A Workflow Engine For Offensive Security
Installation NOTE that you need some essential tools like curl, wget, git, zip and login (https://www.kitploit.com/search/label/Login) as root to start bash -c "$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)" Build the engine from source Make sure you installed golang >= v1.17 mkdir -p $GOPATH/src/github.com/j3ssie
git clone --depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeus
cd $GOPATH/src/github.com/j3ssie/osmedeus
make build Usage osmedeus scan -f [flowName] -t [target] osmedeus scan -m [modulePath] -T [targetsFile] osmedeus scan -f /path/to/flow.yaml -t [target] osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log cat targets | osmedeus scan -f sample # Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt # Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug # Cloud (https://www.kitploit.com/search/label/Cloud) Usage: osmedeus cloud -f [flowName] -t [target] osmedeus cloud -m [modulePath] -t [target] osmedeus cloud -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile] # Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs (https://www.kitploit.com/search/label/Logs) -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'"># Scan Usage:
osmedeus scan -f [flowName] -t [target]
osmedeus scan -m [modulePath] -T [targetsFile]
osmedeus scan -f /path/to/flow.yaml -t [target]
osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200'
osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
cat targets | osmedeus scan -f sample

# Practical Scan Usage:
osmedeus scan -T list_of_targets.txt -W custom_workspaces
osmedeus scan -t target.com -w workspace_name --debug
osmedeus scan -f general -t www.sample.com
osmedeus scan -f gdirb -T list_of_target.txt
osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt
osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt

# Provider Usage:
osmedeus provider build
osmedeus provider build --token xxx --rebuild --ic
osmedeus provider create --name 'sample'
osmedeus provider health --debug

# Cloud Usage:
osmedeus cloud -f [flowName] -t [target]
osmedeus cloud -m [modulePath] -t [target]
osmedeus cloud -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile]

# Utilities Usage:
osmedeus health
osmedeus version --json
osmedeus utils tmux ls
osmedeus utils tmux logs -A -l 10
osmedeus utils ps
osmedeus utils ps --proc 'jaeles'
osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60
osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'  Community & Discussion Join Our Discord (https://www.kitploit.com/search/label/Discord) server here (https://discord.gg/gy4SWhpaPU)  Donation & Sponsor Check out for a couple of donation methods here to get a premium package (https://docs.osmedeus.org/premium/)

___________________________
@hacking_Attack
@Hacking_Video

License Osmedeus is made with ♥ by @j3ssiejjj (https://twitter.com/j3ssiejjj) and it is released under the MIT license.
Download Osmedeus (https://github.com/j3ssie/osmedeus)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Curious about all the ongoing DDoS attacks due to the conflict in Ukraine? I made a custom status page to track the uptime of Russian services (details in comments)

About

For educational purposes only

I am in the infosec field and have seen many posts and trending projects related to DDoS attacks and Russian sites/services.

I wanted to monitor the trends of these services and see how they are fairing overtime so I created a custom status page with Uptime Kuma to monitor them.

https://borscht.birki.io/status

All the source code for this service is available here and you can request additional domains to be tracked as well -> https://github.com/GrantBirki/borscht

Disclaimer I do not support DDoS attacks as they are illegal in many countries. This page is purely for educational purposes and security minded folks that want to view how things are trending network attack wise over time.

TL;DR:

Status page website that tracks the uptime for over 400+ and counting Russian domains

Link: https://borscht.birki.io/status

The site may take a moment to load because there are so many domains

submitted by /u/LIL_BIRKI
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Aggregated Scripts, Books, and TTPs for Beginners and Experienced Cyber Folks

https://external-preview.redd.it/AP5-QX6ClsABl7AuDvMnhZo2aMPPnD9WTpgrqyFZsLI.jpg?width=320&crop=smart&auto=webp&s=3599287ce55bca3952bc643708c03206ab32bb21 submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What operating system do hackers use?

Is it possible to pull of impressive hacks using Windows 10? Could a hacker use windows 10 to crack at all or is it "Linux or bust"?

submitted by /u/Electronic_Ad_5076
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Protect Your JavaScript Code with Obfuscation Tool

https://cdn-images-1.medium.com/max/2600/0*gRjyWHeJsKtMecGr
A simple method to prevent people from stealing your work.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Here’s What Volodymyr Zelenskyy Must Do…

https://cdn-images-1.medium.com/max/2560/1*9MeU97KP8SDFkapIzZJ99w.png
Note to readers: this is dark sarcasm directed at the hypocrites called America and NATO who claim to support “freedom and democracy…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Pentesting Tools Every Hacker Needs

https://cdn-images-1.medium.com/max/1170/1*gEVtCxCkU5zUt7uKvvL_SQ.jpeg
If you’re new to using software for pentesting, here are some tools you need to know about.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How The Hacker Hack You Just with a Link

https://cdn-images-1.medium.com/max/2600/0*unceD6834UObLHlE
A guide about hacking with browser

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How broad is the skillset of the average hacker?

How broad is the knowledge of the average person working in the cybersecurity industry? Are people usually specialized in one specific area? Or are people a jack of all trades? How much time do people spend staying up to date or learning about new topics?

For context, I'm a high school student that has an interest in hacking. I've realized that there's no ceiling for the number of things you can learn. I assume that even if someone has learned almost everything, technology progresses so quickly that there's something new to figure out.

Every time I participate in something like picoCTF, there always seems to be yet another program or skill to be learned, so I was wondering specifically what people usually dedicate their time to learning

Thanks

submitted by /u/SpaceEnthusiast3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Api Security in CI/CD Process

https://cdn-images-1.medium.com/max/1381/1*hgEBpYPgdB8OZXJK2ORAOg.png
Buiding asecure api project is part of the job, how can we use the CI/CD process to ensure it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Spoofing file extensions — Ethical Hacking

https://cdn-images-1.medium.com/max/959/1*7Z8SsDMBiwanxnMewOvoaA.jpeg
File extension spoofing is a handy trick when creating trojans. I will be spoofing the ‘.exe’ extension to the ‘.jpg’ extension.

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

The Bad Twin: a peculiar case of JWT exploitation scenario

Hey Everyone,Continue reading on Medium »
Read more...

Going beyond the surface: Vulns that pay well

These days bug bounty hunters have been finding many low-hanging fruits and a lot of them want to go beyond those bugs. This blog is for…
Read more...

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

WhatsApp Bug Bounty: Bypassing biometric authentication using voip

Bypassing biometric authentication just by making a call and access the app completely
Read more...

hacking: security in practice
New to this whole thing

Can I set up hacking tools on Kali Linux (Raspberry Pi 4 B) like a Pineapple? I want to know if i can use the pineapple with the raspberry pi with kali?

submitted by /u/Corupted69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are brute force attacks obsolete nowadays?

I'm currently learning cybersecurity, and one of the things I've seen things like, rainbow tables, password encryption with keys, hashing with salt, and the list goes on.

Sites nowadays have so many things stop brute forcing, such as captcha, limited number of guesses to log-in, and minimum requirements to make a password. With that in mind, wouldn't a computer than can calculate I don't know many millions of passwords per second be rather... useless?

Now say, IF someone has your encrypted data, that would be only assuming said someone would have access to your personal computer files, at which point you should have a lot more reason to worry for that than your login in a random site. At this point, then yes it'd make sense to compute billions of passwords or numerous decryption programms to access your password, but other than that, I really see no use to how many possibilites a computer can come up with in the matter of seconds.

submitted by /u/UmPrataQualquer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are their any other sites like Norussian.tk?

I had that up on a few computers but I just checked and it looks like the site is now down. Or does it look like I have to use something like docker?

submitted by /u/MyAnimeAccount420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video