Hacking Articles Tips Tricks Videos Tutorials

BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application designed to brute force (https://www.kitploit.com/search/label/Brute%20Force) directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden (https://www.kitploit.com/search/label/Hidden) within.
Installation Use PIP: pip3 install --user BirDuster Clone source: git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install --user -r requirements.txt
python3 BirDuster.py --help Usage BirDuster has the following flags and options (which you can see with the -h flag): -h/--help: Show help and exit. -v,-vv,-vvv/--verbosity: Verbosity level. -p/--port: Port to use while dirbusting. Default 80/443. -P/--pfile: If you want to test several ports just write them to a file with newlines. -t/--threads: Amount of concurrent threads. Default is 15. -o/--output: Output CSV of responses. Default is domain_output.csv. -l/--dlist: Directory (https://www.kitploit.com/search/label/Directory) list file. Default is dir_list.txt. -w/--writereponse: Will write HTTP/S responses to files. Default is False. -i/--ignorecertificate: Ignore SSL certificate errors. Default is False. -u/--useragent: User-Agent to use. Default is random user-agent. --ssl: Use SSL or not. -i flag will automatically turn on SSL. --timeout: Change default socket (https://www.kitploit.com/search/label/Socket) timeout. Default is 3 seconds. usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [--ssl]
[--timeout TIMEOUT]
domain

positional arguments:
domain domain or host to buster

Download BirDuster (https://github.com/ytisf/BirDuster)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

6 viewsedited 21:54

hacking: security in practice
what advice would you give to someone who is new and just starting to learn how to properly hunt for bugs and do bounties?

As the title says, what advice would you give to someone who is new and just starting to learn how to properly hunt for bugs and do bounties? Perhaps something you may have learned in hindsight.

submitted by /u/Repulsive_Problem272
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

what advice would you give to someone who is new and just starting...

As the title says, what advice would you give to someone who is new and just starting to learn how to properly hunt for bugs and do bounties?...

5 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
(Unpopular opinion?) How do you avoid burnout when learning?

A little backstory:

Switching careers from oil/gas to infosec. 34 yo, no degree.

Most likely I’m doing it wrong. But I started with TryHackMe. Did presecurity, started Complete Beginner path and switched to hackthebox since job listings keep mentioning HTB profiles etc. From there I started the “Starting point”, and kept seeing so many ads about their HTB Academy. Started that and I love it. The gamification is awesome. However, reading isn’t necessarily the best method of learning for me.

So my routine is work through a module - try a box on HTB. Fail on the box because I have no idea what to do next. (Disclaimer: I’ve read comments on how much “fundamental IT topics” mean, so I’ve mostly done the General topics and nmap and web proxies is the most offensive topics I’ve dabbled with so far) And since I know I basically have to learn everything about everything I still find motivation cause it’s Hella-Fun!

But not knowing programming that much, and no real attacks for that matter other than trying some ZAP scans on a website I still try a box every now and then and I also joined my first CTF this weekend. It is not going well. I decided to try cryptography since I find it interesting, but hard!

This made me deviate onto a site called cryptohack so I tried that, but there is no real teaching there. So I tried YT and how someone else does crypto-challenges. This made me make some small python scripts. Which is awesome, but it got hard real fast.

I don’t mind doing all this, and I learn something new every day. But with failure after failure I do get a bit discouraged.

Is it wrong to try stuff before I have more knowledge?

How do people get over that first steep hill before they actually find a flag?

Am I doing too much at the same time? THM, HTB, HTBacademy, CTFs.

I recently saw TCM had video courses which I think I learn more from than just reading(since everything is so new to me) and wonder if I should pause the other stuff and do a course from him first?

Also! This should be a separate post: In which job/position do you find fun? Meaning pentesting/red team/blue team/purple team in a consulting company, internal security for your own company and other roles? What are the pros and cons?

I have so many questions but will keep it short.

submitted by /u/Zozi-_-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A little backstory: Switching careers from oil/gas to infosec. 34 yo, no degree. Most likely I’m doing it wrong. But I started with...

6 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Could someone spoof my IP and commit fraud?

So, I just had the most terrifying experience. Two FBI agents came to my apartment and said that someone was using my IP (and asked if it was me) to commit fraud with Economic Impact Disaster Loans (EIDL). Whether you believe me or not, it was definitely not me.

How easy would it be for someone to take my IP, spoof it (hopefully this is the right terminology) and use it commit financial fraud? I know I didn't do anything, but my anxiety is through the roof. I've definitely visited some shady streaming sites (I need my shows), but my malware/virus scanners aren't detecting anything weird on my computer.

submitted by /u/Rainy_Day_Archivist
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Could someone spoof my IP and commit fraud?

So, I just had the most terrifying experience. Two FBI agents came to my apartment and said that someone was using my IP (and asked if it was me)...

4 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Trying to gain Internet access at work - Fully blocked

submitted by /u/Temporary-Bit-5448
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Trying to gain Internet access at work - Fully blocked

Posted in r/hacking by u/Temporary-Bit-5448 • 1 point and 0 comments

5 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Does BEEF attack a browser or browser session?

Say use clicks on link. If it then redirects to Gmail obviously it will arose suspicions, but if the Gmail page only pops up when the user opens the browser themselves, they would be much more likely to open it.

submitted by /u/bee4534
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Does BEEF attack a browser or browser session?

Say use clicks on link. If it then redirects to Gmail obviously it will arose suspicions, but if the Gmail page only pops up when the user opens...

6 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
What software do hackers use?

Hello subreddits! I had a question: what programming language do hackers use (c +, phyton and so on.)

This question has probably been asked here 1000 times. sry;D

submitted by /u/iapplemac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What software do hackers use?

Hello subreddits! I had a question: what programming language do hackers use (c +, phyton and so on.) This question has probably been...

7 viewsedited 22:12

Hacking Articles Tips Tricks Videos Tutorials

7 views22:19

About

Blog

Apps

Platform