Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
SocialPwned : An OSINT Tool That Allows To Get The Emails, From A Target, Published In Social Networks
SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt.
The purpose of this tool is to facilitate the search for vulnerable targets during the phase of Footprinting in an Ethical Hacking. It is common for employees of a company to publish their emails in social networks, either professional or personal, so if these emails have their credentials leaked, it is possible that the passwords found have been reused in the environment to be audited. If it’s not the case, at least you would have an idea of the patterns that follow this target to create the passwords and be able to perform other attacks with a higher level of effectiveness.
SocialPwned uses different modules:
* Instragram: Making use of the unofficial Instagram API from @LevPasha, different methods were developed to obtain the emails published by users. An Instagram account is required.
* Linkedin: Using @tomquirk’s unofficial Linkedin API, different methods were developed to obtain a company’s employees and their contact information (email, twitter or phone). In addition, it is possible to add the employees found to your contacts, so that you can later have access to their network of contacts and information. This module also generates different files with combinations of possible usernames for an organization. A Linkedin account is required.
* Twint: Using Twint from @twintproject you can track all the Tweets published by a user looking for some email. A Twitter account is not necessary.
* PwnDB: Inspired by the tool PwnDB created by @davidtavarez a module has been developed that searches for all credential leaks from the emails found. In addition, for each email a POST request is made to HaveIBeenPwned to find out the source of the leak.
* Dehashed: Provides clear passwords and also the hash of passwords that could not be cracked. It is necessary to pay at Dehashed to get an API Key, but it can be a good alternative when PwnDB is slow or does not provide results.
* GHunt: Using the tool created by @mxrch, GHunt, it is possible to obtain information related to Google mails, e.g. reviews, profile picture, possible location or public calendar events.
Installation
Easy way
$ service docker start
$ docker pull mrtuxx/socialpwned
$ docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –help Manual wayThe installation of Tor depends on your system. On a Debian:
$ sudo apt-get install tor
$ /etc/init.d/tor start
Clone the repository using Git:
$ git clone https://github.com/MrTuxx/SocialPwned.git
$ cd SocialPwned
$ sudo pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint
$ sudo pip3 install -r requirements.txt
$ sudo python3 socialpwned.py –credentials credentials.json –help UsageTo make use of the Instagram and Linkedin features you need to have an account created on each of the social networks. The credentials must be indicated in a JSON file:
{
“instagram”:{
“username”:”username”,
“password”:”password”
},
“linkedin”:{
“email”:”email”,
“password”:”password”
},
“ghunt”:{
“SID”:”SID”,
“SSID”:”SSID”,
“APISID”:”APISID”,
“SAPISID”:”SAPISID”,
“HSID”:”HSID”
},
“dehashed”:{
“email”:”email”,
“apikey”:”apikey”
}
}
NOTE: The cookies necessary for the GHunt module to work can be obtained by following the steps explained here
usage: socialpwned.py [-h] –credentials CREDENTIALS [–pwndb] [–tor-proxy PROXY] [–instagram] [–info QUERY]
[–location LOCATION_ID][...]
___________________________
@hacking_Attack
@Hacking_Video
SocialPwned : An OSINT Tool That Allows To Get The Emails, From A Target, Published In Social Networks
SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt.
The purpose of this tool is to facilitate the search for vulnerable targets during the phase of Footprinting in an Ethical Hacking. It is common for employees of a company to publish their emails in social networks, either professional or personal, so if these emails have their credentials leaked, it is possible that the passwords found have been reused in the environment to be audited. If it’s not the case, at least you would have an idea of the patterns that follow this target to create the passwords and be able to perform other attacks with a higher level of effectiveness.
SocialPwned uses different modules:
* Instragram: Making use of the unofficial Instagram API from @LevPasha, different methods were developed to obtain the emails published by users. An Instagram account is required.
* Linkedin: Using @tomquirk’s unofficial Linkedin API, different methods were developed to obtain a company’s employees and their contact information (email, twitter or phone). In addition, it is possible to add the employees found to your contacts, so that you can later have access to their network of contacts and information. This module also generates different files with combinations of possible usernames for an organization. A Linkedin account is required.
* Twint: Using Twint from @twintproject you can track all the Tweets published by a user looking for some email. A Twitter account is not necessary.
* PwnDB: Inspired by the tool PwnDB created by @davidtavarez a module has been developed that searches for all credential leaks from the emails found. In addition, for each email a POST request is made to HaveIBeenPwned to find out the source of the leak.
* Dehashed: Provides clear passwords and also the hash of passwords that could not be cracked. It is necessary to pay at Dehashed to get an API Key, but it can be a good alternative when PwnDB is slow or does not provide results.
* GHunt: Using the tool created by @mxrch, GHunt, it is possible to obtain information related to Google mails, e.g. reviews, profile picture, possible location or public calendar events.
Installation
Easy way
$ service docker start
$ docker pull mrtuxx/socialpwned
$ docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –help Manual wayThe installation of Tor depends on your system. On a Debian:
$ sudo apt-get install tor
$ /etc/init.d/tor start
Clone the repository using Git:
$ git clone https://github.com/MrTuxx/SocialPwned.git
$ cd SocialPwned
$ sudo pip3 install –user –upgrade git+https://github.com/twintproject/twint.git@origin/master#egg=twint
$ sudo pip3 install -r requirements.txt
$ sudo python3 socialpwned.py –credentials credentials.json –help UsageTo make use of the Instagram and Linkedin features you need to have an account created on each of the social networks. The credentials must be indicated in a JSON file:
{
“instagram”:{
“username”:”username”,
“password”:”password”
},
“linkedin”:{
“email”:”email”,
“password”:”password”
},
“ghunt”:{
“SID”:”SID”,
“SSID”:”SSID”,
“APISID”:”APISID”,
“SAPISID”:”SAPISID”,
“HSID”:”HSID”
},
“dehashed”:{
“email”:”email”,
“apikey”:”apikey”
}
}
NOTE: The cookies necessary for the GHunt module to work can be obtained by following the steps explained here
usage: socialpwned.py [-h] –credentials CREDENTIALS [–pwndb] [–tor-proxy PROXY] [–instagram] [–info QUERY]
[–location LOCATION_ID][...]
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
SocialPwned : An OSINT Tool That Allows To Get The Emails
SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter.
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials SocialPwned : An OSINT Tool That Allows To Get The Emails, From A Target, Published In Social Networks SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and…
[–hashtag-ig QUERY] [–target-ig USERNAME] [–search-users-ig QUERY]
[–my-followers] [–my-followings] [–followers-ig] [–followings-ig] [–linkedin]
[–company COMPANY_ID] [–search-companies QUERY] [–employees] [–my-contacts]
[–user-contacts USER_ID] [–search-users-in QUERY] [–target-in USERNAME] [–add-contacts]
[–add-a-contact USER_ID] [–twitter] [–limit LIMIT] [–year YEAR] [–since DATE]
[–until DATE] [–profile-full] [–all-tw] [–target-tw USERNAME] [–hashtag-tw USERNAME]
[–followers-tw] [–followings-tw] [–ghunt] [–email-gh email@gmail.com] [–dehashed]
[–email-dh email@gmail.com]
Output format
Each time SocialPwned is run, a directory with the following format will be generated:
output
└── session_year_month_day_time
├── dehashed
│ ├── raw_dehashed.txt
│ └── socialpwned_dehashed.txt
├── emails
│ └── socialpwned_emails.txt
├── instagram
│ └── socialpwned_instagram.txt
├── linkedin_userames
│ ├── first.last.txt
│ ├── firstl.txt
│ ├── first.txt
│ ├── f.last.txt
│ ├── flast.txt
│ ├── lastf.txt
│ └── rawnames.txt
├── pwndb
│ ├── passwords_pwndb.txt
│ ├── pwndb.txt
│ └── socialpwned_pwndb.txt
├── socialpwned.json
└── twitter
└── socialpwned_twitter.txt
* The dehashed directory contains the raw API information in one file and the email-related passwords in another.
* The pwndb directory contains a file with only the passwords, another one with the passwords and related emails and finally a file that adds the sources of the leaks.
* The emails directory contains a file with all the emails obtained.
* The instagram directory contains a file with user accounts and their related email addresses.
* The twitter directory contains a file with user accounts and their related email addresses.
* The linkedin directory contains different files with combinations of user names obtained. Inspired by the linkedin2username tool.
* The socialpwned.json file provides in JSON format all the information obtained by SocialPwned and its different modules. Where the ID of each item is the email, in case you have information about a user but not his email, the ID will be his unique social network identifier.
Basic Examples and Combos
Instagram
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –info España
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –location 832578276
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –hashtag-ig someHashtag –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –pwndb
Linkedin
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target”
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target” –employees –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees [...]
___________________________
@hacking_Attack
@Hacking_Video
[–my-followers] [–my-followings] [–followers-ig] [–followings-ig] [–linkedin]
[–company COMPANY_ID] [–search-companies QUERY] [–employees] [–my-contacts]
[–user-contacts USER_ID] [–search-users-in QUERY] [–target-in USERNAME] [–add-contacts]
[–add-a-contact USER_ID] [–twitter] [–limit LIMIT] [–year YEAR] [–since DATE]
[–until DATE] [–profile-full] [–all-tw] [–target-tw USERNAME] [–hashtag-tw USERNAME]
[–followers-tw] [–followings-tw] [–ghunt] [–email-gh email@gmail.com] [–dehashed]
[–email-dh email@gmail.com]
Output format
Each time SocialPwned is run, a directory with the following format will be generated:
output
└── session_year_month_day_time
├── dehashed
│ ├── raw_dehashed.txt
│ └── socialpwned_dehashed.txt
├── emails
│ └── socialpwned_emails.txt
│ └── socialpwned_instagram.txt
├── linkedin_userames
│ ├── first.last.txt
│ ├── firstl.txt
│ ├── first.txt
│ ├── f.last.txt
│ ├── flast.txt
│ ├── lastf.txt
│ └── rawnames.txt
├── pwndb
│ ├── passwords_pwndb.txt
│ ├── pwndb.txt
│ └── socialpwned_pwndb.txt
├── socialpwned.json
└── socialpwned_twitter.txt
* The dehashed directory contains the raw API information in one file and the email-related passwords in another.
* The pwndb directory contains a file with only the passwords, another one with the passwords and related emails and finally a file that adds the sources of the leaks.
* The emails directory contains a file with all the emails obtained.
* The instagram directory contains a file with user accounts and their related email addresses.
* The twitter directory contains a file with user accounts and their related email addresses.
* The linkedin directory contains different files with combinations of user names obtained. Inspired by the linkedin2username tool.
* The socialpwned.json file provides in JSON format all the information obtained by SocialPwned and its different modules. Where the ID of each item is the email, in case you have information about a user but not his email, the ID will be his unique social network identifier.
Basic Examples and Combos
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –info España
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –location 832578276
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –hashtag-ig someHashtag –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target”
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –search-companies “My Target” –employees –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees [...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
[–hashtag-ig QUERY] [–target-ig USERNAME] [–search-users-ig QUERY] [–my-followers] [–my-followings] [–followers-ig] [–followings-ig] [–linkedin] [–company COMPANY_ID] [–search-companies QUERY] [–employees] [–my-contacts] [–user-contacts USER_ID] [–search-users…
–pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees –add-contacts
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –add-contacts
Twitter
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –hashtag-tw someHashtag –pwndb –limit 200 –dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –pwndb –dehashed –ghunt
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –followers-tw –followings-tw –pwndb
GHunt
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –ghunt –email-gh “email@example.com”
Dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –dehashed –email-dh “email@example.com”
Combos
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –linkedin –company 123456789 –employees –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –linkedin –target-in username –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed Download
___________________________
@hacking_Attack
@Hacking_Video
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –company 123456789 –employees –add-contacts
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –pwndb
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –linkedin –user-contacts user-id –add-contacts
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –hashtag-tw someHashtag –pwndb –limit 200 –dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –pwndb –dehashed –ghunt
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –twitter –target-tw username –all-tw –followers-tw –followings-tw –pwndb
GHunt
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –ghunt –email-gh “email@example.com”
Dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –dehashed –email-dh “email@example.com”
Combos
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –followers-ig –followings-ig –linkedin –company 123456789 –employees –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed
docker run -v $(pwd)/credentials.json:/socialpwned/credentials.json -v $(pwd)/output:/socialpwned/output -it mrtuxx/socialpwned socialpwned.py –credentials credentials.json –instagram –target-ig username –linkedin –target-in username –twitter –target-tw username –all-tw –pwndb –ghunt –dehashed Download
___________________________
@hacking_Attack
@Hacking_Video
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Hacking on Medium
Don’t know how to step into cybersecurity? we got answers for your queries.
https://cdn-images-1.medium.com/max/1080/1*IhbdyP8wisonFZQJJ6LmDg.png
We write about various cybersecurity and ethical hacking topics which will help you take your hacking skills to next level.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Don’t know how to step into cybersecurity? we got answers for your queries.
https://cdn-images-1.medium.com/max/1080/1*IhbdyP8wisonFZQJJ6LmDg.png
We write about various cybersecurity and ethical hacking topics which will help you take your hacking skills to next level.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Don’t know how to step into cybersecurity? we got answers for your queries.
We write about various cybersecurity and ethical hacking topics which will help you take your hacking skills to next level.
Hacking on Medium
($$$) Broken Authentication and IDOR at [REDACTED]
https://cdn-images-1.medium.com/max/927/1*BemPGe0ReX258UZerWIObw.png
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
($$$) Broken Authentication and IDOR at [REDACTED]
https://cdn-images-1.medium.com/max/927/1*BemPGe0ReX258UZerWIObw.png
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Oh365UserFinder - Python3 O365 User Enumeration Tool
http://www.kitploit.com/2022/03/oh365userfinder-python3-o365-user.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/03/oh365userfinder-python3-o365-user.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Oh365UserFinder - Python3 O365 User Enumeration Tool
Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain.
Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email (https://www.kitploit.com/search/label/Email) account -r, --read - Reads from a text file containing emails (https://www.kitploit.com/search/label/Emails) (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft (https://www.kitploit.com/search/label/Microsoft) does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag.
___________________________
@hacking_Attack
@Hacking_Video
Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email (https://www.kitploit.com/search/label/Email) account -r, --read - Reads from a text file containing emails (https://www.kitploit.com/search/label/Emails) (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft (https://www.kitploit.com/search/label/Microsoft) does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag.
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - dievus/Oh365UserFinder: Python3 o365 User Enumeration Tool
Python3 o365 User Enumeration Tool. Contribute to dievus/Oh365UserFinder development by creating an account on GitHub.
Acknowledgements This started as a port over from Python2 (https://www.kitploit.com/search/label/Python2) to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now.
Download Oh365UserFinder (https://github.com/dievus/Oh365UserFinder)
___________________________
@hacking_Attack
@Hacking_Video
Download Oh365UserFinder (https://github.com/dievus/Oh365UserFinder)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
KitPloit - PenTest Tools!
Oh365UserFinder - Python3 O365 User Enumeration Tool
___________________________
@hacking_Attack
@Hacking_Video
Oh365UserFinder - Python3 O365 User Enumeration Tool
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Oh365UserFinder - Python3 O365 User Enumeration Tool
FILE UPLOAD RESTRICTION BYPASS
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Oh365UserFinder - Python3 O365 User Enumeration Tool
Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain. Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email account -r, --read - Reads from a text file containing emails (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag. Acknowledgements This started as a port over from Python2 to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now. Download Oh365UserFinder
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain. Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email account -r, --read - Reads from a text file containing emails (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag. Acknowledgements This started as a port over from Python2 to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now. Download Oh365UserFinder
Read more...
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - dievus/Oh365UserFinder: Python3 o365 User Enumeration Tool
Python3 o365 User Enumeration Tool. Contribute to dievus/Oh365UserFinder development by creating an account on GitHub.
($$$) Broken Authentication and IDOR at [REDACTED]
https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium » (https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…