KitPloit - PenTest Tools!
PeTeReport - An Open-Source Application Vulnerability Reporting Tool

https://blogger.googleusercontent.com/img/a/AVvXsEgoTnTAwqrPZPzAZvFnZ91yjMj98cOvMNBzmAj2NGiZEYu0rwybc0YOEMQiUnBLSn_fpT2_ypyn8Q9tGhq5W6vZzr0x6PvC3j_6swL_5UTHZtxLCC08A0Q8epWkQIyT6tAa9FgRrnfneHjS52ZJx9F2eCcJF7uhfbtelGKNUNiglBY4Ovj9ctvZU31HKg=w640-h298
PeTeReport (PenTest Report) is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports.

Focused in product security, the tool help security researchers and pentesters to provide detailed findings, appendix, attack paths and manage a finding template database to avoid wasting time spent in the reporting phase.

PeTeReport (PenTest Report) is written in Django and Python 3 with the aim to help pentesters to manage a finding repository, write reports (in Markdown) and generate reports in different formats (HTML, CSV, PDF, Jupyter and Markdown).
Documentation


Documentation

Installation and deployment

* Docker
* Django

Features

* Customizable reports output
* Customizable reports templates
* Findings template database
* Possibility to add appendix to findings
* Possibility to add attack trees Deciduous to findings
* HTML Output format
* CSV Output format
* PDF Output format
* Jupyter Notebook Output format
* Markdown Output format
* CVSS 3.1 Score
* Docker installation
* DefectDojo integration
* User management

TODO

* More Output formats
* API

Demo

Demo admin/P3t3r3p0rt

https://blogger.googleusercontent.com/img/a/AVvXsEhbuqrxEy5Dn7anRpEbUtvp6uWpwXYhaKUB7nFOkeDKLd99nIZDM6r3r9NBQi4W2etsbEEKB5T9WwZaQ3KDVoZX9pCOLO7AlrRTVPzNY11ePx6F5Km5467RGS9ZJUoX7keXt_HboS-cTxBwa__tJ7xRLL3-X5JZTk7ArOBQS5IUkAS1xmeTb6QM21_hXA=w640-h318
Sample Reports

* PDF Sample
* HTML Sample
* MD Sample
* CSV Sample
Download Petereport

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
See all links software

Is it possible to see all public links a website currently generates with a specific keyword?

submitted by /u/blueskies717
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Games made to be hacked

Are there any games that are made to be HACKED. For example, the game tells you to hack it by analysing it code and finding vulnerabilities that can be exploited by performing actions inside the game to move on further levels in the game. Sorry if it's off-topic

submitted by /u/Hot-Fridge-with-ice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Aliado ou Inimigo?

https://cdn-images-1.medium.com/max/2600/1*JWlsaK-7hHebQ1c0nEyOmw.jpeg
Vamos falar sobre smartphones?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Book Review: Foundations of Information Security

https://cdn-images-1.medium.com/max/2048/1*96EiJlfhvUiP6KLLI1R8Mw.png
Hello friends and welcome to HaXeZ, Foundations of Information Security is probably one of the first books I should have reviewed. This is…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Powercat for Pentester

Introduction Powercat is a simple network utility used to perform low-level network communication operations. The tool is an implementation of the well-known Netcat in Powershell. Traditional anti-viruses are known to allow Powercat to execute. The installed size of the utility is 68 KB. The portability and platform independence of the

The post Powercat for Pentester appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Difficulty reading Nintendo switch microsd card

I'm having issues trying to read my switch's sd card. When I read it, the only folders that seem to be present are the "Nintendo" folder and its subfolders. I am wondering why I am unable to read the "switch", "bootloader", etc folders on my card.

submitted by /u/an_actual_degenerate
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
figure out what serverside protection a program uses

I plan on using a cve exploit to bypass serversided protection of a windows program, but I'm not sure what serverside protection the program uses – is there anyway to find out without being the admin of the program?

submitted by /u/computerstuffs
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find the root flag?

So I'm currently doing starting point Pentesting challenges on Hack The Box, and I'm stuck on the last challenge of Meow - submit the root flag. I'm a complete noob to hacking, so I'd really like some guidance here. I'm using Windows 10, with linode for basic nmap information and trying to install Arch on VM. Any help would be appreciated!

submitted by /u/rattusneotoma
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iPhone SE2020

Hello so I bought a lost iPhone but I don't know if it is iCloud locked because I can try password any ideas what to do with it ?

submitted by /u/sadchrisbadvibes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/BlVU4wMQzdeIs2aQm9aDdS5Tz6i6q7RLcQjM7GZ72D4.jpg With the implementation of a new, user-friendly interface, the Firmware Analysis tool – EMBA – has taken the next step in its development.

https://preview.redd.it/yso9fhdckuw71.png?width=1575&format=png&auto=webp&s=892634f60e682db1cd8ff76ae4e2cc6bdd5b0f1b

In September 2020 we had already developed a powerful firmware scanner as an open-source project with the goal of making the crucial task of security testing less complex and time-consuming.

As a result, we were able to automate firmware analysis tasks during penetration tests.

EMBA’s user interface EMBArk now supports all steps from firmware upload, configuration and starting the test process to displaying real-time status details and generating a report containing vulnerability details with aggregated results across all analysis tasks.

The results are presented graphically and in an easy-to-understand format.

​

See a demonstration of the new UI in the video: https://youtu.be/qSHuPWbfhmI

​

EMBArk is being further developed as an open-source project on Github: https://github.com/e-m-b-a/embark

submitted by /u/_m-1-k-3_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find a admin password on MacBook

My school gave me a mac but my account doesn’t have admin permission is there anyway I could find the admin password as a non admin

submitted by /u/DrGhostFreak
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Zeno - THM Writeup

https://cdn-images-1.medium.com/max/800/1*CR4sjNr5zGs4eGilc0r8yQ.jpeg
Do you have the same patience as the great stoic philosopher Zeno? Try it out!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Web-Hacking-Toolkit - A Multi-Platform Web Hacking Toolkit Docker Image With Graphical User Interface (GUI) Support
http://www.kitploit.com/2021/10/web-hacking-toolkit-multi-platform-web.html

___________________________
@hacking_Attack
@Hacking_Video