--turnserver value, -s value turn server to connect to in the format host:port
--tls Use TLS for connecting (false in most tests) (default: false)
--protocol value protocol to use when connecting to the TURN server. Supported values: tcp and udp (default: "udp")
--timeout value connect timeout to turn server (default: 1s)
--username value, -u value username for the turn server
--password value, -p value password for the turn server
--help, -h show help (default: false)
tcp-scanner Same as udp-scanner but sends out HTTP requests to the specified ports (HTTPS is not supported) Options --debug, -d enable debug output (default: false) --turnserver value, -s value turn server to connect to in the format host:port --tls Use TLS for connecting (false in most tests) (default: false) --protocol value protocol to use when connecting to the TURN server. Supported values: tcp and udp (default: "udp") --timeout value connect timeout to turn server (default: 1s) --username value, -u value username for the turn server --password value, -p value password for the turn server --ports value Ports to check (default: "80,443,8080,8081") --ip value Scan single IP instead of whole private range. If left empty all private ranges are scanned. Accepts single IPs or CIDR format. (accepts multiple inputs) --help, -h show help (default: false) Example ./stunner brute-transports -s x.x.x.x:3478 -u username -p password Example workflow Let's say you find a service using WebRTC and want to test it. First step is to get the required data. I suggest to launch Wireshark in the background and just join a meeting via Burp to collect all HTTP and Websocket traffic. Next search your burp history for some keywords related to TURN like 3478, password, credential and username (be sure to also check the websocket tab for these keywords). This might reveal the turn server and the protocol (UDP and TCP endpoints might have different ports) and the credentials (https://www.kitploit.com/search/label/Credentials) used to connect. If you can't find the data in burp start looking at wireshark to identify the traffic. If it's on a non standard port (anything else then 3478) decode the protocol in Wireshark via a right click as STUN. This should show you the username used to connect and you can use this information to search burps history even further for the required data . Please note that Wireshark can't show you the password as the password is used to hash some package contents so it can not be reversed. Next step would be to issue the info command to the turn server using the correct port and protocol obtained from burp. If this works, the next step is a range-scan. If this allows any traffic to internal systems you can exploit this further but be aware that UDP has only limited use cases. If TCP connections to internal systems are allowed simply launch the socks command and access the allowed IPs via a browser and set the socks proxy to 127.0.0.1:1080. You can try out 127.0.0.1:443 and other ips to find management (https://www.kitploit.com/search/label/Management) interfaces.

Download Stunner (https://github.com/firefart/stunner)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google UI — What is Official and What is Not?

https://cdn-images-1.medium.com/max/600/1*1iXf1z96WtL5CanoGnVxFQ.png
Ever since being hacked I am overly suspicious about everything. Not because I was, but because someone hacks your account, there are…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Dear Hacker Kids…and Dads…

There is a better way…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Stunner - Tool To Test And Exploit STUN, TURN And TURN Over TCP Servers

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Butt plug hacking 101.

https://external-preview.redd.it/tE_ugjJHG7IiqsOy8feZbjPSxpT2_Ax8Nk5XF09laAY.jpg?width=640&crop=smart&auto=webp&s=8681aa0e5a26d993b988f7617144f129719c47c7 submitted by /u/chaseNscores
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers Finding Creative Ways for Exploiting Log4J Vulnerability.

submitted by /u/ExistingWay4324
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
HackTheBox - Appointment Walkthrough

https://external-preview.redd.it/U9QE2FYqCEa6TW5m5CYs5V2jLkk7B3tPVALjjkU0d30.jpg?width=320&crop=smart&auto=webp&s=82f9283daf18785bf128d5fb57f6002570b94abf submitted by /u/Zedark
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Critical OAS Bugs Open Industrial Systems to Takeover

The most serious flaw gives attackers a way to remotely execute code on systems that many organizations use to move data in critical ICS environments, security vendor says.

My First Bounty Reward For low hanging fruit
https://medium.com/@rebbasanath/my-first-bounty-reward-for-low-hanging-fruit-9f5a57c2544d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Guys, I am Sanath Vyas R working as Web Penetration Tester & Trainer in RVR Security Solutions.Continue reading on Medium » (https://medium.com/@rebbasanath/my-first-bounty-reward-for-low-hanging-fruit-9f5a57c2544d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Try Hack Me : DogCat

https://cdn-images-1.medium.com/max/778/1*HyyW_-RbmfKubVSnhhWcSw.png
Try Hack me Box : Dog Cat. Date : 05–28–2022

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Try Hack Me : GLITCH

https://cdn-images-1.medium.com/max/658/1*Yambjmjzk-iIL6NrOWeRRg.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video