Hacking Articles Tips Tricks Videos Tutorials

Rake is a utility that can be used to automate tasks. For a example, if program needs to be set up in a certain way. Rake could be used to…Continue reading on Medium » (https://medium.com/@michaelmeade3/hacking-with-rake-319005da6ad9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Hacking with Rakefile

Rake is a utility that can be used to automate tasks. For a example, if program needs to be set up in a certain way. Rake could be used to…

8 viewsedited 20:18

Hacking Articles Tips Tricks Videos Tutorials

NMAP Scan gets slower over time
https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/

___________________________
@hacking_Attack
@Hacking_Video

NMAP Scan gets slower over time

Posted in r/Pentesting by u/Flexerinoh • 3 points and 3 comments

8 viewsedited 20:36

Hacking Articles Tips Tricks Videos Tutorials

Hey there i'm a beginner in the field of pentesting and i'm starting out on easy boxes atm. I learned it's wise to scan ALL ports on the target so whenever i scan a target i run nmap like this: sudo nmap -A -p- IP -oN nmap_out https://preview.redd.it/tojhcs181vg81.png?width=675&format=png&auto=webp&s=cf44413330b9861ab081082afaee01d93514fa26 As you can see it gets slower over time, it will finish the scans after approximately 1 and a half hour +-.
Can you explain me why it's slows down after 90% and if there is a better way to scan my target? Thanks :) submitted by /u/Flexerinoh (https://www.reddit.com/user/Flexerinoh)
[link] (https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/) [comments] (https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/)

___________________________
@hacking_Attack
@Hacking_Video

9 viewsedited 20:36

Hacking Articles Tips Tricks Videos Tutorials

This media is not supported in your browser

VIEW IN TELEGRAM

9 views20:44

Hacking Articles Tips Tricks Videos Tutorials

GIF

KitPloit - PenTest Tools!
AWS-Loot - Pull Secrets From An AWS Environment

http://4.bp.blogspot.com/-GBWG_98dpKU/Yd0eNQaTu0I/AAAAAAAA8i8/FRaX4CPYMtoPGFgGrqHXPCGYUmz300RnACK4BGAYYCw/w640-h376/AWS-Loot_1_tool-741500.gif

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services.
Install

pip install -r requirements.txt

An AWS credential file (.aws/credentials) is required for authentication to the target environment

* Access Key
* Access Key Secret

How it works

Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets.

Usage

Python3 awsloot.py

Next Features

* Allow users to specify an ARN to scan
* Looter for additional services
Download AWS-Loot

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

10 viewsedited 20:44

Hacking Articles Tips Tricks Videos Tutorials

AWS-Loot - Pull Secrets From An AWS Environment
http://www.kitploit.com/2022/02/aws-loot-pull-secrets-from-aws.html

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

10 viewsedited 20:44

Hacking Articles Tips Tricks Videos Tutorials

10 views20:44

Hacking Articles Tips Tricks Videos Tutorials

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration (https://www.kitploit.com/search/label/Enumeration) over large sets of AWS instances and services.
Install pip install -r requirements.txt
An AWS credential file (.aws/credentials) is required for authentication (https://www.kitploit.com/search/label/Authentication) to the target environment Access Key Access Key Secret How it works Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy (https://www.kitploit.com/search/label/Entropy) strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda (https://www.kitploit.com/search/label/Lambda) looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans (https://www.kitploit.com/search/label/Scans) the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets. Usage Python3 awsloot.py
Next Features Allow users to specify an ARN to scan Looter for additional services

Download AWS-Loot (https://github.com/sebastian-mora/AWS-Loot)

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

11 viewsedited 20:44

About

Blog

Apps

Platform