hacking: security in practice
MIT wordlist

Posting this so I don't lose the link and incase anyone's looking for a wordlist. After a random google session I found this link baldwin.words It seems like it contains basic pins and phrases.

submitted by /u/Background_Gene_3657
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Open Redirect Vulnerability & Some Common Payloads
https://medium.com/@Bhichher/open-redirect-vulnerability-some-common-payloads-fd1dcd73541c?source=rss------bug_bounty-5

My favorite bug to find because I usually have a 100% success rate of using a
“harmless” redirect in a chain if the target has some type…Continue reading on Medium » (https://medium.com/@Bhichher/open-redirect-vulnerability-some-common-payloads-fd1dcd73541c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Command line client for crt.sh

https://external-preview.redd.it/n-k_6XbL36hysF-Sqcoa2leryLs9Qq3o68y8TQV5tnQ.jpg?width=640&crop=smart&auto=webp&s=9ea700ac875c63241af96413498e0e7140b7814a submitted by /u/mendax3000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Open Redirect Vulnerability & Some Common Payloads

My favorite bug to find because I usually have a 100% success rate of using a “harmless” redirect in a chain if the target has some type…Continue reading on Medium »
Read more...

Hacking on Medium
Open Redirect Vulnerability & Some Common Payloads

My favorite bug to find because I usually have a 100% success rate of using a
“harmless” redirect in a chain if the target has some type…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass CLM the easy way

https://external-preview.redd.it/w5LeYxQ4nQ19ZniTtCBMlc1dAke34mWXsfxH1qUEJsQ.jpg?width=320&crop=smart&auto=webp&s=529ac082b6d32e8bf4ad31556e5127a7b3350a53 submitted by /u/onlyuseful
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Python Port Scanner: Faster than Nmap.

I have written a port scanner on python. It can scan 65000 ports on 8.8.8.8 in 8 seconds, it is faster than Nmap with -T "insane". After scanning it can start nmap on discovered ports, i have written an additional module that can get more info about target from censys.io like OS, Route, Services and etc. I am currently working on implementing WAF detection and CVE detection, also i will add syn tcp scan method(currently it works on socket.connect) You can check it on: https://github.com/MajorRaccoon/RollerScanner I am opened for critics!

submitted by /u/Tough-Aide-1810
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Terra - OSINT Tool On Twitter And Instagram
http://www.kitploit.com/2021/10/terra-osint-tool-on-twitter-and.html

___________________________
@hacking_Attack
@Hacking_Video

OSINT Tool On Twitter And Instagram.
Installation
Clone the github repo$ git clone https://github.com/xadhrit/terra.git

Change Directory$ cd terra

Requirements :
For requirements (https://www.kitploit.com/search/label/Requirements) run following commands:$ python3 -m pip install -r requirements.txt

Note
For Twitter Credentials (https://www.kitploit.com/search/label/Credentials) :You need credentials which are listed in twitter.yml file in creds folder for using terra.You can find more about Twitter Api (https://www.kitploit.com/search/label/Twitter%20Api) and Access Tokens on Twitter's Developer Portal (https://developer.twitter.com/en/docs)For Instagram Credentails:Put your Instagram's username and password in creds/insta.yml file. And you are good to go.
Usage :

___________________________
@hacking_Attack
@Hacking_Video

Basic Usage: help : -j for saving results in a JSON file -f for text file ">~/terra$ python3 terra.py

help : -j for saving results in a JSON file
-f for text file


Twitter Recon Commands :
ls: Display all Terra Commands

help: For Help

quit: For quiting the program

clear: For cleaning your terminal screen

exit: For exiting from Terra

reset target : Reset new target in command line

tweets : Get latest tweets tweeted by Target

favtweets : Get latest tweets which favorited by Target

followers : Get target's followers list

following : Get target's following list

info: Get overview and infomation about target

profile pic: Download Target's Profile Picture

banner: Download Target's Profile banner

htags : Get hashtags used by Target


Instgram Recon Commands :
gathering target's captions, reset target: For resetting target in Terra, comments : For all comments of target, followers : For getting follower's list of target, followings: For getting following list of target followers emails : For target's followers emails, following emails : For target's following emails, followers phone : For target followers phone numbers, followings phone : For target followings phone numbers, tags : For getting hashtags used by target , timeline : For overview of target's account , likes: Get total_likes of target, ' mediatype : For information of photos and video of target, photodes : For gathering target photos description, ' photos : For Downloading target's photos, profile pic : For downloading target's profile picture, stories : For downloading target's stories , tagged': For listing user who tagged by target, commenter': For getting all user who commented on target's posts ttag : For listing user tagged target in their posts ">ls : Display Terra Commands,

help : for Help,

clear: for clearning your Screen,

quit: for quiting,

exit: For Exiting from Terra,

locations : For getting Pinned location of target,

captions : For gathering target's captions,

reset target: For resetting target in Terra,

comments : For all comments of target,

followers : For getting follower's list of target,

followings: For getting following list of target

followers emails : For target's followers emails,

following emails : For target's following emails,

followers phone : For target followers phone numbers,

followings phone : For target followings phone numbers,

tags : For getting hashtags used by target ,

timeline : For overview of target's account ,

likes: Get total_likes of target,
'
mediatype : For information of photos and video of target,

photodes : For gathering target photos description,
'
photos : For Downloading target's photos,

profile pic : For downloading target's profile picture,

stories : For downloading target's stories ,

tagged': For listing user who tagged by target,

commenter': For getting all user who commented on target's posts

ttag : For listing user tagged target in their posts


Contribution :
Every pull request with good and understandable code :) is welcomed.
TourbleShooting
Open an issue on Github.Every time you relogin in instagram account (https://www.kitploit.com/search/label/Instagram%20Account) you have to delete session ids and cookies and from creds/settings.json file and put an empty braces in file like this
External Libraries :
Python-twitter : https://github.com/bear/python-twitterInstagram Private API : https://github.com/ping/instagram_private_apiTerra is no longer an active project. I am looking for maintainers.

Download Terra (https://github.com/xadhrit/terra)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Bypass/Reset Kali Linux Password?

https://cdn-images-1.medium.com/max/1281/1*qU1L9RfZmkCSamapcOtBGQ.png
If you forgot your user password or tring to get access of someone’s system, don’t worry. You can reset/bypass kali Linux password very…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Insecure Direct Object Reference (IDOR) in GraphQL API which has an impact on Takeover Vouchers…

Assalamualaikum Bug Hunter & Hi Everyone.Continue reading on Medium »
Read more...

Book Review: Real-World Bug Hunting

IntroductionContinue reading on Medium »
Read more...

Terra - OSINT Tool On Twitter And Instagram

OSINT Tool On Twitter And Instagram.InstallationClone the github repo$ git clone https://github.com/xadhrit/terra.gitChange Directory$ cd terraRequirements :For requirements run following commands:$ python3 -m pip install -r requirements.txtNoteFor Twitter Credentials :You need credentials which are listed in twitter.yml file in creds folder for using terra.You can find more about Twitter Api and Access Tokens on Twitter's Developer Portal For Instagram Credentails:Put your Instagram's username and password in creds/insta.yml file. And you are good to go.Usage : Basic Usage:~/terra$ python3 terra.py help : -j for saving results in a JSON file -f for text fileTwitter Recon Commands :ls: Display all Terra Commandshelp: For Help quit: For quiting the programclear: For cleaning your terminal screenexit: For exiting from Terrareset target : Reset new target in command linetweets : Get latest tweets tweeted by Targetfavtweets : Get latest tweets which favorited by Targetfollowers : Get target's followers listfollowing : Get target's following listinfo: Get overview and infomation about targetprofile pic: Download Target's Profile Picturebanner: Download Target's Profile bannerhtags : Get hashtags used by TargetInstgram Recon Commands :gathering target's captions, reset target: For resetting target in Terra, comments : For all comments of target, followers : For getting follower's list of target, followings: For getting following list of target followers emails : For target's followers emails, following emails : For target's following emails, followers phone : For target followers phone numbers, followings phone : For target followings phone numbers, tags : For getting hashtags used by target , timeline : For overview of target's account , likes: Get totallikes of target, ' mediatype : For information of photos and video of target, photodes : For gathering target photos description, ' photos : For Downloading target's photos, profile pic : For downloading target's profile picture, stories : For downloading target's stories , tagged': For listing user who tagged by target, commenter': For getting all user who commented on target's posts ttag : For listing user tagged target in their posts ">ls : Display Terra Commands,help : for Help,clear: for clearning your Screen,quit: for quiting, exit: For Exiting from Terra, locations : For getting Pinned location of target, captions : For gathering target's captions, reset target: For resetting target in Terra, comments : For all comments of target, followers : For getting follower's list of target, followings: For getting following list of target followers emails : For target's followers emails, following emails : For target's following emails,followers phone : For target followers phone numbers,followings phone : For target followings phone numbers,tags : For getting hashtags used by target ,timeline : For overview of target's account , likes: Get totallikes of target, 'mediatype : For information of photos and video of target, photodes : For gathering target photos description, 'photos : For Downloading target's photos, profile pic : For downloading target's profile picture, stories : For downloading target's stories , tagged': For listing user who tagged by target,commenter': For getting all user who commented on target's posts ttag : For listing user tagged target in their postsContribution :Every pull request with good and understandable code :) is welcomed.TourbleShootingOpen an issue on Github.Every time you relogin in instagram account you have to delete session ids and cookies and from creds/settings.json file and put an empty braces in file like thisExternal Libraries :Python-twitter : https://github.com/bear/python-twitterInstagram Private API : https://github.com/ping/instagram_private_apiTerra is no longer an active project. I am looking for maintainers.Download Terra
Read more...

___________________________
@hacking_Attack
@Hacking_Video