KitPloit - PenTest Tools!
Umay - IoT Malware Similarity Analysis Platform

https://blogger.googleusercontent.com/img/a/AVvXsEhUhRbMK1OT7zlw_eEid5_Qf7WeqgGCIHlr3T5Blj6J_8Z7V-Cr2HaXpNyaDQKr7EFzAzOtpnmYFcMHEf3ygk_1UeG0cjiTBY7q_-IzS4iMuwt875fzluXVF-XJsfam-hEBGfNYV_7hc7_v6T0RNVq5csOTz4rOItQvzx2fddx3T1qR_fWBBjFcAunmow
IoT Malware Similarity Analysis Platform

View Demo
https://blogger.googleusercontent.com/img/a/AVvXsEilw3i_gxPUCuebsK5azkrZrGru7Rfpsu3TnnIDr7pHrykgRX5jJLAN5vFb6OWjUJYtnIqJbWKOlQcah7_1qrHKbIVMk2KYB6O3iQPmPGiDlu6lPa-xXwkt7gvS39meJHDddNnX_WglPxUowSrn93iOVD02fTbPSJxWuqhVSnMrjllCm3CxE1Ov8sGkww=w640-h334
This project provides IoT malware similarity analysis based on shared codes. It helps to identify other malwares that have shared code with the analyzed file. In this way, you can have a chance to get an idea about the family of the malware. There are various devices with different architectures in the IoT ecosystem. Static-based methods are more effective when addressing the multi-architecture issue. 1000 malware binaries provided by IoTPOT were used in the project. The basic blocks and functions of each of binaries were extracted by radare2 and the hash values of these data were stored in the SQL database. The basic blocks and functions of the sample to be analyzed are query from this database and all malwares that have shared code are listed.
Current features

* Shared code based static analysis.
* Supporting ARM, MIPS, x86-64, i386, PowerPC, m68k, Renesas SH.
* ?

Getting Started

Prerequisites

* Python3+
* Radare2
* r2pipe
Installation

git clone https://github.com/mucoze/Umay
cd Umay


virtualenv venv

source venv/bin/activate

pip install -r requirements.txt

python manage.py makemigrations

python manage.py migrate

python manage.py createsuperuser

python manage.py runserver

and now project app is accesible from your browser. Default: 127.0.0.1:8000

Create your own dataset file

python create_dataset.py samples/

Give the directory where all the samples are located as an argument and it will generate the dataset.dbfile for you.


🤝
Contributing

Contributions, issues, and feature requests are welcome!

Feel free to contact me.

License

Umay is licensed under Apache License 2.0
Download Umay

Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters
https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5

Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.Continue reading on Medium » (https://ahmdhalabi.medium.com/ultimate-reconnaissance-roadmap-for-bug-bounty-hunters-pentesters-507c9a5374d?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Nearly 50% of People Will Abandon Sites Prohibiting Password Reuse

A new study investigating consumer password use found 25% of online shoppers would abandon their carts of $100 if prompted to reset a password at checkout.

Dark Reading: Attacks/Breaches
Microsoft Customer Source Code Exposed via Azure App Service Bug

Researchers found an insecure default behavior in Azure App Service exposing source code of some customer applications deployed using "Local Git."

Dark Reading: Attacks/Breaches
CISA's New Log4j Scanner Aims to Find Vulnerable Apps

The open-sourced scanner was derived from scanners built by members across the open source community, CISA reports.

Hacking on Medium
Tr0ll 2 VM Walkthrough

https://cdn-images-1.medium.com/max/693/0*xniFMaHoXzr1Cpn0.png
Test Metadolojisi:

Continue reading on Medium »

Hacking on Medium
Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters

https://cdn-images-1.medium.com/max/2600/1*bLnALsKbmXVH-_pln9bRbw.jpeg
Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.

Continue reading on Medium »

Hacking on Medium
Exploring the Worst Exploit of 2020: ZeroLogon (CVE-2020–1472)

https://cdn-images-1.medium.com/max/640/1*J7lJxuE8Ruy_Zpgg0VaG3A.jpeg
ZeroLogon is a critical (CVSS: 10.0) vulnerability in the NETLOGON protocol that was first discovered by Secura researchers and pathed by…

Continue reading on Medium »

Hacking on Medium
How To Hack Any Website

https://cdn-images-1.medium.com/max/1920/1*MdcoQXwDgNQ91wS6GZnHag.jpeg
[Part — 2: Content Discovery]

Continue reading on Medium »

Hacking on Medium
Errores de Active Directory podrían permitir que piratas informáticos se apoderen de los…

https://cdn-images-1.medium.com/max/1643/0*PNdXylnydl3NwM4b
PUBLICADO EN 22 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

hacking: security in practice
What os do you guys use to hack in?

Any parrot or black arch users i really wanna know. Oh and why do you use it instead of kali?

submitted by /u/redditbigbad
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Remote wireless keyboard? Something like Rubber Ducky but wireless?

Hello everyone,

I'm a computer enthusiast but more into software than hardware. However, I was thinking about something like Rubber Ducky (which is a keyboard with a hard-coded, but customizable, keypress sequence) with this difference the USB dongle would register itself as a keyboard but receive keypresses via wireless networking (Bluetooth / WIFI / RFID). So a person could control a computer by sending keyboard and mouse events wirelessly from their host machine. In other words, a remote keyboard, but without the keyboard itself.

What would be the simplest way to achieve that?

submitted by /u/FloweryMaya
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video