Hakoriginfinder - Tool For Discovering The Origin Host Behind A Reverse Proxy. Useful For Bypassing Cloud WAFs!
http://www.kitploit.com/2022/05/hakoriginfinder-tool-for-discovering.html

___________________________
@hacking_Attack
@Hacking_Video

Tool for discovering the origin host behind a reverse (https://www.kitploit.com/search/label/Reverse) proxy. Useful for bypassing (https://www.kitploit.com/search/label/Bypassing) WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname that you provide and store the response, then it will make a request to every IP address that you provide via HTTP (80) and HTTPS (443), with the Host header set to the original host. Each HTTP response is then compared to the original using the Levenshtein algorithm to determine similarity. If the response is similar, it will be deemed a match.
Usage Provide the list of IP addresses via stdin, and the original hostname via the -h option. For example: prips 93.184.216.0/24 | hakoriginfinder -h example.com
You may set the Levenshtein distance threshold with -l. The lower the number, the more similar the matches need to be for it to be considered a match, the default is 5. The number of threads may be set with -t, default is 32. The hostname is set with -h, there is no default. Output The output is 3 columns, separated by spaces. The first column is either "MATCH" or "NOMATCH" depending on whether the Levenshtein threshold was reached or not. The second column is the URL being teseted, and the third column is the Levenshtein score. Output example hakluke$ prips 1.1.1.0/24 | hakoriginfinder -h one.one.one.one
NOMATCH http://1.1.1.0 54366
NOMATCH http://1.1.1.30 54366
NOMATCH http://1.1.1.20 54366
NOMATCH http://1.1.1.4 54366
NOMATCH http://1.1.1.11 54366
NOMATCH http://1.1.1.5 54366
NOMATCH http://1.1.1.22 54366
NOMATCH http://1.1.1.13 54366
NOMATCH http://1.1.1.10 54366
NOMATCH http://1.1.1.25 54366
NOMATCH http://1.1.1.19 54366
... snipped for brevity ...
NOMATCH http://1.1.1.251 54366
NOMATCH http://1.1.1.248 54366
MATCH http://1.1.1.1 0
NOMATCH http://1.1.1.3 19567
NOMATCH http://1.1.1.2 19517
MATCH https://1.1.1.1 0
NOMATCH https://1.1.1.3 19534
NOMATCH https://1.1.1.2 19532
Installation Install golang, then run: go install github.com/hakluke/hakoriginfinder@latest


Download Hakoriginfinder (https://github.com/hakluke/hakoriginfinder)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I call it AI SCI FI — I asked an artificial intelligence to help me write science fiction

https://cdn-images-1.medium.com/max/600/1*oWtSG1xic1OvKYQFIopYzQ.jpeg
Alien invasions are easily one of the most common tropes in science fiction.

Continue reading on Medium »

KitPloit - PenTest Tools!
Hakoriginfinder - Tool For Discovering The Origin Host Behind A Reverse Proxy. Useful For Bypassing Cloud WAFs!

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGaTtU1rZxmpX3ztLJIXP89nGuh_dUnTAF1aAGcxU1cHXi-KFYu_EfOB0FIj8WPecfoHaflMhgVixIc2_G74UtM-F4PkGOYP7taCNMXXfnuSm2vCsMe80FXEyfXCvRUVuQyIR1rPqzlvX7F4bQ72jUFn0_FGDf4_vBvkBELKhTof5ymZ9_HO99D7RK/w640-h330/hakoriginfinder.png
Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies.

How does it work?

This tool will first make a HTTP request to the hostname that you provide and store the response, then it will make a request to every IP address that you provide via HTTP (80) and HTTPS (443), with the Hostheader set to the original host. Each HTTP response is then compared to the original using the Levenshtein algorithm to determine similarity. If the response is similar, it will be deemed a match.
Usage

Provide the list of IP addresses via stdin, and the original hostname via the -h option. For example:

prips 93.184.216.0/24 | hakoriginfinder -h example.com


You may set the Levenshtein distance threshold with -l. The lower the number, the more similar the matches need to be for it to be considered a match, the default is 5.

The number of threads may be set with -t, default is 32.

The hostname is set with -h, there is no default.

Output

The output is 3 columns, separated by spaces. The first column is either "MATCH" or "NOMATCH" depending on whether the Levenshtein threshold was reached or not. The second column is the URL being teseted, and the third column is the Levenshtein score.

Output example

hakluke$ prips 1.1.1.0/24 | hakoriginfinder -h one.one.one.one
NOMATCH http://1.1.1.0 54366
NOMATCH http://1.1.1.30 54366
NOMATCH http://1.1.1.20 54366
NOMATCH http://1.1.1.4 54366
NOMATCH http://1.1.1.11 54366
NOMATCH http://1.1.1.5 54366
NOMATCH http://1.1.1.22 54366
NOMATCH http://1.1.1.13 54366
NOMATCH http://1.1.1.10 54366
NOMATCH http://1.1.1.25 54366
NOMATCH http://1.1.1.19 54366
... snipped for brevity ...
NOMATCH http://1.1.1.251 54366
NOMATCH http://1.1.1.248 54366
MATCH http://1.1.1.1 0
NOMATCH http://1.1.1.3 19567
NOMATCH http://1.1.1.2 19517
MATCH https://1.1.1.1 0
NOMATCH https://1.1.1.3 19534
NOMATCH https://1.1.1.2 19532


Installation

Install golang, then run:

go install github.com/hakluke/hakoriginfinder@latest

Download Hakoriginfinder

CYBERSOC Information Technology Library Blog
https://www.reddit.com/r/redteamsec/comments/v0bu9b/cybersoc_information_technology_library_blog/

submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://www.reddit.com/r/cybersocitlibrary/comments/v0bjud/cybersoc_information_technology_library_blog/) [comments] (https://www.reddit.com/r/redteamsec/comments/v0bu9b/cybersoc_information_technology_library_blog/)

Biblioteca Walkthrough:THM
https://medium.com/@amyrahm786/biblioteca-walkthrough-thm-69946c555252?source=rss------bug_bounty-5

In the past few days, I am recharging myself by trying my hands at different rooms present in tryhackme TryHackMe. So thought why not just…Continue reading on Medium » (https://medium.com/@amyrahm786/biblioteca-walkthrough-thm-69946c555252?source=rss------bug_bounty-5)

DOMAIN ADMIN Compromise in 3 HOURS
https://popalltheshells.medium.com/domain-admin-compromise-in-3-hours-5778902604c9?source=rss------bug_bounty-5

Hi everyone; I hope you enjoyed my previous blog post on “How I obtained Admin access in 30 minutes” — so today I am bringing you another…Continue reading on Medium » (https://popalltheshells.medium.com/domain-admin-compromise-in-3-hours-5778902604c9?source=rss------bug_bounty-5)

Biblioteca Walkthrough:THM

In the past few days, I am recharging myself by trying my hands at different rooms present in tryhackme TryHackMe. So thought why not just…Continue reading on Medium »
Read more...

DOMAIN ADMIN Compromise in 3 HOURS

Hi everyone; I hope you enjoyed my previous blog post on “How I obtained Admin access in 30 minutes” — so today I am bringing you another…Continue reading on Medium »
Read more...

hacking: security in practice
Is there a good list of Hashcat benchmarks for GPUs?

Is there a "comprehensive" database of benchmarks for various GPUs?

You can usually find someone has benchmarked a GPU if you google, but I've not seen them all nicely collated in one spot.

I have a fantasy of building a tool to find "best bang for buck and do something like discover that 4 older, $100, GPUs are as good as a 3090 or something.

submitted by /u/homelaberator
[link] [comments]

hacking: security in practice
Where do email phishers get email address?

They have to get an email address somewhere. If the phishing email is to be believable, the email address they use has to appear legit. But to get a proper legit-looking email address, you have to pay for it. There is no one that user Bitcoin that I know of, and even then Bitcoin could be traced back to the Phisher.

submitted by /u/bee4534
[link] [comments]

hacking: security in practice
What does it mean to be a hacker?

If you asked 100 different people how they got into IT, you would get 100 different answers.

I'm curious how true this is for hacking, I feel it's so much more than just "an individual with technical skills". I'm interested to hear some opinions.

The phrase hacker originates from radio amateurs during the explosion of Radio in the 50s, who defined if very differently to the phreakers of the 90s. In the 2010s a splinter group of Anonymous called LulzSec were the forefront of hacking, now with the information generation they are most likely to think of game cheaters.

That's the context to my question, what is hacking to you?

Technical skills and thinking outside the box are cliche. For example... to me, hacking is simply a desire to improve upon things that already exist.

I got into this when I was younger to bypass my Dad's controls so I could stay up playing Minecraft on school nights.

I speak for white-hats but that's why I enjoy the craft, not only protecting others but to improve and create.

So I ask you, what does it mean to be a hacker?

submitted by /u/Turbulent_Curve2020
[link] [comments]

The dangers of CSRF and GET requests
https://medium.com/@nostalgiaufc/the-dangers-of-csrf-and-get-requests-6455537bf438?source=rss------bug_bounty-5

For those of you who are unfamiliar with CSRF, it works as follows:Continue reading on Medium » (https://medium.com/@nostalgiaufc/the-dangers-of-csrf-and-get-requests-6455537bf438?source=rss------bug_bounty-5)

The dangers of CSRF and GET requests

For those of you who are unfamiliar with CSRF, it works as follows:Continue reading on Medium »
Read more...