Hacking Articles Tips Tricks Videos Tutorials

This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog post (https://wwws.nightwatchcybersecurity.com/2022/02/11/gitbleed/).
What Do These Scripts (https://www.kitploit.com/search/label/Scripts) Do? These scripts will clone a copy of the given Git repository, both as regular clone and mirrored ("--mirror") option. It will then create a delta between the two, seeking to find the parts of the repository that are only available in mirror mode. Last, gitleaks (https://www.kitploit.com/search/label/Gitleaks) will be run to see if any secrets (https://www.kitploit.com/search/label/Secrets) are present in the delta portion, and "git log" will be used to create a single file containing the bodies of the commits so they can be analyzed easier. Please note that since this script creates three copies of the repository, it may consume a lot of disk space. Example repositories You can test these tools on the following two example repositories: gb_testrepo_delete (https://github.com/nightwatchcybersecurity/gb_testrepo_delete) - repository hiding secrets via deleted commits gb_testrepo_reset (https://github.com/nightwatchcybersecurity/gb_testrepo_reset) - repository hiding secrets via "git reset" Requirements You will need Git (https://git-scm.com/), Python 3 (https://www.python.org/). GitLeaks (https://github.com/zricethezav/gitleaks) and git-filter-repo (https://github.com/newren/git-filter-repo) to be installed. Here is an example of installing these on MacOS: brew install git python3 gitleaks git-filter-repo
How to Install and Run You can run this againt a repository as follows: git clone https://github.com/nightwatchcybersecurity/gitbleed_tools.git
cd gitbleed_tools
./gitbleed.sh https://github.com/nightwatchcybersecurity/gitbleed_tools.git example
There are also some helper scripts that can be used to scan GitHub and GitLab repositories (https://www.kitploit.com/search/label/Repositories) as follows: ./gitbleed_gh.sh nightwatchcybersecurity/gitbleed_tools
./gitbleed_gl.sh nwcs/junit_ui_bug
This will create an example folder containing three subfolders: clone - contains the cloned repository delta - contains the mirrrored repository minus all of the commits in the "clone" mirror - contains the mirrored repository cloned with the "--mirror" option There are also three files created: clone_hashes.done.txt - list of hashes (https://www.kitploit.com/search/label/Hashes) in the cloned repository gitleaks.json - results from running gitleaks gitlog.txt - all commits from the delta folder concatenated into a single file Development Information Reporting bugs and feature requests Please use the GitHub issue tracker to report issues or suggest features: https://github.com/nightwatchcybersecurity/gitbleed_tools You can also send emai to research /at/ nightwatchcybersecurity [dot] com Wishlist TBD

Download Gitbleed_Tools (https://github.com/nightwatchcybersecurity/gitbleed_tools)

___________________________
@hacking_Attack
@Hacking_Video

Nightwatch Cybersecurity

GitBleed – Finding Secrets in Mirrored Git Repositories – CVE-2022-24975

Summary Due to a discrepancy in Git behavior, partial parts of a source code repository are visible when making copies via the “git clone” command. There are additional parts of the rep…

8 viewsedited 12:32

Hacking Articles Tips Tricks Videos Tutorials

9 views13:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Write up: Hacking is an art, and so is subdomain enumeration.

Write up: Hacking is an art, and so is subdomain enumeration.Post Views: 16
Premium Content Advanced Enumeration techniques with NMAP, Zenmap and Hydra

Subscribe to Patreon to watch this episode.
Reading Time: 6 Minutes What is subdomain enumeration?So, what is subdomain enumeration, and what is its purpose of it, from a hacker’s perspective?

There are different ways of enumerating or discovering subdomains for a given domain. As we know, enumeration is the key when it comes to hacking; enumerating subdomains leads to discovering many untouched surfaces having vulnerabilities.

Subdomain enumeration is the process of finding subdomains of a particular Domain Name. From a hacker’s perspective, understanding how to get more hidden subdomains a company has, will significantly differ and get more coverage than others, especially when you are performing Bug Bounty or Penetration Testing. It is about the techniques used and the mindset of the Red Team when performing this first step. From a hacker’s perspective:The hostname(s) of resources can provide valuable information to narrow the scope of an attacker’s task by providing information about available machines and resources. The underlying space of network (IP) addresses is sparsely populated (and IP: port combinations even more so), so narrowing down the addresses at which the organization hosts machines significantly reduces the preparatory work necessary to locate machines, map the topology, and launch an attack.

For example, the presence of the name ssh.company.com in the DNS provides hints of machines that probably host an SSH daemon. In the first instance, it is reasonable to suppose that the daemon runs on its default port, significantly reducing attack overhead and advancing to the stage of probing for vulnerabilities. By contrast, scanning the large IP ranges of an organization is slower, more time-consuming, and more likely to trigger early alerts in firewalls and IDS devices of port scan attempts.

So, there are 2 ways of performing subdomain enumeration, Passive and Active. Each technique has its downside and upside, so we will attempt to show you how to ultimately get the maximum results when you perform subdomain enumeration using some recommended tools.

After all, it’s not about the tools, it’s the technique you use, on top – that will elevate you more than others.

There are many methods to perform subdomain enumeration but we will show you the right way and evaluate it in detail. So, we can evaluate 3 tools that could you be able to be capable to carry out subdomain enumeration, and ultimately, we can see which approach is the best. Prerequisites:1. API KEYS of Passive DNS source (PassiveTotal, Shodan, Spyse, VirusTotal, Censys)
2. A VPS (Virtual Private Server)
3. VPN (Clean IP Address to Avoid IP Blacklisting)
4. Amass, Sublist3r, and Assetfinder tools are designed to enumerate subdomains using OSINT.
5. Domain validator (isup Checking alive hosts)
6. SecLists or FuzzDB for subdomain Brute Force “/Discover/DNS”
See Also: Write up: Steganography: Hide data in images and extract them
1. API KEYS of Passive DNS source.

Passive subdomain enumeration is a technique to query passive DNS datasets provided by sources (PassiveTotal, Shodan, Spyse, VirusTotal, Censys) to obtain the subdomains of a particular target.
1. A VPS (Virtual Private Server)

Using VPS is recommended to keep away from horrific net connection however additionally in case you acting subdomain enumeration can reveal a lot of domains which increases the bandwidth. Bandwidth is the amount of data that can get moved from the server to the receiver. If your ISP plan has restricted bandwidth fe[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Write up: Hacking is an art, and so is subdomain enumeration. | Black Hat Ethical Hacking

Subdomain enumeration is the process of finding subdomains of a particular Domain Name. Enumeration is the key when it comes to hacking.

15 viewsedited 13:17

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Write up: Hacking is an art, and so is subdomain enumeration. Write up: Hacking is an art, and so is subdomain enumeration.Post Views: 16 Premium Content Advanced Enumeration techniques with NMAP, Zenmap and Hydra Subscribe to…

asible you can’t compete successfully results.
1. VPN (Virtual Private Network)

It’s not required if you are using VPS but keep in mind that sometimes before you start to perform subdomain enumeration, you need to check your IP if has a bad reputation from previews scans. You can find more using intelligence search engines like ipqualityscore and mxtoolbox.
1. Amass, Sublist3r, and Assetfinder tools are designed to enumerate subdomains using OSINT.

There are a lot of tools that can you perform passive DNS scans. Many of those perform only passive scans, but there are also active reconnaissance (subdomain Brute forcing) techniques that are proven beneficial.
1. Domain validator (isup Checking alive hosts)

Is highly flexible and is made to work in different situations. It can parse output files from multiple tools collectively. It removes similar subdomains and false positives and provides you only subdomains that are alive. This can help you to save time for other things you need to do.

To do this by typing: isup.sh 1. SecLists or FuzzDB for subdomain Brute Force “/Discover/DNS”

An efficient Brute-Forcing attack typically involves a barrage of requests, and guesses to gain access or reveal information that may be otherwise hidden.

There are obvious challenges to brute-forcing, effective recon which helps you discover new attack surfaces, and new subdomains. The wordlist technique is less effective in the case of domains that don’t use common or popular subdomain extensions, so for that reason, you need to keep updating those wordlists, although from your experience as a hacker you can create your custom wordlist to detect the maximum result. We need to have a strong and potential script that will automate work and return a list of subdomains.
See Also: Write up: Detect malicious hacker activities on endpoints
AssetFinder:

Is a simple and smart script for information gathering for subdomains, and leverages many publicly available data sources to help you during your asset discovery process. It does so by building a list of subdomains related to a domain, sourced from popular data sources such as crt.sh, certspotter, HackerTarget, ThreatCrowd, Wayback Machine, and more, all of which give AssetFinder multiple data sources to fetch data from. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/AssetFinder-1024x576.png ./assetfinder Sublist3r:

Is a tool designed to enumerate subdomains of websites using OSINT techniques to help penetration testers and bug bounty hunters to collect and gather subdomains for the domain that are targeting? Using many search engines such as Yahoo, Bing, Google, Baidu, Ask, Netcraft, Virus Total, TheatCrowd, DNSdumpster and ReverseDNS, SSL Certificates. Also, it has brute force mode using an integrated tool named Subbrute.

Subbrute is a DNS meta-query spider that enumerates DNS records and subdomains by using an extensive wordlist. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Sublist3r-1024x576.png python3 sublist3r.py –d Amass:

The beauty of the baud is for gathering information on the attack surface of targets in multiple dimensions. You have this level of quality across so many features all in one place. Amass performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
OSINT Techniques

Amass works in a unique way in that all its functionality is broken into models that are called subcommands:

Intel: Collect intelligence on the target in order to determine your starting point.

Enum: Perform enumeration and mapping of your target to determine possible attacks avenues.

Viz: Show results in a visual format to assist with analysis and future research.

Track: Compare results across enumeration to see changes in their attack surface. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Amas[...]

___________________________
@hacking_Attack
@Hacking_Video

10 viewsedited 13:17

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking
Write up: Hacking is an art, and so is subdomain enumeration.

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Write up: Hacking is an art, and so is subdomain enumeration. | Black Hat Ethical Hacking

Subdomain enumeration is the process of finding subdomains of a particular Domain Name. Enumeration is the key when it comes to hacking.

12 viewsedited 13:17

Hacking Articles Tips Tricks Videos Tutorials

Personal Security Checklist

A curated checklist of tips to protect your digital security and privacyContinue reading on Medium »
Read more...

11 views13:46

Hacking Articles Tips Tricks Videos Tutorials

Personal Security Checklist
https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5

A curated checklist of tips to protect your digital security and privacyContinue reading on Medium » (https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Personal Security Checklist

A curated checklist of tips to protect your digital security and privacy

10 viewsedited 14:22

Hacking Articles Tips Tricks Videos Tutorials

10 views14:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
IOC Scraper : A Fast And Reliable Service That Enables You To Extract IOCs

IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily.

Features

* Defanged IOCs : Supports extracting and defanging IOCs.
* Whitelist IOCs : Supports custom whitlisting of IOCs.
* Source Types : Supports variety of sources such as Blogs, PDFs, CSV, and much more.

Supported IOC Types

IOC Scraper supports a variety of IOC types.
IOC TYPESTATUSASNSupportedIPv4, IPv6SupportedURL, DomainSupportedEmailSupportedMD5, SHA1, SHA256, File NameSupportedMAC AddressSupportedMITRE ATT&CK IDsSupportedYARA RulesSupported
Installation

git clone https://www.github.com/chaitanyakrishna/iocscraper.git
pip3 install -f requirements.txt

Usage

python IOC_Scraper.py -h
_
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
usage: IOC_Scraper.py [-h] [-u URL] [-uL FILE_CONTAINING_URLS] [-t TIMEOUT] [-th THREADNUMBER] -o OUTPUT
IOC_Scraper v1.0
Optional Arguments:
-h, –help show this help message and exit
-u URL, –url Single URL for Fetching IOCs
-uL FILE_CONTAINING_URLS, –url-list FILE_CONTAINING_URLS File Containing URL, One URL in One Line.
-t TIMEOUT, –timeout TIMEOUT HTTP Request Timeout. default=60
-th THREADNUMBER, –thread THREADNUMBER Parallel HTTP Request Number. default=100
Required Arguments:
-o OUTPUT, –output OUTPUT Output file name.

Sample command line arguments

python iocscraper.py -u “http://targeturl.com” -o report
python iocscraper.py -uL urls.txt -o report

Output

python IOC_Scraper.py -uL url_list.txt -o report
_ _
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
[Date: 20-01-2022] [Time: 23:03:09] [INFO] Initiating IOC Scraper …
[*] ProgressBar: 14/14 [Fethcing IOC from: thehackernews.com] [Errors: 0] … 0] … …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Removing Duplicates …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Fetched IOCs from the following domains
blog.aquasec.com
nationalcybersecurity.com
cofense.com
thehackernews.com
blog.sucuri.net
threats.amnpardaz.com
www.crowdstrike.com
www.bleepingcomputer.com
forensicitguy.github.io
marcusedmondson.com
rajhackingarticles.blogspot.com
research.checkpoint.com
www.reddit.com
www.zerofox.com
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Indicator of Compromise Stats
Domain : 52
URL : 26
IPv4 : 15
IPv6 : 0
ASN : 0
FILE_HASH_MD5 : 24
FILE_HASH_SHA1 : 16
FILE_HASH_SHA256 : 3
MITRE_ATTACK : 4
EMAIL : 3
CVE : 7
FILE_NAME : 59
YARA_RULE : 0
MAC_ADDRESS : 0
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Total IOCs: 209
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

IOC Scraper : A Fast And Reliable Service That Enables To Extract IOCs

IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process.

8 viewsedited 14:59

Hacking Articles Tips Tricks Videos Tutorials

8 views14:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Hacc The Hub : Open Source Self-Hosted Cyber Security Learning Platform

Hacc The Hub is an open source project that provides cyber security

The Hacc The Hub system consists of 3 main parts:

* Docker: containing all of the boxes creating the environment in which we’ll be learning on.
* The backend: controlling Docker and responsible for starting/destroying individual box in the system and managing the networking that joins them into a unified system.
* The frontend: GUI for the user to interact with the system via their web browser.

Built With

* Flask-RESTX
* Next.js

Getting Started

To get HaccTheHub up and running, you would need to setup the followings

Prerequisites

* Docker (refer to Docker’s Documentation for setup)
* Python 3 (Download) or just install python3from your package manager.
* Node.js 16 (Download) or use your package manager

Installation

* Clone the repo

git clone https://github.com/J4FSec/HaccTheHub.git

* Install dependencies for the backend

cd HaccTheHub/backend
python3 -m pip install -r requirements.txt

* And dependencies for the frontend

cd ../client
npm install

Usage

* Start up Docker
* Start the backend

cd ../backend
python3 main.py

And the frontend

cd ../client
npm start

The WebUI should now be accessible via http://localhost:8080.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

HaccTheHub : Open Source Self-Hosted Cyber Security Learning Platform

HaccTheHub is an open source project that provides cyber security. The HaccTheHub system consists of 3 main parts.

10 viewsedited 14:59

Hacking Articles Tips Tricks Videos Tutorials

DonPAPI — Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumpingContinue reading on Medium »
Read more...

9 views15:16

About

Blog

Apps

Platform