Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Hey guys, funny story

Idk where to go for this but here it goes, some dude a discord server i was in was a pedo and sex offender, i reported him, but now he’s basically trying to pull my IP and find where i live. will deleting my discord account stop this

submitted by /u/Dr-Toast-man
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

reddit.com: over 18?

Reddit gives you the best of the internet in one place. Get a constantly updating feed of breaking news, fun stories, pics, memes, and videos just for you. Passionate about something niche? Reddit has thousands of vibrant communities with people that share…

15 viewsedited 11:39

Second-Order - Subdomain Takeover Scanner

Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs (and other data) that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1.17 is recommended. go install -v github.com/mhmdiaa/second-order@latest Docker docker pull mhmdiaa/second-order Command line options Directory to save results in (default "output") -threads int Number of threads (default 10)"> -target string Target URL -config string Configuration file (default "config.json") -depth int Depth to crawl (default 1) -header value Header name and value separated by a colon 'Name: Value' (can be used more than once) -insecure Accept untrusted SSL/TLS certificates -output string Directory to save results in (default "output") -threads int Number of threads (default 10) Configuration File Example configuration files are in config LogQueries: A map of tag-attribute queries that will be searched for in crawled pages. For example, "a": "href" means log every href attribute of every a tag. LogNon200Queries: A map of tag-attribute queries that will be searched for in crawled pages, and logged only if they contain a valid URL that doesn't return a 200 status code. LogInline: A list of tags whose inline content (between the opening and closing tags) will be logged, like title and script Output All results are saved in JSON files that specify what and where data was found The results of LogQueries are saved in attributes.json { "https://example.com/": { "inputname": "user", "id", "debug" }} The results of LogNon200Queries are saved in non-200-url-attributes.json { "https://example.com/": { "scriptsrc": "https://cdn.old\_abandoned\_domain.com/app.js", }} The results of LogInline are saved in inline.json { "https://example.com/": { "title": "Example - Home" }, "https://example.com/login": { "title": "Example - login" }} Usage Ideas This is a list of tips and ideas (not necessarily related to second-order subdomain takeover) on what to use Second Order for. Check for second-order subdomain takeover: takeover.json. (Duh!) Collect inline and imported JS code: javascript.json. Find where a target hosts static files cdn.json. (S3 buckets, anyone?) Collect names to build a tailored parameter bruteforcing wordlist: parameters.json. Feel free to contribute more ideas! References https://shubs.io/high-frequency-security-bug-hunting-120-days-120-bugs/#secondorder https://edoverflow.com/2017/broken-link-hijacking/ Download Second-Order
Read more...

___________________________
@hacking_Attack
@Hacking_Video

16 viewsedited 11:46

Hacking Articles Tips Tricks Videos Tutorials

Second-Order - Subdomain Takeover Scanner
http://www.kitploit.com/2022/01/second-order-subdomain-takeover-scanner.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Second-Order - Subdomain Takeover Scanner

13 viewsedited 12:39

Hacking Articles Tips Tricks Videos Tutorials

11 views12:39

Hacking Articles Tips Tricks Videos Tutorials

Scans web applications for second-order subdomain takeover (https://www.kitploit.com/search/label/Subdomain%20Takeover) by crawling (https://www.kitploit.com/search/label/Crawling) the app, and collecting URLs (and other data) that match certain rules, or respond in a certain way.
Installation From binary Download a prebuilt binary from the releases page (https://github.com/mhmdiaa/second-order/releases/latest) and unzip it. From source Go version 1.17 is recommended. go install -v github.com/mhmdiaa/second-order@latest
Docker docker pull mhmdiaa/second-order
Command line options Directory to save results in (default "output") -threads int Number of threads (default 10)"> -target string
Target URL
-config string
Configuration file (default "config.json")
-depth int
Depth to crawl (default 1)
-header value
Header name and value separated by a colon 'Name: Value' (can be used more than once)
-insecure
Accept untrusted SSL/TLS certificates
-output string
Directory to save results in (default "output")
-threads int
Number of threads (default 10)
Configuration File Example configuration files are in config (https://github.com/mhmdiaa/second-order/blob/master/config) LogQueries: A map of tag-attribute queries that will be searched for in crawled pages. For example, "a": "href" means log every href attribute of every a tag. LogNon200Queries: A map of tag-attribute queries that will be searched for in crawled pages, and logged only if they contain a valid URL that doesn't return a 200 status code. LogInline: A list of tags whose inline content (between the opening and closing tags) will be logged, like title and script Output All results are saved in JSON files that specify what and where data was found The results of LogQueries are saved in attributes.json {
"https://example.com/": {
"input[name]": [
"user",
"id",
"debug"
]
}
}
The results of LogNon200Queries are saved in non-200-url-attributes.json {
"https://example.com/": {
"script[src]": [
"https://cdn.old_abandoned_domain.com/app.js",
]
}
}
The results of LogInline are saved in inline.json {
"https://example.com/": {
"title": [
"Example - Home"
]
},
"https://example.com/login": {
"title": [
"Example - login"
]
}
}
Usage Ideas This is a list of tips and ideas (not necessarily related to second-order subdomain (https://www.kitploit.com/search/label/Subdomain) takeover) on what to use Second Order for. Check for second-order subdomain takeover: takeover.json (https://github.com/mhmdiaa/second-order/blob/master/config/takeover.json). (Duh!) Collect inline and imported JS code: javascript.json (https://github.com/mhmdiaa/second-order/blob/master/config/javascript.json). Find where a target hosts static files cdn.json (https://github.com/mhmdiaa/second-order/blob/master/config/cdn.json). (S3 buckets, anyone?) Collect names to build a tailored parameter bruteforcing (https://www.kitploit.com/search/label/Bruteforcing) wordlist: parameters.json (https://github.com/mhmdiaa/second-order/blob/master/config/parameters.json). Feel free to contribute more ideas! References https://shubs.io/high-frequency-security-bug-hunting-120-days-120-bugs/#secondorder https://edoverflow.com/2017/broken-link-hijacking/

Download Second-Order (https://github.com/mhmdiaa/second-order)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

12 viewsedited 12:39

About

Blog

Apps

Platform