Acknowledgements This started as a port over from Python2 (https://www.kitploit.com/search/label/Python2) to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now.
Download Oh365UserFinder (https://github.com/dievus/Oh365UserFinder)
___________________________
@hacking_Attack
@Hacking_Video
Download Oh365UserFinder (https://github.com/dievus/Oh365UserFinder)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
KitPloit - PenTest Tools!
Oh365UserFinder - Python3 O365 User Enumeration Tool
___________________________
@hacking_Attack
@Hacking_Video
Oh365UserFinder - Python3 O365 User Enumeration Tool
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Oh365UserFinder - Python3 O365 User Enumeration Tool
FILE UPLOAD RESTRICTION BYPASS
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
We all might have faced a file upload functionality while testing a site, Maybe during ctf’s, or real world pentest, or bug bounties.Continue reading on Medium »
Read more...
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium »
Read more...
Oh365UserFinder - Python3 O365 User Enumeration Tool
Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain. Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email account -r, --read - Reads from a text file containing emails (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag. Acknowledgements This started as a port over from Python2 to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now. Download Oh365UserFinder
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify false positives based on response, and either automatically create a waiting period to allow the throttling value to reset, or warn the user to increase timeouts between attempts. Oh365UserFinder can also easily identify if a domain exists in o365 using the -d or --domain flag. This saves the trouble of copying the url from notes and entering it into the URL bar with the target domain. Usage Installing Oh365UserFinder git clone https://github.com/dievus/Oh365UserFinder.git Change directories to Oh365UserFinder and run: pip3 install -r requirements.txt This will run the install script to add necessary dependencies to your system. python3 Oh365UserFinder.py -h This will output the help menu, which contains the following flags: -h, --help - Lists the help options -e, --email - Required for running Oh365UserFinder against a single email account -r, --read - Reads from a text file containing emails (ex. -r emails.txt) -w, --write - Writes valid emails to a text document (ex. -w validemails.txt) -c, --csv - Writes valid emails to a CSV file (ex. -c validemails.csv) -t, --timeout - Sets a pause between attempts in seconds (ex. -t 60) -d, --domain - Checks if the listed domain is valid or not (ex. -d mayorsec.com) --verbose - Outputs test verbosely Examples of full commands include: python3 o365UserFinder.py -e example@test.com python3 Oh365UserFinder.py -r emails.txt -w validemails.txt python3 Oh365UserFinder.py -r emails.txt -w validemails.txt -t 30 -v Notes Make note that Microsoft does have some defense in place that can, from time to time, provide false positives in feedback. If you suspect that this is occurring take a pause in testing, and return and increase the duration between attempts using the -t flag. Acknowledgements This started as a port over from Python2 to Python3 of a tool named o365Creeper developed by Korey Mckinley, and it quickly spiraled into what it is now. Download Oh365UserFinder
Read more...
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - dievus/Oh365UserFinder: Python3 o365 User Enumeration Tool
Python3 o365 User Enumeration Tool. Contribute to dievus/Oh365UserFinder development by creating an account on GitHub.
($$$) Broken Authentication and IDOR at [REDACTED]
https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…Continue reading on Medium » (https://wahaz.medium.com/broken-authentication-and-idor-at-redacted-646de8d508e6?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week
Japanese manufacturer confirmed a Feb. 27 attack on its US subsidiary that led to a temporary production shutdown.
___________________________
@hacking_Attack
@Hacking_Video
Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week
Japanese manufacturer confirmed a Feb. 27 attack on its US subsidiary that led to a temporary production shutdown.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week
Japanese manufacturer confirmed a Feb. 27 attack on its US subsidiary that led to a temporary production shutdown.
Pen Test Diaries: Last One In
https://mike-sheward.medium.com/pen-test-diaries-last-one-in-ae205cfb6a3b?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://mike-sheward.medium.com/pen-test-diaries-last-one-in-ae205cfb6a3b?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Pen Test Diaries: Last One In
This story is part of the Pen Test Diaries series, you can read more about the series here.
This story is part of the Pen Test Diaries series, you can read more about the series here.Continue reading on Medium » (https://mike-sheward.medium.com/pen-test-diaries-last-one-in-ae205cfb6a3b?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Pen Test Diaries: Last One In
This story is part of the Pen Test Diaries series, you can read more about the series here.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Wslu : A Collection Of Utilities For Windows 10 Linux Subsystems
Wslu is a collection of utilities for Windows 10 Linux Subsystem, such as retrieving Windows 10 environment variables or creating your favorite Linux GUI application shortcuts on Windows 10 Desktop.
Requires Windows 10 Creators Update; Some of the feature requires a higher version of Windows 10; Supports WSL2. Featurewslusc
A WSL shortcut creator to create a shortcut on your Windows 10 Desktop.
wslsys
A WSL system information printer to print out system informations from Windows 10 or WSL.
wslfetch
A WSL screenshot information tool to print information in an elegant way.
wslvar
A WSL tool to help you get Windows system environment variables.
wslview
With alias
wslupath
Deprecated
A WSL tool to convert path styles.
wslact
A set of quick actions for WSL such as quickly mounting all drives or manually sync time between Windows and WSL. InstallationAlpine LinuxYou can install
sudo apk add wslu Arch LinuxAUR version of
Download the latest package from release and install using the command:
CentOS 7
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_7/home:wslutilities.repo
CentOS 8
sudo dnf install -y epel-release
sudo dnf config-manager –set-enabled PowerTools
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo
Oracle Linux 8
sudo dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
sudo subscription-manager repos –enable codeready-builder-for-rhel-8-$(/bin/arch)-rpms
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo DebianYou can install
sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/debian buster main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu
Fedora
sudo dnf copr enable wslutilities/wslu
sudo dnf install wslu Kali LinuxYou can install
sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/kali kali-rolling main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu UbuntuAttention!
For Ubuntu version, you should not only report bug here but also report bug at Launchpad.
Preinstalled in the latest apps. On older installations of Ubuntu please install
sudo apt update
sudo apt install ubuntu-wsl SUSE Linux Enperprise ServerYou can install
SLESCUR_VERSION=”$(grep VERSION= /etc/os-release | sed -e s/VERSION=//g -e s/\”//g -e s/-//g)” sudo zypper addrepo https://download.opensuse.org/repositories/home:/wslutilities/SLE$SLESCUR_VERSION/home:wslutilities.repo
sudo zypper addrepo https://download.opensuse.org/repositories/graphics/SLE_12_SP3_Backports/graphics.repo
sudo zypper up
sudo zypper in wslu Download
___________________________
@hacking_Attack
@Hacking_Video
Wslu : A Collection Of Utilities For Windows 10 Linux Subsystems
Wslu is a collection of utilities for Windows 10 Linux Subsystem, such as retrieving Windows 10 environment variables or creating your favorite Linux GUI application shortcuts on Windows 10 Desktop.
Requires Windows 10 Creators Update; Some of the feature requires a higher version of Windows 10; Supports WSL2. Featurewslusc
A WSL shortcut creator to create a shortcut on your Windows 10 Desktop.
wslsys
A WSL system information printer to print out system informations from Windows 10 or WSL.
wslfetch
A WSL screenshot information tool to print information in an elegant way.
wslvar
A WSL tool to help you get Windows system environment variables.
wslview
With alias
wview/wslstart/wstartA fake WSL browser that can help you open link in default Windows browser or open files on Windows.wslupath
Deprecated
A WSL tool to convert path styles.
wslact
A set of quick actions for WSL such as quickly mounting all drives or manually sync time between Windows and WSL. InstallationAlpine LinuxYou can install
wsluon Alpine Linux 3.12+ with the following command:sudo apk add wslu Arch LinuxAUR version of
wsluis pulled due to that it violated its policy.Download the latest package from release and install using the command:
sudo pacman -U *.zstCentOS/RHEL/Oracle LinuxAdd the repository for the corresponding Linux distribution:CentOS 7
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_7/home:wslutilities.repo
CentOS 8
sudo dnf install -y epel-release
sudo dnf config-manager –set-enabled PowerTools
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo
Oracle Linux 8
sudo dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
sudo subscription-manager repos –enable codeready-builder-for-rhel-8-$(/bin/arch)-rpms
sudo yum-config-manager –add-repo https://download.opensuse.org/repositories/home:/wslutilities/CentOS_8/home:wslutilities.repo DebianYou can install
wsluwith the following command:sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/debian buster main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu
Fedora
sudo dnf copr enable wslutilities/wslu
sudo dnf install wslu Kali LinuxYou can install
wsluwith the following command:sudo apt install gnupg2 apt-transport-https
wget -O – https://pkg.wslutiliti.es/public.key | sudo tee -a /etc/apt/trusted.gpg.d/wslu.asc
echo “deb https://pkg.wslutiliti.es/kali kali-rolling main” | sudo tee -a /etc/apt/sources.list
sudo apt update
sudo apt install wslu UbuntuAttention!
For Ubuntu version, you should not only report bug here but also report bug at Launchpad.
Preinstalled in the latest apps. On older installations of Ubuntu please install
ubuntu-wslthat depends on wslu:sudo apt update
sudo apt install ubuntu-wsl SUSE Linux Enperprise ServerYou can install
wsluwith the following command:SLESCUR_VERSION=”$(grep VERSION= /etc/os-release | sed -e s/VERSION=//g -e s/\”//g -e s/-//g)” sudo zypper addrepo https://download.opensuse.org/repositories/home:/wslutilities/SLE$SLESCUR_VERSION/home:wslutilities.repo
sudo zypper addrepo https://download.opensuse.org/repositories/graphics/SLE_12_SP3_Backports/graphics.repo
sudo zypper up
sudo zypper in wslu Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Wslu : A Collection Of Utilities For Windows 10 Linux Subsystems
Wslu is a collection of utilities for Windows 10 Linux Subsystem, such as retrieving Windows 10 environment variables.