KitPloit - PenTest Tools!
Onionservice - Manage Your Onion Services Via CLI Or TUI On Unix-like Operating System With A POSIX Compliant Shell

https://blogger.googleusercontent.com/img/a/AVvXsEifTeM3jvuBVldW18VyO8h5-vWf4xFx99Y1ZbEyxX1WNVVBgLQKvRFwUw7dD3LjEXcC7kv1Tl5mmqrgH0XihD51JASF4t9Uu4KwPkzd1Nt0fcRwA2hr7bna18ZS2JVUK9bpA8DlYUQToyNyszp8QH7fRXPzpfdNflf875WF1_FapPhS6GOS0jTMEKuTng=w640-h430 Feature-rich Onion Service manager for UNIX-like operating systems written in POSIX conformant shellscriptA collection of Onion Services features implemented for Unix-like systems following the Portable Operating System Interface standard.

WARNING: do not trust this repo yet, backup your hs keys in another location. This project has not been released and should be considered for development only.

Quick link to this repository: https://git.io/onionservice IntroductionImageshttps://blogger.googleusercontent.com/img/a/AVvXsEifTeM3jvuBVldW18VyO8h5-vWf4xFx99Y1ZbEyxX1WNVVBgLQKvRFwUw7dD3LjEXcC7kv1Tl5mmqrgH0XihD51JASF4t9Uu4KwPkzd1Nt0fcRwA2hr7bna18ZS2JVUK9bpA8DlYUQToyNyszp8QH7fRXPzpfdNflf875WF1_FapPhS6GOS0jTMEKuTng=w640-h430 https://blogger.googleusercontent.com/img/a/AVvXsEgcTNAcbO_42Gw2xtwy_VbCBm-ANeSUz0SJhwz4k03ttKVqJ_fdi6eZNcjfJ0u3lAeHg5VFseZXTogB1i-j-zxYverV7GnP9PgIHKmqg67UGdBvR2V3li1afEA5U8q9yIjyfeY0441F_JlTPROYTAQKSqaoyfRZD8MOtr9fz90OHOo3YWJbe1BxMVGLRQ=w640-h332 EchosystemOnion Services are the Hidden Services of Tor which use onion routing as its base for stablishing private connections. They offer:

* Location hiding - IP address aren't used, so your location is protected.
* End-to-end authentication - Only the owner of the hs secret key can host the same onion, so no impersonation is possible, no man-in-the-middle.
* End-to-end encryption - Traffic is encrypted from the client to the onion host, no need to trust CAs which are a fallible model.
* NAT punching - On a firewalled network, no need to open ports

For a deeper understanding, read the Rendezvous Specification and Tor design.

Onion Routing tries to solve most of these problems but it is still centralized by the Directory Authorities, and referencing Matt Traudt's blog post: replacing it for something more distributed is not a trivial task.

On the Tor echosystem, from TPO metrics, comparing only Free and Open Source Operating Systems, Linuxdominates on relays by platform and Tor Browser downloads by platform over BSD. Data regarding which operating system the onion service operator can not be easily acquired for obvious reasons. That was on the network level, but know on the user system, even if one chooses a Free and Open Source Operating System, GNU/Linux dominates a big share over *BSD, having a huge impact on the main software used for the kernel (Linux), shell (bash), service manager (systemd). GoalThe goal of this project is:

* facilitates onion service management, from activating a service to adding client authorization to it, giving the full capabilities of editing files manually would have but with less tipying.
* show the that managing the onion service is much more than just using a webserver with your pages.
* distribution, from the source code level (FOSS) to the effect it takes when it allows anyone to run the code on any operating system, shell or service manager. Mitigation from a single point of failure

Descentralization from a single point of failure:

* Kernel from predominant Linuxto also BSD.
* Shell from predominant bashto also any POSIX shell such as ksh, (y,d)ashand zsh(emulating sh).
* Service manager from predominant systemdto also OpenRC.

Editing the tor configuration file (torrc) is not difficult, but automation solves problem of misconfiguration and ha[...]

Cracked5pider/KaynLdr: KaynLdr is a Reflective Loader written in C/ASM
https://www.reddit.com/r/redteamsec/comments/roymlz/cracked5piderkaynldr_kaynldr_is_a_reflective/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://github.com/Cracked5pider/KaynLdr) [comments] (https://www.reddit.com/r/redteamsec/comments/roymlz/cracked5piderkaynldr_kaynldr_is_a_reflective/)

Passive Information Gathering for Pentesting
https://mirabbasagalarov.medium.com/passive-information-gathering-for-pentesting-97be493594f5?source=rss------bug_bounty-5

Information gathering very important for pentester.Continue reading on Medium » (https://mirabbasagalarov.medium.com/passive-information-gathering-for-pentesting-97be493594f5?source=rss------bug_bounty-5)

Hacking on Medium
TCP এর গল্প

https://cdn-images-1.medium.com/max/600/1*ipIJMGZhNutPlFWdgH0j8A.jpeg
অনলাইনে আমরা নিয়মিত তথ্যের আদান প্রদান করে থাকি। এই তথ্য বা data packet গুলো সুশৃঙ্খল নিয়ম মেনে চলাচল করে আর তাই আমরা দ্রুততম সময়ে সঠিক…

Continue reading on Medium »

Hacking on Medium
Diary of a kind-hearted hacker: Part 3

https://cdn-images-1.medium.com/max/727/1*YcI_MymVIIMI47wF8WdyPA.png
Facebook cares more about its users count than their security

Continue reading on Medium »

hacking: security in practice
This week in the Console newsletter we interviewed Philippe and Thibault of CrowdSec. CrowdSec is a participative IPS which is able to analyze visitor behavior & provide an adapted response to all kinds of cyber attacks. I thought /r/hacking might be interested in reading the interview! :)

https://external-preview.redd.it/BBe_tfuE3Z0tvecLeGUIw4f2akU4RcSOW52Aw0Sw7zo.jpg?width=640&crop=smart&auto=webp&s=36c5421ce46dd45e8d3603ecaf9f7c384c81947b submitted by /u/binaryfor
[link] [comments]

hacking: security in practice
I have dreams of being a hacker but I am not smart at all

I wanted to be a good hacker and learn cryptography. I have been interested in computers and how security works in computers. However, I really don't have a 135+ IQ and I am most likely below average or average intelligence. What should I do and how can I get started in learning how to hack? Should I even try or am I wasting my time?

submitted by /u/jasonvoorheessucks
[link] [comments]

Beginner pentester
https://www.reddit.com/r/Pentesting/comments/rp2m8i/beginner_pentester/

<!-- SC_OFF -->I want to learn pentesting but I don’t want to install Kali Linux, I have an average understanding of Linux and I know how to work my way around Linux. Can I learn on Ubuntu? If so is there any videos or sources that would be of use. Thanks. <!-- SC_ON --> submitted by /u/hibert_eater (https://www.reddit.com/user/hibert_eater)
[link] (https://www.reddit.com/r/Pentesting/comments/rp2m8i/beginner_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/rp2m8i/beginner_pentester/)

CVE-2021–40579
https://medium.com/@VAPT01/cve-2021-40579-9eac3409fd24?source=rss------bug_bounty-5

Insecure direct object references (IDOR)Continue reading on Medium » (https://medium.com/@VAPT01/cve-2021-40579-9eac3409fd24?source=rss------bug_bounty-5)

Abeats Bounty Program
https://medium.com/@AbeatsGame/abeats-bounty-program-5df4081aba4?source=rss------bug_bounty-5

Aiming to test the website's usability, the bounty program is ideal for gathering engagement from the community and finding the necessary…Continue reading on Medium » (https://medium.com/@AbeatsGame/abeats-bounty-program-5df4081aba4?source=rss------bug_bounty-5)