KitPloit - PenTest Tools!
GoodHound - Uses Sharphound, Bloodhound And Neo4j To Produce An Actionable List Of Attack Paths For Targeted Remediation

https://blogger.googleusercontent.com/img/a/AVvXsEg24QMS2AdL-erTvNRg6HtAr7AQkHXM6VVbgeiaU5y_lVqXAN_nkvF2FgmNn1noYinLoTlt_opjbZf5hvNYE8QswpzeF0XyST4EaqMV6cQaHZX7L292XhWLeyTgBj6Qot_MQ0kzaGhpeHeGtJlrV_Ujad78BNBVuMkX88T9eozSF5S2VP0qKXhuz1i7=w640-h310
Attackers think in graphs, defenders think in actions, management think in charts.

GoodHound operationalises Bloodhound by determining the busiest paths to high value targets and creating actionable output to prioritise remediation of attack paths.
Usage

Quick Start

For a very quick start with most of the default options, make sure you have your neo4j server running and loaded with SharpHound data and run:

pip install goodhound
goodhound -p "neo4jpassword"


This will process the data in neo4j and output 3 csv reports in the current working directory.

https://blogger.googleusercontent.com/img/a/AVvXsEg24QMS2AdL-erTvNRg6HtAr7AQkHXM6VVbgeiaU5y_lVqXAN_nkvF2FgmNn1noYinLoTlt_opjbZf5hvNYE8QswpzeF0XyST4EaqMV6cQaHZX7L292XhWLeyTgBj6Qot_MQ0kzaGhpeHeGtJlrV_Ujad78BNBVuMkX88T9eozSF5S2VP0qKXhuz1i7=w640-h310

Documentation

All documentation can be found in the wiki

Acknowledgments

* The py2neo project which makes this possible.
* The PlumHound project which gave me the idea of creating something similar which suited my needs.
* The aclpwn for the idea around exploit cost.
* The Bloodhound Gang Slack channel for Cypher help.
* The BloodHound project for changing the world and for continuing their support for the Open-Source community even when having a commercial offering.
Download GoodHound

___________________________
@hacking_Attack
@Hacking_Video

GoodHound - Uses Sharphound, Bloodhound And Neo4j To Produce An Actionable List Of Attack Paths For Targeted Remediation

Attackers think in graphs, defenders think in actions, management think in charts. GoodHound operationalises Bloodhound by determining the busiest paths to high value targets and creating actionable output to prioritise remediation of attack paths. Usage Quick Start For a very quick start with most of the default options, make sure you have your neo4j server running and loaded with SharpHound data and run: pip install goodhoundgoodhound -p "neo4jpassword" This will process the data in neo4j and output 3 csv reports in the current working directory. Documentation All documentation can be found in the wiki Acknowledgments The py2neo project which makes this possible. The PlumHound project which gave me the idea of creating something similar which suited my needs. The aclpwn for the idea around exploit cost. The Bloodhound Gang Slack channel for Cypher help. The BloodHound project for changing the world and for continuing their support for the Open-Source community even when having a commercial offering. Download GoodHound
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Solution to my $20 egg hunt (Part 1)

Last week, I posted an article titled “There’s $20 hidden in this post”. Here’s how to solve the first part of it…Continue reading on Medium »
Read more...

Solution to my $20 egg hunt (Part 1)
https://ethr.medium.com/solution-to-my-20-egg-hunt-part-1-9bdafa060ba9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Last week, I posted an article titled “There’s $20 hidden in this post”. Here’s how to solve the first part of it…Continue reading on Medium » (https://ethr.medium.com/solution-to-my-20-egg-hunt-part-1-9bdafa060ba9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Swaggerhole - Recon tool

Hi,

I'd like to share with you a tool that i made. it's called Swaggerhole, this tool is made to automate the process of retrieving secrets in the public APIs on swaggerHub. This tool is multithreaded and pipe mode is available :)

You can easily install it with : pip3 install swaggerhole

Usage is pretty straight forward : swaggerhole -s test.com

Don't hesitate to share your thought on it and propose new amelioration ! :)

Link to the code : https://github.com/Liodeus/swaggerHole

Thanks !

submitted by /u/Liodeus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Trying to reverse-engineer my IoT devices - having trouble with TLS, pfSense, Wireshark

Hello! This is a network-related post. I'm trying to use pfSense, Squid proxy, and Wireshark, but I'm not an expert in any of these tools so I may be doing several things incorrectly.

I am trying to figure out how some Internet of Thing devices I have communicate. I'd eventually like to build my own API so that they can integrate directly with something like Home Assistant instead of depending on the vendor's cloud services. Part of that is figuring out the kinds of requests the devices send out and what the responses look like.

To this end, I've taken the following steps:

1. These IoT devices are WiFi. I have connected them to a WiFi interface that I have control over.
2. I use pfSense as my home router. I have installed Squid proxy and set it up as a transparent proxy server. It has SSL filtering enabled on the target interface that the IoT devices are on, and it is setup with a Certificate Authority. I set up a CA on pfSense using default settings.
3. I exported the private key from the pfSense CA.
4. While running a pfSense Packet Capture, I forced the IoT device to disconnect from the internet, and then reconnect. I downloaded this capture.
5. I loaded the packet capture into Wireshark. I think I have Wireshark setup with the key file... maybe? (I set the key file in Preferences \ RSA, and in Preferences \ Protocols \ TLS \ RSA Keys for all ports I'm aware of used by the IoT device IP address.
6. Wireshark is not decrypting the traffic. The log indicates several errors.

Those errors include things like:
dissect_ssl enter frame #42 (first time) packet_from_server: is from server - TRUE conversation = 000001CAA45A0A70, ssl_session = 000001CAA45A1A30 record: offset = 0, reported_length_remaining = 1448 ssl_try_set_version found version 0x0303 -> state 0x91 dissect_ssl3_record: content_type 22 Handshake decrypt_ssl3_record: app_data len 61, ssl state 0x91 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available dissect_ssl3_handshake iteration 1 type 2 offset 5 length 57 bytes ssl_try_set_version found version 0x0303 -> state 0x91 Calculating hash with offset 5 61 ssl_dissect_hnd_hello_common found SERVER RANDOM -> state 0x93 ssl_set_cipher found CIPHER 0xC02F TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 -> state 0x97 trying to use TLS keylog in PATH_TO_MY_FILE.key checking keylog line: -----BEGIN PRIVATE KEY----- unrecognized line checking keylog line: NEXT LINE OF THE KEY FILE unrecognized line checking keylog line: NEXT LINE OF THE KEY FILE unrecognized line (etc.)
and
dissect_ssl enter frame #75 (first time) packet_from_server: is from server - TRUE conversation = 000001CAA45A9C70, ssl_session = 000001CAA45AA330 record: offset = 0, reported_length_remaining = 69 ssl_try_set_version found version 0x0303 -> state 0x10 dissect_ssl3_record: content_type 23 Application Data decrypt_ssl3_record: app_data len 64, ssl state 0x10 packet_from_server: is from server - TRUE decrypt_ssl3_record: using server decoder decrypt_ssl3_record: no decoder available
I'm not sure what I'm doing wrong. Did I do something incorrectly with my proxy server? With Wireshark? With both?

submitted by /u/theTrebleClef
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
now that vanced is gone, any good replacement for it?

Well sadly vanced is gone, if you know any other good option for replace it so anyone can use it Thanks

submitted by /u/Sad-Shallot-9918
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ping and SYN flood attacks with Python and Scapy

https://cdn-images-1.medium.com/max/1800/1*s0UHxEWaTW5W3mUSd8XVtw.png
Continuing our exploration of DDoS attacks — this time SYN and ping flood

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Learning How To Ethical Hack — Step 6: Using two virtual machines to practice Netcat.

https://cdn-images-1.medium.com/max/2380/1*XO_JyhxjcPlJInxbQ9cRzA.png
This is my first technical blog post! Using two virtual machines (Kali and Windows) to learn how to use Netcat!

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethical Hacker — What Is It?

https://cdn-images-1.medium.com/max/870/1*wTWLrVoLUxwV-OKo2JZTeA.jpeg
Nowadays the society has a miss-conception of what an ethical hacker is due to the news and social media events that are commonly linked…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bursted! How Jane Lost Her $6,300 Website Last Month

https://cdn-images-1.medium.com/max/2600/0*QJcYffpsrsLh1btK
The Real Truth About Web Hosting Services.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
FFUF (Attacking web application with FUFF) — Academy Hackthebox

https://cdn-images-1.medium.com/max/1929/1*yU9QiuBlwrwe40HrsvCJPA.png
This post is my first walktrough documenting Hackthebox module, please be indulgent.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How to transition to a consulting role?
https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/

I’m looking to move into a pentesting consultant role. However, the problem that I am facing is that pretty much every consultancy wants you to either be a senior-level tester, have prior consulting experience, or both. I have 3 years of pentesting experience from my time in the military which had a heavy appsec and embedded focus, but I performed some full-scope network pentests as well. It’s been nearly a year since I left the military, and I landed in a cybersecurity role at a defense contractor where I was told that I would be building out a pentest/vulnerability assessment capability, but I have mostly been stuck doing ISSO/ISSM work, which I find mind-numbingly boring, hence I am looking for a new job. I want to make the switch back to pentesting. I know I would excel in a consultancy position because I have strong soft skills needed for a client-facing role and I thrive when I am constantly diving into new projects and challenges. The problem is, how do I get experience as a consultant when consultancies want you to already have experience as a consultant? Also, I view myself as more of a mid-level tester than a senior. I feel that the guidance and mentorship that I could get from a senior would be invaluable, but it seems that most companies just want a senior that they can immediately throw into the weeds on day one. I have been unsuccessful so far in my efforts, despite applying for quite a few roles and receiving a handful of interviews. Any advice on how to move into one of these roles is much appreciated. I am young, hungry, and eager to learn! To that end, if anyone knows of companies openly hiring mid-level roles or who are open to mid-level professionals, I would love to hear about them. Some additional background on myself: I have my OSCP, CISSP, TS Clearance, and B.S. in Computer Engineering. My career has consisted of about 3 years of pentesting, but nearly 6 years overall of InfoSec/cybersecurity related experience. Currently been spending plenty of my free time on Hack the Box to try and keep my skills sharp since they aren’t being actively utilized in my current role. I’ve thought about working on some bug bounties as well, but with my free time being limited, Hack the Box has seemed like a better tool to stay sharp because of the wide variety of machines and challenges that the platform offers. submitted by /u/Systemtechno (https://www.reddit.com/user/Systemtechno)
[link] (https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/) [comments] (https://www.reddit.com/r/Pentesting/comments/tbxwnk/how_to_transition_to_a_consulting_role/)

___________________________
@hacking_Attack
@Hacking_Video

How I access other domains in infinityfree.net using Directory Traversal
https://xkurtph.medium.com/how-i-access-other-domains-in-infinityfree-net-using-directory-traversal-4625692d6a2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.Continue reading on Medium » (https://xkurtph.medium.com/how-i-access-other-domains-in-infinityfree-net-using-directory-traversal-4625692d6a2d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I access other domains in infinityfree.net using Directory Traversal

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher.Continue reading on Medium »
Read more...

hacking: security in practice
Noob here... Bypassing payment gateways is still a thing in 2022 or the world has become too advanced for this?

If it's possible kindly guide me towards any tutorials... Prerequisites... And blogs so that i can learn more...

submitted by /u/girish_kumar_v
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video