Hacking on Medium
Hack The Box — Paper Walkthrough

https://cdn-images-1.medium.com/max/683/1*sIXQri2xDzw-Wx8o1c78eA.png
This is one of the easy Machines from Hack The Box and before we deep-dive into the actual penetration testing, I want to outline that…

Continue reading on Medium »

Hacking on Medium
P3 Bug in Just 2 Minute

https://cdn-images-1.medium.com/max/600/1*yWQ0-uoQU1lncGyGSOhT_g.gif
Hey Hello, Security guys & Hacker Thank you for your support.

Continue reading on Medium »

KitPloit - PenTest Tools!
Mitmproxy2Swagger - Automagically Reverse-Engineer REST APIs Via Capturing Traffic

https://blogger.googleusercontent.com/img/a/AVvXsEiCiElXWk9v5gX9fIOyvNzcdq9SQ8Oo1JooPYYmaPupJ1oHoC0VGFTCMnXGyiqecdCGsoDFp6EHBlj7lnGb9l9bzRyJlbEnkXv8pX1JizzB97NQoCJlNxEL_4buWBG8viUncMVnXh1ZGkqEirRYo8jozlShyEtkw-v8eIAA9vgNxWcm_b6o_nqXZ1S-=s16000 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic. InstallationFirst you will need python3 and pip3. $ pip install mitmproxy2swagger
# ... or ...
$ pip3 install mitmproxy2swaggerThen clone the repo and run mitmproxy2swaggeras per examples below. UsageMitmproxyTo create a specification by inspecting HTTP traffic you will need to:

1.
Capture the traffic by using the mitmproxy tool. I personally recommend using mitmweb, which is a web interface built-in to mitmproxy. $ mitmweb
Web server listening at http://127.0.0.1:8081/
Proxy server listening at http://*:9999
...IMPORTANT

To configure your client to use the proxy exposed by mitm proxy, please consult the mitmproxy documentation for more information.

2.
Save the traffic to a flow file.

In mitmweb you can do this by using the "File" menu and selecting "Save": https://blogger.googleusercontent.com/img/a/AVvXsEiCiElXWk9v5gX9fIOyvNzcdq9SQ8Oo1JooPYYmaPupJ1oHoC0VGFTCMnXGyiqecdCGsoDFp6EHBlj7lnGb9l9bzRyJlbEnkXv8pX1JizzB97NQoCJlNxEL_4buWBG8viUncMVnXh1ZGkqEirRYo8jozlShyEtkw-v8eIAA9vgNxWcm_b6o_nqXZ1S-=s16000 3.
Run the first pass of mitmproxy2swagger: $ mitmproxy2swagger -i <path_to_mitmptoxy_flow-o <path_to_output_schema-p <api_prefixPlease note that you can use an existing schema, in which case the existing schema will be extended with the new data. You can also run it a few times with different flow captures, the captured data will be safely merged. <api_prefixis the base url of the API you wish to reverse-engineer. You will need to obtain it by observing the requests being made in mitmproxy.

For example if an app has made requests like these: https://api.example.com/v1/login
https://api.example.com/v1/users/2
https://api.example.com/v1/users/2/profile The likely prefix is https://api.example.com/v1.

4.
Running the first pass should have created a section in the schema file like this: x-path-templates:
# Remove the ignore: prefix to generate an endpoint with its URL
# Lines that are closer to the top take precedence, the matching is greedy
- ignore:/addresses
- ignore:/basket
- ignore:/basket/add
- ignore:/basket/checkouts
- ignore:/basket/coupons/attach/{id}
- ignore:/basket/coupons/attach/104754You should edit the schema file with a text editor and remove the ignore:prefix from the paths you wish to be generated. You can also adjust the parameters appearing in the paths.

5.
Run the second pass of mitmproxy2swagger: $ mitmproxy2swagger -i <path_to_mitmptoxy_flow-o <path_to_output_schema-p <api_prefix[--examples]Run the command a second time (with the same schema file). It will pick up the edited lines and generate endpoint descriptions.

Please note that mitmproxy2swagger will not overwrite existing endpoint descriptions, if you want to overwrite them, you can delete them before running the second pass.

Passing --exampleswill add example data to requests and responses. Take caution when using this option, as it may add sensitive data (tokens, passwords, personal information etc.) to the schema. HAR1.
Capture and export the traffic from the browser DevTools.

In the browser DevTools, go to the Network tab and click the "Export HAR" button. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvX[...]

sEgUUkPTXqpSOvwBSIZuucSo4UBKNjpnHjyI5QFbodrVmqXfnVcVs3Bry806AVTsal0ckRLN9FK3DfxHceYeQRNX3ImhSqtOabOxnLGMd_Xntxa-n7JMCOR9HajFJMjES8RiKaeoC2Z-xKrSBGbty4xIeRhV7csDZVHg4F_gNUeqFcnfobyFsdm0U_Y-/w640-h96/mitmproxy2swagger.png 2.
Continue the same way you would do with the mitmproxy dump. mitmproxy2swaggerwill automatically detect the HAR file and process it. Example outputSee the examples. You will find a generated schema there and an html file with the generated documentation (via redoc-cli).

See the generated html file here. Download Mitmproxy2Swagger

hacking: security in practice
Why did you join this field?

Is it bad that I originally got into hacking because of Hollywood’s glorification of malicious hackers but got into ethical hacking when I figured I could do the same thing legally? I never actually did any illegal attacks, wanna clear that up. Thats why I got into computers why did yall join?

submitted by /u/ICumToOsama2021
[link] [comments]

hacking: security in practice
Repository on How to Hack and Attac the HVAC

https://external-preview.redd.it/0CXJaBsiEMk0nMb88U-Kw3q0U8F3KfSgvAV6jB3vg7g.jpg?width=640&crop=smart&auto=webp&s=285af930c887911bb0532800ea3d8798055e3b7b submitted by /u/entropydaemon6
[link] [comments]

hacking: security in practice
Discovering who’s behind a fake account?

I’m not sure if this is the right subreddit to ask this but was wondering if anybody could help me. I have been added by a fake account on Snapchat, this person won’t tell me who they are and I’m very suspicious on who’s behind this account. Is there anyway I can find out? I’ve sent them an ip grab link which they didn’t open.

submitted by /u/ConsciousPart1519
[link] [comments]

hacking: security in practice
Rfid Emulator

Hi, I need rfid emulator (antena + board) to connect to my arduino. Thanks.

submitted by /u/Danynovex
[link] [comments]

hacking: security in practice
Hacker Recommended Security

Hi everyone. This question is coming from someone who knows nothing about hacking (I can build you the PC, you're on your own after that).

What would be the first thing you'd tell all every day people to do when it comes to securing their personal computers/devices etc? VPNs, security software, all advice is welcomed, thanks.

submitted by /u/willpowerpt
[link] [comments]

Account Takeover Via Rxss Post
https://medium.com/@mydudehello91/account-takeover-via-rxss-post-ee60b1d4d96f?source=rss------bug_bounty-5

Hello There, My Name is Aryan From Kurdistan, Bug Hunter in Hackerone with Experience 6 Months Also I Student in university, Forgive me…Continue reading on Medium » (https://medium.com/@mydudehello91/account-takeover-via-rxss-post-ee60b1d4d96f?source=rss------bug_bounty-5)

Account Takeover Via Rxss Post

Hello There, My Name is Aryan From Kurdistan, Bug Hunter in Hackerone with Experience 6 Months Also I Student in university, Forgive me…Continue reading on Medium »
Read more...

Web application hacking methodology

Systematic and goal-oriented penetration testing always starts with the right methodology. The following diagram shows how web application…Continue reading on Medium »
Read more...

Do you use a checklist when you do web app pentesting?
https://www.reddit.com/r/Pentesting/comments/v0owoe/do_you_use_a_checklist_when_you_do_web_app/

submitted by /u/ifhd_ (https://www.reddit.com/user/ifhd_)
[link] (https://www.reddit.com/r/Pentesting/comments/v0owoe/do_you_use_a_checklist_when_you_do_web_app/) [comments] (https://www.reddit.com/r/Pentesting/comments/v0owoe/do_you_use_a_checklist_when_you_do_web_app/)

Hacking on Medium
HackThisSite Basic Mission 4

https://cdn-images-1.medium.com/max/700/0*I9qm0qgALljKh6eq.jpg
Back to another basic mission where Sam decided to make a password so complex, but he fortunately made a backup to send the password to…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Web application hacking methodology
https://medium.com/@arshiadev/web-application-hacking-methodology-4d147db32695?source=rss------bug_bounty-5