KitPloit - PenTest Tools!
BirDuster - A Multi Threaded Python Script Designed To Brute Force Directories And Files Names On Webservers

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXDsAeqap8mk8vDVDaPxCPEWKXYDHmU4RWURRLtQhXX8z2Smf3UcMJbM_tA1Dqn3wtfTXaVF9czzHgwjj55scvPVWr5-iigaLmcJQiIB5PmunfACsGFweoEUwnvVlBmAqLa1VE5AzdF5SnUndkGFrMG5E7_rz06VPpLXJaXe883t8I8Yyx3JU5gLC8/w640-h416/BirDuster.png
BirDusteris a Python based knockoff of the original DirBuster.

BirDusteris a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within.
Installation

Use PIP: pip3 install --user BirDuster

Clone source:

git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install --user -r requirements.txt
python3 BirDuster.py --help

Usage

BirDusterhas the following flags and options (which you can see with the -hflag):

* -h/--help: Show help and exit.
* -v,-vv,-vvv/--verbosity: Verbosity level.
* -p/--port: Port to use while dirbusting. Default 80/443.
* -P/--pfile: If you want to test several ports just write them to a file with newlines.
* -t/--threads: Amount of concurrent threads. Default is 15.
* -o/--output: Output CSV of responses. Default is domain_output.csv.
* -l/--dlist: Directory list file. Default is dir_list.txt.
* -w/--writereponse: Will write HTTP/S responses to files. Default is False.
* -i/--ignorecertificate: Ignore SSL certificate errors. Default is False.
* -u/--useragent: User-Agent to use. Default is random user-agent.
* --ssl: Use SSL or not. -iflag will automatically turn on SSL.
* --timeout: Change default socket timeout. Default is 3 seconds.

usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [--ssl]
[--timeout TIMEOUT]
domain

positional arguments:
domain domain or host to buster
Download BirDuster
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

[case study#1] IDOR vulnerability allows access to user’s personal data

What is IDOR?Continue reading on Medium »
Read more...

[case study#1] IDOR vulnerability allows access to user’s personal data
https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is IDOR?Continue reading on Medium » (https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
50% of Orgs Rely on Email to Manage Security

Even with dedicated identity management tools at their disposal, many companies — smaller ones especially — are sticking with email and spreadsheets for handling permissions.

Dark Reading: Attacks/Breaches
RF Technologies Releases Safe Place Staff Protection for Healthcare Settings

RFT is expanding the Safe Place hospital market security system to include staff protection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

MDR Sentinel expands TorchLight’s leading managed detection and response (MDR) services with turnkey SIEM and SOAR capabilities from Microsoft; TorchLight also announces it attains elite Microsoft Gold Partner Status

___________________________
@hacking_Attack
@Hacking_Video

GitHub - socket-toolkit (Basic and in early stages of development, pull requests are encouraged!)
https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/haydendevs (https://www.reddit.com/user/haydendevs)
[link] (https://github.com/haydenzeller/socket-toolkit) [comments] (https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TLDR — How to Get Out of Work by Hijacking the Gmail App at Work

https://cdn-images-1.medium.com/max/2600/0*H1xdO5KcmNa--YQ2
Or tell your boss you’ll implement a fix for the StrandHogg vulnerability once Google does it themselves

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse Social Media Account Lookup

Hey, I was just wondering if anyone knows of an effective reverse account lookup for social media. I have looked around and most sites have paywalls or are scams. I don't mind paying for a services, but I wasn't to be sure to be paying for the best option.

Sorry if there is already a post about this. I looked at this the following post but most of the sites listed here are no longer up. https://www.reddit.com/r/catfish/comments/ibalyt/are_there_any_search_engines_that_search_social/

Thanks in advance!

submitted by /u/primitiveproponent
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta hacked

My instagram acct was hacked. They somehow changed the email, so they have full control over the acct... anyway to get it back Or she gone?

submitted by /u/Reasonable_Lecture_5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is it possible to change the value on a gift card.

Ever went to the store and bought a gift card for a friend or family member? Maybe like a Starbucks or Walmart and sent it to them as a present?

I always wondered if one could (in theory) somehow edit the value of these little cards.

For example, let's say you buy one and put $50 on it at the store. Can you use a card reader/writer, software and a laptop to somehow put an extra digit on the card itself? 🤔

Is it possible?? Any ideas? Plz. Thx.

submitted by /u/XANAX_90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's your most favorite Burp suite extension that actually gets the job done ?

Mine is Auth Analyzer , it helped me find bugs a couple of times

you simple login into the target page with your account

and interact with the page and try actions and stuff like posting/commenting/visiting pages

And all the extension does it take all these requests and it strips all the cookies from them and Resends them again

To see if any unauthorized bugs there or not like actions that shouldn't be done without logging in

submitted by /u/theycallmemonlight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What should i do ??

Ok so the thing is , i grinded all the way in TCM course in the past 2 weeks and learnt so much about pentesting , i did alot of hacktheboxes in those 2 weeks but i still suck , i feel like every new box there is totally a new thing i never knew about . Like i didn't use burpsuite on any box before and now i found out everyone uses it , i tried to learn it but i feel so stupid in web application hacking , i hate all the html and those stuff , i tried burp suite academy but still i hate those stuff , and i got burnt out these 2 days because of overthinking and is cybersecurity is really the way i wanna go , im so confused , i feel like i loved hacking so much those 2 weeks but im losing motivation or like i feel like i learned so much but im still so bad that i don't understand what isscp is talking about in his videos , i used tcm course and there were 10 walk throughs i did them all and understood and studied his methods , but when i switched to youtube people are using different methods and another stuff which really is confusing and i don't know what im writing anymore , why am i so confused and depressed , maybe thats what a burn out is because of my grindng....

submitted by /u/GoodBird9304
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video