Kali Linux Tutorials
Cumulus : Web Application Weakness Monitoring, It Would Be Working By Add Just 3 Codelines

Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It’s very simple and powerful.
https://blogger.googleusercontent.com/img/a/AVvXsEigWUCWSjHr8uaxdNbRTa6SltIWHhTYa0MDsgeL1PDhp9SN_iZlpkuwVtoMbYyd-p9ihQ_llWrF0Fw3LVSCZHXzQCdV_IlBL69ENWBQUFO-iiqy3ayhCL7eOLbqGEGID90X8Bpc-2qmmfQMd9yH6gfNAHvJ0TVkwRUfqDDB4P8dmfCWar9r1zFl0mOZ=s1893
Key features

Just install SDK to web front, can be found security weakness on service

* SDK detect weakness from Inner Layer, dynamically (ex_ DOM Event, XHR Request)
* Scanner detect weakness from Out Layer, statically (ex_ Web crawling based analysis)
NameOriginDescriptionXSSSDKWhen user input a xss pattern string, trigger detection of XSSSQLInjectionSDKWhen user input a sqlinjection pattern, trigger detection of SQLInjectionSensitive PayloadSDKWhen requesting with sensitive payload. for example, unencoded raw passwordFile UploadSDKWhen user embed any file worried for system. for example, web shellUnnecessary CommentScannerCode comments are on the served HTML or JSDirectory TraversalScannerDetect directory listing vulnerabilityGuessingScannerDetect sensitive page like adminUnobfuscated CodeScannerDetect unobfuscated vulnerable codes
If you think about able to detect additional weakness, please contribute on SDK or Scanner

Cumulus SDK for JavaScript

The official Cumulus SDK for JavaScript, providing as npm

Note: current version is unsupported version on typescript project but we considering now and gonna make it, quickly! (#2)

Installation

To install a SDK, simply add package like belows:

npm install –save https://github.com/tophat-cloud/cumulus
yarn add https://github.com/tophat-cloud/cumulus

Setup and usage of SDK always follow the same principle.

import { protect, captureMessage } from ‘cumulus’;
protect({
key: ‘key’,
});
captureMessage(‘Hello, world!’);

If you haven’t __key__, please sign-up and create project to get to key
Download

___________________________
@hacking_Attack
@Hacking_Video

to ensure that the highest percentage of UnifiedAuditLog records are mined from Azure. By default, it will export extracted and deduplicated records to a CSV file.

The purpose of Invoke-AzHunterPlaybookis to provide a flexible interface into hunting playbooks stored in the playbooksfolder. These playbooks are designed so that anyone can contribute with their own analytics and ideas. So far, only two very simple playbooks have been developed: AzHunter.Playbook.Exporterand AzHunter.Playbook.LogonAnalyser. The Exportertakes care of exporting records after applying de-duplication and sorting operations to the data. The LogonAnalyseris in beta mode and extracts events where the Operationsproperty is UserLoggedIn. It is an example of what can be done with the playbooks and how easy it is to construct one.

When running Search-AzureCloudUnifiedLog, you can pass in a list of playbooks to run per log batch. Search-AzureCloudUnifiedLogwill pass on the batch to the playbooks via Invoke-AzHunterPlaybook.

Finally Invoke-AzHunterPlaybookcan, be used standalone. If you have an export of UnifiedAuditLog records, you can load them into a Powershell Array and pass them on to this command and specify the relevant playbooks. Example 1 | Run search on Azure UnifiedAuditLog and extract records to CSV file (default behaviour)

Search-AzureCloudUnifiedLog -StartDate “2020-03-06T10:00:00” -EndDate “2020-06-09T12:40:00” -TimeInterval 12 -AggregatedResultsFlushSize 5000 -Verbose

This command will:

* Search data between the dates in StartDate and EndDate
* Implement a window of 12 hours between these dates, which will be used to sweep the entire length of the time interval (StartDate –> EndDate). This window will be automatically reduced and adjusted to provide the maximum amount of records within the window, thus ensuring higher quality of output. The time window slides sequentially until reaching the EndDate.
* The AggregatedResultsFlushSizeparameter speficies the batches of records that will be processed by downstream playbooks. We are telling AzureHunter here to process the batch of records once the total amount reaches 5000. This way, you can get results on the fly, without having to wait for hours until a huge span of records is exported to CSV files. Example 2 | Run Hunting Playbooks on CSV File

We assume that you have exported UnifiedAuditLog records to a CSV file, if so you can then do:

$RecordArray = Import-Csv .\my-exported-records.csv
Invoke-AzHunterPlaybook -Records $RecordArray -Playbooks ‘AzHunter.Playbook.UAL.LogonAnalyser’

You can run more than one playbook by separating them via commas, they will run sequentially:

$RecordArray = Import-Csv .\my-exported-records.csv
Invoke-AzHunterPlaybook -Records $RecordArray -Playbooks ‘AzHunter.Playbook.UAL.Exporter’, ‘AzHunter.Playbook.UAL.LogonAnalyser’

Example 3 | Run Hunting Playbook to produce a clean eDiscovery Summary Report

We assume that you have exported an eDiscovery Summary Report to a CSV file, if so you can then do:

$eDiscoReportFile = .\eDisco-Summary-Report-PersonOfInterest.csv
Invoke-AzHunterPlaybook -Records $eDiscoReportFile -Playbooks ‘AzHunter.Playbook.eDisco.SummaryReportCleaner’

Optionally we can pass some parameters to the playbook like so:

$eDiscoReportFile = .\eDisco-Summary-Report-PersonOfInterest.csv
Invoke-AzHunterPlaybook -Records $eDiscoReportFile -Playbooks ‘AzHunter.Playbook.eDisco.SummaryReportCleaner’ -PlayBookParameters @{“CsvRecordsBatchSize” = 700}

The paramenter “CsvRecordsBatchSize” will tell the playbook to flush records to disk in batches of 700 records. Why?

Since the aftermath of the SolarWinds Supply Chain Compromise many tools have emerged out of deep forges of cyberforensicators, carefully developed by cyber blacksmith ninj[...]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Discord Tweak for Invisible Typing

https://cdn-images-1.medium.com/max/1200/1*rPeGWZtaDnE0qR-EbhZc5w.png
New Invisible Typing Discord Tweak for Jailbreaks

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Common Nginx Misconfiguration leads to Path Traversal

https://cdn-images-1.medium.com/max/2600/0*eA1ZnHCtDmUPuMMA
Recently, I have been invited by my friend to participate into a private pentest project. The target has been using Nginx as its Reverse…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Crossposted from r/HowtoHack, any advice here?

submitted by /u/N1tingale
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

snovvcrash/NimHollow: Nim implementation of Process Hollowing using syscalls (PoC)
https://www.reddit.com/r/redteamsec/comments/rpj4fn/snovvcrashnimhollow_nim_implementation_of_process/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://github.com/snovvcrash/NimHollow) [comments] (https://www.reddit.com/r/redteamsec/comments/rpj4fn/snovvcrashnimhollow_nim_implementation_of_process/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Neovim for Beginners — init.lua

https://cdn-images-1.medium.com/max/1427/1*KL99cTPElu7zUp07BtQvGA.png
Let’s start our journey to customize Neovim.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Common Nginx Misconfiguration leads to Path Traversal

https://cdn-images-1.medium.com/max/2600/0*eA1ZnHCtDmUPuMMA
Recently, I have been invited by my friend to participate into a private pentest project. The target has been using Nginx as its Reverse…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Grim Finance Loses $30 Million From Smart Contract Bug

https://cdn-images-1.medium.com/max/1600/0*D-AOveVM4O0-c8gF
Grim Finance became the latest victim of a crypto hack as an attacker stole $30 million in funds. Grim Finance is a decentralized finance…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme LFI Writeup

https://cdn-images-1.medium.com/max/2600/0*wTxj_b5XveVEicfi
How to find and exploit LFI

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

SourceLeakHacker - A Multi Threads Web Application Source Leak Scanner

SourceLeakHacker is a muilt-threads web directories scanner.Installationpip install -r requirements.txtUsage dictionary scale --output OUTPUT output folder, default: result/YYYY-MM-DD hh:mm:ss --threads THREADS, -t THREADS threads numbers, default: 4 --timeout TIMEOUT HTTP request timeout --level {CRITICAL,ERROR,WARNING,INFO,DEBUG}, -v {CRITICAL,ERROR,WARNING,INFO,DEBUG} log level --version, -V show program's version number and exit ">usage: SourceLeakHacker.py optionsoptional arguments: -h, --help show this help message and exit --url URL url to scan, eg: 'http://127.0.0.1/' --urls URLS file contains urls to scan, one line one url. --scale {full,tiny} build-in dictionary scale --output OUTPUT output folder, default: result/YYYY-MM-DD hh:mm:ss --threads THREADS, -t THREADS threads numbers, default: 4 --timeout TIMEOUT HTTP request timeout --level {CRITICAL,ERROR,WARNING,INFO,DEBUG}, -v {CRITICAL,ERROR,WARNING,INFO,DEBUG} log level --version, -V show program's version number and exitExample$ python SourceLeakHacker.py --url=http://baidu.com --threads=4 --timeout=8302 0 3.035766 text/html; charset=iso-8859-1 http://baidu.com/_/_index.php302 0 3.038096 text/html; charset=iso-8859-1 http://baidu.com/_/_index.php.bak...302 0 0.063973 text/html; charset=iso-8859-1 http://baidu.com/_adm/_index.php302 0 0.081672 text/html; charset=iso-8859-1 http://baidu.com/_adm/_index.php.bakResult save in file: result/2020-02-27 07:07:47.csv$ cat url.txt http://baidu.com/http://google.com/$ python SourceLeakHacker.py --urls=url.txt --threads=4 --timeout=8302 0 2.363600 text/html; charset=iso-8859-1 http://baidu.com/_/_index.php.bak302 0 0.098417 text/html; charset=iso-8859-1 http://baidu.com/_adm/_index.php.bak...302 0 0.060524 text/html; charset=iso-8859-1 http://google.com/_adm/_index.php.bak302 0 0.075042 text/html; charset=iso-8859-1 http://baidu.com/_adm/_index.php.backResult save in file: result/2020-02-27 07:08:54.csvDemoTODOs Arguments parser. Store scan result into csv file. Support for multiple urls (from file). Add help comments for every params. Update Usage. Adjust dictionary elements order systematically. Change logger in order to suite for both windows and linux. Add log level. Update Screenshots. Retry and avoid dead lock Store scan result into sqlite database. Download small url contents, then store them into sqlite database.Known Bugs CTRL C does not works on windows platformDownload SourceLeakHacker
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Snap-Scraper - Snap Scraper Enables Users To Download Media Uploaded To Snapchat's Snap Map Using A Set Of Latitude And Longitude Coordinates
http://www.kitploit.com/2021/12/snap-scraper-snap-scraper-enables-users.html

___________________________
@hacking_Attack
@Hacking_Video

Snap Scraper is an open source intelligence (https://www.kitploit.com/search/label/Intelligence) tool which enables users to download media uploaded to Snapchat's Snap Map using a set of latitude and longitiude co-ordinates. This project is in no way affiliated with, authorized, maintained, sponsored or endorsed by Snap inc. or any of its affiliates or subsidiaries. This program is for education, forensic and bug reporting purposes only and is provided without warranty.When using this tool please cite the following publication:Richard Matthews, Kieren Lovell, Matthew Sorell, Ghost protocol – Snapchat as a method of surveillance, Forensic Science International: Digital Investigation, Volume 36, Supplement, 2021, 301112, ISSN 2666-2817, https://doi.org/10.1016/j.fsidi.2021.301112.
Screenshots

___________________________
@hacking_Attack
@Hacking_Video