Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Write up: Hacking is an art, and so is subdomain enumeration. Write up: Hacking is an art, and so is subdomain enumeration.Post Views: 16 Premium Content Advanced Enumeration techniques with NMAP, Zenmap and Hydra Subscribe to…
asible you can’t compete successfully results.
1. VPN (Virtual Private Network)
It’s not required if you are using VPS but keep in mind that sometimes before you start to perform subdomain enumeration, you need to check your IP if has a bad reputation from previews scans. You can find more using intelligence search engines like ipqualityscore and mxtoolbox.
1. Amass, Sublist3r, and Assetfinder tools are designed to enumerate subdomains using OSINT.
There are a lot of tools that can you perform passive DNS scans. Many of those perform only passive scans, but there are also active reconnaissance (subdomain Brute forcing) techniques that are proven beneficial.
1. Domain validator (isup Checking alive hosts)
Is highly flexible and is made to work in different situations. It can parse output files from multiple tools collectively. It removes similar subdomains and false positives and provides you only subdomains that are alive. This can help you to save time for other things you need to do.
To do this by typing: isup.sh 1. SecLists or FuzzDB for subdomain Brute Force “/Discover/DNS”
An efficient Brute-Forcing attack typically involves a barrage of requests, and guesses to gain access or reveal information that may be otherwise hidden.
There are obvious challenges to brute-forcing, effective recon which helps you discover new attack surfaces, and new subdomains. The wordlist technique is less effective in the case of domains that don’t use common or popular subdomain extensions, so for that reason, you need to keep updating those wordlists, although from your experience as a hacker you can create your custom wordlist to detect the maximum result. We need to have a strong and potential script that will automate work and return a list of subdomains.
See Also: Write up: Detect malicious hacker activities on endpoints
AssetFinder:
Is a simple and smart script for information gathering for subdomains, and leverages many publicly available data sources to help you during your asset discovery process. It does so by building a list of subdomains related to a domain, sourced from popular data sources such as crt.sh, certspotter, HackerTarget, ThreatCrowd, Wayback Machine, and more, all of which give AssetFinder multiple data sources to fetch data from. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/AssetFinder-1024x576.png ./assetfinder Sublist3r:
Is a tool designed to enumerate subdomains of websites using OSINT techniques to help penetration testers and bug bounty hunters to collect and gather subdomains for the domain that are targeting? Using many search engines such as Yahoo, Bing, Google, Baidu, Ask, Netcraft, Virus Total, TheatCrowd, DNSdumpster and ReverseDNS, SSL Certificates. Also, it has brute force mode using an integrated tool named Subbrute.
Subbrute is a DNS meta-query spider that enumerates DNS records and subdomains by using an extensive wordlist. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Sublist3r-1024x576.png python3 sublist3r.py –d Amass:
The beauty of the baud is for gathering information on the attack surface of targets in multiple dimensions. You have this level of quality across so many features all in one place. Amass performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
OSINT Techniques
Amass works in a unique way in that all its functionality is broken into models that are called subcommands:
Intel: Collect intelligence on the target in order to determine your starting point.
Enum: Perform enumeration and mapping of your target to determine possible attacks avenues.
Viz: Show results in a visual format to assist with analysis and future research.
Track: Compare results across enumeration to see changes in their attack surface. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Amas[...]
___________________________
@hacking_Attack
@Hacking_Video
1. VPN (Virtual Private Network)
It’s not required if you are using VPS but keep in mind that sometimes before you start to perform subdomain enumeration, you need to check your IP if has a bad reputation from previews scans. You can find more using intelligence search engines like ipqualityscore and mxtoolbox.
1. Amass, Sublist3r, and Assetfinder tools are designed to enumerate subdomains using OSINT.
There are a lot of tools that can you perform passive DNS scans. Many of those perform only passive scans, but there are also active reconnaissance (subdomain Brute forcing) techniques that are proven beneficial.
1. Domain validator (isup Checking alive hosts)
Is highly flexible and is made to work in different situations. It can parse output files from multiple tools collectively. It removes similar subdomains and false positives and provides you only subdomains that are alive. This can help you to save time for other things you need to do.
To do this by typing: isup.sh 1. SecLists or FuzzDB for subdomain Brute Force “/Discover/DNS”
An efficient Brute-Forcing attack typically involves a barrage of requests, and guesses to gain access or reveal information that may be otherwise hidden.
There are obvious challenges to brute-forcing, effective recon which helps you discover new attack surfaces, and new subdomains. The wordlist technique is less effective in the case of domains that don’t use common or popular subdomain extensions, so for that reason, you need to keep updating those wordlists, although from your experience as a hacker you can create your custom wordlist to detect the maximum result. We need to have a strong and potential script that will automate work and return a list of subdomains.
See Also: Write up: Detect malicious hacker activities on endpoints
AssetFinder:
Is a simple and smart script for information gathering for subdomains, and leverages many publicly available data sources to help you during your asset discovery process. It does so by building a list of subdomains related to a domain, sourced from popular data sources such as crt.sh, certspotter, HackerTarget, ThreatCrowd, Wayback Machine, and more, all of which give AssetFinder multiple data sources to fetch data from. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/AssetFinder-1024x576.png ./assetfinder Sublist3r:
Is a tool designed to enumerate subdomains of websites using OSINT techniques to help penetration testers and bug bounty hunters to collect and gather subdomains for the domain that are targeting? Using many search engines such as Yahoo, Bing, Google, Baidu, Ask, Netcraft, Virus Total, TheatCrowd, DNSdumpster and ReverseDNS, SSL Certificates. Also, it has brute force mode using an integrated tool named Subbrute.
Subbrute is a DNS meta-query spider that enumerates DNS records and subdomains by using an extensive wordlist. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Sublist3r-1024x576.png python3 sublist3r.py –d Amass:
The beauty of the baud is for gathering information on the attack surface of targets in multiple dimensions. You have this level of quality across so many features all in one place. Amass performs network mapping of attack surfaces and external asset discovery using open source information gathering and active reconnaissance techniques.
OSINT Techniques
Amass works in a unique way in that all its functionality is broken into models that are called subcommands:
Intel: Collect intelligence on the target in order to determine your starting point.
Enum: Perform enumeration and mapping of your target to determine possible attacks avenues.
Viz: Show results in a visual format to assist with analysis and future research.
Track: Compare results across enumeration to see changes in their attack surface. https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Amas[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Write up: Hacking is an art, and so is subdomain enumeration.
___________________________
@hacking_Attack
@Hacking_Video
Write up: Hacking is an art, and so is subdomain enumeration.
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
Write up: Hacking is an art, and so is subdomain enumeration. | Black Hat Ethical Hacking
Subdomain enumeration is the process of finding subdomains of a particular Domain Name. Enumeration is the key when it comes to hacking.
Personal Security Checklist
A curated checklist of tips to protect your digital security and privacyContinue reading on Medium »
Read more...
A curated checklist of tips to protect your digital security and privacyContinue reading on Medium »
Read more...
Personal Security Checklist
https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5
A curated checklist of tips to protect your digital security and privacyContinue reading on Medium » (https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5
A curated checklist of tips to protect your digital security and privacyContinue reading on Medium » (https://medium.com/@reconshell.com/personal-security-checklist-b197eedfdc7a?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
Personal Security Checklist
A curated checklist of tips to protect your digital security and privacy
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
IOC Scraper : A Fast And Reliable Service That Enables You To Extract IOCs
IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily.
Features
* Defanged IOCs : Supports extracting and defanging IOCs.
* Whitelist IOCs : Supports custom whitlisting of IOCs.
* Source Types : Supports variety of sources such as Blogs, PDFs, CSV, and much more.
Supported IOC Types
IOC Scraper supports a variety of IOC types.
IOC TYPESTATUSASNSupportedIPv4, IPv6SupportedURL, DomainSupportedEmailSupportedMD5, SHA1, SHA256, File NameSupportedMAC AddressSupportedMITRE ATT&CK IDsSupportedYARA RulesSupported
Installation
git clone https://www.github.com/chaitanyakrishna/iocscraper.git
pip3 install -f requirements.txt
Usage
python IOC_Scraper.py -h
_
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
usage: IOC_Scraper.py [-h] [-u URL] [-uL FILE_CONTAINING_URLS] [-t TIMEOUT] [-th THREADNUMBER] -o OUTPUT
IOC_Scraper v1.0
Optional Arguments:
-h, –help show this help message and exit
-u URL, –url Single URL for Fetching IOCs
-uL FILE_CONTAINING_URLS, –url-list FILE_CONTAINING_URLS File Containing URL, One URL in One Line.
-t TIMEOUT, –timeout TIMEOUT HTTP Request Timeout. default=60
-th THREADNUMBER, –thread THREADNUMBER Parallel HTTP Request Number. default=100
Required Arguments:
-o OUTPUT, –output OUTPUT Output file name.
Sample command line arguments
python iocscraper.py -u “http://targeturl.com” -o report
python iocscraper.py -uL urls.txt -o report
Output
python IOC_Scraper.py -uL url_list.txt -o report
_ _
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
[Date: 20-01-2022] [Time: 23:03:09] [INFO] Initiating IOC Scraper …
[*] ProgressBar: 14/14 [Fethcing IOC from: thehackernews.com] [Errors: 0] … 0] … …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Removing Duplicates …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Fetched IOCs from the following domains
blog.aquasec.com
nationalcybersecurity.com
cofense.com
thehackernews.com
blog.sucuri.net
threats.amnpardaz.com
www.crowdstrike.com
www.bleepingcomputer.com
forensicitguy.github.io
marcusedmondson.com
rajhackingarticles.blogspot.com
research.checkpoint.com
www.reddit.com
www.zerofox.com
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Indicator of Compromise Stats
Domain : 52
URL : 26
IPv4 : 15
IPv6 : 0
ASN : 0
FILE_HASH_MD5 : 24
FILE_HASH_SHA1 : 16
FILE_HASH_SHA256 : 3
MITRE_ATTACK : 4
EMAIL : 3
CVE : 7
FILE_NAME : 59
YARA_RULE : 0
MAC_ADDRESS : 0
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Total IOCs: 209
Download
___________________________
@hacking_Attack
@Hacking_Video
IOC Scraper : A Fast And Reliable Service That Enables You To Extract IOCs
IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily.
Features
* Defanged IOCs : Supports extracting and defanging IOCs.
* Whitelist IOCs : Supports custom whitlisting of IOCs.
* Source Types : Supports variety of sources such as Blogs, PDFs, CSV, and much more.
Supported IOC Types
IOC Scraper supports a variety of IOC types.
IOC TYPESTATUSASNSupportedIPv4, IPv6SupportedURL, DomainSupportedEmailSupportedMD5, SHA1, SHA256, File NameSupportedMAC AddressSupportedMITRE ATT&CK IDsSupportedYARA RulesSupported
Installation
git clone https://www.github.com/chaitanyakrishna/iocscraper.git
pip3 install -f requirements.txt
Usage
python IOC_Scraper.py -h
_
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
usage: IOC_Scraper.py [-h] [-u URL] [-uL FILE_CONTAINING_URLS] [-t TIMEOUT] [-th THREADNUMBER] -o OUTPUT
IOC_Scraper v1.0
Optional Arguments:
-h, –help show this help message and exit
-u URL, –url Single URL for Fetching IOCs
-uL FILE_CONTAINING_URLS, –url-list FILE_CONTAINING_URLS File Containing URL, One URL in One Line.
-t TIMEOUT, –timeout TIMEOUT HTTP Request Timeout. default=60
-th THREADNUMBER, –thread THREADNUMBER Parallel HTTP Request Number. default=100
Required Arguments:
-o OUTPUT, –output OUTPUT Output file name.
Sample command line arguments
python iocscraper.py -u “http://targeturl.com” -o report
python iocscraper.py -uL urls.txt -o report
Output
python IOC_Scraper.py -uL url_list.txt -o report
_ _
| / \ / | / | _ _ _ _ _ _
| | | | | | ___ \ / | ‘/ ` | ‘ \ / _ \ ‘| | | || | | ) | (| | | (| | |) | / |
|___/ ____| |_/ _|| __,| ./ _||
|_|
[Date: 20-01-2022] [Time: 23:03:09] [INFO] Initiating IOC Scraper …
[*] ProgressBar: 14/14 [Fethcing IOC from: thehackernews.com] [Errors: 0] … 0] … …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Removing Duplicates …
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Fetched IOCs from the following domains
blog.aquasec.com
nationalcybersecurity.com
cofense.com
thehackernews.com
blog.sucuri.net
threats.amnpardaz.com
www.crowdstrike.com
www.bleepingcomputer.com
forensicitguy.github.io
marcusedmondson.com
rajhackingarticles.blogspot.com
research.checkpoint.com
www.reddit.com
www.zerofox.com
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Indicator of Compromise Stats
Domain : 52
URL : 26
IPv4 : 15
IPv6 : 0
ASN : 0
FILE_HASH_MD5 : 24
FILE_HASH_SHA1 : 16
FILE_HASH_SHA256 : 3
MITRE_ATTACK : 4
EMAIL : 3
CVE : 7
FILE_NAME : 59
YARA_RULE : 0
MAC_ADDRESS : 0
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Total IOCs: 209
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
IOC Scraper : A Fast And Reliable Service That Enables To Extract IOCs
IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Hacc The Hub : Open Source Self-Hosted Cyber Security Learning Platform
Hacc The Hub is an open source project that provides cyber security
The Hacc The Hub system consists of 3 main parts:
* Docker: containing all of the boxes creating the environment in which we’ll be learning on.
* The backend: controlling Docker and responsible for starting/destroying individual box in the system and managing the networking that joins them into a unified system.
* The frontend: GUI for the user to interact with the system via their web browser.
Built With
* Flask-RESTX
* Next.js
Getting Started
To get HaccTheHub up and running, you would need to setup the followings
Prerequisites
* Docker (refer to Docker’s Documentation for setup)
* Python 3 (Download) or just install
* Node.js 16 (Download) or use your package manager
Installation
* Clone the repo
git clone https://github.com/J4FSec/HaccTheHub.git
* Install dependencies for the backend
cd HaccTheHub/backend
python3 -m pip install -r requirements.txt
* And dependencies for the frontend
cd ../client
npm install
Usage
* Start up Docker
* Start the backend
cd ../backend
python3 main.py
And the frontend
cd ../client
npm start
The WebUI should now be accessible via http://localhost:8080.
Download
___________________________
@hacking_Attack
@Hacking_Video
Hacc The Hub : Open Source Self-Hosted Cyber Security Learning Platform
Hacc The Hub is an open source project that provides cyber security
The Hacc The Hub system consists of 3 main parts:
* Docker: containing all of the boxes creating the environment in which we’ll be learning on.
* The backend: controlling Docker and responsible for starting/destroying individual box in the system and managing the networking that joins them into a unified system.
* The frontend: GUI for the user to interact with the system via their web browser.
Built With
* Flask-RESTX
* Next.js
Getting Started
To get HaccTheHub up and running, you would need to setup the followings
Prerequisites
* Docker (refer to Docker’s Documentation for setup)
* Python 3 (Download) or just install
python3from your package manager.* Node.js 16 (Download) or use your package manager
Installation
* Clone the repo
git clone https://github.com/J4FSec/HaccTheHub.git
* Install dependencies for the backend
cd HaccTheHub/backend
python3 -m pip install -r requirements.txt
* And dependencies for the frontend
cd ../client
npm install
Usage
* Start up Docker
* Start the backend
cd ../backend
python3 main.py
And the frontend
cd ../client
npm start
The WebUI should now be accessible via http://localhost:8080.
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
HaccTheHub : Open Source Self-Hosted Cyber Security Learning Platform
HaccTheHub is an open source project that provides cyber security. The HaccTheHub system consists of 3 main parts.
DonPAPI — Dumping DPAPI Credz Remotely
Dumping revelant information on compromised targets without AV detection DPAPI dumpingContinue reading on Medium »
Read more...
Dumping revelant information on compromised targets without AV detection DPAPI dumpingContinue reading on Medium »
Read more...
Hacking on Medium
Personal Security Checklist
A curated checklist of tips to protect your digital security and privacy
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Personal Security Checklist
A curated checklist of tips to protect your digital security and privacy
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Personal Security Checklist
A curated checklist of tips to protect your digital security and privacy
Hacking on Medium
Bitcoin hacklenebilir mi?
Bitcoin ve sonrasında ortaya çıkan kripto paraların yanı sıra, bu kripto paraların üzerinde oluşturulduğu blockchain teknolojisi gelecekte…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Bitcoin hacklenebilir mi?
Bitcoin ve sonrasında ortaya çıkan kripto paraların yanı sıra, bu kripto paraların üzerinde oluşturulduğu blockchain teknolojisi gelecekte…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Bitcoin hacklenebilir mi?
Bitcoin ve sonrasında ortaya çıkan kripto paraların yanı sıra, bu kripto paraların üzerinde oluşturulduğu blockchain teknolojisi gelecekte…
Hacking on Medium
哥被偷了! (Brother got robbed!) — Jay Chou’s Ape, not the only one?
https://cdn-images-1.medium.com/max/2600/1*O0hx_bOkJuGh2L7IdzaVrg.jpeg
A full insight into the NFT phishing campaign that stole King of Mandopop Jay’s BAYC #3738
Continue reading on Sentinel Protocol »
___________________________
@hacking_Attack
@Hacking_Video
哥被偷了! (Brother got robbed!) — Jay Chou’s Ape, not the only one?
https://cdn-images-1.medium.com/max/2600/1*O0hx_bOkJuGh2L7IdzaVrg.jpeg
A full insight into the NFT phishing campaign that stole King of Mandopop Jay’s BAYC #3738
Continue reading on Sentinel Protocol »
___________________________
@hacking_Attack
@Hacking_Video
Medium
哥被偷了! (Brother got robbed!) — Jay Chou’s Ape, not the only one?
A full insight into the NFT phishing campaign that stole King of Mandopop Jay’s BAYC #3738
Hacking on Medium
Next-Level Game Testing with Cyrex
https://cdn-images-1.medium.com/max/1110/0*KuGNHD8yTialiUT2.jpg
There are several stages of game development that are, or should be, key in validating a game for release.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Next-Level Game Testing with Cyrex
https://cdn-images-1.medium.com/max/1110/0*KuGNHD8yTialiUT2.jpg
There are several stages of game development that are, or should be, key in validating a game for release.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Next-Level Game Testing with Cyrex
There are several stages of game development that are, or should be, key in validating a game for release.
Hacking on Medium
TryHackMe: [Day 9] Networking Where Is All This Data Going
https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
In the HTTP #1 — GET requests section, which directory is found on the web server?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe: [Day 9] Networking Where Is All This Data Going
https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
In the HTTP #1 — GET requests section, which directory is found on the web server?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe: [Day 9] Networking Where Is All This Data Going
In the HTTP #1 — GET requests section, which directory is found on the web server?
Hacking on Medium
lorsrf-ssrf-parameter-bruteforce
https://cdn-images-1.medium.com/max/640/0*rSkUKz4bybKW1U9Z.gif
Bruteforcing on Hidden parameters to find SSRF vulnerability using GET and POST Methods
NOTE
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
lorsrf-ssrf-parameter-bruteforce
https://cdn-images-1.medium.com/max/640/0*rSkUKz4bybKW1U9Z.gif
Bruteforcing on Hidden parameters to find SSRF vulnerability using GET and POST Methods
NOTE
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
lorsrf-ssrf-parameter-bruteforce
Bruteforcing on Hidden parameters to find SSRF vulnerability using GET and POST Methods NOTE
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Gitbleed_Tools - For Extracting Data From Mirrorred Git Repositories
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfXojv97e3F5z3jN0rKeTF0yRQZfw5nTYUIpVGtvAbGSqFmL7UxKZ7Saq47O25ng2jN_4OdfPZpyKEVXL8XISCF2PuIrYgiSNJ7Ku6rn7UgL9nBbWxsa4IzDulai1FIiHH1mirAXJ0LWwfz7X9BIdMEwWcjiQUmX61UW4yZ5EgrzHEWNbzhy9qblmM/s16000/gitbleed_tools_1_gitbleed_icon.png This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog post. What Do These Scripts Do?These scripts will clone a copy of the given Git repository, both as regular clone and mirrored ("--mirror") option. It will then create a delta between the two, seeking to find the parts of the repository that are only available in mirror mode. Last, gitleaks will be run to see if any secrets are present in the delta portion, and "git log" will be used to create a single file containing the bodies of the commits so they can be analyzed easier.
Please note that since this script creates three copies of the repository, it may consume a lot of disk space. Example repositoriesYou can test these tools on the following two example repositories:
* gb_testrepo_delete - repository hiding secrets via deleted commits
* gb_testrepo_reset - repository hiding secrets via "git reset" RequirementsYou will need Git, Python 3. GitLeaks and git-filter-repo to be installed. Here is an example of installing these on MacOS:
* clone - contains the cloned repository
* delta - contains the mirrrored repository minus all of the commits in the "clone"
* mirror - contains the mirrored repository cloned with the "--mirror" option
There are also three files created:
* clone_hashes.done.txt - list of hashes in the cloned repository
* gitleaks.json - results from running gitleaks
* gitlog.txt - all commits from the delta folder concatenated into a single file Development InformationReporting bugs and feature requestsPlease use the GitHub issue tracker to report issues or suggest features: https://github.com/nightwatchcybersecurity/gitbleed_tools
You can also send emai to research /at/ nightwatchcybersecurity [dot] com Wishlist* TBD Download Gitbleed_Tools
___________________________
@hacking_Attack
@Hacking_Video
Gitbleed_Tools - For Extracting Data From Mirrorred Git Repositories
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfXojv97e3F5z3jN0rKeTF0yRQZfw5nTYUIpVGtvAbGSqFmL7UxKZ7Saq47O25ng2jN_4OdfPZpyKEVXL8XISCF2PuIrYgiSNJ7Ku6rn7UgL9nBbWxsa4IzDulai1FIiHH1mirAXJ0LWwfz7X9BIdMEwWcjiQUmX61UW4yZ5EgrzHEWNbzhy9qblmM/s16000/gitbleed_tools_1_gitbleed_icon.png This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog post. What Do These Scripts Do?These scripts will clone a copy of the given Git repository, both as regular clone and mirrored ("--mirror") option. It will then create a delta between the two, seeking to find the parts of the repository that are only available in mirror mode. Last, gitleaks will be run to see if any secrets are present in the delta portion, and "git log" will be used to create a single file containing the bodies of the commits so they can be analyzed easier.
Please note that since this script creates three copies of the repository, it may consume a lot of disk space. Example repositoriesYou can test these tools on the following two example repositories:
* gb_testrepo_delete - repository hiding secrets via deleted commits
* gb_testrepo_reset - repository hiding secrets via "git reset" RequirementsYou will need Git, Python 3. GitLeaks and git-filter-repo to be installed. Here is an example of installing these on MacOS:
brew install git python3 gitleaks git-filter-repo How to Install and RunYou can run this againt a repository as follows: git clone https://github.com/nightwatchcybersecurity/gitbleed_tools.git
cd gitbleed_tools
./gitbleed.sh https://github.com/nightwatchcybersecurity/gitbleed_tools.git example There are also some helper scripts that can be used to scan GitHub and GitLab repositories as follows: ./gitbleed_gh.sh nightwatchcybersecurity/gitbleed_tools
./gitbleed_gl.sh nwcs/junit_ui_bug This will create an example folder containing three subfolders:* clone - contains the cloned repository
* delta - contains the mirrrored repository minus all of the commits in the "clone"
* mirror - contains the mirrored repository cloned with the "--mirror" option
There are also three files created:
* clone_hashes.done.txt - list of hashes in the cloned repository
* gitleaks.json - results from running gitleaks
* gitlog.txt - all commits from the delta folder concatenated into a single file Development InformationReporting bugs and feature requestsPlease use the GitHub issue tracker to report issues or suggest features: https://github.com/nightwatchcybersecurity/gitbleed_tools
You can also send emai to research /at/ nightwatchcybersecurity [dot] com Wishlist* TBD Download Gitbleed_Tools
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
DonPAPI — Dumping DPAPI Credz Remotely
https://medium.com/@pentesterclubpvtltd/donpapi-dumping-dpapi-credz-remotely-2377ba551654?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@pentesterclubpvtltd/donpapi-dumping-dpapi-credz-remotely-2377ba551654?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
DonPAPI — Dumping DPAPI Credz Remotely
Dumping revelant information on compromised targets without AV detection DPAPI dumping
Dumping revelant information on compromised targets without AV detection
DPAPI dumpingContinue reading on Medium » (https://medium.com/@pentesterclubpvtltd/donpapi-dumping-dpapi-credz-remotely-2377ba551654?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
DPAPI dumpingContinue reading on Medium » (https://medium.com/@pentesterclubpvtltd/donpapi-dumping-dpapi-credz-remotely-2377ba551654?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
DonPAPI — Dumping DPAPI Credz Remotely
Dumping revelant information on compromised targets without AV detection DPAPI dumping