KitPloit - PenTest Tools!
vAPI - Vulnerable Adversely Programmed Interface Which Is Self-Hostable API That Mimics OWASP API Top 10 Scenarios Through Exercises

https://blogger.googleusercontent.com/img/a/AVvXsEjoSKcbkydYCJ3vmGCwfE6xCoYmpR-OOaKgEb8z34mEC03p36EWuCj4wc9M4HDg1x8WEzIXrmFUkvezH3Ddx5vlUkXLXu91Y_-haF-JqoBkVM8TIPGL1UgupZL5d7AR8K79ZMfqfH48YzezAScrx06lWN74cVsL7ND-VALbtmQToJB_h1Ivo4p0PjTa=w640-h280 vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements* PHP
* MySQL
* PostMan
* MITM Proxy Installation (Docker)docker-compose up -dInstallation (Manual)Copying the Codecd git clone https://github.com/roottusk/vapi.gitSetting up the DatabaseImport vapi.sqlinto MySQL Database

Configure the DB Credentials in the vapi/.envStarting MySQL serviceRun following command (Linux) service mysqld startStarting Laravel ServerGo to vapidirectory and Run php artisan serveSetting Up Postman* Import vAPI.postman_collection.jsonin Postman
* Import vAPI_ENV.postman_environment.jsonin Postman

OR

Use Public Workspace https://www.postman.com/roottusk/workspace/vapi/ UsageBrowse http://localhost/vapi/for Documentation

After Sending requests, refer to the Postman Tests or Environment for Generated Tokens DeploymentHelm can be used to deploy to a Kubernetes namespace. The chart is in the vapi-chartfolder. The chart requires one secret named vapiwith the following values:

username to use>">DB_PASSWORD:

Sample Helm Install Command: helm upgrade --install vapi ./vapi-chart --values=./vapi-chart/values.yaml*** Important ***

The MYSQL_ROOT_PASSWORD on line 232 in the values.yamlmust match that on line 184 in order to work. Presented AtOWASP 20th Anniversary Blackhat Europe 2021 Arsenal HITB Cyberweek 2021, Abu Dhabi, UAE @Hack, Riyadh, KSA UpcomingAPISecure.co Mentions and References[1] https://apisecurity.io/issue-132-experian-api-leak-breaches-digitalocean-geico-burp-plugins-vapi-lab/

[2] https://dsopas.github.io/MindAPI/references/

[3] https://dzone.com/articles/api-security-weekly-issue-132

[4] https://owasp.org/www-project-vulnerable-web-applications-directory/

[5] https://github.com/arainho/awesome-api-security

[6] https://portswigger.net/daily-swig/introducing-vapi-an-open-source-lab-environment-to-learn-about-api-security

[7] https://apisecurity.io/issue-169-insecure-api-wordpress-plugin-tesla-3rd-party-vulnerability-introducing-vapi/ Walkthroughs/Writeups/Videos[1] https://cyc0rpion.medium.com/exploiting-owasp-top-10-api-vulnerabilities-fb9d4b1dd471 (vAPI 1.0 Writeup)

[2] https://www.youtube.com/watch?v=0F5opL_c5-4&list=PLT1Gj1RmR7vqHK60qS5bpNUeivz4yhmbS (Turkish Language) (vAPI 1.1 Walkthrough)

[3] https://medium.com/@jyotiagarwal3190/roottusk-vapi-writeup-341ec99879c (vAPI 1.1 Writeup) Acknowledgements* The icon and banner uses image from Flaticon Download Vapi

___________________________
@hacking_Attack
@Hacking_Video

Encontrei meu Primeiro Cross-site Scripting (XSS)

Olá Hunters! Nesse pequeno Artigo Vou explicar como encontrei meu primeiro (XSS)Continue reading on Medium »
Read more...

Encontrei meu Primeiro Cross-site Scripting (XSS)
https://medium.com/@arthursantos404/encontrei-meu-primeiro-cross-site-scripting-xss-f53f065a1b59?source=rss------bug_bounty-5

Olá Hunters! Nesse pequeno Artigo Vou explicar como encontrei meu primeiro (XSS)Continue reading on Medium » (https://medium.com/@arthursantos404/encontrei-meu-primeiro-cross-site-scripting-xss-f53f065a1b59?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I'm being hacked RIGHT NOW. What do I do?

What do I buy? What do I install? I'm going to get that google protection thingy soon that looks like a key, because I just saw it but what do I DO?! How do I never get hacked ever again without knowing a guy?

submitted by /u/thelessermalefic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
You know what I’m Going to ask !!

Is it possible to Wire Tap a phone in the USA with Some Software without being Law Enforcement? Has this been done before ?

submitted by /u/Gng599xx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What is it like to work as a pen tester?
https://www.reddit.com/r/Pentesting/comments/u3wbv0/what_is_it_like_to_work_as_a_pen_tester/

Pen testers of Reddit what is your work day like? How many hours do you guys work? Also how do you get permission to do what you guys do? submitted by /u/ELIDAL99 (https://www.reddit.com/user/ELIDAL99)
[link] (https://www.reddit.com/r/Pentesting/comments/u3wbv0/what_is_it_like_to_work_as_a_pen_tester/) [comments] (https://www.reddit.com/r/Pentesting/comments/u3wbv0/what_is_it_like_to_work_as_a_pen_tester/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Data Scientists, Watch Out: Attackers Have Your Number

Researchers should take extra care in deploying data-science applications to the cloud, as cybercriminals are already targeting popular data-science tools such as Jupyter Notebook.

Dark Reading: Attacks/Breaches
Kaspersky Relocates Cyberthreat-Related Data Processing for Users in Latin America and Middle East to Switzerland

Also, it re-certifies its data services by TÜV AUSTRIA.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
greymatter.io Closes $7.1 Million Series A to Meet Rising Need for Its Enterprise Microservices Platform

Elsewhere Partners invests in proven service mesh and API management innovator as it grows team and breaks into new markets.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[HTB] Mirai靶機 Write-Up

https://cdn-images-1.medium.com/max/1194/1*j-iXtoRoYH9G6a6ctJEfkg.png
Hack The Box Mirai machine Write-Up

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackthebox : Pandora

https://cdn-images-1.medium.com/max/1593/1*opwPYa3MLP5xnHRGq6mCJQ.png
Hello everyone, today i’ll be walking you through the amazing hackthebox machine “Pandora”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SIGNS YOU’VE BEEN HACKED

https://cdn-images-1.medium.com/max/750/1*nXHqDH2KLSKG24gTSApcLg.png
Most computer users dread being hacked. Many feel odd behavior or mistakes on their PC are signs of hacker control. But are hackers truly…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Elemental Cybersecurity Insights That Can Help Your Business Make Better Decisions

https://cdn-images-1.medium.com/max/1584/1*E7s532Fx-SUO0W5_8KzlJQ.gif
Telecommunication suppliers around the world hold a treasure of cybersecurity data from their vast networks and customer bases. Members of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Rules Of Engagement
https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/

submitted by /u/divyaguptaa (https://www.reddit.com/user/divyaguptaa)
[link] (https://www.komodosec.com/rules-of-engagement-redteam) [comments] (https://www.reddit.com/r/redteamsec/comments/u40hpp/rules_of_engagement/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The threat of a global cyber warfare

https://external-preview.redd.it/ODQ-lNaqyr0_F9vSrK2pNWqQviwPCG5W6No3va4L7L0.jpg?width=320&crop=smart&auto=webp&s=825d7906ea0ecfbf3cf53fbb2cbc33f894120180 submitted by /u/OkFaithlessness2414
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Demystifying iOS Code Signature
https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://medium.com/csit-tech-blog/demystifying-ios-code-signature-309d52c2ff1d) [comments] (https://www.reddit.com/r/redteamsec/comments/u41v6n/demystifying_ios_code_signature/)

___________________________
@hacking_Attack
@Hacking_Video

United Nations bug bounty[writeup]

Let’s get to the point, how can you hack the UN and get your name featured in the prestigious hall of fame? Lemme show you a guaranteed…Continue reading on Medium »
Read more...