CRLFsuite is a fast tool specially designed to scan CRLF injection.
Installation $ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h Features Single URL scanningMultiple URL scanningStdin supportedGET & POST method supportedConcurrencyBest Payloads listHeaders (https://www.kitploit.com/search/label/Headers) supportedFast and efficient scanning (https://www.kitploit.com/search/label/Scanning) with negligible false-positiveUsage Single URL scanning: $ crlfsuite -u "http://testphp.vulnweb.com" Multiple URLs scanning: $ crlfsuite -i targets.txt
from stdin: $ subfinder (https://www.kitploit.com/search/label/Subfinder) -d google.com -silent | httpx (https://www.kitploit.com/search/label/Httpx) -silent | crlfsuite -s Specifying cookies (https://www.kitploit.com/search/label/Cookies) : $ crlfsuite -u "http://testphp.vulnweb.com" --cookies "key=val; newkey=newval" Using POST method: $ crlfsuite -i targets.txt -m POST -d "key=val&newkey=newval"Bug report If You're facing some errors or issues with this tool, you can open a issue here: Open a issue (https://github.com/Nefcore/CRLFsuite/issues)

Download CRLFsuite (https://github.com/Nefcore/CRLFsuite)

___________________________
@hacking_Attack
@Hacking_Video

CRLFsuite - Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection. Installation $ git clone https://github.com/Nefcore/CRLFsuite.git$ cd CRLFsuite$ sudo python3 setup.py install$ crlfsuite -h Features Single URL scanningMultiple URL scanningStdin supportedGET & POST method supportedConcurrencyBest Payloads listHeaders supportedFast and efficient scanning with negligible false-positiveUsage Single URL scanning: $ crlfsuite -u "http://testphp.vulnweb.com" Multiple URLs scanning: $ crlfsuite -i targets.txt from stdin: $ subfinder -d google.com -silent | httpx -silent | crlfsuite -s Specifying cookies : $ crlfsuite -u "http://testphp.vulnweb.com" --cookies "key=val; newkey=newval" Using POST method: $ crlfsuite -i targets.txt -m POST -d "key=val&newkey=newval"Bug report If You're facing some errors or issues with this tool, you can open a issue here: Open a issue Download CRLFsuite
Read more...

Hacking on Medium
Cyber Kill Chain  — Military approach to cyber attacks and defense

https://cdn-images-1.medium.com/max/1280/1*CP_VxepvhjIw7lMngnVmfg.jpeg
In this article we will dive into the Cyber Kill Chain for Cybersecurity. The Cyber kill chain framework is originally developed by…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Email Stealer — how hackers steal emails from outlook

https://cdn-images-1.medium.com/max/1273/1*lw1kNH0y8wvt7a8Ug3y7Ng.png
Stealing all emails from the victim’s machine without leaving any footprints of the attack

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe : Wgel CTF Write-up

https://cdn-images-1.medium.com/max/640/1*pI7cqF5nfQM77Yia7h8GPg.png
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS in chat section

https://cdn-images-1.medium.com/max/943/1*x5eHDO5YMpZkHj89cu0i2Q.png
Hi Guys my name is jagannath mohanty. i am a bug bounty hunter.i want to tell you about my first XSS in chat story .i start now lets jump…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CRLFsuite - Fast CRLF Injection Scanning Tool

https://blogger.googleusercontent.com/img/a/AVvXsEiJkJ69M3maKmrVidTnhKM3rUJF6XdT5D12-25-Ls7xjKKReHkHjyrFaL5P31zBk8vj8O-YY3ZGOuCq83e1gKzbH0oMsCl2xJ-j_t4UB0XiZ_mKOd6Eetswch1wwbSEH99whZLare1j9Jsb1UqSkJDbd6ns0ius3XFWJ3TdrkLWazG2RnUo8Zo28KdO=w640-h362
CRLFsuite is a fast tool specially designed to scan CRLF injection.
Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h


Features

* Single URL scanning
* Multiple URL scanning
* Stdin supported
* GET & POST method supported
* Concurrency
* Best Payloads list
* Headers supported
* Fast and efficient scanning with negligible false-positive

Usage


Single URL scanning:

$ crlfsuite -u "http://testphp.vulnweb.com"

Multiple URLs scanning:

$ crlfsuite -i targets.txt


from stdin:

$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s

Specifying cookies


:
$ crlfsuite -u "http://testphp.vulnweb.com" --cookies "key=val; newkey=newval"

Using POST method:

$ crlfsuite -i targets.txt -m POST -d "key=val&newkey=newval"


Bug report


If You're facing some errors or issues with this tool, you can open a issue here:
Open a issue
Download CRLFsuite

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Would a hacker ever claim the account owner is dead- Is this a known scam?

To keep this as brief as possible my mothers friend she only communicates with through Facebook went MIA for months, and then she gets a message from someone claiming to be her friends young son saying her friend died a few months ago, my mother thinks it’s a hacker, I don’t want to upset her but I’ve never heard of a hacker doing anything like that before, there was no link or anything it was just a message, any similar stories and advice would be greatly appreciated

submitted by /u/EvangelineElouisa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
what are the system security benchmark tools for Kali Linux?

I need to produce a benchmark of Kali Linux security system for my project. I found openscap tool for other linux can I use it on Kali and suggest me other such benchmarking or automated tool that produces results based on check lists

submitted by /u/ImaGoodGuy2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

SynAck Red Team
https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/

Hi, I saw many people mentioning they're part of SynAck Red Team. Is that a job ? are they getting paid ? submitted by /u/Spare_Prize1148 (https://www.reddit.com/user/Spare_Prize1148)
[link] (https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/) [comments] (https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to use Pintrest to market your business

https://cdn-images-1.medium.com/max/640/1*SWwS0dsetgyQQv98sBCesg.png
Create plenty of images, even if they are very similar.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox:Timelapse

https://cdn-images-1.medium.com/max/1400/1*2pxkeeMxZ-7laQAxCJaPLw.png
Overview:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Hacking Kubernetes: Threat Driven Analysis and Defense” Chapter 5 Notes: Networking

https://cdn-images-1.medium.com/max/1125/1*YMS7BltK5IIahPfAX9IimA.jpeg
Prefer videos over articles? Check out the video book review here

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video