hacking: security in practice
My account got hacked
Welp as the title says my google acc got hacked the password and reovery mail is changed what do I do now?
submitted by /u/LawStrict
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
My account got hacked
Welp as the title says my google acc got hacked the password and reovery mail is changed what do I do now?
submitted by /u/LawStrict
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
My account got hacked
Welp as the title says my google acc got hacked the password and reovery mail is changed what do I do now?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Narthex : Modular Personalized Dictionary Generator
Narthex (Greek: Νάρθηξ, νάρθηκας) is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalized dictionaries that can be used for password recovery & security assessment. The programs make use of Unix text streams for the collaboration with each other, according to the Unix philosophy. It is licensed under the GPL v3.0. Currently under development!
The tools
* nchance – A capitalization tool that appends the results to the bottom of the dictionary.
* ninc – A incrementation tool that multiplies alphabetical lines and appends an n++ at the end of each line.
* ncom – A combination tool that creates different combinations between the existing lines of the dictionary.
* nrev – A reversing tool, that appends the reserved versions of the lines at the end of the dictionary.
* nleet – A leetifier. Replaces characters with Leet equivalents, such as @ instead of a, or 3 instead of e.
* nclean – A tool for removing passwords that don’t meet your criteria (too short, no special characters etc.)
* napp – A tool that appends characters or words before or after the lines of the dictionary.
* nwiz – A wizard that asks for the infromation and combines the tools together to create a final dictionary.
Screenshots
https://blogger.googleusercontent.com/img/a/AVvXsEjhkqtTaQVdXiC5tXHT2j6cojQY6g5fo7FDNekBXgF2aEm8htKL9hWGLoDRbQCo8kEhg4M2o6XUOQ0fjbLQS-QtrzHNYgOC4tIlppQawBQTECMnG4hzqTpVxM4qway2ctLspoVoWRUCLJUwK33YV-86cSCvXHi1i24s3gJJR8pwb5BRXYw3Ysyh3K2O=s973
Dependencies
Narthex has no hard dependencies, however there are two building dependencies,
Install
In order to install, execute the following commands:
$ git clone https://github.com/MichaelDim02/Narthex.git && cd Narthex
$ sudo make install
Usage
For easy use, there is a wizard program, nwiz, that you can use. Just run
$ nwiz
And it will ask you for the target’s information & generate the dictionary for you.
Advanced Usage
If you want to make full use of Narthex, you can read the manpages of each tool. What they all do, really, is enhance small dictionaries. They are really minimal, and use Unix text streams to read and output data. For example, save a couple keywords into a textfile
$ cat words.txt | nhance -f | ncom | nrev | nleet | ninc 1 30 > dictionary.txt
Download
___________________________
@hacking_Attack
@Hacking_Video
Narthex : Modular Personalized Dictionary Generator
Narthex (Greek: Νάρθηξ, νάρθηκας) is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalized dictionaries that can be used for password recovery & security assessment. The programs make use of Unix text streams for the collaboration with each other, according to the Unix philosophy. It is licensed under the GPL v3.0. Currently under development!
The tools
* nchance – A capitalization tool that appends the results to the bottom of the dictionary.
* ninc – A incrementation tool that multiplies alphabetical lines and appends an n++ at the end of each line.
* ncom – A combination tool that creates different combinations between the existing lines of the dictionary.
* nrev – A reversing tool, that appends the reserved versions of the lines at the end of the dictionary.
* nleet – A leetifier. Replaces characters with Leet equivalents, such as @ instead of a, or 3 instead of e.
* nclean – A tool for removing passwords that don’t meet your criteria (too short, no special characters etc.)
* napp – A tool that appends characters or words before or after the lines of the dictionary.
* nwiz – A wizard that asks for the infromation and combines the tools together to create a final dictionary.
Screenshots
https://blogger.googleusercontent.com/img/a/AVvXsEjhkqtTaQVdXiC5tXHT2j6cojQY6g5fo7FDNekBXgF2aEm8htKL9hWGLoDRbQCo8kEhg4M2o6XUOQ0fjbLQS-QtrzHNYgOC4tIlppQawBQTECMnG4hzqTpVxM4qway2ctLspoVoWRUCLJUwK33YV-86cSCvXHi1i24s3gJJR8pwb5BRXYw3Ysyh3K2O=s973
Dependencies
Narthex has no hard dependencies, however there are two building dependencies,
GCCand Make, which are both required in order to easily compile and install the binaries, but not to run them.Install
In order to install, execute the following commands:
$ git clone https://github.com/MichaelDim02/Narthex.git && cd Narthex
$ sudo make install
Usage
For easy use, there is a wizard program, nwiz, that you can use. Just run
$ nwiz
And it will ask you for the target’s information & generate the dictionary for you.
Advanced Usage
If you want to make full use of Narthex, you can read the manpages of each tool. What they all do, really, is enhance small dictionaries. They are really minimal, and use Unix text streams to read and output data. For example, save a couple keywords into a textfile
words.txtin a different line each, and run the following$ cat words.txt | nhance -f | ncom | nrev | nleet | ninc 1 30 > dictionary.txt
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Narthex : Modular Personalized Dictionary Generator
Narthex (Greek: Νάρθηξ, νάρθηκας) is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell.
WhatsApp Bug Bounty: Bypassing biometric authentication using voip
Bypassing biometric authentication just by making a call and access the app completelyContinue reading on Medium »
Read more...
Bypassing biometric authentication just by making a call and access the app completelyContinue reading on Medium »
Read more...
Hacking on Medium
Hacking the Vaccine machine— Hack the box
https://cdn-images-1.medium.com/max/1011/0*Ob4VCcxY5lM18wGT
In this article we will be hacking the Vaccine machine in Hack The Box. I assume you have a hack the box account.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking the Vaccine machine— Hack the box
https://cdn-images-1.medium.com/max/1011/0*Ob4VCcxY5lM18wGT
In this article we will be hacking the Vaccine machine in Hack The Box. I assume you have a hack the box account.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking the Vaccine machine— Hack the box
In this article we will be hacking the Vaccine machine in Hack The Box. I assume you have a hack the box account.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
PyShell - Multiplatform Python WebShell
https://blogger.googleusercontent.com/img/a/AVvXsEi0ZB4SbZnwWiFr0b5GhimZnxH2jDspxdeDaKMdh94iGpY93MNGW-z5VxJfZRggyhwZKVMJ07UrrL6jsneKcFOAuQg42QddV_2XvbuR_p5BMuCgM2doMfS5_NxxitaEhCGFGzTuQi7w-eaaIcO2JqWjUJPOFSL0imccvO3aINPhCLfZoIqHh2gLQd0Y=w640-h546 PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server.
Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements* Python 3
* Install requirements.txt DownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:
Special thanks to @Davidc96 for dynamic path function. ContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.
For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell
___________________________
@hacking_Attack
@Hacking_Video
PyShell - Multiplatform Python WebShell
https://blogger.googleusercontent.com/img/a/AVvXsEi0ZB4SbZnwWiFr0b5GhimZnxH2jDspxdeDaKMdh94iGpY93MNGW-z5VxJfZRggyhwZKVMJ07UrrL6jsneKcFOAuQg42QddV_2XvbuR_p5BMuCgM2doMfS5_NxxitaEhCGFGzTuQi7w-eaaIcO2JqWjUJPOFSL0imccvO3aINPhCLfZoIqHh2gLQd0Y=w640-h546 PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server.
Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements* Python 3
* Install requirements.txt DownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:
git clone https://github.com/JoelGMSec/PyShell UsageAuthorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h
██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░
-------------- by @JoelGMSec & @3v4Si0N ---------------
usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method
positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)
optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link:https://darkbyte.net/pyshell-multiplatform-python-webshell LicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n).Special thanks to @Davidc96 for dynamic path function. ContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.
For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
PyShell - Multiplatform Python WebShell
WhatsApp Bug Bounty: Bypassing biometric authentication using voip
https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
WhatsApp Bug Bounty: Bypassing biometric authentication using voip
Bypassing biometric authentication just by making a call and access the app completely
Bypassing biometric authentication just by making a call and access the app completelyContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
WhatsApp Bug Bounty: Bypassing biometric authentication using voip
Bypassing biometric authentication just by making a call and access the app completely
PyShell - Multiplatform Python WebShell
http://www.kitploit.com/2022/03/pyshell-multiplatform-python-webshell.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/03/pyshell-multiplatform-python-webshell.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
PyShell - Multiplatform Python WebShell
PyShell is Multiplatform (https://www.kitploit.com/search/label/Multiplatform) Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server. Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell.
Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell
Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell (https://www.kitploit.com/search/label/PowerShell) command execution (Only on Windows hosts)">./PyShell.py -h
██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░
-------------- by @JoelGMSec & @3v4Si0N ---------------
usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method
positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)
optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts)
The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 (https://github.com/Davidc96) for dynamic (https://www.kitploit.com/search/label/Dynamic) path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec), @3v4si0n (https://twitter.com/3v4si0n) and on my blog darkbyte.net (https://darkbyte.net/).
Download PyShell (https://github.com/JoelGMSec/PyShell)
___________________________
@hacking_Attack
@Hacking_Video
Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell
Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell (https://www.kitploit.com/search/label/PowerShell) command execution (Only on Windows hosts)">./PyShell.py -h
██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░
-------------- by @JoelGMSec & @3v4Si0N ---------------
usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method
positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)
optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts)
The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 (https://github.com/Davidc96) for dynamic (https://www.kitploit.com/search/label/Dynamic) path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec), @3v4si0n (https://twitter.com/3v4si0n) and on my blog darkbyte.net (https://darkbyte.net/).
Download PyShell (https://github.com/JoelGMSec/PyShell)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
PyShell - Multiplatform Python WebShell
PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server. Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h ██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒ ▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░ ▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░ ▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒ ▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░ ░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░ ░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ -------------- by @JoelGMSec & @3v4Si0N ---------------usage: pyshell.py -h -a AUTH -c COOKIES -p PARAM -pi -su -ps url methodpositional arguments: url Webshell URL method HTTP Method to execute command (GET or POST)optional arguments: -h, --help show this help message and exit -a AUTH, --auth AUTH Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 for dynamic path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell
Read more...
___________________________
@hacking_Attack
@Hacking_Video
PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server. Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h ██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒ ▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░ ▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░ ▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒ ▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░ ░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░ ░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ -------------- by @JoelGMSec & @3v4Si0N ---------------usage: pyshell.py -h -a AUTH -c COOKIES -p PARAM -pi -su -ps url methodpositional arguments: url Webshell URL method HTTP Method to execute command (GET or POST)optional arguments: -h, --help show this help message and exit -a AUTH, --auth AUTH Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 for dynamic path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell
Read more...
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - JoelGMSec/PyShell: Multiplatform Python WebShell
Multiplatform Python WebShell. Contribute to JoelGMSec/PyShell development by creating an account on GitHub.
WhatsApp Bug Bounty: Bypassing biometric authentication using voip
Bypassing biometric authentication just by making a call and access the app completelyContinue reading on InfoSec Write-ups »
Read more...
Bypassing biometric authentication just by making a call and access the app completelyContinue reading on InfoSec Write-ups »
Read more...
SSRFire - an automated SSRF finder
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...
SSRFire - an automated SSRF finder
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...
A short story of IDOR for your perspective
Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very…Continue reading on Medium »
Read more...
Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very…Continue reading on Medium »
Read more...
SSRFire - an automated SSRF finder
https://medium.com/@thenurhabib/ssrfire-an-automated-ssrf-finder-c6313b113f5?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@thenurhabib/ssrfire-an-automated-ssrf-finder-c6313b113f5?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
SSRFire - an automated SSRF finder
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium » (https://medium.com/@thenurhabib/ssrfire-an-automated-ssrf-finder-c6313b113f5?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
SSRFire - an automated SSRF finder
An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.