Kali Linux Tutorials
Smap : A Drop-In Replacement For Nmap Powered By Shodan.Io

Smap is a replica of Nmap which uses shodan.io’s free API for port scanning. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacement for Nmap.

Features

* Scans 200 hosts per second
* Doesn’t require any account/api key
* Vulnerability detection
* Supports all nmap’s output formats
* Service and version fingerprinting
* Makes no contact to the targets

Installation

Binaries

You can download a pre-built binary from here and use it right away.

Manual

go install -v github.com/s0md3v/smap/cmd/smap@latest

Confused or something not working? For more detailed instructions, click here

AUR pacakge

Smap is available on AUR as smap-git (builds from source) and smap-bin (pre-built binary).

Usage

Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iLare ignored. If you are unfamiliar with Nmap, here’s how to use Smap.

Specifying targets

smap 127.0.0.1 127.0.0.2

You can also use a list of targets, seperated by newlines.

smap -iL targets.txt

Supported formats

1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR

Output

Smap supports 6 output formats which can be used with the -o* as follows

If you want to print the output to terminal, use hyphen (-) as filename.

Supported formats

oX // nmap’s xml format
oG // nmap’s greppable format
oN // nmap’s default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json

Note: Since Nmap doesn’t scan/display vulnerabilities and tags, that data is not available in nmap’s formats. Use -oSto view that info.

Specifying ports

Smap scans these 1237 ports by default. If you want to display results for certain ports, use the -poption.

smap -p21-30,80,443 -iL targets.txt
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How safe are VPS providers firewalls?

Curious what everyone's take is on something like linode or vultrs built in firewalling for vps's? Is hosting a vps with auto updates, non root login, fail2ban, ufw, etc etc plus the provided vps firewalling enough to stay relatively safe from attack?

submitted by /u/solar_cell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft Office zero-day vulnerability

submitted by /u/pcaversaccio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Retrieving info from HDD

Hey all,

Working outside of my specialty here and got handed a piece of hardware to mess with from my uncle that I could use some advice on.

I have a Toshiba HDD that is password protected and has some old resumes and contracts on them that I need. Never done much forensics before but where should I be starting for retrieving documents off an HDD that’s password protected?

Main issue being it’s his device but his work made him put a password on it that they kept. He left a few months ago and the password is in his work email so I advised him to reach out to IT for it but in the event he can’t get the pass, how would I retrieve the docs from it? Any advice appreciated. Thanks!

submitted by /u/IAmPerrot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any other resource for web app hacking other than Portswigger Academy?

I did quite a few rooms in tryhackme and still learning through it. Portswigger labs looks extremely boring and I feel that I am learning nothing from them. I do realize that they are important since Burp is an important tool. Still I wish to get some theroetical practical knowledge before I start CTF. So any resource you people would recommend?

submitted by /u/mukulexplorer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Pardon me but Do CTFs posts qualify for this sub?

submitted by /u/Blaack_Work
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a website or a mail install anything on an unrooted android phone without me knowing?

2 scenarios:

* a) getting redirected to a shady website while browsing (without actively accepting any messages or files from it)
* b) opening a spam mail in a known (EU-regulated) mail-provider platform/web-site. (without klicking any link in it)

Can a website or a mail install anything on an unrooted android phone without me knowing,
Like a Key-logger?

submitted by /u/GerritTheBerrit
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Distinguishing AI Hype From Reality in SecOps

AI and ML are important SecOps tools, but human involvement is still required.

Dark Reading: Attacks/Breaches
StorCentric Launches Nexsan EZ-NAS -Network-Attached Storage for SMBs and Enterprise Edge Deployments

EZ-NAS also provides add-on data backup, cloud connector and ransomware anomaly detection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ordr Secures $40 Million in Series C Funding to Answer Increased Demand for Connected Device Security

Rising threat of data breaches and ransomware attacks drives need for complete and accurate real-time information about devices and their risks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Help Organizations to Mitigate Risk in Microsoft 365 with 'Vectra Protect'

Vectra offers a free of charge security assessment for your cloud tenant.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Zero Trust Research Reveals Nearly Half of All Security Leaders Do Not Believe They Will Be Breached Despite Increasing Attacks and Adoption of Zero Trust Strategies

Industry-first report finds zero trust segmentation eliminates 5 cyber disasters per year and saves $20+ million annually.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Enhanced Threat Intelligence Portal Provides Consolidated Access to Kaspersky Threat Intelligence Expertise

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
10 No-BS Tips for Building a Diverse and Dynamic Security Team

Advice from women and nonbinary security leaders on creating well-rounded security teams, stronger CISO leadership, and a more resilient industry.

Dark Reading: Attacks/Breaches
Security at the Edge: Why It's Complicated

Edge technology widens the attack surface by bringing data analysis closer to where it's collected. Now is the time for public and private sector groups to establish guidelines and identify security best-practices frameworks.