Kali Linux Tutorials
DorkScout : Golang Tool To Automate Google Dork Scan Against The Entiere Internet Or Specific Targets

DorkScout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything it founds Installation

dorkscout can be installed in different ways: Go Packages

throught Golang Packages (golang package manager)

go get github.com/R4yGM/dorkscout

this will work for every platform Docker

if you don’t have docker installed you can follow their guide

first of all you have to pull the docker image (only 17.21 MB) from the docker registry, you can see it here, if you don’t want to pull the image you can also clone the repository and then build the image from the Dockerfile

docker pull r4yan/dorkscout:latest

if you don’t want to pull the image you can download or copy the dorkscout Dockerfile that can be found here and then build the image from the Dockerfile

then if you want to launch the container you have to first create a volume to share your files to the container

docker volume create –name dorkscout_data

using docker when you launch the container it will automatically install the dork lists inside a directory called “dorkscout” :

-rw-r–r– 1 r4yan r4yan 110 Jul 31 14:56 .dorkscout
-rw-r–r– 1 r4yan r4yan 79312 Aug 10 20:30 ‘Advisories and Vulnerabilities.dorkscout’
-rw-r–r– 1 r4yan r4yan 6352 Jul 31 14:56 ‘Error Messages.dorkscout’
-rw-r–r– 1 r4yan r4yan 38448 Jul 31 14:56 ‘Files Containing Juicy Info.dorkscout’
-rw-r–r– 1 r4yan r4yan 17110 Jul 31 14:56 ‘Files Containing Passwords.dorkscout’
-rw-r–r– 1 r4yan r4yan 1879 Jul 31 14:56 ‘Files Containing Usernames.dorkscout’
-rw-r–r– 1 r4yan r4yan 5398 Jul 31 14:56 Footholds.dorkscout
-rw-r–r– 1 r4yan r4yan 5568 Jul 31 14:56 ‘Network or Vulnerability Data.dorkscout’
-rw-r–r– 1 r4yan r4yan 49048 Jul 31 14:56 ‘Pages Containing Login Portals.dorkscout’
-rw-r–r– 1 r4yan r4yan 16112 Jul 31 14:56 ‘Sensitive Directories.dorkscout’
-rw-r–r– 1 r4yan r4yan 451 Jul 31 14:56 ‘Sensitive Online Shopping Info.dorkscout’
-rw-r–r– 1 r4yan r4yan 29938 Jul 31 14:56 ‘Various Online Devices.dorkscout’
-rw-r–r– 1 r4yan r4yan 2802 Jul 31 14:56 ‘Vulnerable Files.dorkscout’
-rw-r–r– 1 r4yan r4yan 4925 Jul 31 14:56 ‘Vulnerable Servers.dorkscout’
-rw-r–r– 1 r4yan r4yan 8145 Jul 31 14:56 ‘Web Server Detection.dorkscout’

so that you don’t have to install them then you can start scanning by doing :

docker run -v Dorkscout:/dorkscout r4yan/dorkscout scan

replace the with the options/arguments you want to give to dorkscout, example :

docker run -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d=”/dorkscout/Sensitive Online Shopping Info.dorkscout” -H=”/dorkscout/a.html”

If you wanted to scan throught a proxy using a docker container you have to add the –net host option example :

docker run –net host -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d=”/dorkscout/Sensitive Online Shopping Info.dorkscout” -H=”/dorkscout/a.html -x socks5://127.0.0.1:9050″

Always save your results inside the volume and not in the container because then the results will be deleted! you can save them by writing the same volume path of the directory you are saving the results

if you added this and did everything correctly at the end of every scan you’d find the results inside the folder /var/lib/docker/volumes/dorkscout_data/_datathis will work for every platform Executable

you can also download the already compiled binaries here and then execute them Usage

dorkscout -h

Usage:
dorkscout [command]
Available Commands:
completion generate the autocompletion script for the specified shell
delete deletes all the .dorkscou[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Inceptor : Template-Driven AV/EDR Evasion Framework

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Limelighter : A Tool For Generating Fake Code Signing Certificates Or Signing Real Ones

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Karma_V2 : A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LazyCSRF : A More Useful CSRF PoC Generator

___________________________
@hacking_Attack
@Hacking_Video

n the subnet(i.e., Can ping all the host in the subnet)
* userdef: Create only the hosts specified in the hosts configuration.

* storage: Specify the storage used for log collection, support sqlite, mysql, elasticsearch. e.g.
* sqlite3:logs.db
* mysql://user:password@tcp(127.0.0.1:3306)/logs
* es://http://username:password@127.0.0.1:9200 (currently only supports Elasticsearch 7.x)

* geo_db: MaxMind geoip2 database file path, used to generate ip geographic location information. if you use Elasticsearch storage, never need this field, it will be automatically generated using the geoip processor of Elasticsearch.
* hostname: Specify the host field in the log.
* use_logq: Use local disk message queue to save logs, and then send it to remote mysql or Elasticsearch to prevent remote log loss.
* cert_name: Common name of the generated certificate.
* syn_dev: Specify the network interface used to capture tcp syn packets. If it is empty, the tcp syn packet will not be recorded. On windows, the device name is like “\Device\NPF_{xxxx-xxxx}”.
* udp_dev: Same as syn_dev, but for udp packet.
* icmp_dev: Same as syn_dev, but for icmp ping packet.
* exclusions: Exclude remote ips from logs.
* hosts: Each item is a host configuration.
* handlers: Service configuration, the service configured on the host, each item is a service configuration.
* handler: Service name (i.e., protocol name)
* params: Set the parameters supported by the service. Example

Create a virtual network, The subnet is 172.16.0.0/24, include 2 hosts,

172.16.0.3 run dns, ssh service,

and 172.16.0.5 run rpc, rdp service,

protocol access logs are saved to elasticsearch, exclude the access log of 127.0.0.1 and 8.8.8.8.

{
“version”: “0.40”,
“network”: “172.16.0.0/24”,
“network_build”: “userdef”,
“storage”: “es://http://127.0.0.1:9200”,
“use_logq”: true,
“cert_name”: “unknown”,
“syn_dev”: “any”,
“udp_dev”: “any”,
“icmp_dev”: “any”,
“exclusions”: [“127.0.0.1”, “8.8.8.8”],
“geo_db”: “”,
“hosts”: [
{
“ip”: “172.16.0.3”,
“handlers”: [
{
“handler”: “dns”,
“port”: 53,
“params”: {
“accounts”: [
“admin:123456”
],
“appname”: “domain”
}
},
{
“handler”: “ssh”,
“port”: 22,
“params”: {
“accounts”: [
“root:5555555:/root:0”
],
“prompt”: “$ “,
“server_version”: “SSH-2.0-OpenSSH_7.4”
}
}
]
},
{
“ip”: “172.16.0.5”,
“handlers”: [
{
“handler”: “dcerpc”,
“port”: 135,
“params”: {
“accounts”: [
“administrator:123456”
],
“domain_name”: “DESKTOP-Q1Test”
}
},
{
“handler”: “rdp”,
“port”: 3389,
“params”: {
“accounts”: [
“administrator:123456”
],
“auth”: false,
“domain_name”: “DESKTOP-Q1Test”,
“image”: “rdp.jpg”,
“sec_layer”: “auto”
}
}
]
}
]
}

Automatically generate service configuration

Use the ipclone.py script in Scripts, You can clone the ip service configuration from fofa to quickly generate the service configuration of the real machine.

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/h9JJHqoYMu-EJEqYd1-tmoDU5mi9SeSqoojAQjr0Otw.jpg ​

https://preview.redd.it/ui2o540fcew71.png?width=674&format=png&auto=webp&s=b1068462255cf7f4a35633748cf4928ad3678900

submitted by /u/abderhmanhaji
[link] [comments]

hacking: security in practice
Why are MacBooks so popular among hackers when they are considered "bad and overpriced"?

Don't get me wrong, there are probably a lot of people who don't use MacBooks but I've seen a surprising high amount of them. I guess they're not horrible but from what I've heard they're overpriced and offer pretty bad performance.

I'm not good at computers nor hacking but I want to learn and was thinking if MacBooks are a good idea. I can buy used once to save money. Cheers

submitted by /u/large_red_apple
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the best free site for text documentation?

Im new to this, i only knew some basic network theory and some basic linux. I want to learn more about the methods of hacking/pen testing/etc and i prefer to read a documentation rather than watch a video. If you can give me some sites with good content , i am grateful.

submitted by /u/davvboos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any good tricks for msfvenom payloads?

I’m working on a x64 msfvenom windows payload and in the past I’ve had good luck with avoiding Antivirus software using a Golang shellcode loader, but for this project I want the best possible results so do you lads have any good tricks for msfvenom payloads? I plan to add the delay feature and maybe a few more tricks, any thoughts?

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
using Hashcat on the cloud

using hashcat would it be practical to crack an 8 digit uppercase letter and digit only, wpa2 password on the cloud. using 4 rtx 6000 cards.

submitted by /u/gregt0799
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Xcode

Is there a workaround to run xcode and do builds for iOS apps on Linux?

I didn't do ios development for many years. My Mac just sat there. Now it's unsupported on xcode and I don't want to buy a Mac just for builds. There has to be a workaround. Ive been a debian user for the past 2 decades and I'd like to keep it that way.

I need to be able to build swift / react native apps using local machine (no cloud build solutions / expo)

I'd love to hear from you!

submitted by /u/DirectionNo420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CONFIGURAÇÃO DO AMBIENTE E INTERCEPTAÇÃO DE TRÁFEGO. 3

https://cdn-images-1.medium.com/max/1920/1*uvfSJ_7D4vj7lCG-Kmom4w.png
Você vai economizar muito tempo e dor de cabeça se procurar Falhas em um local bem configurado, como um laboratório. Neste Texto, vou…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Getting Started With Cyber Security & Ethical Hacking

https://cdn-images-1.medium.com/max/1920/0*qIQWwsLSL2-pE5Hd
Why Cybersecurity? In the current scenario, where everything has shifted to internet, so is the crime that has also upgraded…..

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Footprinting and Reconnaissance

https://cdn-images-1.medium.com/max/1920/0*7T_YjdSnACBdSu-9
Footprinting is the first step a hacker does before hacking. In this step the hacker tries to gain information regarding the victim or…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I was able to access a properly Configured S3 Bucket

https://cdn-images-1.medium.com/max/600/1*6bWo-VdVMac1FtUOkMCI-w.png
Hello All

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video