ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
http://www.kitploit.com/2021/12/shonydanza-customizable-easy-to_01477721372.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/12/shonydanza-customizable-easy-to_01477721372.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
With ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git
Requirementspython3shodan librarycd ShonyDanza
pip3 install -r requirements.txtUsageEdit config.py to include your desired configurations
cd configs
sudo nano config.py
dictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into "vuln:" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510) STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:"Index of /"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'"Serial Number:" "Built:" "Server: HP HTTP"', 'DOCKER_API':'"Docker Containers:" port:2375', 'ANDROID_ROOT_BRIDGE':'"Android Debug Bridge" "Device" port:5555', 'MONGO_EXPRESS_GUI':'"Set-Cookie: mongo-express=" "200 OK"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:"Citrix NetScaler"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 "3992"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 "Set-Cookie: webvpn;"' } #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' ">#config file for shonydanza searches
#REQUIRED
#maximum number of results that will be returned per search
#default is 100
SEARCH_LIMIT = 100
#REQUIRED
#IPs exceeding the honeyscore limit will not show up in IP results
#scale is 0.0 to 1.0
#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results
HONEYSCORE_LIMIT = 1.0
#REQUIRED - at least one key: value pair
#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu
#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries
#check into "vuln:" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)
STOCK_SEARCHES = {
'ANONYMOUS_FTP':'ftp anonymous ok',
'RDP':'port:3389 has_screenshot:true',
'OPEN_TELNET':'port:23 console gateway -password',
'APACHE_DIR_LIST':'http.title:"Index of /"',
'SPRING_BOOT':'http.favicon.hash:116323821',
'HP_PRINTERS':'"Serial Number:" "Built:" "Server: HP HTTP"',
'DOCKER_API':'"Docker Containers:" port:2375',
'ANDROID_ROOT_BRIDGE':'"Android Debug Bridge" "Device" port:5555',
'MONGO_EXPRESS_GUI':'"Set-Cookie: mongo-express=" "200 OK"',
'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',
'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:"Citrix NetScaler"',
'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 "3992"',
'CVE-2020-3452_CISCO_ASA_FTD':'200 "Set-Cookie: webvpn;"'
}
#OPTIONAL
#IP or cidr range constraint for searches that return list of IP addresses
#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)
#NET_RANGE = '0.0.0.0/0'
Run
cd ../
python3 shonydanza.py
___________________________
@hacking_Attack
@Hacking_Video
With ShonyDanza, you can:Obtain IPs based on search criteriaAutomatically exclude honeypots from the results based on your pre-configured thresholdsPre-configure all IP searches to filter on your specified net range(s)Pre-configure search limitsUse build-a-search to craft searches with easy building blocksUse stock searches and pre-configure your own stock searchesCheck if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2sGet host and domain profilesScan on-demandFind exploitsGet total counts for searches and exploitsAutomatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanzaInstallationgit clone https://github.com/fierceoj/ShonyDanza.git
Requirementspython3shodan librarycd ShonyDanza
pip3 install -r requirements.txtUsageEdit config.py to include your desired configurations
cd configs
sudo nano config.py
dictionary below to add it to your shonydanza stock searches menu #see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries #check into "vuln:" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510) STOCK_SEARCHES = { 'ANONYMOUS_FTP':'ftp anonymous ok', 'RDP':'port:3389 has_screenshot:true', 'OPEN_TELNET':'port:23 console (https://www.kitploit.com/search/label/Console) gateway (https://www.kitploit.com/search/label/Gateway) -password', 'APACHE_DIR_LIST':'http.title:"Index of /"', 'SPRING_BOOT':'http.favicon.hash:116323821', 'HP_PRINTERS':'"Serial Number:" "Built:" "Server: HP HTTP"', 'DOCKER_API':'"Docker Containers:" port:2375', 'ANDROID_ROOT_BRIDGE':'"Android Debug Bridge" "Device" port:5555', 'MONGO_EXPRESS_GUI':'"Set-Cookie: mongo-express=" "200 OK"', 'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/', 'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:"Citrix NetScaler"', 'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 "3992"', 'CVE-2020-3452_CISCO_ASA_FTD':'200 "Set-Cookie: webvpn;"' } #OPTIONAL #IP or cidr range constraint for searches that return list of IP addresses #use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4) #NET_RANGE = '0.0.0.0/0' ">#config file for shonydanza searches
#REQUIRED
#maximum number of results that will be returned per search
#default is 100
SEARCH_LIMIT = 100
#REQUIRED
#IPs exceeding the honeyscore limit will not show up in IP results
#scale is 0.0 to 1.0
#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results
HONEYSCORE_LIMIT = 1.0
#REQUIRED - at least one key: value pair
#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu
#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries
#check into "vuln:" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)
STOCK_SEARCHES = {
'ANONYMOUS_FTP':'ftp anonymous ok',
'RDP':'port:3389 has_screenshot:true',
'OPEN_TELNET':'port:23 console gateway -password',
'APACHE_DIR_LIST':'http.title:"Index of /"',
'SPRING_BOOT':'http.favicon.hash:116323821',
'HP_PRINTERS':'"Serial Number:" "Built:" "Server: HP HTTP"',
'DOCKER_API':'"Docker Containers:" port:2375',
'ANDROID_ROOT_BRIDGE':'"Android Debug Bridge" "Device" port:5555',
'MONGO_EXPRESS_GUI':'"Set-Cookie: mongo-express=" "200 OK"',
'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',
'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:"Citrix NetScaler"',
'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 "3992"',
'CVE-2020-3452_CISCO_ASA_FTD':'200 "Set-Cookie: webvpn;"'
}
#OPTIONAL
#IP or cidr range constraint for searches that return list of IP addresses
#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)
#NET_RANGE = '0.0.0.0/0'
Run
cd ../
python3 shonydanza.py
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction.Legal DisclaimerThis project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
Download ShonyDanza (https://github.com/fierceoj/ShonyDanza)
___________________________
@hacking_Attack
@Hacking_Video
Download ShonyDanza (https://github.com/fierceoj/ShonyDanza)
___________________________
@hacking_Attack
@Hacking_Video
WonderHowTo
How to: Use ShonyDanza to Find a Target and an Exploit
Shodan is a search engine that collects information on internet-connected devices. It is an incredibly powerful tool for security researchers, penetration testers, hackers, and network defenders. T...
Unlucky Story, Judge Duplicate, and Only Get a Thank You. But It makes Me smile.
This is from my local bounty program in my country, Indonesia. I found some vulnerabilities in an e-commerce website and I think it would…Continue reading on Medium »
Read more...
This is from my local bounty program in my country, Indonesia. I found some vulnerabilities in an e-commerce website and I think it would…Continue reading on Medium »
Read more...
OSINT Research With Recon-ng
This piece goes over the basics of Recon-ng and how to use it to facilitate OSINT research! I’ll be covering two modules: google_site_web…Continue reading on Medium »
Read more...
This piece goes over the basics of Recon-ng and how to use it to facilitate OSINT research! I’ll be covering two modules: google_site_web…Continue reading on Medium »
Read more...
Ethical Hacking Roadmap and Resources
Checklist for the things that one has to learn while learning Linux: Shell, Navigation, File System, Redirection, Permissions, Processes…Continue reading on Medium »
Read more...
Checklist for the things that one has to learn while learning Linux: Shell, Navigation, File System, Redirection, Permissions, Processes…Continue reading on Medium »
Read more...
Playing around COM objects - PART 1
https://www.reddit.com/r/redteamsec/comments/rq0d4l/playing_around_com_objects_part_1/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://mohamed-fakroud.gitbook.io/red-teamings-dojo/playing-around-com-objects-part-1#before-hooking) [comments] (https://www.reddit.com/r/redteamsec/comments/rq0d4l/playing_around_com_objects_part_1/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/rq0d4l/playing_around_com_objects_part_1/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://mohamed-fakroud.gitbook.io/red-teamings-dojo/playing-around-com-objects-part-1#before-hooking) [comments] (https://www.reddit.com/r/redteamsec/comments/rq0d4l/playing_around_com_objects_part_1/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Playing around COM objects - PART 1
Posted in r/redteamsec by u/dmchell • 3 points and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Getting started in Info-sec…
Well, there is no “one-size fits all” though, but according to me getting hold of core concepts are a must.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Getting started in Info-sec…
Well, there is no “one-size fits all” though, but according to me getting hold of core concepts are a must.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Getting started in Info-sec…
Well, there is no “one-size fits all” though, but according to me getting hold of core concepts are a must. Mostly, people loose out basics…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
El error de Windows 11 causa problemas de reproducción del color en pantallas HDR
https://cdn-images-1.medium.com/max/1280/0*QhmC_N-Wo9RxpcYX
PUBLICADO EN 27 DICIEMBRE, 2021POR DPAB
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
El error de Windows 11 causa problemas de reproducción del color en pantallas HDR
https://cdn-images-1.medium.com/max/1280/0*QhmC_N-Wo9RxpcYX
PUBLICADO EN 27 DICIEMBRE, 2021POR DPAB
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
El error de Windows 11 causa problemas de reproducción del color en pantallas HDR
PUBLICADO EN 27 DICIEMBRE, 2021POR DPAB
Bug Bounty Programs for Blockchain Projects
https://web3-bug-bounty-platform.medium.com/bug-bounty-programs-for-blockchain-projects-88b3d3c04fc8?source=rss------bug_bounty-5
The list of methods and strategies applied by hackers to compromise the security of their targets is constantly expanding and they…Continue reading on Medium » (https://web3-bug-bounty-platform.medium.com/bug-bounty-programs-for-blockchain-projects-88b3d3c04fc8?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://web3-bug-bounty-platform.medium.com/bug-bounty-programs-for-blockchain-projects-88b3d3c04fc8?source=rss------bug_bounty-5
The list of methods and strategies applied by hackers to compromise the security of their targets is constantly expanding and they…Continue reading on Medium » (https://web3-bug-bounty-platform.medium.com/bug-bounty-programs-for-blockchain-projects-88b3d3c04fc8?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bug Bounty Programs for Blockchain Projects
The list of methods and strategies applied by hackers to compromise the security of their targets is constantly expanding and they actively…
hacking: security in practice
Is there a way to make sure that the receiver of a message knows a message is from the sender and not a middle man, without the receiver first contacting the sender?
If messages can only travel one way, can the receiver know its from the sender?
submitted by /u/Tonythesmartspornalt
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is there a way to make sure that the receiver of a message knows a message is from the sender and not a middle man, without the receiver first contacting the sender?
If messages can only travel one way, can the receiver know its from the sender?
submitted by /u/Tonythesmartspornalt
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is there a way to make sure that the receiver of a message knows a...
If messages can only travel one way, can the receiver know its from the sender?
Bug Bounty Programs for Blockchain Projects
The list of methods and strategies applied by hackers to compromise the security of their targets is constantly expanding and they…Continue reading on Medium »
Read more...
The list of methods and strategies applied by hackers to compromise the security of their targets is constantly expanding and they…Continue reading on Medium »
Read more...
hacking: security in practice
Script or method to Bypass Windows 10 Login
Looking to see if anyone has any sources or information to bypass windows 10 login. Side note, the device would have a fingerprint reader, perhaps that could be exploited? Open to direct messages incase you would rather not comment. Open to any suggestions that could perhaps give me some other ideas. Kali tools, bootable devices/autorun scripts, etc...
submitted by /u/HellishOccupant
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Script or method to Bypass Windows 10 Login
Looking to see if anyone has any sources or information to bypass windows 10 login. Side note, the device would have a fingerprint reader, perhaps that could be exploited? Open to direct messages incase you would rather not comment. Open to any suggestions that could perhaps give me some other ideas. Kali tools, bootable devices/autorun scripts, etc...
submitted by /u/HellishOccupant
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Script or method to Bypass Windows 10 Login
Looking to see if anyone has any sources or information to bypass windows 10 login. Side note, the device would have a fingerprint reader, perhaps...
How I hacked into one of India’s biggest online book stores(RCE and more)
This article is going to be about how I found my 1st RCE on one of India’s biggest e-commerce sites(+ a few more bugs).
Read more...
This article is going to be about how I found my 1st RCE on one of India’s biggest e-commerce sites(+ a few more bugs).
Read more...