unlein said the security issues with dompdf offers secure development lessons for other software developers.

“A vulnerability like the one now in dompdf can happen quite easily in this intersection of different technologies (PHP, PDF, HTML, CSS, fonts, local, and remote files),” Bräunlein said.

“As a defense-in-depth mechanism, it can therefore make sense to run the PDF generation as isolated as possible from other components of the system.” See Also: Recon Tool: Uncover Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/79ohvicqaKcVP9KT2mDdTH-90x90.jpg Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Lapsus-group-has-hacked-Ubisoft-as-well-90x90.jpg Ubisoft has confirmed it was hacked by Lapsus$ group6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/raccoon-stealer-90x90.jpg Raccoon Stealer Crawls Into Telegram7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/kali-bright-90x90.jpg Kali Unkaputtbar – a new feature on Kali Linux1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/wolf-in-sheps-clothing-2-scaled-e1646927438585-90x90.jpeg Malware Posing as Russia DDoS Tool Bites Ukraine Hackers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-90x90.jpg Agencies in Ukraine targeted with MicroBackdoor malware2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/NINTCHDBPICT000622539771-90x90.png Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/linux-kernel-double-free-vulnerability-90x90.png New Linux bug gives root on all major distros, exploit released2 weeks ago
The post Workaround offered for unpatched HTML-to-PDF rendering vulnerability first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

FILE UPLOAD RESTRICTION BYPASS

We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...

FILE UPLOAD RESTRICTION BYPASS
https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5

We all might have faced a file upload functionality while testing a site,
Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium » (https://abhishekgk.medium.com/file-upload-restriction-bypass-4d2932005dcc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SentryPeer : A Distributed Peer To Peer List Of Bad Actor IP Addresses And Phone Numbers Collected

SentryPeer is basically a fraud detection tool. It lets bad actors try to make phone calls and saves the IP address they came from and number they tried to call. Those details are then used to block them at the service providers network and the next time a user/customer tries to call a collected number, it’s blocked.

Traditionally this data is shipped to a central place, so you don’t own the data you’ve collected. This project is all about Peer to Peer sharing of that data. The user owning the data and various Service Provider / Network Provider related feeds of the data is the key bit for me. I’m sick of all the services out there that keep it and sell it. If you’ve collected it, you should have the choice to keep it and/or opt in to share it with other SentryPeer community members via p2p methods.

The sharing part…you only get other users’ data if you share yours. That’s the key. It could be used (the sharing of data logic/feature) in many projects too if I get it right. ScreenshotsHere’s a mockup of the web UI which is subject to change.
https://blogger.googleusercontent.com/img/a/AVvXsEjNoYsTMEwuC_5RVH-ksGIFF1STQM5VH2hlAfgOCnIXcGu8bLrJ_4vjXXhEm6Ld7tixdkS0koFcJa88Dw6rMGgj-0J1pFKcvGE8UblQzTTXkl70aGspXxWCTO7Gz3e5HEXKx08IBsBGXHK0euvV45TsLzMsFVHYbdzSKhYiEWjO8zejh6oFlC75s_JL=s1427 Goals* All code Free/Libre and Open Source Software
* FAST
* User owns their data
* User can submit their own data if they want to – opt out (default is to submit data)
* User gets other users’ data (Tit for tat?) ONLY IF they opt in to submit their data to the pool (DHT? – need to do a PoC)
* Embedded Distributed Hash Table (DHT) node using OpenDHT (-p cli option)
* Peer to Peer sharing of collected bad_actors using OpenDHT (default on)
* Peer to Peer data replication to receive collected bad_actors using OpenDHT (default on)
* Multithreaded
* UDP transport
* TCP transport
* TLS transport
* JSON logging to a file
* Data is max 7(?) days old as useless otherwise
* SIP mode can be disabled. This allows you to run SentryPeer in API mode or DHT mode only etc. i.e. not as a honeypot, but as a node in the SentryPeer community or to just serve replicated data
* SIP responsive mode can be enabled to collect data – cli / env flag
* Local data copy for fast access – cli / env db location flag
* Local API for fast access – cli / env flag
* Local Web GUI for fast access – cli / env flag
* Query API for IP addresses of bad actors
* Query API for IPSET of bad actors
* Query API for a particular IP address of a bad actor
* Query API for attempted phone numbers called by bad actors
* Query API for an attempted phone number called by a bad actor
* Fail2Ban support via syslogas per feature request
* Local sqlite database – feature / cli flag
* Analytics – opt in
* SDKs/libs for external access – CGRateS to start with or our own firewall with nftables
* Small binary size for IoT usage
* Cross-platform
* Firewall options to use distributed data in real time – DHT?
* Container on Docker Hub for latest build
* BGP agent to peer with for blackholing collected IP addresses (similar to Team Cymru Bogon Router Server Project)
* SIP agent to return 404 or default destination for SIP redirects DesignTBD https://s.w.org/images/core/emoji/13.1.0/72x72/1f642.png

I started this because I wanted to do C network programming as all the projects I use daily are in C like PostgreSQL, OpenLDAP, FreeSWITCH, OpenSIPS, Asterisk etc. See Episode 414: Jens Gustedt on Modern C for why C is a good choice. For those interested, see my full podcast show list (https://www.se-radio.net/team/gavin-henry/) for Software Engineering Radio Talks* TADSummit 2021 – https://blog.tadsummit.com/2021/11/17/sentrypeer/
[...]

___________________________
@hacking_Attack
@Hacking_Video

* CommCon 2021 – https://2021.commcon.xyz/talks/sentrypeer-a-distributed-peer-to-peer-list-of-bad-ip-addresses-and-phone-numbers-collected-via-a-sip-honeypot DockerYou can run the latest version of SentryPeer with Docker. The latest version is available from Docker Hub. Or build yourself:

sudo docker build -t sentrypeer .
sudo docker run -d -p 5060:5060 -p 8082:8082 sentrypeer:latest

Then you can check at http://localhost:8082/ip-addressesand http://localhost:5060/health-checkto see if it’s running. Environment VariablesENV SENTRYPEER_DB_FILE=/my/location/sentrypeer.db
ENV SENTRYPEER_API=1
ENV SENTRYPEER_WEB_GUI=1
ENV SENTRYPEER_SIP_RESPONSIVE=1
ENV SENTRYPEER_SIP_DISABLE=1
ENV SENTRYPEER_SYSLOG=1
ENV SENTRYPEER_PEER_TO_PEER=1
ENV SENTRYPEER_JSON_LOG=1
ENV SENTRYPEER_JSON_LOG_FILE=/my/location/sentrypeer_json.log
ENV SENTRYPEER_VERBOSE=1
ENV SENTRYPEER_DEBUG=1

Either set these in the Dockerfile or in your Dockerfile.envfile or docker run command. InstallationDebian or Fedora packages are always available from the release page for the current version of SentryPeer:

https://github.com/SentryPeer/SentryPeer/releases Ubuntu PackageYou can install SentryPeer from our Ubuntu PPD which is currently for Ubuntu 20 LTS (Focal Fossa):

sudo add-apt-repository ppa:gavinhenry/sentrypeer
sudo apt-get update

This PPA can be added to your system manually by copying the lines below and adding them to your system’s software sources:

deb https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main
deb-src https://ppa.launchpadcontent.net/gavinhenry/sentrypeer/ubuntu focal main Building from sourceYou have two options for installation from source. CMake or autotools. Autotools is recommended at the moment. A release is an autotools build.

If you are a Fedora user, you can install this via Fedora copr:

https://copr.fedorainfracloud.org/coprs/ghenry/SentryPeer/

If you are going to build from this repository, you will need to have the following installed:

* git, autoconf, automakeand autoconf-archive(Debian/Ubuntu)
* libosip2-dev(Debian/Ubuntu) or libosip2-devel(Fedora)
* libsqlite3-dev(Debian/Ubuntu) or sqlite-devel(Fedora)
* uuid-dev(Debian/Ubuntu) or libuuid-devel(Fedora)
* libmicrohttpd-dev(Debian/Ubuntu) or libmicrohttpd-devel(Fedora)
* libjansson-dev(Debian/Ubuntu) or jansson-devel(Fedora)
* libpcre2-dev(Debian/Ubuntu) or pcre2-devel(Fedora)
* libcurl-dev(Debian/Ubuntu) or libcurl-devel(Fedora)
* libcmocka-dev(Debian/Ubuntu) or libcmocka-devel(Fedora) – for unit tests

Debian/Ubuntu:

sudo apt-get install git build-essential autoconf-archive autoconf automake libosip2-dev libsqlite3-dev \
libcmocka-dev uuid-dev libcurl-dev libpcre2-dev libjansson-dev libmicrohttpd-dev

Fedora:

sudo dnf install git autoconf automake autoconf-archive libosip2-devel libsqlite3-devel libcmocka-devel \
libuuid-devel libmicrohttpd-devel jansson-devel libcurl-devel pcre2-devel Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SocialPwned : An OSINT Tool That Allows To Get The Emails, From A Target, Published In Social Networks

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt.

The purpose of this tool is to facilitate the search for vulnerable targets during the phase of Footprinting in an Ethical Hacking. It is common for employees of a company to publish their emails in social networks, either professional or personal, so if these emails have their credentials leaked, it is possible that the passwords found have been reused in the environment to be audited. If it’s not the case, at least you would have an idea of the patterns that follow this target to create the passwords and be able to perform other attacks with a higher level of effectiveness.

SocialPwned uses different modules:

* Instragram: Making use of the unofficial Instagram API from @LevPasha, different methods were developed to obtain the emails published by users. An Instagram account is required.
* Linkedin: Using @tomquirk’s unofficial Linkedin API, different methods were developed to obtain a company’s employees and their contact information (email, twitter or phone). In addition, it is possible to add the employees found to your contacts, so that you can later have access to their network of contacts and information. This module also generates different files with combinations of possible usernames for an organization. A Linkedin account is required.
* Twint: Using Twint from @twintproject you can track all the Tweets published by a user looking for some email. A Twitter account is not necessary.
* PwnDB: Inspired by the tool PwnDB created by @davidtavarez a module has been developed that searches for all credential leaks from the emails found. In addition, for each email a POST request is made to HaveIBeenPwned to find out the source of the leak.
* Dehashed: Provides clear passwords and also the hash of passwords that could not be cracked. It is necessary to pay at Dehashed to get an API Key, but it can be a good alternative when PwnDB is slow or does not provide results.
* GHunt: Using the tool created by @mxrch, GHunt, it is possible to obtain information related to Google mails, e.g. reviews, profile picture, possible location or public calendar events.

Installation

Easy way

$ service docker start
$ docker pull mrtuxx/socialpwned
$ docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –help Manual wayThe installation of Tor depends on your system. On a Debian:

$ sudo apt-get install tor
$ /etc/init.d/tor start

Clone the repository using Git:

$ git clone https://github.com/MrTuxx/SocialPwned.git
$ cd SocialPwned
$ sudo pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint
$ sudo pip3 install -r requirements.txt
$ sudo python3 socialpwned.py –credentials credentials.json –help UsageTo make use of the Instagram and Linkedin features you need to have an account created on each of the social networks. The credentials must be indicated in a JSON file:

{
“instagram”:{
“username”:”username”,
“password”:”password”
},
“linkedin”:{
“email”:”email”,
“password”:”password”
},
“ghunt”:{
“SID”:”SID”,
“SSID”:”SSID”,
“APISID”:”APISID”,
“SAPISID”:”SAPISID”,
“HSID”:”HSID”
},
“dehashed”:{
“email”:”email”,
“apikey”:”apikey”
}
}

NOTE: The cookies necessary for the GHunt module to work can be obtained by following the steps explained here

usage: socialpwned.py [-h] –credentials CREDENTIALS [–pwndb] [–tor-proxy PROXY] [–instagram] [–info QUERY]
[–location LOCATION_ID][...]

___________________________
@hacking_Attack
@Hacking_Video

[–hashtag-ig QUERY] [–target-ig USERNAME] [–search-users-ig QUERY]
[–my-followers] [–my-followings] [–followers-ig] [–followings-ig] [–linkedin]
[–company COMPANY_ID] [–search-companies QUERY] [–employees] [–my-contacts]
[–user-contacts USER_ID] [–search-users-in QUERY] [–target-in USERNAME] [–add-contacts]
[–add-a-contact USER_ID] [–twitter] [–limit LIMIT] [–year YEAR] [–since DATE]
[–until DATE] [–profile-full] [–all-tw] [–target-tw USERNAME] [–hashtag-tw USERNAME]
[–followers-tw] [–followings-tw] [–ghunt] [–email-gh email@gmail.com] [–dehashed]
[–email-dh email@gmail.com]

Output format

Each time SocialPwned is run, a directory with the following format will be generated:

output
└── session_year_month_day_time
├── dehashed
│   ├── raw_dehashed.txt
│   └── socialpwned_dehashed.txt
├── emails
│   └── socialpwned_emails.txt
├── instagram
│   └── socialpwned_instagram.txt
├── linkedin_userames
│   ├── first.last.txt
│   ├── firstl.txt
│   ├── first.txt
│   ├── f.last.txt
│   ├── flast.txt
│   ├── lastf.txt
│   └── rawnames.txt
├── pwndb
│   ├── passwords_pwndb.txt
│   ├── pwndb.txt
│   └── socialpwned_pwndb.txt
├── socialpwned.json
└── twitter
└── socialpwned_twitter.txt

* The dehashed directory contains the raw API information in one file and the email-related passwords in another.
* The pwndb directory contains a file with only the passwords, another one with the passwords and related emails and finally a file that adds the sources of the leaks.
* The emails directory contains a file with all the emails obtained.
* The instagram directory contains a file with user accounts and their related email addresses.
* The twitter directory contains a file with user accounts and their related email addresses.
* The linkedin directory contains different files with combinations of user names obtained. Inspired by the linkedin2username tool.
* The socialpwned.json file provides in JSON format all the information obtained by SocialPwned and its different modules. Where the ID of each item is the email, in case you have information about a user but not his email, the ID will be his unique social network identifier.

Basic Examples and Combos

Instagram

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –info España

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –location 832578276

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –hashtag-ig someHashtag –pwndb

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –pwndb

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –pwndb

Linkedin

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target”

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target” –employees –pwndb

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees [...]

___________________________
@hacking_Attack
@Hacking_Video

–pwndb

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees –add-contacts

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –pwndb

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –add-contacts

Twitter

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –hashtag-tw someHashtag –pwndb –limit 200 –dehashed

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –pwndb –dehashed –ghunt

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –followers-tw –followings-tw –pwndb

GHunt

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –ghunt –email-gh “email@example.com”

Dehashed

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –dehashed –email-dh “email@example.com”

Combos

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –linkedin –company 123456789 –employees –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed

docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –linkedin –target-in username –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed Download

___________________________
@hacking_Attack
@Hacking_Video

($$$) Broken Authentication and IDOR at [REDACTED]

Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...

Hacking on Medium
Don’t know how to step into cybersecurity? we got answers for your queries.

https://cdn-images-1.medium.com/max/1080/1*IhbdyP8wisonFZQJJ6LmDg.png
We write about various cybersecurity and ethical hacking topics which will help you take your hacking skills to next level.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
($$$) Broken Authentication and IDOR at [REDACTED]

https://cdn-images-1.medium.com/max/927/1*BemPGe0ReX258UZerWIObw.png
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Oh365UserFinder - Python3 O365 User Enumeration Tool
http://www.kitploit.com/2022/03/oh365userfinder-python3-o365-user.html

___________________________
@hacking_Attack
@Hacking_Video

Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain.
Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email (https://www.kitploit.com/search/label/Email) account -r, --read - Reads from a text file containing emails (https://www.kitploit.com/search/label/Emails) (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft (https://www.kitploit.com/search/label/Microsoft) does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag.

___________________________
@hacking_Attack
@Hacking_Video

Acknowledgements This started as a port over from Python2 (https://www.kitploit.com/search/label/Python2) to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now.

Download Oh365UserFinder (https://github.com/dievus/Oh365UserFinder)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Oh365UserFinder - Python3 O365 User Enumeration Tool

___________________________
@hacking_Attack
@Hacking_Video

FILE UPLOAD RESTRICTION BYPASS

We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...