Kali Linux Tutorials
Gitcolombo : Extract And Analyze Contributors Info From Git Repos

Git colombo is an OSINT tool to extract info about persons from git repositories: common names, emails, matches between different (as it may seems) accounts.

Using

* Install git
* Run:

from any git url
./gitcolombo.py -u https://github.com/Kalanchyovskaia16/newlps
from directory, recursively
./gitcolombo.py -d ./newlps -r
from all GitHub personal/org repos by nickname
./gitcolombo.py –nickname LubyRuffy

For batch cloning from Gitlab and Bitbucket group repos you can use ghorg.

Output:

* verbose persons info
* name
* email
* number of appearences as author/committer
* other persons that person can be

* emails used for the same name
* different names for the same person
* general statistics

What’s the difference between git author and committer?

TL;DR

* author wrote the code (make the patch)
* commiter commit it to the repo (rewrite history, make pull/merge requests…)

Nice explanation: https://stackoverflow.com/questions/18750808/difference-between-author-and-committer-in-git

Very often developers make inaccurate commits with the one name/email (e.g. work account), then change to the right (e.g. personal account) and make git commit --amend, but forget to change the author of the commit. This way we can use it for OSINT as match of names/emails from git history.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Socid-Extractor : Extract Accounts Info From Personal Pages On Various Sites For OSINT Purpose

Socid-Extractor Extracts information about a user from profile webpages / API responses and save it in machine-readable format.

Usage

As a command-line tool:

$ socid_extractor –url https://www.deviantart.com/muse1908
country: France
created_at: 2005-06-16 18:17:41
gender: female
username: Muse1908
website: www.patreon.com/musemercier
links: [‘https://www.facebook.com/musemercier’, ‘https://www.instagram.com/muse.mercier/’, ‘https://www.patreon.com/musemercier’]
tagline: Nothing worth having is easy…

Without installing:

$ ./run.py –url https://www.deviantart.com/muse1908

As a Python library:

import socid_extractor, requests
r = requests.get(‘https://www.patreon.com/annetlovart’)
socid_extractor.extract(r.text)
{‘patreon_id’: ‘33913189’, ‘patreon_username’: ‘annetlovart’, ‘fullname’: ‘Annet Lovart’, ‘links’: “[‘https://www.facebook.com/322598031832479’, ‘https://www.instagram.com/annet_lovart’, ‘https://twitter.com/annet_lovart’, ‘https://youtube.com/channel/UClDg4ntlOW_1j73zqSJxHHQ’]”}

Installation

$ pip3 install socid-extractor

The latest development version can be installed directly from GitHub:

$ pip3 install -U git+https://github.com/soxoj/socid_extractor.git

Sites and Methods

More than 100 methods for different sites and platforms are supported!

* Google (all documents pages, maps contributions), cookies required
* Yandex (disk, albums, znatoki, music, realty, collections), cookies required to prevent captcha blocks
* Mail.ru (my.mail.ru user mainpage, photo, video, games, communities)
* Facebook (user & group pages)
* VK.com (user page)
* OK.ru (user page)
* Instagram
* Reddit
* Medium
* Flickr
* Tumblr
* TikTok
* GitHub

…and many others.

You can also check tests file for data examples, schemes file to expore all the methods.

When it may be useful

* Getting all available info by the username or/and account UID. Examples: Week in OSINT, OSINTCurious
* Users tracking, checking that the account was previously known (by ID) even if all public info has changed. Examples: Aware Online
* Searching by commonly used cross-service UIDs (GAIA ID, Facebook UID, Yandex Public ID, etc.)
* DB leaks of forums and platforms in SQL format
* Indexed links that contain target profile ID

* Searching for tracking data by comparison with other IDs – how it works, how can it be used.
* Law enforcement online requests

Testing

python3 -m pytest tests/test_e2e.py -n 10 -k ‘not cookies’ -m ‘not github_failed and not rate_limited’
Download

___________________________
@hacking_Attack
@Hacking_Video

CLV Wallet Bug Bounty Campaign

Reward Pool of 100,000 CLV!Continue reading on Medium »
Read more...

Vaas - Verdict-as-a-Service SDKs: Analyze Files For Malicious Content
http://www.kitploit.com/2022/05/vaas-verdict-as-service-sdks-analyze.html

___________________________
@hacking_Attack
@Hacking_Video

Verdict-as-a-Service (VaaS) is a service that provides a platform for scanning files for malware and other threats. It allows easy integration in your application. With a few lines of code, you can start scanning files for malware. ATTENTION: All SDKs are currently prototypes and under heavy construction! Integration of Malware Detection Easily integrate malware detection (https://www.kitploit.com/search/label/Malware%20Detection) into any kind of application, service or platform. Create a command line (https://www.kitploit.com/search/label/Command%20Line) scanner to find malware with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples/gscan) 

___________________________
@hacking_Attack
@Hacking_Video

Create a KDE Dolphin plugin to scan for malicious content with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples/kde_dolphin)

___________________________
@hacking_Attack
@Hacking_Video

Create a WordPress plugin that scans all file uploads for malware with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/php/examples/wordpress) 

___________________________
@hacking_Attack
@Hacking_Video

Create a Discord bot that scans and deletes malicious files uploaded on your Discord server with few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript/examples/discordbot)

___________________________
@hacking_Attack
@Hacking_Video

I'm interested in VaaS You need credentials (https://www.kitploit.com/search/label/Credentials) to use the service in your application. If you are interested in using VaaS, please contact us (mailto:oem@gdata.de). SDKs At the moment SDKs for Rust (https://github.com/GDATASoftwareAG/vaas/blob/main/rust), Java (https://github.com/GDATASoftwareAG/vaas/blob/main/java), Typescript (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript) and PHP (https://github.com/GDATASoftwareAG/vaas/blob/main/php) are available. Functionality Rust Java PHP TypeScript Check SHA256 ✅ ✅ ✅ ✅ Check SHA256 list ✅ ❌ ❌ ✅ Check file ✅ ✅ ✅ ✅ Check file list ✅ ❌ ❌ ✅ Documentation Documentation for the SDKs is available in the corresponding SDK folder. Rust SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/rust), Examples (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples) Java SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/java) PHP SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/php), Examples (https://github.com/GDATASoftwareAG/vaas/blob/main/php/examples) TypeScript SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript) Planned SDKs The following SDKs are planned but not yet available: Swift and Perl. If you need SDKs for other languages, please create an issue or contribute an SDK with a pull request.

Download Vaas (https://github.com/GDATASoftwareAG/vaas)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You’ve Been Hacked!

https://cdn-images-1.medium.com/max/722/1*2tbGk37GbhiVMvHCaiZItA.png
Something you think will never happen to you, or so I foolishly assumed. I was prepared, even though I never expected it to happen. My…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Basic Pentesting

https://cdn-images-1.medium.com/max/1365/1*9IX3q6BKBD0IUi84j8B5Eg.png
Level: Easy (Just because it says easy doesn’t mean it’s easy)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video