Based on the amazing research (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) by James Kettle (https://twitter.com/albinowax). The tool can help to find servers that may be vulnerable (https://www.kitploit.com/search/label/Vulnerable) to request smuggling vulnerability.
Usage FLAGS: -h, --help Prints help information -V, --version Prints version information OPTIONS: --amount-of-payloads low/medium/all [default: low] -t, --attack-types [ClTeMethod, ClTePath, ClTeTime, TeClMethod, TeClPath, TeClTime] [default: "ClTeTime" "TeClTime"] --file send request from a file you need to explicitly pass \r\n at the end of the lines -H, --header Example: -H 'one:one' 'two:two' -X, --method [default: POST] -u, --url -v, --verbose 0 - print detected cases and errors only, 1 - print first line of server responses 2 - print requests [default: 0] --verify how many times verify the vulnerability [default: 2]">USAGE:
request_smuggler [OPTIONS] --url

FLAGS:
-h, --help Prints help information
-V, --version Prints version information

OPTIONS:
--amount-of-payloads low/medium/all [default: low]
-t, --attack-types
[ClTeMethod, ClTePath, ClTeTime, TeClMethod, TeClPath, TeClTime] [default: "ClTeTime" "TeClTime"]

--file
send request from a file
you need to explicitly pass \r\n at the end of the lines
-H, --header Example: -H 'one:one' 'two:two'
-X, --method [default: POST]
-u, --url
-v, --verbose
0 - print dete cted cases and errors only,
1 - print first line of server responses
2 - print requests [default: 0]
--verify how many times verify the vulnerability [default: 2]
Installation Linux from releases from source code (rust should be installed) git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release using cargo install cargo install request_smuggler --version 0.1.0-alpha.2 Mac from source code (rust should be installed) git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release using cargo install cargo install request_smuggler --version 0.1.0-alpha.2 Windows from releases

Download Request_Smuggler (https://github.com/Sh1Yo/request_smuggler)

Hacking on Medium
APK DOSYALARINA PAYLOAD ENJEKTE EDEREK ANDROİD TELEFONLARA SIZMA

https://cdn-images-1.medium.com/max/600/0*uNbNOAYHGAqfaJg1.png
Android kullanıcıları Play Store haricinde bir uygulama yüklemek istediklerinde APK dosyasını indiriyor. Peki APK indirmek telefona zarar…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Request_Smuggler - Http Request Smuggling Vulnerability Scanner

https://blogger.googleusercontent.com/img/a/AVvXsEheUSDI43TNxb3qC5NB8ewRdQsERbmznb7XDpFE9eCVlcxg8YyiF6ULPkT7dDiMGYVJ4ZTJrhqJQe4sRrse5otBsjpC7H5-LRUHoKvT4q-OCzxEw7UGIsqzdQvj_9wciq7ueWr9xDJnfZZg0laSG7b9SQAIv0JQzpoey5x2PDxUa7_tcN0-kADwD-yH=w640-h350
Based on the amazing research by James Kettle. The tool can help to find servers that may be vulnerable to request smuggling vulnerability.
Usage
USAGE:
request_smuggler [OPTIONS] --url
Installation

*
Linux

* from releases
* from source code (rust should be installed)
git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release

* using cargo install
cargo install request_smuggler --version 0.1.0-alpha.2
*
Mac

* from source code (rust should be installed)
git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release

* using cargo install
cargo install request_smuggler --version 0.1.0-alpha.2
*
Windows

* from releases
Download Request_Smuggler

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/zk6rnwe02qp81.jpg?width=640&crop=smart&auto=webp&s=ac344fb36f5972134e3c00742d1f40285cd592ec submitted by /u/Tompazi
[link] [comments]

https://b.thumbs.redditmedia.com/OK-s3XBlCbrc4xOQGCvn8gW7nqq0N6bMG9x_ShN2_Pc.jpg I've set ngrok to be able to connect to an Android phone not in my LAN (I simply disconnected it from my network, tried with a friend on another LAN aswell). Created a payload (here I only created an example to test if it works) downloaded it on my phone and run it. When my phone IS connected to my WiFi I get a meterpreter shell, no problem what so ever. When my phone IS NOT connected to the internet WiFi but via phone connection to simulate WAN (LTE, 4G) the payload doesn't respond, it's like the phone isn't able to talk with ngrok (the ngrok port is forwarded properly, yougetsignal proves it). Kali connected with "Bridged Adapter".

Maybe my IPS (I don't even know if I have it) is blocking the connection when it's not coming from my LAN, I have no idea.

Second question: is there a way to reverse shell to a PC via WAN without having to exposte your PUBLIC IP in the payload? Can I stay anonymous while getting a persisent reverse shell? If so, how? Thank you!

https://preview.redd.it/tpqfcvhjdqp81.png?width=1920&format=png&auto=webp&s=d562a358e45ee2eda6208e56c44b545203ecb0b9

submitted by /u/Masso27
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for a mid-90s essay

This might be one for older types who remember or know about the phone phreak era. I recall coming across an essay (originally posted on a newsgroup) penned by one of the original phreakers. American guy, maybe Californian or San Franciscan, around 1996. It talked about three things to build a free-er society. Something like cryptocurrency, encrypted communications and something else. It was really good but I just can't find it, or find a mention of itv anywhere. Anyone have any ideas?

submitted by /u/charliefortean
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Email Domain

Hey guys! I was wondering if I can see somehow all the emails from my school domain?

submitted by /u/crz316
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Official MalDuino Lite and Elite Missing

Hello!

Why isn't there any MalDuino Lite and Elite available on maltronics (the official selling website) and on the official MalDuino website?
Are there only these versions available?

Thanks!

submitted by /u/The-Malix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Real talk
https://www.reddit.com/r/redteamsec/comments/tp8a6v/real_talk/

submitted by /u/DrinkMoreCodeMore (https://www.reddit.com/user/DrinkMoreCodeMore)
[link] (https://i.redd.it/ecpmehjektp81.jpg) [comments] (https://www.reddit.com/r/redteamsec/comments/tp8a6v/real_talk/)

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/wxw2ua5xjtp81.jpg?width=320&crop=smart&auto=webp&s=b70c9c5ebb98d88f8910f2d74153189ec6d2ec62 submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
(serious) Online course(s) to get started with career

Hello everyone! I read books of network along with linux and use Kali Linux. I am currently learning bash. I want to know which online course(s) to get a career in ethical hacking?

submitted by /u/Introthink
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/3q4B_z0G7V-2rGxrJ5ncTuTVREivAgnJulT9KP_92FE.jpg submitted by /u/New-Iron3342
[link] [comments]

Fix software bugs in minutes with error monitoring
https://medium.com/@petesuhas/fix-software-bugs-in-minutes-with-error-monitoring-15d24a81820a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Consumers of software products have more options than they can name. If a much-beloved food delivery service crashes, there are at least…Continue reading on Medium » (https://medium.com/@petesuhas/fix-software-bugs-in-minutes-with-error-monitoring-15d24a81820a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Fix software bugs in minutes with error monitoring

Consumers of software products have more options than they can name. If a much-beloved food delivery service crashes, there are at least…Continue reading on Medium »
Read more...

Kali Linux Tutorials
Njsscan : A Semantic Aware SAST Tool That Can Find Insecure Code Patterns In Node.js Applications

Njsscan is a static application testing (SAST) tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Installationpip install njsscanRequires Python 3.6+ and supports only Mac and Linux Command Line Options$ njsscan
usage: njsscan [-h] [–json] [–sarif] [–sonarqube] [–html] [-o OUTPUT] [-c CONFIG] [–missing-controls] [-w] [-v] [path …]
positional arguments:
path Path can be file(s) or directories with source code
optional arguments:
-h, –help show this help message and exit
–json set output format as JSON
–sarif set output format as SARIF 2.1.0
–sonarqube set output format compatible with SonarQube
–html set output format as HTML
-o OUTPUT, –output OUTPUT
output filename to save the result
-c CONFIG, –config CONFIG
Location to .njsscan config file
–missing-controls enable missing security controls check
-w, –exit-warning non zero exit code on warning
-v, –version show njsscan version Example Usage$ njsscan test.js
Pattern Match ████████████████████████████████████████████████████████████ 1
Semantic Grep ███████████████████████████ 160
njsscan: v0.1.9 | Ajin Abraham | opensecurity.in
═══════════╤═══════════════════════════════════════════════════════════════════════════════════════════════╕
│ RULE ID │ express_xss │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ OWASP │ A1: Injection │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ CWE │ CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ DESCRIPTION │ Untrusted User Input in Response will result in Reflected Cross Site Scripting Vulnerability. │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ SEVERITY │ ERROR │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ FILES │ ╒════════════════╤═══════════════════════════════════════════════╕ │
│ │ │ File │ test.js │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Match Position │ 5 – 46 │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Line Number(s) │ 7: 8 │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Match String │ const { name } = req.query; │ │
│ │ │ │ res.send(‘Hello :’ + name + “”) │ │
│ │ ╘════════════════╧═══════════════════════════════════════════════╛ │
╘═════════════╧═══════════════════════════════════════════════════════════════════════════════════════════════╛ nodejsscan SASTnodejsscan, built on top of njsscan provides a full fledged vulnerability management user interface along with other nifty integrations. Python APIfrom njsscan.njsscan import NJSScan
node_source = ‘/node_source/true_positives/sqli_node.js’
scanner = NJSScan([node_source], json=True, check_controls=False)
scanner.scan()
{
‘templates’: {},
‘nodejs’: {
‘node_sqli_injection’: {
‘files’: [{
‘file_path’: ‘/node_source/true_positives/sqli_node.js’,
‘match_position’: (1, 24),
‘match_lines’: (4, 11),
‘match_string’: ‘var employeeId = req.foo;\n\nvar sql = “SELECT * FROM trn_employee WHERE employee_id = ” + employeeId;\n\n\n\nconnection.query(sql, function (error, results, fields) {\n\n if (error) {\n\n throw error;\n\n }\n\n console.log(results);’
}],
‘metadata’: {
‘owasp’: ‘A1: Injection’,
‘cwe’: “CWE-89: Impr[...]

___________________________
@hacking_Attack
@Hacking_Video