Black Hat Ethical Hacking
Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: DotDotPwn – The Directory Traversal FuzzerPost Views: 211 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer GitHub Link DESCRIPTIONDotDotPwn – The Directory Traversal Fuzzer

It’s a very flexible intelligent fuzzer written by wireghoul to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc.

Also, it has a protocol-independent module to send the desired payload to the host and port specified. On the other hand, it also could be used in a scripting way using the STDOUT module.

It’s written in perl programming language and can be run either under OS X, *NIX or Windows platforms. It’s the first Mexican tool included in BackTrack Linux (BT4 R2).
Fuzzing modules supported in this version:

* HTTP
* HTTP URL
* FTP
* TFTP
* Payload (Protocol independent)
* STDOUT
*Whenever you find parameters in any URLS, especially after recon when performing bounty or pentesting, testing for Directory or Path Traveral attack with this tool is really effective, fast and accurate – especially when encoding is added within the requests sent to bypass several mechanisms.
See Also: Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware REQUIREMENTS* Perl (http://www.perl.org) Programmed and tested on Perl 5.8.8 and 5.10
* Nmap (http://www.nmap.org) Only if you plan to use the OS detection feature (needs root privileges)
Perl modules:

* Net::FTP
* TFTP (only required if fuzzing TFTP)
* Time::HiRes
* Socket
* IO::Socket
* Getopt::Std
You can easily install the missing modules doing the following as root:

# perl -MCPAN -e “install install Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/pegasus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 [...]

___________________________
@hacking_Attack
@Hacking_Video

months ago
The post Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
4 Tips on How Small to Midsize Businesses Can Combat Cyberattacks

The first step in improving your cybersecurity is understanding your risk of attack.

Kali Linux Tutorials
PEASS-ng : Privilege Escalation Awesome Scripts SUITE new generation

PEASS-ng is a Privilege Escalation Awesome Scripts SUITE new generation. Here you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.

These tools search for possible local privilege escalation paths that you could exploit and print them to you with nice colors so you can recognize the misconfigurations easily.

* Check the Local Windows Privilege Escalation checklist from book.hacktricks.xyz
* WinPEAS – Windows local Privilege Escalation Awesome Script (C#.exe and .bat)
* Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz
* LinPEAS – Linux local Privilege Escalation Awesome Script (.sh)

Let’s Improve PEASS Together

If you want to add something and have any cool idea related to this project, please let me know it in the telegram group https://t.me/peass or contribute reading the CONTRIBUTING.md file.
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do I find data breaches

I need to access a specific data breach, but I can't seem to find anything like that on the clear web, and that seems to be the only thing that I am willing to access.

submitted by /u/_32u
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is the PNPT on par with the OSCP (advanced) or eJPT (entry level)?

I currently work in GRC but would like to better develop my IT skills, so I am looking into pen testing certs as a structured method for learning.

It is my understanding the eJPT is a great place to start and the OSCP is the "gold standard" (for better or worse), but is more advanced. The PNPT came into the picture and I can't tell if it is an entry level cert like eJPT or a competitor of the OSCP.

In other words, is it the SSCP to the Security+ or the CASP to the CISSP?

submitted by /u/_KFBR392KFBR392_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
what people think vulnerability research is like #shorts

https://external-preview.redd.it/hAiw69euMP9hMD6pD-WOvyEzHVN2arGfKZvlMe4d_NU.jpg?width=320&crop=smart&auto=webp&s=e375f1d7fc9b222586a0c66b28259790d6efb146 submitted by /u/Pseudo-Starwonders
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Journey of a Successful CPENT Student — Bjorn Voitel

https://cdn-images-1.medium.com/max/1090/1*HrhW2gxTkdQAMqGeQ6nl2w.jpeg
Scene 1: Time stamp: 0.90–0.32

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Types of Hackers

⚪ White Hat Hacker:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This is how I bypassed almost every EDR!

https://cdn-images-1.medium.com/max/754/1*wpTx5UE1_AfRJBw39bG9-A.png
First of all, let me introduce myself, my name is Omri Baso, I’m 24 years old from Israel and I’m a red teamer and security researcher…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Breaking the HTB Habits and building better OSCP ones…

https://cdn-images-1.medium.com/max/888/1*EzCEP64iU3HcC8FE33t51w.png
Born2Root pseudo writeup.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–40577

Stored Cross-Site Scripting.Continue reading on Medium »
Read more...