Pwndora - Massive IPv4 Scanner, Find And Analyze Internet-Connected Devices In Minutes, Create Your Own IoT Search Engine At Home
http://www.kitploit.com/2022/01/pwndora-massive-ipv4-scanner-find-and.html

___________________________
@hacking_Attack
@Hacking_Video

Pwndora is a massive and fast IPv4 address range scanner, integrated with multi-threading. Using sockets, it analyzes which ports are open, and collects more information about targets, each result is stored in Elasticsearch. You can integrate with Kibana to be able to visualize and manipulate data, basically it's like having your own IoT search engine at home.
Features Port scanning (https://www.kitploit.com/search/label/Scanning) with different options and retrieve software banner information. Detect some web technologies running on servers, using Webtech integration. Retrieves IP geolocation (https://www.kitploit.com/search/label/Geolocation) from Maxmind free database, updated periodically. Possibility to take screenshots from hosts with HTTP using Rendertron (https://github.com/GoogleChrome/rendertron). Anonymous login detection on FTP servers Usage usage: CLI.py [-h] [-s START] [-e END] [-t THREADS] [--massive FILE] [--timeout TIMEOUT]
[--screenshot] [--top-ports] [--all-ports] [--update]
options:
-h, --help show this help message and exit
-s START Start IPv4 address
-e END End IPv4 address
-t THREADS Number of threads [Default: 50]
--massive FILE File path with IPv4 ranges
--timeout TIMEOUT Socket timeout [Default: 0.5]
--screenshot Take screenshots from hosts with HTTP
--top-ports Scan only 20 most used ports [Default]
--all-ports Scan 1000 most used ports
--update Update database from Wappalyzer
Examples If this is your first time running, you should use the --update argument. Scan only a single IPv4 address range: python3 CLI.py -s 192.168.0.0 -e 192.168.0.255 -t 150 --top-ports Scan from a text file with multiple IPv4 address ranges: python3 CLI.py --massive-scan Argentina.csv -t 200 --all-ports --screenshot If you use an excessive amount of threads, some ISPs may detect suspicious traffic and disconnect you from the network. To-do list Command-line interface (https://github.com/alechilczenko/Night-Crawler/blob/main/scanner/CLI.py) Execution time in terminal Logging (https://www.kitploit.com/search/label/Logging) module implementation, for exception handling Massive and automatic scanning Default FTP login detection (https://github.com/alechilczenko/Night-Crawler/blob/main/scanner/login.py) Automatic download of IP ranges by country (https://github.com/alechilczenko/Night-Crawler/blob/main/ranges/ranges.py) Web technologies detection Web application vulnerability (https://www.kitploit.com/search/label/Vulnerability) scan Find domains associated with IP Build image with Docker Honeypot detection RDP Screenshot Requirements pip install -r requirements.txt
Contributing Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change. Please make sure to update tests as appropriate. Contact alechilczenko@gmail.com (mailto:alechilczenko@gmail.com)

Download Pwndora (https://github.com/alechilczenko/pwndora)

___________________________
@hacking_Attack
@Hacking_Video

Best ways to practice pentesting.
https://www.reddit.com/r/Pentesting/comments/sa3d8l/best_ways_to_practice_pentesting/

What's the best way to practice pentesting as a beginner. Specifically in Web app pentesting. submitted by /u/Ameen_33 (https://www.reddit.com/user/Ameen_33)
[link] (https://www.reddit.com/r/Pentesting/comments/sa3d8l/best_ways_to_practice_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/sa3d8l/best_ways_to_practice_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Pwndora - Massive IPv4 Scanner, Find And Analyze Internet-Connected Devices In Minutes, Create Your Own IoT Search Engine At Home

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TOP PROGRAMMING LANGUAGES BEST FOR HACKING PRACTICES IN 2022

https://cdn-images-1.medium.com/max/900/0*oQ5M2dXHkJ5KkCex.jpg
Hackers use nothing but their fingers and top programming languages to hack data in seconds

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stay Safe From QR Code Malicious Act.

https://cdn-images-1.medium.com/max/2600/1*Ft2as8Q1dZEACktkoSzE2A.png
The usage of QR codes has become increasingly popular during the pandemic, but their abuse is a growing cyber threat.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Shibboleth Writeup

https://cdn-images-1.medium.com/max/600/0*g7tvAMICIm7xq4JM.png
So this is my write-up on one of the HackTheBox machines called Shibboleth. Let’s go!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kenobi Walkthrough | TryHackMe | Explained | Part 1

https://cdn-images-1.medium.com/max/1388/1*tswqDIR-qoARoE_u8aoFFA.jpeg
Goals: Enumerate Samba for shares, manipulate a vulnerable version of proftpd

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to solve Brooklyn nine-nine TryHackme Walkthrough

https://cdn-images-1.medium.com/max/2600/0*5L0XhfJbMVnvuswb
CTF-Walkthrough

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How can a ddos attack be dengerous

Ok so ddos makes bots causing traffic for the victim and make em unabel to use service with the specefic ip and DNS but how that can be dengerous?

submitted by /u/kami-zx2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anti-virus

I know this isn't hacking per say, but I am for any input on some good anti-virus protection for my PC. I don't work from it, but have some sensitive files which I do back up and I game. I was going back and forth between Northon 360 Life Lock and Bitdefender Premium Security. Looking for great pritection with smooth performance. Does anyone have a preference of which anti-virus software they use?

submitted by /u/Slavic_Stormcloak
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to troll a hacker who's trying to hack me

There's a hacker going around on Instagram stealing Spider-man related accounts, and all of us, as a community have informed each other of the situation. And the guy's trying to send me a link to click.

I wanna troll him quick and easy. Any ideas?

submitted by /u/Hazardous4
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My own review of SMS verification services 2022

I have been reading a lot in this community and I would like to bring something useful for you, I know that some of you will find it very useful and even save money and time looking for the right service.

Normally this type of service is very useful for websites that when we are going to register asks us to put a phone number to verify our account (As is the case of PayPal, Gmail, eBay, Google Voice, Tinder, etc....).

With this post the only thing I want to do is to share my experience and I want to make clear that I will only leave reviews on sites that are paid (because the free ones you can try on your own), but I will leave a link where you can find many free services.

In all 2021 I spent more than 500$ in sms verification for websites like Google Voice, eBay and Moneylion mainly, but also for other services like Survey Sites, Social Networks sites among others. So I have enough experience to give you my point of view.

I calculated the score based on the following criterio

* Real and high quality non-voip numbers
* Price
* Support
* Payment methods
* Trustpilot reviews
* Availability
* Diversity of countries
* Long and short term numbers

Without further ado, let's get started:

VerifyWithSMS – verifywithsms.com – Score: 6.5/10

Well, they usually offer non voip numbers of average quality, for services with little security and demand it works really well, almost always works on the first try, but the panorama changes drastically with very demanded services as is the case of Google Voice. Lately none of them work, even Google tells you: "We can not accept this phone number, try another one" fortunately they give you a ref--un if the text message does not arrive so all is not lost. For cases like PayPal let's say that out of every 10 numbers you request, 5 work and 5 don't, so you have to be patient.

The price is affordable but not cheap (compared to other providers). Most of their numbers cost between $1.14 and $1.5, but if you are going to buy in large quantities, you should consider it.

Support is a bit slow. They take 1-2 days to respond, sometimes less, but that's the average. They usually solve the problems in most cases and this is a relief, especially when a service is not working properly.

Payment methods are varied but they lack the important stuff: Pay pal, among others. Currently they have Perfectmoney, Coinpayments and Payeer. Not bad, but for me it is not enough, it is not always easy to get cryptocurrencies and it is a bit frustrating when I am in a hurry and need a virtual number.

On Trustpilot they leave a lot to be desired with a lot of negative reviews recently, they currently have a rating of 2.6 with 117 reviews. Their percentage of negative reviews is 49% and their percentage of positive reviews is 38%.

You can check the reviews here: https://www.trustpilot.com/review/verifywithsms.com

In terms of availability, they replenish their stock very quickly when they run out of simcar every 24 hours they add new phone numbers which is a great help for services in high demand and with little security such as Gmail, they offer US and UK virtual numbers, although their catalog for UK is quite limited compared to US, however at least they offer both options, but unfortunately they do not offer Long-term numbers. According to official information, their platform will soon be offering this feature.

In conclusion, it is not a bad provider as long as you want to verify simple services with little security, but definitely do not try it with Google Voice.

Major Phones – majorphones.com – Scores: 9.5/10

Their website is very intuitive and clear, the quality of the numbers is exceptionally good, out of 10 numbers I request, 9 work perfectly, even on sites like [...]

___________________________
@hacking_Attack
@Hacking_Video