Hacking on Medium
Business Logic Vulnerabilities

https://cdn-images-1.medium.com/max/625/1*2rknqeU80IQccQBNJdjBrA.jpeg
How do Attackers Exploit Business Logic Problems?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Password Policy Best Practices

https://cdn-images-1.medium.com/max/2600/1*6vl6VyzTmZYgtZtNj-jjlw.jpeg
In this article, we will discuss some “uncommon” password policy best practices, that are not followed by a lot of companies. Those are…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis
http://www.kitploit.com/2021/10/networkit-growing-open-source-toolkit.html

___________________________
@hacking_Attack
@Hacking_Video

Requirements
You will need the following software to install NetworKit as a python package: A modern C++ compiler, e.g.: g++ (https://gcc.gnu.org/) (>= 6.1), clang++ (https://clang.llvm.org/) (>= 3.9) or MSVC (>= 14.13) OpenMP for parallelism (usually ships with the compiler) Python3 (3.6 or higher is supported) Development libraries for Python3. The package name depends on your distribution. Examples: Debian/Ubuntu: apt-get install python3-dev RHEL/CentOS: dnf install python3-devel Windows: Use the official release installer from www.python.org (https://www.python.org/downloads/windows/) Pip (https://pypi.python.org/pypi/pip) CMake (https://cmake.org/) version 3.6 or higher (Advised to use system packages if available. Alternative: pip3 install cmake) Build system: Make (https://www.gnu.org/software/make/) or Ninja (https://ninja-build.org/) Cython version 0.29 or higher (e.g., pip3 install cython)
Install
In order to use NetworKit, you can either install it via package managers or build the Python module from source.
Install via package manager
While the most recent version is in general available for all package managers, the number of older downloadable versions differ.
pip
pip3 install [--user] networkit

conda (channel conda-forge)
conda config --add channels conda-forge
conda install networkit [-c conda-forge]

brew
brew install networkit

spack
spack install py-networkit

Building the Python module from source
git clone https://github.com/networkit/networkit networkit
cd networkit
python3 setup.py build_ext [-jX]
pip3 install -e .
The script will call cmake and ninja (make as fallback) to compile NetworKit as a library, build the extensions and copy it to the top folder. By default, NetworKit will be built with the amount of available cores in optimized mode. It is possible the add the option -jN the number of threads used for compilation.
Usage example
To get an overview and learn about NetworKit's different functions/classes, have a look at our interactive notebooks-section (https://github.com/networkit/networkit/blob/master/notebooks/), especially the Networkit UserGuide (https://github.com/networkit/networkit/blob/master/notebooks/User-Guide.ipynb). Note: To view and edit the computed output from the notebooks, it is recommended to use Jupyter Notebook (https://jupyter.org/install.html). This requires the prior installation of NetworKit. You should really check that out before start working on your network analysis. We also provide a Binder-instance of our notebooks. To access (https://www.kitploit.com/search/label/Access) this service, you can either click on the badge at the top or follow this link (https://mybinder.org/v2/gh/networkit/networkit/master?urlpath=lab/tree/notebooks). Disclaimer: Due to rebuilds of the underlying image, it can takes some time until your Binder instance is ready for usage. If you only want to see in short how NetworKit is used - the following example provides a climpse at that. Here we generate a random hyperbolic graph with 100k nodes and compute its communities with the PLM method: >> import networkit as nk >>> g = nk.generators.HyperbolicGenerator(1e5).generate() >>> communities = nk.community.detectCommunities(g, inspect=True) PLM(balanced,pc,turbo) detected communities in 0.14577102661132812 [s] solution properties: ------------------- ----------- # communities 4536 min community size 1 max community size 2790 avg. community size 22.0459 modularity 0.987243 ------------------- ----------- ">>>> import networkit as nk
>>> g = nk.generators.HyperbolicGenerator(1e5).generate()
>>> communities = nk.community.detectCommunities(g, inspect=True)
PLM(balanced,pc,turbo) detected communities in 0.14577102661132812 [s]
solution properties:
------------------- -----------
# communities 4536
min community size 1
max community size 2790

___________________________
@hacking_Attack
@Hacking_Video

avg. community size 22.0459
modularity 0.987243
------------------- -----------

Install the C++ Core only
In case you only want to work with NetworKit's C++ core, you can either install it via package managers or build it from source.
Install C++ core via package manager

conda (channel conda-forge)
conda config --add channels conda-forge
conda install libnetworkit [-c conda-forge]

brew
brew install libnetworkit

spack
spack install libnetworkit

Building the C++ core from source
We recommend CMake (https://cmake.org/) and your preferred build system for building the C++ part of NetworKit. The following description shows how to use CMake (https://cmake.org/) in order to build the C++ Core only: First you have to create and change to a build directory: (in this case named build) mkdir build
cd build
Then call CMake (https://cmake.org/) to generate files for the make build system, specifying the directory of the root CMakeLists.txt file (e.g., ..). After this make is called to start the build process: cmake ..
make -jX
To speed up the compilation with make a multi-core machine, you can append -jX where X denotes the number of threads to compile with.
Use NetworKit as a library
This paragraph explains how to use the NetworKit core C++ library in case it has been built from source. For how to use it when installed via package managers, best refer to the official documentation (brew (https://brew.sh/), conda (https://docs.conda.io/), spack (https://spack.readthedocs.io/en/latest)). In order to use the previous compiled networkit library, you need to have it installed, and link it while compiling your project. Use these instructions to compile and install NetworKit in /usr/local: cmake ..
make -jX install
Once NetworKit has been installed, you can use include directives in your C++-application as follows: ">#include
You can compile your source as follows: g++ my_file.cpp -lnetworkit

Unit tests
Building and running NetworKit unit tests is not mandatory. However, as a developer you might want to write and run unit tests for your code, or if you experience any issues with NetworKit, you might want to check if NetworKit runs properly. The unit tests can only be run from a clone or copy of the repository and not from a pip installation. In order to run the unit tests, you need to compile them first. This is done by setting the CMake (https://cmake.org/) NETWORKI_BUILD_TESTS flag to ON: cmake -DNETWORKIT_BUILD_TESTS=ON ..
Unit tests are implemented using GTest macros such as TEST_F(CentralityGTest, testBetweennessCentrality). Single tests can be executed with: ./networkit_tests --gtest_filter=CentralityGTest.testBetweennessCentrality
Additionally, one can specify the level of the logs outputs by adding --loglevel ; supported log levels are: TRACE, DEBUG, INFO, WARN, ERROR, and FATAL.
Compiling with address/leak sanitizers
Sanitizers are great tools to debug your code. NetworKit provides additional Cmake (https://cmake.org/) flags to enable address, leak, and undefined behavior sanitizers. To compile your code with sanitizers, set the CMake (https://cmake.org/) NETWORKIT_WITH_SANITIZERS to either address or leak: cmake -DNETWORKIT_WITH_SANITIZERS=leak ..
By setting this flag to address, your code will be compiled with the address and the undefined sanitizers. Setting it to leak also adds the leak sanitizer.
Documentation
The most recent version of the documentation can be found online (https://networkit.github.io/dev-docs/index.html).
Contact
For questions regarding NetworKit, have a look at our issues-section (https://github.com/networkit/networkit/issues) and see if there is already an open discussion. If not feel free to open a new issue. To stay updated about this project, subscribe to our mailing list (https://sympa.cms.hu-berlin.de/sympa/subscribe/networkit).
Contributions

___________________________
@hacking_Attack
@Hacking_Video

We encourage contributions to the NetworKit source code. See the development guide (https://networkit.github.io/dev-docs/DevGuide.html#devGuide) for instructions. For support please contact the mailing list (https://sympa.cms.hu-berlin.de/sympa/subscribe/networkit).
Credits
List of contributors can be found on the NetworKit (https://networkit.github.io/credits.html)website (https://www.kitploit.com/search/label/Website) credits page.
External Code
The program source includes: the TLX (https://github.com/tlx/tlx/) library the TTMath (http://www.ttmath.org/) bignum library
License
The source code of this program is released under the MIT License (http://opensource.org/licenses/MIT). We ask you to cite us if you use this code in your project (c.f. the publications section below and especially the technical report (https://arxiv.org/abs/1403.3005)). Feedback is also welcome.
Publications
The NetworKit publications page (https://networkit.github.io/publications.html) lists the publications on NetworKit as a toolkit, on algorithms available in NetworKit, and simply using NetworKit. We ask you to cite the appropriate ones if you found NetworKit useful for your own research.

Download Networkit (https://github.com/networkit/networkit)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: Dalfox

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: DalfoxPost Views: 23 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 5 Minutes

Offensive Security Tool: Dalfox GitHub Link What is DalFoxDalFox by hahwul, is a fast and powerful parameter analysis and XSS scanner, based on a golang/DOM parser. It supports friendly Pipeline, CI/CD and testing of different types of XSS. In regards to the naming: Dal(달) is the Korean pronunciation of moon and fox was made into Fox (Find Of XSS).

This tool is very powerful and fast. The fact that you can use piping and can chain several other tools using it, makes it really effective especially when you want to do your 1 liner attack, combining the recon process to it.

It also means that you can do things like 1 liner powerful attacks as a tip from BHEH:

cat “domain”.txt | gf xss | sed ‘s/=.*/=/’ | sed ‘s/URL: //’ | tee domain_temp_xss.txt | dalfox pipe -H “AuthToken: bbadsfkasdfadsf87”

Meaning you can chain several commands, and even find cross site scripting attacks (XSS) and more! Its highly customizable, so we recommend you check the complete documentation. TOC* Key features
* How to Install
* Usage
* POC format
* In the Code
* Screenshots
* Wiki
* Contribute
* Contributors
See Also: Malicious Chrome ad blocker injects ads behind the scenes Key featuresMode: url sxss pipe file server payload
Class Key Feature Description Discovery Parameter analysis – Find reflected param
– Find alive/bad special chars, event handler and attack code
– Identification of injection points(HTML/JS/Attribute)
inHTML-none inJS-none inJS-double inJS-single inJS-backtick inATTR-none inATTR-double inATTR-single Static analysis – Check bad-header like CSP, XFO, etc.. with req/res base BAV analysis – Testing BAV(Basic Another Vulnerability) , e.g sqli ssti open-redirects, crlf Parameter Mining – Find new param with Dictonary attack (default is GF-Patterns)- Support custom dictonary file (–mining-dict-word)
– Find new param with DOM
– Use remote wordlist to mining (–remote-wordlists) Built-in Grepping – It Identify the basic info leak of SSTi, Credential, SQL Error, and so on WAF Detection and Evasion – Detect to WAF(Web Application Firewall).
– if found waf and using special flag, evasion using slow request
– –waf-evasion Scanning XSS Scanning – Reflected XSS / Stored XSS / DOM XSS
– DOM base verifying
– Headless base verifying
– Blind XSS testing with param, header(-b , –blind options)
– Only testing selected parameters (-p, –param)
– Only testing parameter analysis (–only-discovery) Friendly Pipeline – Single url mode (dalfox url)
– From file mode (dalfox file urls.txt)
– From IO(pipeline) mode (dalfox pipe)
– From raw http request file mode (dalfox file raw.txt –rawdata) Optimizaion query of payloads – Check the injection point through abstraction and generated the fit payload.
– Eliminate unnecessary payloads based on badchar Encoder – All test payloads(build-in, your custom/blind) are tested in parallel with the encoder.
– To Double URL Encoder
– To HTML Hex Encoder Sequence – Auto-check the special page for stored xss (–trigger)
– Support (–sequence) options for Stored XSS , only sxss mode HTTP HTTP Options – Overwrite HTTP Method (-X, –method)
– Follow redirects (–follow-redirects)
– Add header (-H, –header)
– Add cookie (-C, –cookie)
– Add User-Agent (–user-agent)
– Set timeout (–timeout)
– Set Delay (–delay)
– Set Proxy (–proxy)
– Set ignore return codes (–ignore-return)
– Load cookie from raw request (–cookie-from-raw) Concurrency Worker – Set worker’s number(-w, –worker) N * hosts – Use multica[...]

___________________________
@hacking_Attack
@Hacking_Video

st mode (–multicast) , only file / pipe mode Output Output – Only the PoC code and useful information is write as Stdout
– Save output (-o, –output) Format – JSON / Plain (–format) Printing – Silence mode (–silence)
– You may choose not to print the color (–no-color)
– You may choose not to print the spinner (–no-spinner)
– You may choose show only special poc code (–only-poc) Extensibility REST API – API Server and Swagger (dalfox server) Payload Mode – Generate and Enumerate Payloads for XSS Testing (dalfox payload) Found Action – Lets you specify the actions to take when detected.
– Notify, for example (–found-action) Custom Grepping – Can grep with custom regular expressions on response
– If duplicate detection, it performs deduplication (–grep) Custom Payloads – Use custom payloads list file (–custom-payload)
– Custom alert value (–custom-alert-value)
– Custom alert type (–custom-alert-type) Remote Payloads – Use remote payloads from portswigger, payloadbox, etc.. (–remote-payloads) Package Package manager – pkg.go.dev
– homebrew with tap
– snapcraft Docker ENV – docker hub
– gitub package of docker Other – github action
And the various options required for the testing. How to InstallFrom sourcego1.17 go install github.com/hahwul/dalfox/v2@latest

go1.16 GO111MODULE=on go get github.com/hahwul/dalfox/v2 Using homebrew (macos)brew tap hahwul/dalfox
brew install dalfox Using snapcraft (ubuntu)sudo snap install dalfox More information? Please read Installation guide UsageModes:
file          Use file mode(targets list or rawdata)
help        Help about any command
payload   Payload mode, make and enum payloads
pipe        Use pipeline mode
server     Start API Server
sxss        Use Stored XSS mode
url          Use single target mode
version    Show version
Global Flags:
-b, –blind string                       Add your blind xss
* Example: -b hahwul.xss.ht
–config string Using config from file
-C,    –cookie string                    Add custom cookie
–cookie-from-raw string      Load cookie from burp raw http request
* Example: –cookie-from-raw request.txt
–custom-alert-type string       Change alert value type
* Example: –custom-alert-type=none / –custom-alert-type=str,none (default “none”)
–custom-alert-value string      Change alert value
* Example: –custom-alert-value=document.cookie (default “1”)
–custom-payload string          Add custom payloads from file
-d, –data string                          Using POST Method and add Body data
–debug                                 debug mode, save all log using -o option
–deep-domxss                       DOM XSS Testing with more payloads on headless [so slow]
–delay int                              Milliseconds between send to same host (1000==1s)
-F, –follow-redirects                     Following redirection
–format string                        Stdout output format
* Supported: plain / json (default “plain”)
–found-action string               If found weak/vuln, action(cmd) to next
* Example: –found-action=’./notify.sh’
–found-action-shell string       Select shell application for –found-action (default “bash”)
–grep string                          Using custom grepping file
* Example: –grep ./samples/sample_grep.json
-H, –header strings                     Add custom headers
–ignore-return string              Ignore scanning from return code
* Example: –ignore-return 302,403,404
-X, –method string                     Force overriding HTTP Method
* Example: -X PUT (default “GET”)
–mining-dict                        Find new parameter with dictionary attack, default is Gf-Patterns=>XSS (default true)
-W, –mining-dict-word string       Custom wordlist file for param mining
* Example: –mining-dict-word word.txt
–mining-dom                        Find new parameter in DOM (attribute/js value) (default true)
–no-color                              Not use coloriz[...]

___________________________
@hacking_Attack
@Hacking_Video

e
–no-spinner                          Not use spinner
–only-custom-payload           Only testing custom payload (required –custom-payload)
–only-discovery                    Only testing parameter analysis (same ‘–skip-xss-scanning’ option)
–only-poc string                   Shows only the PoC code for the specified pattern (g: grep / r: reflected / v: verified)
* Example: –only-poc=’g,v’
-o,  –output string                     Write to output file (By default, only the PoC code is saved)
–output-all                          All log write mode (-o or stdout)
-p,  –param strings                    Only testing selected parameters
–proxy string                       Send all request to proxy server
* Example: –proxy http://127.0.0.1:8080
–remote-payloads string      Using remote payload for XSS testing
* Supported: portswigger/payloadbox
* Example: –remote-payloads=portswigger,payloadbox
–remote-wordlists string      Using remote wordlists for param mining
* Supported: burp/assetnote
* Example: –remote-wordlists=burp
-S, –silence                             Only print PoC Code and Progress(for pipe/file mode)
–skip-bav                          Skipping BAV(Basic Another Vulnerability) analysis
–skip-grepping                   Skipping built-in grepping
–skip-headless                   Skipping headless browser base scanning[DOM XSS and inJS verify]
–skip-mining-all                 Skipping ALL parameter mining
–skip-mining-dict               Skipping Dict base parameter mining
–skip-mining-dom              Skipping DOM base parameter mining
–skip-xss-scanning             Skipping XSS Scanning (same ‘–only-discovery’ option)
–timeout int                       Second of timeout (default 10)
–user-agent string              Add custom UserAgent
-w, –worker int                        Number of worker (default 100)
Server Flags:
-h, –help                                    help for server
–host string                           Bind address (default “0.0.0.0”)
–port int                                Bind Port (default 6664)
Pipe Flags:
-h, –help                      help for pipe
–mass                     Parallel scanning N*Host mode (show only poc code)
–mass-worker int     Parallel worker of –mass and –multicast option (default 10)
–multicast               Parallel scanning N*Host mode (show only poc code)
–silence-force          Only print PoC (not print progress)
File Flags:
-h, –help                      help for file
–http                      Using force http on rawdata mode
–mass                     Parallel scanning N*Host mode (show only poc code)
–mass-worker int     Parallel worker of –mass and –multicast option (default 10)
–multicast               Parallel scanning N*Host mode (show only poc code)
–rawdata                Using req rawdata from Burp/ZAP
–silence-force         Only print PoC (not print progress)
SXSS Flags:
-h, –help                     help for sxss
–sequence int         Set sequence to first number
* Example: –trigger=https://~/view?no=SEQNC –sequence=3 (default -1)
–trigger string        Checking this url after inject sxss code
* Example: –trigger=https://~~/profile
Payload Flags:
–encoder-url                  Encoding output [URL]
–entity-event-handler     Enumerate a event handlers for xss
–entity-gf                      Enumerate a gf-patterns xss params
–entity-special-chars      Enumerate a special chars for xss
–entity-useful-tags         Enumerate a useful tags for xss
–enum-attr                    Enumerate a in-attr xss payloads
–enum-common             Enumerate a common xss payloads
–enum-html                   Enumerate a in-html xss payloads
–enum-injs                    Enumerate a in-js xss payloads
-h, –help                            help for payload
–make-bulk                   Make bulk payloads for stored xss
–remote-payloadbox      Enumerate a payloadbox’s xss payloads
–remote-portswigger     Enumerat[...]

___________________________
@hacking_Attack
@Hacking_Video

e a portswigger xss cheatsheet payloads
▶ dalfox [mode] [flags] [data]

Single target mode

▶ dalfox url http://testphp.vulnweb.com/listproducts.php\\\\?cat\\\\=123\\\\&artist\\\\=123\\\\&asdf\\\\=ff -b https://hahwul.xss.ht

Multiple target mode from file

▶ dalfox file urls_file –custom-payload ./mypayloads.txt

Pipeline mode

▶ cat urls_file | dalfox pipe -H “AuthToken: bbadsfkasdfadsf87”

Other tips, See wiki for detailed instructions! POC formatSample poc log

[POC][G][BUILT-IN/dalfox-error-mysql/GET] http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox
[POC][V][GET] http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E
Format
Identity Type Information BLANK PoC Code POC G BUILT-IN/dalfox-error-mysql/GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox POC R GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E POC V GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E
* Type: G(Grep) , R(Reflected) , V(Verify)
* Information: Method, grepping name, etc..
Why is there a gap? It is a method to make it easier to parse only the poc code through cut etc. For example, you can do this.

▶ dalfox url http://testphp.vulnweb.com/listproducts.php\\\\?cat\\\\=123\\\\&artist\\\\=123\\\\&asdf\\\\=ff | cut -d ” “ -f 2 > output
▶ cat output
http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox
http://testphp.vulnweb.com/listproducts.php? artist=123&asdf=ff&cat=123%22%3E%3Csvg%2FOnLoad%3D%22%60%24%7Bprompt%60%60%7D%60%22+class%3Ddalfox%3E In the codepackage main import   (
“fmt” dalfox “github.com/hahwul/dalfox/v2/lib”
) func main() {
opt := dalfox.Options{
Cookie: “ABCD=1234”,
}
result, err := dalfox.NewScan(dalfox.Target{
URL: “https://xss-game.appspot.com/level1/frame”,
Method: “GET”,
Options: opt,
})
if err != nil {
fmt.Println(err)
} else {
fmt.Println(result)
}
}
$ go build -o xssapp ; ./xssapp
[] [{V GET https://xss-game.appspot.com/level1/frame?query=%3Ciframe+srcdoc%3D%22%3Cinput+onauxclick%3Dprint%281%29%3E%22+class%3Ddalfox%3E%3C%2Fiframe%3E}] 2.618998247s 2021-07-11 10:59:26.508483153 +0900 KST m=+0.000794230 2021-07-11 10:59:29.127481217 +0900 KST m=+2.619792477} ScreenshotsSingle URL Scanning https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Single-URL-Scanning-1024x768.jpg Massive(Multicast/Mass) Scanning https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/MassiveMulticastMass-Scanning-1024x768.jpg REST API Server Mode https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/REST-API-Server-Mode-1024x768.jpg Output and Customizing (found-action / grepping) https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Output-and-Customizing-found-action-grepping-1024x768.jpg WikiWiki

See Also: Offensive Security Tool: Whispers Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/peg[...]

___________________________
@hacking_Attack
@Hacking_Video

asus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/0URVvVK54SOsx1MEq-90x90.png Offensive Security Tool: FFUF2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/687474703a2f2f633666632e696f2f77617263616e6e6f6e2d636c692e706e67-90x90.png Offensive Security Tool: Warcannon2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/2-7-90x90.png Offensive Security Tool: Mimikatz2 months ago
The post Offensive Security Tool: Dalfox first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

http://1.bp.blogspot.com/-1GRzd20Fjk4/YV0UJDdFyOI/AAAAAAAAv9o/eLTuGKS_Jxg3LDGVrPf2tLN_-nSou4tKACK4BGAYYCw/w640-h180/networkit_1_logo_color-750084.png NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicore architectures. These are meant to compute standard measures of network analysis. NetworKit is focused on scalability and comprehensiveness. NetworKit is also a testbed for algorithm engineering and contains novel algorithms from recently published research (see list of publications below).

NetworKit is a Python module. High-performance algorithms are written in C++ and exposed to Python via the Cython toolchain. Python in turn gives us the ability to work interactively and a rich environment of tools for data analysis and scientific computing. Furthermore, NetworKit's core can be built and used as a native library if needed. RequirementsYou will need the following software to install NetworKit as a python package:

* A modern C++ compiler, e.g.: g++ (>= 6.1), clang++ (>= 3.9) or MSVC (>= 14.13)
* OpenMP for parallelism (usually ships with the compiler)
* Python3 (3.6 or higher is supported)
* Development libraries for Python3. The package name depends on your distribution. Examples:
* Debian/Ubuntu: apt-get install python3-dev* RHEL/CentOS: dnf install python3-devel* Windows: Use the official release installer from www.python.org
* Pip
* CMake version 3.6 or higher (Advised to use system packages if available. Alternative: pip3 install cmake)
* Build system: Make or Ninja
* Cython version 0.29 or higher (e.g., pip3 install cython) InstallIn order to use NetworKit, you can either install it via package managers or build the Python module from source. Install via package managerWhile the most recent version is in general available for all package managers, the number of older downloadable versions differ. pippip3 install [--user] networkit conda (channel conda-forge)conda config --add channels conda-forge
conda install networkit [-c conda-forge] brewbrew install networkit spackspack install py-networkit Building the Python module from sourcegit clone https://github.com/networkit/networkit networkit
cd networkit
python3 setup.py build_ext [-jX]
pip3 install -e . The script will call cmakeand ninja(make as fallback) to compile NetworKit as a library, build the extensions and copy it to the top folder. By default, NetworKit will be built with the amount of available cores in optimized mode. It is possible the add the option -jNthe number of threads used for compilation. Usage exampleTo get an overview and learn about NetworKit's different functions/classes, have a look at our interactive notebooks-section, especially the Networkit UserGuide. Note: To view and edit the computed output from the notebooks, it is recommended to use Jupyter Notebook. This requires the prior installation of NetworKit. You should really check that out before start working on your network analysis.

We also provide a Binder-instance of our notebooks. To access this service, you can either click on the badge at the top or follow this link. Disclaimer: Due to rebuilds of the underlying image, it can takes some time until your Binder instance is ready for usage.

If you only want to see in short how NetworKit is used - the following exampl[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How AI Can Stop Zero-Day Ransomware

Ransomware attacks are unpredictable. AI is better at figuring out what looks malicious and abnormal than humans will ever be.

hacking: security in practice
URGENT inquiry

I know that this place is not for this but, could someone tell me were or who to talk to about checking my personal history of zoom meetings attended if I was not the host of those meetings.

I will not explain why but somebody who hate me set me up on a situation that will have HUGE economical consecuentes for me and my family based on lies and misunderstanding that are not true but I can’t prove without proofs.

Thanks in advance

submitted by /u/Jotitax
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Buffer Overflow in C

I was reading my textbook and it says that in order to buffer overflow a "Correct Serial" in a basic C program using GDB, I need to disass main, then locate the part of the code that contains the correct serial. Once I have the address of the correct serial, I am supposed to overwrite the main address by $(perl -e 'print' "INSERT ADDRESS" x10) (ten times to make sure it is overwritten).

When I look at this big paragraph that is full of addresses and calls, jumps, leaves and tests, how do I locate the correct serial? Do I need to do something beforehand?

submitted by /u/jacenmartin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I was scammed in metamask... a few times

When I first saw my BNB's dissapeared from my wallet, I thought I did something wrong, I thought that was my fault, so I removed all smart contracts from this wallet - yeah I know that I should forget this wallet forever, but I have nome NFT Games and I dont wanna lose this. So today I got scammed again, even without smart contracts in this account. I don't know how.

He keep scamming a lot of people, you can check his wallet: 0x67CD35A4bf7ac89d1601382fCa47aB419d2C4CFf

For the record, I played BombCrypto, PVU, BlockFarm and PMON, and I NEVER shared my seed or private key or even typed in my PC.

I just wanna stop being scammed, I already removed all Smart Contracts, what else can I do????

submitted by /u/Twenty-nOne
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video