KitPloit - PenTest Tools!
PyShell - Multiplatform Python WebShell

https://blogger.googleusercontent.com/img/a/AVvXsEi0ZB4SbZnwWiFr0b5GhimZnxH2jDspxdeDaKMdh94iGpY93MNGW-z5VxJfZRggyhwZKVMJ07UrrL6jsneKcFOAuQg42QddV_2XvbuR_p5BMuCgM2doMfS5_NxxitaEhCGFGzTuQi7w-eaaIcO2JqWjUJPOFSL0imccvO3aINPhCLfZoIqHh2gLQd0Y=w640-h546 PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server.

Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements* Python 3
* Install requirements.txt DownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell UsageAuthorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h
██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░

-------------- by @JoelGMSec & @3v4Si0N ---------------

usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method

positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)

optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link:https://darkbyte.net/pyshell-multiplatform-python-webshell LicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n).

Special thanks to @Davidc96 for dynamic path function. ContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell

___________________________
@hacking_Attack
@Hacking_Video

WhatsApp Bug Bounty: Bypassing biometric authentication using voip
https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bypassing biometric authentication just by making a call and access the app completelyContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

PyShell - Multiplatform Python WebShell
http://www.kitploit.com/2022/03/pyshell-multiplatform-python-webshell.html

___________________________
@hacking_Attack
@Hacking_Video

PyShell is Multiplatform (https://www.kitploit.com/search/label/Multiplatform) Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server. Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell.
Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell
Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell (https://www.kitploit.com/search/label/PowerShell) command execution (Only on Windows hosts)">./PyShell.py -h


██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░

-------------- by @JoelGMSec & @3v4Si0N ---------------

usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method

positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)

optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts)
The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 (https://github.com/Davidc96) for dynamic (https://www.kitploit.com/search/label/Dynamic) path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec), @3v4si0n (https://twitter.com/3v4si0n) and on my blog darkbyte.net (https://darkbyte.net/).

Download PyShell (https://github.com/JoelGMSec/PyShell)

___________________________
@hacking_Attack
@Hacking_Video

PyShell - Multiplatform Python WebShell

PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server. Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements Python 3 Install requirements.txt Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell Usage Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h ██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒ ▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░ ▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░ ▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒ ▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░ ░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░ ░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ ░ -------------- by @JoelGMSec & @3v4Si0N ---------------usage: pyshell.py -h -a AUTH -c COOKIES -p PARAM -pi -su -ps url methodpositional arguments: url Webshell URL method HTTP Method to execute command (GET or POST)optional arguments: -h, --help show this help message and exit -a AUTH, --auth AUTH Authorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link: https://darkbyte.net/pyshell-multiplatform-python-webshell License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n). Special thanks to @Davidc96 for dynamic path function. Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell
Read more...

___________________________
@hacking_Attack
@Hacking_Video

WhatsApp Bug Bounty: Bypassing biometric authentication using voip

Bypassing biometric authentication just by making a call and access the app completelyContinue reading on InfoSec Write-ups »
Read more...

SSRFire - an automated SSRF finder

An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...

SSRFire - an automated SSRF finder

An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium »
Read more...

A short story of IDOR for your perspective

Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very…Continue reading on Medium »
Read more...

SSRFire - an automated SSRF finder
https://medium.com/@thenurhabib/ssrfire-an-automated-ssrf-finder-c6313b113f5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects.Continue reading on Medium » (https://medium.com/@thenurhabib/ssrfire-an-automated-ssrf-finder-c6313b113f5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

A short story of IDOR for your perspective
https://medium.com/@gguzelkokar.mdbf15/a-short-story-of-idor-for-your-perspective-c1e7580213b9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very…Continue reading on Medium » (https://medium.com/@gguzelkokar.mdbf15/a-short-story-of-idor-for-your-perspective-c1e7580213b9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

A short story of IDOR for your perspective

Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very…Continue reading on Medium »
Read more...

hacking: security in practice
The worst part about becoming a "hacker"

No one trusts you anymore...

submitted by /u/itsgonbeokayyeah
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The best laptop

Hello guys, i’m about to start studying ethical hacking/cybersecurity (obviously from the base first), but i’m about to get a new laptop. Can you guys help me choosing a good one for it? I live in brazil and we don’t have so many options like us

submitted by /u/pedrinhofelicio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video