all open files and the processes that opened them.
lsusb.txt - Attached USB device info
md5-ps.txt - ps command bin md5
meminfo.txt - Memory info
netstat-ano.txt - Listing All Sockets, in numeric form with timer info
netstat-antup.txt - All tcp/udp connection in numeric form with process ID
netstat-list.txt - All tcp/udp connection in numeric form with process ID without headers
num-proc.txt - number of processes according to ps command
num-ps.txt - number of processes according to /proc directory
package-list.txt - All files in all rpm packages
packages-result.txt - all executables that are not part of rpm packages
passwd.txt - Copy of the passwd file
persistence-anacron.txt - All Anacron jobs
persistence-cronlist.txt - All Cron jobs
persistence-initd.txt - All initd scripts
persistence-profiled.txt - Scripts that run when User logs in
persistence-rc-scripts.txt - All rc scripts. (run level scipts)
persistence-shellrc-etc.txt - All startup script contents in /etc/
persistence-shellrc-home.txt - All startup script contents in /home/
persistence-shellrc-root.txt - All startup script contents in /root/
persistence-systemdlist.txt - All systemd services and execution commandlines
process-details.txt - All running process details and status information
processes-list.txt - All running process acording to ps
processes.txt - All running process acording to /proc/ directory
processhashes.txt - Hash of all running processes
procmod.txt - Loaded modules for all processes
release.txt - OS information
routetable.txt - Contents of kernel routing table. route command output
sbin-dir-timeline - Timeline of all files in /sbin/*
service_status.txt - All running service and their status.

___________________________
@hacking_Attack
@Hacking_Video

ssh_config.txt - ssh service config file
sshd_config.txt - ssh service config file
sudoers.txt - List of sudoers
tmp-dir-timeline - Timeline of all files in /tmp/*
tmp-executable-files-for-diff.txt - tmp-executable-files.txt without executable type metadata for later diff operation with packages
tmp-executable-files.txt - All files with +x attributes (executables)
tmp-types.txt - tmp file for Find types of executable(script\|ELF\|executable)
var-www-dir-timeline - Timeline of all files in /var/www/*
whoandwhat.txt - w command output. Who is logged on and what they are doing.
who.txt - List of users who are currently logged in
wtmp-lastlog.txt - wtmp last log
varlogs - All contents of /var/log
viminfo - All viminfo files... Can contain vi historic commands

Disclaimer
Note that the script will likely alter artefacts on endpoints. Care should be taken when using the script. This is not meant to take forensically sound disk images of the remote endpoints.
Tested OSes
Ubuntu 16.4 Centos Mint Solaris 11.4

Download LinuxCatScale (https://github.com/FSecureLABS/LinuxCatScale)

___________________________
@hacking_Attack
@Hacking_Video

KINGLIVE NFT STREAMING BUG BOUNTY CAMPAIGN

👉Kingdom Game 4.0 is thrilled to announce the launch of Kinglive NFT Streaming Bug Bounty. NFT Marketplace on Kinglive has just been…Continue reading on Kingdom Game 4.0 »
Read more...

KitPloit - PenTest Tools!
LinuxCatScale - Incident Response Collection And Processing Scripts With Automated Reporting Scripts

https://blogger.googleusercontent.com/img/a/AVvXsEj1kWj6B71fM10Ayb-sOy9ZS7IurkA41WcUtvMW7TrOWyvEXVokEl9-VIRWZz4WW_jjLKiH_eqZaHIdquY1-EPap9vph_SirC1oFKuVQtNdLJ7YgNtIsRsj2Hh5p1_P18tu02PEAH2an7XoPL1HjdfamOu9TTW8W4YjqPBT06zzTnBIvO-MxiFFIB_tYA=w640-h300 Linux CatScale is a bash script that uses live of the land tools to collect extensive data from Linux based hosts. The data aims to help DFIR professionals triage and scope incidents. An Elk Stack instance also is configured to consume the output and assist the analysis process. UsageThis scripts were built to automate as much as possible. We recommend running it from an external device/usb to avoid overwriting evidence. Just in case you need a full image in future.

Please run the collection script on suspected hosts with sudo rights. fsecure_incident-response_linux_collector_0.7.sh the only file you need to run the collection. user@suspecthost:$ chmod +x ./Cat-Scale.sh
user@suspecthost:$ sudo ./Cat-Scale.sh The script will create a directory called "FSecure-out" in the working directory and should remove all artefacts after being compressed. This will leave a filename in the format of FSecure_Hostname-YYMMDD-HHMM.tar.gzOnce these are all aggregated and you have the FSecure_Hostname-YYMMDD-HHMM.tar.gzon the analysis machine. You can run Extract-Cat-Scale.sh which will extract all the files and place them in a folder called "extracted". user@analysishost:$ chmod +x ./Extract-Cat-Scale.sh
user@analysishost:$ sudo ./Extract-Cat-Scale.sh ParsingThis project has predefined grok filters to ingest data into elastic, feel free to modify them as you need. What does it collect?This script will procude the following files/folders which can be reviewed as text files or using Elk Stack.

Resolver configuration file resolv.conf executables-list.txt - All ELF files on disk with +x attribute group.txt - List of groups and the members belonging to each group home-dir-timeline - Timeline of all files in /home/* host.conf.txt - Resolver configuration file host.conf hosts.allow.txt - Host access control file hosts.allow hosts.deny.txt - Host access control file hosts.deny hosts.txt - Static table lookup for hostnames /etc/hosts ifconfig.txt - ifconfig -a Output iptables.txt - Tables of IPv4 and IPv6 packet filter rules in the Linux kernel. lastbad.txt - Records failed login attempts lastlog.txt - The most recent login of all users or of a given user last.txt - History of all logins and logouts lsmod.txt - Kernel modules are currently loaded lsof-processes.txt - List of all open files and the processes that opened them. lsusb.txt - Attached USB device info md5-ps.txt - ps command bin md5 meminfo.txt - Memory info netstat-ano.txt - Listing All Sockets, in numeric form with timer info netstat-antup.txt - All tcp/udp connection in numeric form with process ID netstat-list.txt - All tcp/udp connection in numeric form with process ID without headers num-proc.txt - number of processes according to ps command num-ps.txt - number of processes according to /proc directory package-list.txt - All files in all rpm packages packages-result.txt - all executables that are not part of rpm packages passwd.txt - Copy of the passwd file persistence[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
LinuxCatScale - Incident Response Collection And Processing Scripts With Automated Reporting Scripts

___________________________
@hacking_Attack
@Hacking_Video

How to PoC your Bug Leads
https://medium.com/immunefi/how-to-poc-your-bug-leads-5ec76abdc1d8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Picture this scenario: you’ve spent the entire day fruitlessly examining smart contract code. And now you’ve stumbled across a snippet of…Continue reading on Immunefi » (https://medium.com/immunefi/how-to-poc-your-bug-leads-5ec76abdc1d8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LeakDB : Web-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search

LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext “Have I Been Pwned”-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large files to individual users. Once curated, LeakDB can search terabytes of data in less than a tenth of a second, and the LeakDB server exposes a simple JSON API that can be queried using the command line client or any http client. It can be deployed in a serverless configuration with a BigQuery backend (no indexes), or as an offline/traditional server with indexes.

LeakDB uses a configurable bloom filter to remove duplicate entires, sorts indexes using external parallel quicksort (i.e., memory constrained) with a k-way binary tree merge, and binary tree search to find entries in the index.

Usage

Normalizing Data

The first step is to normalize your data sets, details on how to do this can be found here. Be sure to keep all your normalized files in a single directory. This step is the same for both the serverless and server deployments.

Next you’ll need to decide if you want to setup a traditional server deployment or a serverless deployment, there are benefits and drawbacks to each as described below.

Server Deployment

The server deployment is the cheapest way to setup LeakDB, but you’ll have to compute indexes yourself. The amount of time it takes to compute an index varies depending on the data set and your hardware. LeakDB can sort multiple terabyte data sets on almost any hardware but it could take a very long time. Domain indexes in particular can take a very long time to compute due to the high number of collisions. However, you only have to pay the computational price once. That is to say once-per-data-set, if you’ve already computed an index and want to add additional data you’ll need to re-sort the entire index (you can save bloom filter results, etc. though), so be sure to collect and normalize all your data before computing the index.

Serverless Deployment

The severless deployment generally costs more money to run as the backend is BigQuery. With BigQuery you pay for data storage as well paying per-query; it isn’t particularly expensive unless you start running lots of queries against the data set. It’s also much faster to setup since you don’t have to compute indexes yourself.

Compile From Source

Just run make , files will be put in ./bin. The client, curator, and server are pure Go and should support any valid Go compiler target but you may need to modify the Makefile. The serverless binary is Linux only, since AWS Lambda only supports Linux. The easiest way to compile the Windows binaries is to cross-compile them from a better operating system like Linux or MacOS.

For example:

* make macos
* make linux
* make windows
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Most difficult phone for hackers and law enforcement to get into?

I've heard mixed reviews on lots of types of phones and I'm trying to find one that is safe.

submitted by /u/username_ann
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Comptia security+, CEH and other certs valid for the UK?

Looking to get my first certification, but they all seem US based. So i'm not sure if that's a valid option for me. The jobs I've seen in the UK want experience and don't mention any certs. What do ya'll think?

Thanks x

submitted by /u/Hellion__
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bypassing required reviews using GitHub Actions
https://medium.com/cider-sec/bypassing-required-reviews-using-github-actions-6e1b29135cc7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Not using GitHub Actions? You’re also vulnerable.Continue reading on Cider Security » (https://medium.com/cider-sec/bypassing-required-reviews-using-github-actions-6e1b29135cc7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–24563 Unauthenticated Stored XSS [Frontend Uploader <= 1.3.2]
https://medium.com/pentesternepal/cve-2021-24563-unauthenticated-stored-xss-frontend-uploader-1-3-2-8522e0890833?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings, Community!Continue reading on Pentester Nepal » (https://medium.com/pentesternepal/cve-2021-24563-unauthenticated-stored-xss-frontend-uploader-1-3-2-8522e0890833?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box Write Up: Monitors

https://cdn-images-1.medium.com/max/730/1*pVkhiKqcPjNtsXcFtwnBOA.png
As promised in my LinkedIn post, this is my detailed write up to one of the recently retired Hack The Box Labs Machine: Monitors. Monitors…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video