n number and exit

Please follow installation instructions before running. Do not run the JFScan under a root, it’s not needed since we set a special permissions on the masscan binary. ExampleScan targets for only for ports 80 and 443 with rate of 10 kpps: $ jfscan -p 80,443 --targets targets.txt -r 10000Scan targets for top 1000 ports : $ jfscan --top-ports 1000 1.1.1.1/24You can also specify targets on stdin and pipe it to nuclei: $ cat targets.txt | jfscan --top-ports 1000 -q | httpx -silent | nucleiOr as positional parameter: $ jfscan --top-ports 1000 1.1.1.1/24 -q | httpx -silent | nucleiOr everything at once, the JFScan just does not care and scans all the targets specified: $ echo target1 | jfscan --top-ports 1000 target2 --targets targets.txt -q | httpx -silent | nucleiUtilize nmap to gather more info about discovered services: $ cat targets.txt | jfscan -p 0-65535 --nmap --nmap-options="-sV --scripts ssh-auth-methods"The targets.txt can contain targets in the following forms (IPv6 similarly):

http://domain.com/
domain.com
1.2.3.4
1.2.3.0/24
1.1.1.1-1.1.1.30 Installation* Before installation, make sure you have the latest version of Masscan installed (tested version is 1.3.2).

First, install a libpcap-dev (Debian based distro) or libcap-devel (Centos based distro):

sudo apt install libpcap-dev

Next, clone the official repository and install:

sudo apt-get –assume-yes install git make gcc
git clone https://github.com/robertdavidgraham/masscan
cd masscan
make
sudo make install

The Masscan requires root permissions to run. Since running binaries under root is not good idea, we will set a CAP_NET_RAW capability to the binary:

sudo setcap CAP_NET_RAW+ep /usr/bin/masscan

For installation of JFscan a python3 and pip3 is required.

sudo apt install python3 python3-pip

Install JFScan:

$ git clone https://github.com/nullt3r/jfscan.git
$ cd jfscan
$ pip3 install .

If you can’t run the jfscan directly from command line you should check if $HOME/.local/bin is in your path.

Add the following line to your ~/.zshrcor ~/.bashrc:

export PATH=”$HOME/.local/bin:$PATH” Download

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Security Fixes Won’t Require Full iOS Update in iOS 16, Will Be Installed Automatically

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I am disappointed

So a few weeks ago I managed to download thousand of internal documents from an insurance company's staff website without logging in.

I offered them the information and my script on GitHub.

And they never retrieved the code.

Took them about a week to just admit/understand the documents where fully accessible to anyone with the urls.

Anyways my code was pretty, short and sweet and I am disappointed no one will ever look at it.

submitted by /u/human8264829264
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do websites know you're using selenium ?

I was trying to automate some stuff on Gmail and AliExpress and both website completely refuse authentication through an automated browser window.

How is it detected and is there a workaround ?

submitted by /u/human8264829264
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do you find the hash text of a profile

I'm trying to hack back into my Instagram account and nothing has worked so far, and when I started to try to hack back into it I couldn't even find the hash text to try to brute force it or dictionary attack or anything like that. can you guys help

submitted by /u/Marshenmanhunter
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can taking advantage of an exploit in a foreign website get you in trouble?

Say you theoretically found an exploit in a Macau lottery website and chose to use the exploit to profit, would you be in any legal trouble in the U.S.? Is it even an issue if the exploit is already there and accessible to the public? It's not like I attacked the website or created the exploit, just using it.

submitted by /u/raheke8
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Best tool to clone NFC tags from a distance?
https://www.reddit.com/r/redteamsec/comments/v6o7dy/best_tool_to_clone_nfc_tags_from_a_distance/

I currently have the ProxMark3 but I need to get the NFC tag really close. Is there any modifications I can do? If not, what product would you recommend? submitted by /u/ErikDz11 (https://www.reddit.com/user/ErikDz11)
[link] (https://www.reddit.com/r/redteamsec/comments/v6o7dy/best_tool_to_clone_nfc_tags_from_a_distance/) [comments] (https://www.reddit.com/r/redteamsec/comments/v6o7dy/best_tool_to_clone_nfc_tags_from_a_distance/)

___________________________
@hacking_Attack
@Hacking_Video

Bringing back sensitive files from web archives
https://medium.com/@R00tendo/bringing-back-sensitive-files-from-web-archives-607c629c6f18?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Technical detailsContinue reading on Medium » (https://medium.com/@R00tendo/bringing-back-sensitive-files-from-web-archives-607c629c6f18?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bringing back sensitive files from web archives

Technical detailsContinue reading on Medium »
Read more...

Hacking on Medium
How To Setup DVWA In Windows 10 Using XAMPP

https://cdn-images-1.medium.com/max/640/0*onoAYoViZy8vCBJE.jpg
How To Setup DVWA In Windows 10 Using XAMPP

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
VulnHub — OSCP Writeup

https://cdn-images-1.medium.com/max/1696/1*fnss4krpWB3VQOtVE4Rnyw.png
It has been a while since I wrote a medium post. Well, here I go! This is my write-up on a machine called OSCP from VulnHub. Let’s go!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ngrok an awesome way access reverse shell.

https://cdn-images-1.medium.com/max/860/1*npg28DFIservRhkrCOmEcQ.png
Ngrok is a legal online+++++ tool which offers a simple solution to quickly expose a local server to the Internet whenever you want to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can You Be Tracked with a VPN?

It is not impossible that you can get tracked with a VPN. Free VPNs often cooperate with advertisers to collect user data. That is to say…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found lost camera

Hi all, yesterday I found a camera on the beach. It was late evening and there was none around, so I decided to turn it on and I saw a picture of the owner and his wife ( or the other way around). I decided to pick it up with the intention of finding the owner.....

I would love to find the owner of this camera, but it sounds difficult. I was thinking about using Facebook AI facial recognition but I discovered that the AI facial recognition feature has been removed.

Is there any way I can find the owner?

submitted by /u/matteo94s
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video