Kali Linux Tutorials
Pip-Audit : Audits Python Environments And Dependency Trees For Known Vulnerabilities

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
goCabrito : Super Organized And Flexible Script For Sending Phishing Campaigns

goCabrito is a super organized and flexible script for sending phishing campaigns. Features

* Sends to a single email
* Sends to lists of emails (text)
* Sends to lists emails with first, last name (csv)
* Supports attachments
* Splits emails in groups
* Delays sending emails between each group
* Support Tags to be placed and replaced in the message’s body
* Add {{name}} tag into the HTML message to be replaced with name (used with –to CSV).
* Add {{track-click}} tag to URL in the HTML message.
* Add {{track-open}} tag into the HTML message.
* Add {{num}} tag to be replaced with a random phone number.

* Supports individual profiles for different campaigns to avoid mistakes and confusion.
* Supports creating database for sent emails, each email with its unique hash (useful with getCabrito)
* Supports dry test, to run the script against your profile without sending the email to test your campaign before the launch.

Prerequisites

Install gems’ dependencies

sudo apt-get install build-essential libsqlite3-dev

Install gems

gem install mail sqlite3

Usage

goCabrito.rb — A simple yet flexible email sender.
Help menu:
-s, –server HOST:PORT SMTP server and its port.
e.g. smtp.office365.com:587
-u, –user USER Username to authenticate.
e.g. user@domain.com
-p, –pass PASS Password to authenticate
-f, –from EMAIL Sender’s email (mostly the same as sender email)
e.g. user@domain.com
-t, –to EMAIL|LIST|CSV The receiver’s email or a file list of receivers.
e.g. user@domain.com or targets.lst or targets.csv
The csv expected to be in fname,lname,email format without header.
-c, –copy EMAIL|LIST|CSV The CC’ed receiver’s email or a file list of receivers.
-b, –bcopy EMAIL|LIST|CSV The BCC’ed receiver’s email or a file list of receivers.
-B, –body MSG|FILE The mail’s body string or a file contains the body (not attachements.)
For click and message opening and other trackings:
Add {{track-click}} tag to URL in the HTML message.
eg: http://phisher.com/file.exe/{{track-click}}
Add {{track-open}} tag into the HTML message.
eg:Hi{{track-open}}
Add {{name}} tag into the HTML message to be replaced with name (used with –to CSV).
eg:Dear {{name}},
Add {{num}} tag to be replaced with a random phone number.
-a, –attachments FILE1,FILE2 One or more files to be attached seperated by comma.
-S, –subject TITLE The mail subject/title.
–no-ssl Do NOT use SSL connect when connect to the server (default: false).
-g, –groups NUM Number of receivers to send mail to at once. (default all in one group)
-d, –delay NUM The delay, in seconds, to wait after sending each group.
-P, –profile FILE A json file contains all the the above settings in a file
-D, –db FILE Create a sqlite database file (contains emails & its tracking hashes) to be imported by ‘getCabrito’ server.
–dry Dry test, no actual email sending.
-h, –help Show this message.
Usage:
goCabrito.rb
Examples:
$goCabrito.rb -s smtp.office365.com:587 -u user1@domain.com -p P@ssword1 \
-f user1@domain.com -t targets1.csv -c targets2.lst -b targets3.lst \
-B msg.html -S “This’s title” -a file1.docx,file2.xlsx -g 3 -d 10
$goCabrito.rb –profile prf.json

How you really use it?

* I create directory for each customer
* Under the customer’s directory, I create a directory for each campaign. This sub directory contains

* The profile
* The To, CC & BCC lists in CSV format
* The message body in HTML format

* I configure the profile and prepare my HTML
* Execute the campaign profile in drymode first (check the profile file dryvalue)

ruby goCabrito.rb -P CUSTOMER/3/camp3.json –dry

* I remove the --dryswitch and make sure the dryvalue is falsein the config file
* Send to a test email
* Send to t[...]

___________________________
@hacking_Attack
@Hacking_Video

he real lists Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Become a Good Hacker? The Fundamental Skills

These are the basics that every hacker should know before even trying to hack. Once you have a good grasp on everything in this section…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
✳️ Steps to Create A Super Secure Password To Defeat Hackers ➖➖➖➖➖➖➖➖➖➖➖➖➖ Step 1: Setup A Longer…

👉 Make sure to create password that's no shorter than 15 Characters

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Add Custom DNS Server On iPhone ➖➖➖➖➖➖➖➖➖➖➖➖ ⚜ All of the DNS related problems can be…

🔹 Step 1: First of all, open the ‘Settings’ app on your iOS device.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
✳️ How to Recover Data From Corrupted OS ➖➖➖➖➖➖➖➖➖➖➖➖➖ ⚜ We are going to use EaseUS data recovery…

🔹Step 1: First of all, launch EaseUS data recovery on a working computer. Select ‘USB Drive’ from the list and click on ‘Proceed’. Wait…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Linux Honeypot Deployed

https://cdn-images-1.medium.com/max/1242/1*w7ZauMlknVW4jQZ5ulndrw.png
Honeypots are usually hardware or software program that are deployed through the security departments of any organisation to study the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Complete guide to Perform External Penetration Testing Step by Step methods.

https://cdn-images-1.medium.com/max/600/0*2S6xVkXgz9eSdC8l.png
This article describes one of my numerous external penetration testing travels and how I compromised the organization.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
4 ESSENTIAL DATA PROTECTION METHODS

https://cdn-images-1.medium.com/max/600/0*BalgNFjfHj1d1E24
Before knowing the four essential data protection methods, you need to understand why privacy is important? This will make you realize the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The 10 Best Programming Languages for Hacking

https://cdn-images-1.medium.com/max/728/1*3Ejip7i_qdT7SnjZmjsLrg.jpeg
Before diving into this, it would be great to note that your programming of choice will much depend on the type of system you are…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to have the most secure hot wallet(s)?

https://cdn-images-1.medium.com/max/600/1*fhvCtiCUZCrjr4RT5wvHWQ.png
You may think that hot wallets are not safe in general, but this is not always the case. Actually they can be as safe as a cold wallet…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The 10 Best Programming Languages for Hacking
https://medium.com/@thenurhabib/the-10-best-programming-languages-for-hacking-126f184a6391?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Before diving into this, it would be great to note that your programming of choice will much depend on the type of system you are…Continue reading on Medium » (https://medium.com/@thenurhabib/the-10-best-programming-languages-for-hacking-126f184a6391?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Geowifi - Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases

https://blogger.googleusercontent.com/img/a/AVvXsEgQctqedwnCqwsLTpstL7YNEET5azHKUABoUEkyOIKUkmR1l7zCbHNS9ajEOahjr_5haGZH8pnFXV2qGXTwkNWG6Fdx-1W_kpbJAxNiwhdGF6He4TwmC_39sOpll1h6NghiedDo8RauUDVM6FDs4v_si_tXCjE_YglKiPpuizSm2hijHP0ydRXJGTxZ=w640-h348 Search WiFi geolocation data by BSSID and SSID on different public databases. Databases:* Wigle
* Apple
* OpenWifi
* Milnikov Prerequisites* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
*
⚠️ In order to use the Wigle service it is necessary to obtain an API and configure the utils/API.yamlfile replacing the value of the "wigle_auth" parameter for the "Encoded for use" data provided by Wigle. This is necessary for searching by SSID. Installation Use the package manager pip to install requirements. python3 -m pip install -r requirements.txtUsage usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, --help Show this help message and exit
-s SSID, --ssid SSID Search by SSID
-b BSSID, --bssid BSSID Search by BSSID
-j, --json Json output
-m, --map Map output * Search by BSSID: python3 geowifi.py -b BSSID * Search by SSID: python3 geowifi.py -s SSID It is possible to export the results in json format using the -jparameter and show the locations on html map using -m. ️
Map output examplehttps://blogger.googleusercontent.com/img/a/AVvXsEjJWrVu6EK-KeaTsZubzZFJPiSnj60F9fj2IJmQ-nk8eh0LiQKn0LUqLRqckM9k1UQ5Cx-ZNLk0XHpitJpgC6shJGMp6oVBls8aLyp3qsQw3-oKWQYasjrlmtE0CAISo32hl5OPLCbt8-REePb5rotciZQQL3AZiLgM-L0FSAqrgCzGQRZd7Hm7wSKE=w640-h262 
Json output example{
"data":{
"bssid":"A0:XX:XX:XX:6F:90",
"vendor":"TP-LINK TECHNOLOGIES CO.,LTD.",
"mac_type":"MA-L",
"wigle":{
"lat":00.000908922099,
"lon":00.000945220028
},
"apple":{
"lat":"not_found",
"lon":"not_found"
},
"openwifi":{
"lat":00.000808900099,
"lon":00.000845500028
},
"milnikov":{
"lat":"not_found",
"lon":"not_found"
}
}
}Mentions * This project uses some of the research and code used at iSniff-GPS.
* Thanks to Micah Hoffman for his attention and answers to my questions.
* Thanks to kennbro for lending me his scrupulous eyes to give me feedback. Download Geowifi

___________________________
@hacking_Attack
@Hacking_Video

Introduction to Simple Buffer Overflow
https://medium.com/@crazymart12_94950/introduction-to-simple-buffer-overflow-8a14e7a4196a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article will provide an overview of exploit development, with a focus on creating Simple Buffer Overflow exploits. I’ll try to keep…Continue reading on Medium » (https://medium.com/@crazymart12_94950/introduction-to-simple-buffer-overflow-8a14e7a4196a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video