Hacking on Medium
Hack This Site: Javascript Mission — Level 5

https://cdn-images-1.medium.com/max/2000/0*OMKteg5NW14LamEz
Introduction

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Covert network enumeration techniques
https://www.reddit.com/r/redteamsec/comments/qefu1h/covert_network_enumeration_techniques/

What are your favourite network enumeration techniques that bypass IDS/ IPS? I have a network gig coming up and want to work on my covert skills submitted by /u/Waddup_yall (https://www.reddit.com/user/Waddup_yall)
[link] (https://www.reddit.com/r/redteamsec/comments/qefu1h/covert_network_enumeration_techniques/) [comments] (https://www.reddit.com/r/redteamsec/comments/qefu1h/covert_network_enumeration_techniques/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
New Mac Book Pro

Hey guys looking to upgrade my Mac book pro but not sure what’s sufficient for someone looking to get into pen testing. This is the specs I picked but I am hoping to go cheaper if at all possible.

Hardware Apple M1 Pro with 10-core CPU, 14-core GPU, 16-core Neural Engine 32GB unified memory 1TB SSD storage

Thank you appreciate your input and help

submitted by /u/WeaknessGlass
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MIT wordlist

Posting this so I don't lose the link and incase anyone's looking for a wordlist. After a random google session I found this link baldwin.words It seems like it contains basic pins and phrases.

submitted by /u/Background_Gene_3657
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Open Redirect Vulnerability & Some Common Payloads
https://medium.com/@Bhichher/open-redirect-vulnerability-some-common-payloads-fd1dcd73541c?source=rss------bug_bounty-5

My favorite bug to find because I usually have a 100% success rate of using a
“harmless” redirect in a chain if the target has some type…Continue reading on Medium » (https://medium.com/@Bhichher/open-redirect-vulnerability-some-common-payloads-fd1dcd73541c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Command line client for crt.sh

https://external-preview.redd.it/n-k_6XbL36hysF-Sqcoa2leryLs9Qq3o68y8TQV5tnQ.jpg?width=640&crop=smart&auto=webp&s=9ea700ac875c63241af96413498e0e7140b7814a submitted by /u/mendax3000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Open Redirect Vulnerability & Some Common Payloads

My favorite bug to find because I usually have a 100% success rate of using a “harmless” redirect in a chain if the target has some type…Continue reading on Medium »
Read more...

Hacking on Medium
Open Redirect Vulnerability & Some Common Payloads

My favorite bug to find because I usually have a 100% success rate of using a
“harmless” redirect in a chain if the target has some type…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass CLM the easy way

https://external-preview.redd.it/w5LeYxQ4nQ19ZniTtCBMlc1dAke34mWXsfxH1qUEJsQ.jpg?width=320&crop=smart&auto=webp&s=529ac082b6d32e8bf4ad31556e5127a7b3350a53 submitted by /u/onlyuseful
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Python Port Scanner: Faster than Nmap.

I have written a port scanner on python. It can scan 65000 ports on 8.8.8.8 in 8 seconds, it is faster than Nmap with -T "insane". After scanning it can start nmap on discovered ports, i have written an additional module that can get more info about target from censys.io like OS, Route, Services and etc. I am currently working on implementing WAF detection and CVE detection, also i will add syn tcp scan method(currently it works on socket.connect) You can check it on: https://github.com/MajorRaccoon/RollerScanner I am opened for critics!

submitted by /u/Tough-Aide-1810
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Terra - OSINT Tool On Twitter And Instagram
http://www.kitploit.com/2021/10/terra-osint-tool-on-twitter-and.html

___________________________
@hacking_Attack
@Hacking_Video

OSINT Tool On Twitter And Instagram.
Installation
Clone the github repo$ git clone https://github.com/xadhrit/terra.git

Change Directory$ cd terra

Requirements :
For requirements (https://www.kitploit.com/search/label/Requirements) run following commands:$ python3 -m pip install -r requirements.txt

Note
For Twitter Credentials (https://www.kitploit.com/search/label/Credentials) :You need credentials which are listed in twitter.yml file in creds folder for using terra.You can find more about Twitter Api (https://www.kitploit.com/search/label/Twitter%20Api) and Access Tokens on Twitter's Developer Portal (https://developer.twitter.com/en/docs)For Instagram Credentails:Put your Instagram's username and password in creds/insta.yml file. And you are good to go.
Usage :

___________________________
@hacking_Attack
@Hacking_Video

Basic Usage: help : -j for saving results in a JSON file -f for text file ">~/terra$ python3 terra.py

help : -j for saving results in a JSON file
-f for text file


Twitter Recon Commands :
ls: Display all Terra Commands

help: For Help

quit: For quiting the program

clear: For cleaning your terminal screen

exit: For exiting from Terra

reset target : Reset new target in command line

tweets : Get latest tweets tweeted by Target

favtweets : Get latest tweets which favorited by Target

followers : Get target's followers list

following : Get target's following list

info: Get overview and infomation about target

profile pic: Download Target's Profile Picture

banner: Download Target's Profile banner

htags : Get hashtags used by Target


Instgram Recon Commands :
gathering target's captions, reset target: For resetting target in Terra, comments : For all comments of target, followers : For getting follower's list of target, followings: For getting following list of target followers emails : For target's followers emails, following emails : For target's following emails, followers phone : For target followers phone numbers, followings phone : For target followings phone numbers, tags : For getting hashtags used by target , timeline : For overview of target's account , likes: Get total_likes of target, ' mediatype : For information of photos and video of target, photodes : For gathering target photos description, ' photos : For Downloading target's photos, profile pic : For downloading target's profile picture, stories : For downloading target's stories , tagged': For listing user who tagged by target, commenter': For getting all user who commented on target's posts ttag : For listing user tagged target in their posts ">ls : Display Terra Commands,

help : for Help,

clear: for clearning your Screen,

quit: for quiting,

exit: For Exiting from Terra,

locations : For getting Pinned location of target,

captions : For gathering target's captions,

reset target: For resetting target in Terra,

comments : For all comments of target,

followers : For getting follower's list of target,

followings: For getting following list of target

followers emails : For target's followers emails,

following emails : For target's following emails,

followers phone : For target followers phone numbers,

followings phone : For target followings phone numbers,

tags : For getting hashtags used by target ,

timeline : For overview of target's account ,

likes: Get total_likes of target,
'
mediatype : For information of photos and video of target,

photodes : For gathering target photos description,
'
photos : For Downloading target's photos,

profile pic : For downloading target's profile picture,

stories : For downloading target's stories ,

tagged': For listing user who tagged by target,

commenter': For getting all user who commented on target's posts

ttag : For listing user tagged target in their posts


Contribution :
Every pull request with good and understandable code :) is welcomed.
TourbleShooting
Open an issue on Github.Every time you relogin in instagram account (https://www.kitploit.com/search/label/Instagram%20Account) you have to delete session ids and cookies and from creds/settings.json file and put an empty braces in file like this
External Libraries :
Python-twitter : https://github.com/bear/python-twitterInstagram Private API : https://github.com/ping/instagram_private_apiTerra is no longer an active project. I am looking for maintainers.

Download Terra (https://github.com/xadhrit/terra)

___________________________
@hacking_Attack
@Hacking_Video