Kali Linux Tutorials
Spring4Shell-Scan : A Fully Automated, Reliable, And Accurate Scanner For Finding Spring4Shell

Spring4Shell-Scan is a fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities.

Features

* Support for lists of URLs.
* Fuzzing for more than 10 new Spring4Shell payloads (previously seen tools uses only 1-2 variants).
* Fuzzing for HTTP GET and POST methods.
* Automatic validation of the vulnerability upon discovery.
* Randomized and non-intrusive payloads.
* WAF Bypass payloads.

Description

The Spring4Shell RCE is a critical vulnerability that FullHunt has been researching since it was released. We worked with our customers in scanning their environments for Spring4Shell and Spring Cloud RCE vulnerabilities.

We’re open-sourcing an open detection scanning tool for discovering Spring4Shell (CVE-2022-22965) and Spring Cloud RCE (CVE-2022-22963) vulnerabilities. This shall be used by security teams to scan their infrastructure, as well as test for WAF bypasses that can result in achieving successful exploitation of the organization’s environment.

If your organization requires help, please contact (team at fullhunt.io) directly for a full attack surface discovery and scanning for the Spring4Shell vulnerabilities.

Usage

$ ./spring4shell-scan.py -h
[•] CVE-2022-22965 – Spring4Shell RCE Scanner
[•] Scanner provided by FullHunt.io – The Next-Gen Attack Surface Management Platform.
[•] Secure your External Attack Surface with FullHunt.io.
usage: spring4shell-scan.py [-h] [-u URL] [-p PROXY] [-l USEDLIST] [–payloads-file PAYLOADS_FILE] [–waf-bypass] [–request-type REQUEST_TYPE] [–test-CVE-2022-22963]
optional arguments:
-h, –help show this help message and exit
-u URL, –url URL Check a single URL.
-p PROXY, –proxy PROXY
Send requests through proxy
-l USEDLIST, –list USEDLIST
Check a list of URLs.
–payloads-file PAYLOADS_FILE
Payloads file – [default: payloads.txt].
–waf-bypass Extend scans with WAF bypass payloads.
–request-type REQUEST_TYPE
Request Type: (get, post, all) – [Default: all].
–test-CVE-2022-22963
Test for CVE-2022-22963 (Spring Cloud RCE).

Scan a Single URL

$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local

Discover WAF bypasses against the environment

$ python3 spring4shell-scan.py -u https://spring4shell.lab.secbot.local –waf-bypass

Scan a list of URLs

$ python3 spring4shell-scan.py -l urls.txt

Include checks for Spring Cloud RCE (CVE-2022-22963)

$ python3 spring4shell-scan.py -l urls.txt –test-CVE-2022-22963

Installation

$ pip3 install -r requirements.txt

Docker Support

git clone https://github.com/fullhunt/spring4shell-scan.git
cd spring4shell-scan
sudo docker build -t spring4shell-scan .
sudo docker run -it –rm spring4shell-scan
With URL list “urls.txt” in current directory
docker run -it –rm -v $PWD:/data spring4shell-scan -l /data/urls.txt
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Git-Dumper : A Tool To Dump A Git Repository From A Website

Git-Dumper is a tool to dump a git repository from a website.

Install

This can be installed easily with pip:

pip install git-dumper

Usage

usage: git-dumper [options] URL DIR
Dump a git repository from a website.
positional arguments:
URL url
DIR output directory
optional arguments:
-h, –help show this help message and exit
–proxy PROXY use the specified proxy
-j JOBS, –jobs JOBS number of simultaneous requests
-r RETRY, –retry RETRY
number of request attempts before giving up
-t TIMEOUT, –timeout TIMEOUT
maximum time in seconds before giving up
-u USER_AGENT, –user-agent USER_AGENT
user-agent to use for requests
-H HEADER, –header HEADER
additional http headers, e.g NAME=VALUE

Example

git-dumper http://website.com/.git ~/website
Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
A Few Simple Ways to Transform Your Cybersecurity Hiring

Raytheon Intelligence & Space's Jon Check joins Dark Reading's Terry Sweeney at Dark Reading News Desk at RSA Conference to talk about how hiring must change.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Linux Malware 'Nearly Impossible to Detect'

So-called Symbiote malware, first found targeting financial institutions, contains stealthy rootkit capabilities.

Dark Reading: Attacks/Breaches
Mitigating the Security Skills Shortage

Panther Labs' Jack Naglieri joins Dark Reading's Terry Sweeney at Dark Reading News Desk at RSA Conference to discuss how to improve hiring and training.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Application Security Testing Is on the Mend With Automated Remediation

Mend's Arabella Hallawell joins Dark Reading's Terry Sweeney at Dark Reading News Desk at RSA Conference to talk about the benefits of automated remediation.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Secure a High-Profile Event Like the Super Bowl

Cisco's TK Keanini and the NFL's Tomás Maldonado join Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to talk about end-to-end security.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Blunt the Virulence of the New Ransomware

Halcyon's Jon Miller joins Dark Reading's Terry Sweeney at Dark Reading News Desk during RSA Conference to discuss how to mitigate ransomware.

___________________________
@hacking_Attack
@Hacking_Video

What do you think??
https://www.reddit.com/r/Pentesting/comments/v9dxc7/what_do_you_think/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/PleasantBluejay7419 (https://www.reddit.com/user/PleasantBluejay7419)
[link] (https://i.redd.it/twkcjktq4u491.jpg) [comments] (https://www.reddit.com/r/Pentesting/comments/v9dxc7/what_do_you_think/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2022–30075 Tp-Link Authenticated RCE

https://cdn-images-1.medium.com/max/1280/1*TveYdprzzVRQlnpkmccoiA.jpeg
CVE-2022–30075

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video