Key features
Just install SDK to web front, can be found security weakness on serviceSDK detect weakness from Inner Layer, dinamically (ex_ DOM Event, XHR Request)Scanner detect weakness from Out Layer, statically (ex_ Crawl of web resources and analysis (https://www.kitploit.com/search/label/Analysis) that)NameOriginDescriptionXSSSDKWhen user input a xss (https://www.kitploit.com/search/label/XSS) pattern string, trigger detection of XSSSQLInjectionSDKWhen user input a sqlinjection pattern, trigger detection of SQLInjectionSensitive PayloadSDKWhen requesting with sensitive payload. for example, unencoded raw passwordFile UploadSDKWhen user embed any file worried for system. for example, web shellUnnecessary CommentScannerCode comments are on the served HTML or JSDirectory TraversalScannerDetect directory listing vulnerabilityGuessingScannerDetect sensitive page like adminUnobfuscated CodeScannerDetect unobfuscated vulnerable (https://www.kitploit.com/search/label/Vulnerable) codesIf you think about able to detect additional weakness, please contribute on SDK or Scanner
Cumulus SDK for JavaScript
The official Cumulus SDK for JavaScript, providing as npmNote: current version is unsupported version on typescript (https://www.kitploit.com/search/label/Typescript) project but we considering now and gonna make it, quickly! (#2 (https://github.com/tophat-cloud/cumulus/issues/2))
Installation
To install a SDK, simply add package like belows:npm install --save https://github.com/tophat-cloud/cumulus
yarn add https://github.com/tophat-cloud/cumulus
Setup and usage of SDK always follow the same principle.import { protect, captureMessage } from 'cumulus';

protect({
key: '__key__',
});

captureMessage('Hello, world!');If you haven't __key__, please sign-up (https://cumulus.tophat.cloud/signup) and create project to get to key
Contents
Official Site (https://cumulus.tophat.cloud/)Contributing (https://github.com/tophat-cloud/cumulus/blob/main/CONTRIBUTING.md)Change log (https://github.com/tophat-cloud/cumulus/blob/main/CHANGELOG.md)OpenSource License (https://cumulus.tophat.cloud/license.html)Documents (https://github.com/tophat-cloud/cumulus/wiki)Roadmap (https://github.com/tophat-cloud/cumulus/projects/1)
Resources
cumulus-scanner (https://github.com/tophat-cloud/cumulus-scanner)cumulus-front (https://github.com/tophat-cloud/cumulus-front)cumulus-back (https://github.com/tophat-cloud/cumulus-back)
Author@Jinny You (http://github.com/tinyjin)  from TopHat

Download Cumulus (https://github.com/tophat-cloud/cumulus)

Hacking on Medium
Tryhackme Bounty hacker writeup

https://cdn-images-1.medium.com/max/665/1*jmHm4TBbDW00n-Kvvmrxwg.png
first we make a nmap scan

Continue reading on Medium »

hacking: security in practice
Where to find scam email datasets?

Any idea where I could get a hold of scam email datasets for an ML project?

submitted by /u/EZ-Claps
[link] [comments]

hacking: security in practice
An 11 yr old did whaaat?

I'm not a hacker, but read this article and wanted to share it and ask...

At 11 yrs old, is it impressive that he was able to do this?

submitted by /u/J_Winn
[link] [comments]

Cumulus - Web Application Weakness Monitoring, It Would Be Working By Add Just 3 Codelines

Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful.Key featuresJust install SDK to web front, can be found security weakness on serviceSDK detect weakness from Inner Layer, dinamically (ex DOM Event, XHR Request)Scanner detect weakness from Out Layer, statically (ex Crawl of web resources and analysis that)NameOriginDescriptionXSSSDKWhen user input a xss pattern string, trigger detection of XSSSQLInjectionSDKWhen user input a sqlinjection pattern, trigger detection of SQLInjectionSensitive PayloadSDKWhen requesting with sensitive payload. for example, unencoded raw passwordFile UploadSDKWhen user embed any file worried for system. for example, web shellUnnecessary CommentScannerCode comments are on the served HTML or JSDirectory TraversalScannerDetect directory listing vulnerabilityGuessingScannerDetect sensitive page like adminUnobfuscated CodeScannerDetect unobfuscated vulnerable codesIf you think about able to detect additional weakness, please contribute on SDK or ScannerCumulus SDK for JavaScriptThe official Cumulus SDK for JavaScript, providing as npmNote: current version is unsupported version on typescript project but we considering now and gonna make it, quickly! (#2)InstallationTo install a SDK, simply add package like belows:npm install --save https://github.com/tophat-cloud/cumulusyarn add https://github.com/tophat-cloud/cumulusSetup and usage of SDK always follow the same principle.import { protect, captureMessage } from 'cumulus';protect({ key: 'key',});captureMessage('Hello, world!');If you haven't _key_, please sign-up and create project to get to keyContentsOfficial SiteContributingChange logOpenSource LicenseDocumentsRoadmapResourcescumulus-scannercumulus-frontcumulus-backAuthor@Jinny You from TopHatDownload Cumulus
Read more...

Recon Experience with Trickest #1 — Subdomain Recon Tale in a Graph
https://trickest.medium.com/recon-experience-with-trickest-1-subdomain-recon-tale-in-a-graph-6220b5cf02fb?source=rss------bug_bounty-5

Main goalContinue reading on Medium » (https://trickest.medium.com/recon-experience-with-trickest-1-subdomain-recon-tale-in-a-graph-6220b5cf02fb?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Cumulus - Web Application Weakness Monitoring, It Would Be Working By Add Just 3 Codelines

https://blogger.googleusercontent.com/img/a/AVvXsEiB3Ua1ekVkgbUcGdmlO9uxDrvg7MbezEVGZiK2NtUUUXlT3bwCROhxK7E-_WDQo7M7Prqgyo40k9NgSmiQZNBoECBe_5ggsrL4PYcN79WsTIhJPYMYDVpiR19bxK8FNmAdLuusr_L_yErJvw7XeEi4u_TT1sRz_yXwAHkZWqYb4AyQ4rNBKpuILQVlXQ=w640-h160 Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful. https://blogger.googleusercontent.com/img/a/AVvXsEgBxMl1d4soZ6kNreqa9QbaoPC--WSnb48nC12tyCR9zVE4CiiNsrtyq_IySeE7Ac16QDcoAreRPqpOHKUbW8fPJmN88Xv_qE_Gk0FTnsvUAAxv31kGQM7KRxYrPYqnKqGEgShrTQRead2cv_zPLOtK9Fra1PvihALO6aQEtymSSdHhhMcWj0vwKodfOg=w640-h346 https://blogger.googleusercontent.com/img/a/AVvXsEg9a7cUxancgqyoztEd9QDrLW8OdlcrS1GTNzH0aulR9BpDNT8v9ay4mF-sDCfX5ofk1it-fTX-AV7tL3JHP-jPBs0hUyaguuyatw0ztstUjwWr8d9ms3blvPZMS7Ua7AFlC_UY6NhWGnO2TMd0GOpmmA_jum6U7-oRpg_Xm8QRfywDNBUDBhJVlcHlpQ=w640-h266 https://blogger.googleusercontent.com/img/a/AVvXsEjywHth1c3tvIevjK4Xu5iVj5LYiFQZTE6oTt7nT60RA2VvijFJwKoPfQ7u8I7nyKs8eCoGPdR7Xr99yUj_zXR_MgJ1dosMIZLkuXeZzU9ZBkrmZAXijTQhob38A1itKTPXeWWHHPxcKWA-stxPq8gcYOClkCp8nSmWgrjIor_q6uUaTUaMh1XGJ45O5A=w640-h368 Key featuresJust install SDK to web front, can be found security weakness on service

* SDK detect weakness from Inner Layer, dinamically (ex_ DOM Event, XHR Request)
* Scanner detect weakness from Out Layer, statically (ex_ Crawl of web resources and analysis that)
NameOriginDescriptionXSSSDKWhen user input a xss pattern string, trigger detection of XSSSQLInjectionSDKWhen user input a sqlinjection pattern, trigger detection of SQLInjectionSensitive PayloadSDKWhen requesting with sensitive payload. for example, unencoded raw passwordFile UploadSDKWhen user embed any file worried for system. for example, web shellUnnecessary CommentScannerCode comments are on the served HTML or JSDirectory TraversalScannerDetect directory listing vulnerabilityGuessingScannerDetect sensitive page like adminUnobfuscated CodeScannerDetect unobfuscated vulnerable codes
If you think about able to detect additional weakness, please contribute on SDK or Scanner Cumulus SDK for JavaScriptThe official Cumulus SDK for JavaScript, providing as npm

Note: current version is unsupported version on typescript project but we considering now and gonna make it, quickly! (#2) InstallationTo install a SDK, simply add package like belows: npm install --save https://github.com/tophat-cloud/cumulus
yarn add https://github.com/tophat-cloud/cumulus Setup and usage of SDK always follow the same principle. import { protect, captureMessage } from 'cumulus';

protect({
key: '__key__',
});

captureMessage('Hello, world!');If you haven't __key__, please sign-up and create project to get to key Contents* Official Site
* Contributing
* Change log
* OpenSource License
* Documents
* Roadmap Resources* cumulus-scanner
* cumulus-front
* cumulus-back Author@Jinny You  from TopHat Download Cumulus➖ Sent by @TheFeedReaderBot ➖

Recon Experience with Trickest — Subdomain Recon Tale in a Workflow #1
https://trickest.medium.com/recon-experience-with-trickest-subdomain-recon-tale-in-a-workflow-1-a522717d1471?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Main goalContinue reading on Medium » (https://trickest.medium.com/recon-experience-with-trickest-subdomain-recon-tale-in-a-workflow-1-a522717d1471?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

DOS attack in Yahoo, How i was able to deny new users from service?
https://hector0x.medium.com/dos-attack-in-yahoo-how-i-was-able-to-deny-new-users-from-service-6b222e744e61?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey All ,Continue reading on Medium » (https://hector0x.medium.com/dos-attack-in-yahoo-how-i-was-able-to-deny-new-users-from-service-6b222e744e61?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video