Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Osmedeus - A Workflow Engine For Offensive Security

A Workflow Engine For Offensive Security Installation NOTE that you need some essential tools like curl, wget, git, zip and login as root to start bash -c "$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)" Build the engine from source Make sure you installed golang >= v1.17 mkdir -p $GOPATH/src/github.com/j3ssiegit clone --depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeuscd $GOPATH/src/github.com/j3ssie/osmedeusmake build Usage osmedeus scan -f flowName -t target osmedeus scan -m modulePath -T targetsFile osmedeus scan -f /path/to/flow.yaml -t target osmedeus scan -m /path/to/module.yaml -t target --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t target -l /tmp/log.log cat targets | osmedeus scan -f sample # Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt # Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug # Cloud Usage: osmedeus cloud -f flowName -t target osmedeus cloud -m modulePath -t target osmedeus cloud -c 10 -f flowName -T targetsFile osmedeus cloud --token xxx -G -c 10 -f flowName -T targetsFile osmedeus cloud --chunk -c 10 -f flowName -t targetsFile # Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'"># Scan Usage: osmedeus scan -f flowName -t target osmedeus scan -m modulePath -T targetsFile osmedeus scan -f /path/to/flow.yaml -t target osmedeus scan -m /path/to/module.yaml -t target --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t target -l /tmp/log.log cat targets | osmedeus scan -f sample# Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt# Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug# Cloud Usage: osmedeus cloud -f flowName -t target osmedeus cloud -m modulePath -t target osmedeus cloud -c 10 -f flowName -T targetsFile osmedeus cloud --token xxx -G -c 10 -f flowName -T targetsFile osmedeus cloud --chunk -c 10 -f flowName -t targetsFile# Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'  Community & Discussion Join Our Discord server here  Donation & Sponsor Check out for a couple of donation methods here to get a premium package License Osmedeus is made with by @j3ssiejjj and it is released under the MIT license.Download Osmedeus
Read more...

___________________________
@hacking_Attack
@Hacking_Video
A Workflow Engine For Offensive Security
Installation NOTE that you need some essential tools like curl, wget, git, zip and login (https://www.kitploit.com/search/label/Login) as root to start bash -c "$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)" Build the engine from source Make sure you installed golang >= v1.17 mkdir -p $GOPATH/src/github.com/j3ssie
git clone --depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeus
cd $GOPATH/src/github.com/j3ssie/osmedeus
make build Usage osmedeus scan -f [flowName] -t [target] osmedeus scan -m [modulePath] -T [targetsFile] osmedeus scan -f /path/to/flow.yaml -t [target] osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log cat targets | osmedeus scan -f sample # Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt # Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug # Cloud (https://www.kitploit.com/search/label/Cloud) Usage: osmedeus cloud -f [flowName] -t [target] osmedeus cloud -m [modulePath] -t [target] osmedeus cloud -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile] # Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs (https://www.kitploit.com/search/label/Logs) -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'"># Scan Usage:
osmedeus scan -f [flowName] -t [target]
osmedeus scan -m [modulePath] -T [targetsFile]
osmedeus scan -f /path/to/flow.yaml -t [target]
osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200'
osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
cat targets | osmedeus scan -f sample

# Practical Scan Usage:
osmedeus scan -T list_of_targets.txt -W custom_workspaces
osmedeus scan -t target.com -w workspace_name --debug
osmedeus scan -f general -t www.sample.com
osmedeus scan -f gdirb -T list_of_target.txt
osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt
osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt

# Provider Usage:
osmedeus provider build
osmedeus provider build --token xxx --rebuild --ic
osmedeus provider create --name 'sample'
osmedeus provider health --debug

# Cloud Usage:
osmedeus cloud -f [flowName] -t [target]
osmedeus cloud -m [modulePath] -t [target]
osmedeus cloud -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile]

# Utilities Usage:
osmedeus health
osmedeus version --json
osmedeus utils tmux ls
osmedeus utils tmux logs -A -l 10
osmedeus utils ps
osmedeus utils ps --proc 'jaeles'
osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60
osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'  Community & Discussion Join Our Discord (https://www.kitploit.com/search/label/Discord) server here (https://discord.gg/gy4SWhpaPU)  Donation & Sponsor Check out for a couple of donation methods here to get a premium package (https://docs.osmedeus.org/premium/)

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Curious about all the ongoing DDoS attacks due to the conflict in Ukraine? I made a custom status page to track the uptime of Russian services (details in comments)

About

For educational purposes only

I am in the infosec field and have seen many posts and trending projects related to DDoS attacks and Russian sites/services.

I wanted to monitor the trends of these services and see how they are fairing overtime so I created a custom status page with Uptime Kuma to monitor them.

https://borscht.birki.io/status

All the source code for this service is available here and you can request additional domains to be tracked as well -> https://github.com/GrantBirki/borscht

Disclaimer I do not support DDoS attacks as they are illegal in many countries. This page is purely for educational purposes and security minded folks that want to view how things are trending network attack wise over time.

TL;DR:

Status page website that tracks the uptime for over 400+ and counting Russian domains

Link: https://borscht.birki.io/status

The site may take a moment to load because there are so many domains

submitted by /u/LIL_BIRKI
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
What operating system do hackers use?

Is it possible to pull of impressive hacks using Windows 10? Could a hacker use windows 10 to crack at all or is it "Linux or bust"?

submitted by /u/Electronic_Ad_5076
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How broad is the skillset of the average hacker?

How broad is the knowledge of the average person working in the cybersecurity industry? Are people usually specialized in one specific area? Or are people a jack of all trades? How much time do people spend staying up to date or learning about new topics?

For context, I'm a high school student that has an interest in hacking. I've realized that there's no ceiling for the number of things you can learn. I assume that even if someone has learned almost everything, technology progresses so quickly that there's something new to figure out.

Every time I participate in something like picoCTF, there always seems to be yet another program or skill to be learned, so I was wondering specifically what people usually dedicate their time to learning

Thanks

submitted by /u/SpaceEnthusiast3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...
The Bad Twin: a peculiar case of JWT exploitation scenario

Hey Everyone,Continue reading on Medium »
Read more...