Hacking on Medium
Walking An Application[TryHackme + Intro To Web Hacking]

https://cdn-images-1.medium.com/max/600/1*kuXooUVn-50NkSQpRAx_pw.png
Learn the various ways of discovering hidden or private content on a webserver that could lead to new vulnerabilities.

Continue reading on Medium »

Hacking on Medium
Content Discovery [TryHackme+Intro To Web Hacking]

https://cdn-images-1.medium.com/max/600/1*ezg4L2ZIA_1E73GEyuqRIA.png
Learn the various ways of discovering hidden or private content on a webserver that could lead to new vulnerabilities.

Continue reading on Medium »

Hacking on Medium
West-Wild-v1:1 VM Walkthrough

https://cdn-images-1.medium.com/max/802/0*UmAEeQZBwJGPu03Z.png
Merhabalar,

Continue reading on Medium »

Hacking on Medium
CVE-2021–40290

https://cdn-images-1.medium.com/max/750/0*nI_MUEQP4-Jgr0KI
In this blog post, I’ll share the recent vulnerability I found in a CMS, how I found it and a POC exploit.

Continue reading on Medium »

Hacking on Medium
El FBI, la NSA y CISA explican cómo evitar este peligroso ransomware

https://cdn-images-1.medium.com/max/1518/0*z6YZ7LMfeD2JKeQd
PUBLICADO EN 1 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Black Hat Ethical Hacking
Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: DotDotPwn – The Directory Traversal FuzzerPost Views: 211 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer GitHub Link DESCRIPTIONDotDotPwn – The Directory Traversal Fuzzer

It’s a very flexible intelligent fuzzer written by wireghoul to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc.

Also, it has a protocol-independent module to send the desired payload to the host and port specified. On the other hand, it also could be used in a scripting way using the STDOUT module.

It’s written in perl programming language and can be run either under OS X, *NIX or Windows platforms. It’s the first Mexican tool included in BackTrack Linux (BT4 R2).
Fuzzing modules supported in this version:

* HTTP
* HTTP URL
* FTP
* TFTP
* Payload (Protocol independent)
* STDOUT
*Whenever you find parameters in any URLS, especially after recon when performing bounty or pentesting, testing for Directory or Path Traveral attack with this tool is really effective, fast and accurate – especially when encoding is added within the requests sent to bypass several mechanisms.
See Also: Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware REQUIREMENTS* Perl (http://www.perl.org) Programmed and tested on Perl 5.8.8 and 5.10
* Nmap (http://www.nmap.org) Only if you plan to use the OS detection feature (needs root privileges)
Perl modules:

* Net::FTP
* TFTP (only required if fuzzing TFTP)
* Time::HiRes
* Socket
* IO::Socket
* Getopt::Std
You can easily install the missing modules doing the following as root:

# perl -MCPAN -e “install install Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/pegasus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 [...]

___________________________
@hacking_Attack
@Hacking_Video

months ago
The post Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
4 Tips on How Small to Midsize Businesses Can Combat Cyberattacks

The first step in improving your cybersecurity is understanding your risk of attack.

Kali Linux Tutorials
PEASS-ng : Privilege Escalation Awesome Scripts SUITE new generation

PEASS-ng is a Privilege Escalation Awesome Scripts SUITE new generation. Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.

These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.

* Check the Local Windows Privilege Escalation checklist from book.hacktricks.xyz
* WinPEAS – Windows local Privilege Escalation Awesome Script (C#.exe and .bat)
* Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz
* LinPEAS – Linux local Privilege Escalation Awesome Script (.sh)

Let’s Improve PEASS Together

If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md file.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do I find data breaches

I need to access a specific data breach, but I can't seem to find anything like that on the clear web, and that seems to be the only thing that I am willing to access.

submitted by /u/_32u
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is the PNPT on par with the OSCP (advanced) or eJPT (entry level)?

I currently work in GRC but would like to better develop my IT skills, so I am looking into pen testing certs as a structured method for learning.

It is my understanding the eJPT is a great place to start and the OSCP is the "gold standard" (for better or worse), but is more advanced. The PNPT came into the picture and I can't tell if it is an entry level cert like eJPT or a competitor of the OSCP.

In other words, is it the SSCP to the Security+ or the CASP to the CISSP?

submitted by /u/_KFBR392KFBR392_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video