>_ Introduction 4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. NOTE : If you see multiple [200 Ok]/bypasses as output, you must check the Content-Length. If the content-length is same for multiple [200 Ok]/bypasses means false positive. Reason can be "301/302" or "../" [Payload] DON'T PANIC. Script will print cURL PAYLOAD if possible bypass found.
>_ Preview

___________________________
@hacking_Attack
@Hacking_Video

>_ Help root@me_dheeraj:$ bash 403-bypass.sh -h

___________________________
@hacking_Attack
@Hacking_Video

>_ Usage / Modes Scan with specific payloads: [ --header ] Support HEADER based bypasses/payloads root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --header [ --protocol ] Support PROTOCOL based bypasses/payloads root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --protocol [ --port ] Support PORT based bypasses/payloads root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --port [ --HTTPmethod ] Support HTTP Method based bypasses/payloads root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --HTTPmethod [ --encode ] Support URL Encoded bypasses/payloads root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --encode [ --SQLi ] Support MySQL (https://www.kitploit.com/search/label/MySQL) mod_Security & libinjection (https://www.kitploit.com/search/label/Libinjection) bypasses/payloads [** New **] root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --SQLi Complete Scan (https://www.kitploit.com/search/label/Scan) {includes all exploits/payloads} for an endpoint [ --exploit ] root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --exploit Prerequisites apt install curl [Debian]

Download 4-ZERO-3 (https://github.com/Dheerajmadhukar/4-ZERO-3)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I keep getting emails stating that there was unusual sign in activities on my Microsoft account. I was skeptical at first, but now I have reason to believe the worst. Have I been "hacked"?

I've actually been receiving these emails for quite some time now, but ignored them because I thought it was phishing, or whatever. The emails look to have came from the same email address: ACCOUNT-SECURITY-NOREPLY@ACCOUNTPROTECTION.MICROSOFT(.)COM. I don't ever recall making a Microsoft account, unless it was something I needed to do when I first got my laptop and I just don't remember? I decided to go straight to the Microsoft log-in web page at login.live.com and reset my password. After password reset, I went to "recent activity" and saw that there were indeed multiple recent activities made onto the account within the past month or so, which includes: multiple unusual activity detected, multiple successful sign ins from different countries, automatic sync....like wtf? Countries ranging from the UK to Nepal to the Netherland, back to the U.S. So, what does all of this mean? Where do I go from here? What else do I need to do? I've already reset my password, as I said. Does this also mean my laptop has been hacked? I know that sounds like a silly question, but now I'm paranoid and anxious, unfortunately. I see the words "successful sign in" and "automatic sync" and makes me believe that these people (or person) were able to see my personal info and everything I was doing....

submitted by /u/wutevs-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal nedir?,Nasıl bulunur?,Web Security Academyden directory traversal lab çözümü.
https://mirabbasagalarov.medium.com/directory-traversal-nedir-nas%C4%B1l-bulunur-web-security-academyden-directory-traversal-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-f25244e562bb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/directory-traversal-nedir-nas%C4%B1l-bulunur-web-security-academyden-directory-traversal-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-f25244e562bb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
4-ZERO-3 - 403/401 Bypass Methods + Bash Automation

https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Introduction

4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same.

* NOTE : If you see multiple [200 Ok]/bypasses as output, you must check the Content-Length. If the content-length is same for multiple [200 Ok]/bypasses means false positive. Reason can be "301/302" or "../" [Payload] DON'T PANIC.
* Script will print cURLPAYLOAD if possible bypass found.
>_ Preview
https://blogger.googleusercontent.com/img/a/AVvXsEhoGba3T9vdnrum-WQkW5c_vF_d_26pES7w1AR-Xsn3rjBWXZIgIKGtQQqvC0SC2T693Rw4yqewJnCcU4S5M6oHOaeoD2w97yvKEx6jGeuGjRfeicF_6GdI7G4oSja0xmwacc4GybJZbOzbROjMe0WzRFzsVUxR5_o1ZPpY2eqqQ-joLIm6Zm8oVfDfpA=w640-h306
>_ Help

root@me_dheeraj:$ bash 403-bypass.sh -h
https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Usage / Modes

* Scan with specific payloads:
* [ --header] Support HEADER based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --header

* [ --protocol] Support PROTOCOL based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --protocol

* [ --port] Support PORT based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --port

* [ --HTTPmethod] Support HTTP Method based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --HTTPmethod

* [ --encode] Support URL Encoded bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --encode

* [ --SQLi] Support MySQL mod_Security & libinjection bypasses/payloads [** New **]
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --SQLi
* Complete Scan {includes all exploits/payloads} for an endpoint [ --exploit ]

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --exploit

Prerequisites

* apt install curl [Debian]
Download 4-ZERO-3

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Directory Traversal nedir?,Nasıl bulunur?,Web Security Academyden directory traversal lab çözümü.

https://cdn-images-1.medium.com/max/707/1*AoGwv1ij3XB1YRuNYB6fSw.png
Directory Traversal nedir?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A PROUD MOMENT IN COLLEGE

The Secretary of my college has provided me a Fees Concession of 10%. Do you know why???

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phases of Social-Engineering in Cybercrime

https://cdn-images-1.medium.com/max/1920/1*PW_aeXUwlXUnyxkLp2edAg.gif
Investigation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox: BountyHunter

https://cdn-images-1.medium.com/max/600/1*d9GkGKSDwcRUcP8vZTDYIA.png
ENUMERATION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video