KitPloit - PenTest Tools!
Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv31YP2Sqe_AahVNAQBpaPK6Y68_VabMVrpxwqGxwIHUOEORglgWC0c0xKEMwQywVAWUYVOlxQhc3UDoNRkcI-DytV0AZ7xU4MBa9FSh-55wj-DQL5cuRPV-4Fe5UxW_4r9hI_N8wt1p7Vfp6cMP3gcFgkY4umJnxrhgG6CslOuv4_6nukjMata86k/w640-h524/burpsuite.png
A burp suite extension that enumerates infrastructure and application Admin Interfaces.

OWASP References:

* Classification: Web Application Security Testing > 02-Configuration and Deployment Management Testing
* OTG v4: OWASP OTG-CONFIG-005
* WSTG: WSTG-CONF-05
Why should I use this extension?

* Multi-thread
* Different and configurable levels of test.
* Includable status codes
* Excludable status codes
* More than 1000 built-in payloads.
* You can load your dictionary.
* Editable root directory
* Automatic detection of used technologies to generate custom payloads.
* Passive listening to find login pages.

Installation

The quickest way is to load the jar file (adminPanelFinder.jar) in the extender tab of the Burpsuite.
Extender -> Extensions -> Add
A new tab will be added to the burp suite.
Quick Start

1. Select a request of a target host from any tab of the burp suite (it must have a response with any status code)
2. In the "Admin Panel Finder -> options" tab, apply your configurations.
3. Go to the "Admin Panel Finder -> Finder -> Finder" tab and click on the "start" button.

Some of the options

These options can be used to customize the detection:

* Level: Level of tests to perform (1-5, default 3)
* Thread: num of threads (1-50, default 10)
* Built-in dictionary: there is a built-in dictionary containing the most used directory and file names to be used for static payload generation.
* Loadable dictionary: you can use your dictionary file for static payload generation.
* HTTP method: HTTP method to be used in requests (HEAD, GET)(default: Head)
* Extension: The extension used in application pages. [Example: php, asp, aspx, jsp, ...]
* Root Dir: The path to the root directory of the web application. (Default: /)
* Includable status codes
* Excludable status codes

Disclaimer

This program is for educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that I'm not liable for any damages caused by the direct or indirect use of the information or functionality provided by these programs. The author or any Internet provider bears NO responsibility for content or misuse of these programs or any derivatives thereof. By using these programs you accept the fact that any damage (data loss, system crash, system compromise, etc.) caused by the use of this program is not my responsibility.

Contact

If you have any further questions, please don't hesitate to contact me via my twitter account.
Download Admin-Panel_Finder

___________________________
@hacking_Attack
@Hacking_Video

$700 Bounty writeup

Hello readers,Continue reading on Medium »
Read more...

IOC-based threat hunting for free and without registration
https://www.reddit.com/r/redteamsec/comments/vdo8di/iocbased_threat_hunting_for_free_and_without/

submitted by /u/Cultural_Budget6627 (https://www.reddit.com/user/Cultural_Budget6627)
[link] (https://socprime.com/blog/uncoder-cti-step-by-step-guidelines/) [comments] (https://www.reddit.com/r/redteamsec/comments/vdo8di/iocbased_threat_hunting_for_free_and_without/)

___________________________
@hacking_Attack
@Hacking_Video

All onliners for bug bounty hunters
https://thinkermaruf.medium.com/all-onliners-for-bug-bounty-hunters-7f77f5bd41b?source=rss------bug_bounty-5

check all oneliners below.Continue reading on Medium » (https://thinkermaruf.medium.com/all-onliners-for-bug-bounty-hunters-7f77f5bd41b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Helio Bounty Program is now live
https://medium.com/@Helio-HAY/the-helio-bounty-program-is-now-live-dc95b52d0674?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We are pleased to announce the official start of the Helio Bounty Program for our community and security researchers. It is critical to…Continue reading on Medium » (https://medium.com/@Helio-HAY/the-helio-bounty-program-is-now-live-dc95b52d0674?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to grab an IP from someone without them looking at anything you send?

I am in a really bad situation right now, where my boyfriends ex girlfriend sent me screenshots of his old account on a roleplaying app suddenly active again. He claims they shared the account, and that it’s her on there and she’s lying, that he doesn’t even know the account details anymore. When confronting her she was very aggressive, called us a bunch of names, and blocked us. I do not know that I can trust him though about this situation. Is there any way i could pay someone to simply tell me the country they’re logging into the account from? Anything like that. They live in two separate countries. Figuring this out would really help.

submitted by /u/throwaway00110011006
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
scammed

Hi i got scammed by bizum and i want to know Who did that but i only have thr phone number, is there any way to do that?

submitted by /u/dani_campas
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Best rule set for hashcat in 2022?

Does anyone have a recommended ruleset they use for hashcat in 2022? I have been using the same one for some years now, with modifications each year to include certain things like current event names (think president at the time, people in the media, etc) and dates, company specific terms, industry terms, etc.... BUT.... anyone care to share their rule set? (or partial) - curious to run it against my rule set to see if it is more or less successful.

submitted by /u/sqlallstar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What characteristics do you and companies possess that tend to attract cyberattacks, and why do hackers target them?

https://external-preview.redd.it/LtauB6aN11Q05BGY9JA2GOU8mk8bE-oBkFQLz2bbXLE.jpg?width=320&crop=smart&auto=webp&s=a8af396f7f6fad90d22485d61f51022adfde54b6 submitted by /u/TheDigitalPrepper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

All onliners for bug bounty hunters

check all oneliners below.Continue reading on Medium »
Read more...

The Helio Bounty Program is now live

We are pleased to announce the official start of the Helio Bounty Program for our community and security researchers. It is critical to…Continue reading on Medium »
Read more...

Bypass Email Confirmation
https://medium.com/@baradjaydipsinh83/bypass-email-confirmation-2516f0a452ee?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone. In this blog, I will share my finding on How I was able to bypass the email confirmation by just paying close observation…Continue reading on Medium » (https://medium.com/@baradjaydipsinh83/bypass-email-confirmation-2516f0a452ee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Caldera: Red Team Emulation (Part 1)

This article aims to demonstrate an open-source breach & emulation framework through which red team activity can be conducted with ease. It focuses on MITRE simulation and has tons of other functions that can be used in the activity. Table of ContentsMITRE Att&ck

Caldera

* Pre-requisite & dependencies
* Interface
* Installation
* Plugins

Campaigns

* Step1: Deploy an Agent
* Step2: Abilities
* Step3: Setting up Operations
* Step4: Exporting the result

Conclusion Mitre Att&ckMitre framework provides a list of all the Tactics, Techniques and Procedure (TTPs) & their corresponding sub-techniques arranged in a well-structured form which can be used in red team activities.

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp3GaFNZaN3IyfZzSE6Hpz3hCT2m4HqaNbPKUQQLvqDzIaXKfzZjAGAcHCjgBbxA27niO_ZL8aXt2skapB6rNoKfDwqWKJYIGuGvqhVSHEch40b8tGnnWjdLmemO-dYo_vmDaHJzVlILvMqWPsuer4x0BdoXxe-tZyUtp-iWfDnVwt7U0nSQx9HopTiw/s16000/0.1.png?w=640&ssl=1 CalderaCALDERA breach & emulation tool designed to easily automate adversary emulation, assist manual red-teams and automate incident response.

The framework consists of two components:

The core system: This is the framework code, consisting of what is available in this repository. Included is an asynchronous command-and-control (C2) server with a REST API and a web interface.

Plugins: These repositories expand the core framework capabilities and provide additional functionality. Examples include agents, reporting, collections of TTPs and more.

Pre-requisite & dependencies

These requirements are for the computer running the core framework:

* Any Linux or MacOS
* Python 3.7+ (with Pip3)
* Recommended hardware to run on is 8GB+ RAM and 2+ CPUs
* Recommended: GoLang 1.17+ to dynamically compile GoLang-based agents.

Installation

Follow these steps for setting up caldera:
git clone https://github.com/mitre/caldera.git --recursive
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguVaqh-QQaeCGiN858M7A8pkWvV3BFyuS_E_xiSE2UQ0LXWXHXbh_SImDaDrr_T-dztmDY9guusDhaTbi10jfAxQLRfGH5fKT63MNfgc51NKgJPSuG-o85_RNzqdVM7ZFPiQuZxdjulRt7RjvA-VZqAUSRWyNRpoMgJT7aqu0b6vZ9AelZb_go1AtylA/s16000/1.png?w=640&ssl=1
cd caldera
pip3 install -r requirements.txt
python3 server.py –insecure
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAIfh3Ra6ydFJ1f1HfltbyY_HHC9yNugHIwLh-a-w7Rf2Aok45aJS3B9w2-acduxLE_PYEdqeZGpPYzly9z6iNF1yc5l6tbWll-O9pJ1-HH9a4bJtnQg9b2hERJovEedd5y1t2YnuyiuWFTGm5zKQPMth1TGj6Wtk6yIuGS6B_WU_OICGvEncD5PLxow/s16000/2.png?w=640&ssl=1

Interface

Caldera provides web interface which is simple to navigate and use.
http://127.0.0.1:8888
username: red
Password: admin
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic7DYVpDLQI-0W8-JpQIt-lioSTPCd4nKRQ_l1x4guI0iw0KL7sSYz_CdLjfFMd763sAGHPlHynOFi9lMXWwR6JoA6zSUEFPX2tFvE-Db-28a1rk-1yW-yo6Te9sXB2Wr-sr3xxo0tzD8hXYR4UEgatg-PYMfGC-8rrWan1QEfqKw54JjnpkMt3_E-8A/s16000/3.png?w=640&ssl=1

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP3STTZlSiz1H01unjLETZOAshF9WXCrE3RI5RIpiS5QvH2WmSznsuQeodXBb4yBGRZ8trCKnT3Oza6oKM8XzS8PF1dvtfytvSGrItr41dIfF1p50KENWl76JRK166jDoOReds2Ctmjr0izlEUwzfCgI8oKqzpTfXpi8Gqqw0YnyHHC6x0iC6-fepiww/s16000/4.png?w=640&ssl=1

Plugins

The Plugins category offers a list of all current plugins and allows you to quickly and easily access their functionality.

* Access (Red team initial access tools and techniques)
* Atomic (Atomic Red Team project TTPs)
* Builder (Dynamically compile payloads)
* CalTack (embedded ATT&CK website)
* Compass (ATT&CK visualizations)
* Debrief (Operations insights)
* Emu (CTID emulation plans)
* Fieldmanual (Documentation)
* GameBoard (Visualize joint red and blue operations)
* Human (Create simulated noise on an endpoint)
* Manx (Shell functiona[...]

___________________________
@hacking_Attack
@Hacking_Video

lity and reverse shell payloads)
* Mock (Simulate agents in operations)
* Response (Incident response)
* Sandcat (Default agent)
* SSL (Enable HTTPS for caldera)
* Stockpile (Technique and profile storehouse)
* Training (Certification and training course)

To know more about a particular plugin, follow the link. CampaignsAgents, adversaries, and operations make up the Campaigns category, which may be used to build up the numerous agents, adversaries, and operations needed for a red team operation or adversary emulation.

Step1: Deploy an Agents

To begin with initial access we need to implant an agent inside the target system.

To set up an agent or listener:

In the campaign tab, click on agents

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_lBolR5uhRdtzblD8-Qm91gdOP5sPmREQvbUr3Tapxj2XGqvNmwbyH2e19cEzrB2yNWJRy-g3W7Wu280Adn93Ud8ADQBLqdziEBDu0PzEBXnuxvHIS7r45P4XnXHdWZN6-2Ym3teshISmWhf2PbaQQiPGrCJ8Et8h0tHsqGN7EYxWt_frbcJUkbnTw/s16000/5.png?w=640&ssl=1

Choose an agent (3 types currently available)

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy41IUoHfrWUoQGHxK3CTESQNafi_LgGTFjNzgNYD11anZXekeGozrzjcbEvJf_FgNZ6NBNxIMF4UwTotESSkPPhkkjC7TDIF_5QOeVyEZ9ILGZyXCYhBzlgb-sG8poMrFjOuQrMO8ZyjUw_lFkEl617AsZjYFKM4kBP9Aq0c_OR6FFhfDVJZEUT0fGA/s16000/6.1.png?w=640&ssl=1

Choose the platform (Windows, Linux or Darwin [mac OS])

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVkifgQkeNYxlxQG2H_gIiIxZS_CkXOX7gs3U2pTKJYAic8lqrVMxbKClLyLiJQJpy3x8_lVb4EpiJWdkajomvh94fbhNn534Rh809LkPUv0u1_EX47s0zqSJAdCp4W_NUaQCFirb7DdwzndHdI578t7P8mJ5MNqXekHK1ABtONSsuYCTB9xCrGGU7Wg/s16000/6.png?w=640&ssl=1

As soon as the platform is selected, you need to set up the IP, Port & name of the implant

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgckuAVZfGJ9HfaSQSJAzufJDrG_7ZOKLlysBpEAfzCqTqMoa_7tV81IX5nb69CQtcVlVuZsjRNnOqyzaTDLvF4cuz52D4IAUccI-TPHCXRac3I-8lX0_dsbqM7-nO7BeRLkPNsevnH3L9JZgqMlXgPMlriYHBidVqlgHm2kdLAUyrtQEUH3qnTZ1Rs3Q/s16000/7.png?w=640&ssl=1

It will also give a set of commands needed to be executed on the target

In the case of Linux/Mac OS, execute it on terminal

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiThndWAHgWD6_YtBhzZn556u6PlKzZ0SVk0t0dLY_mCDmObiqknI7wVa1W2KZKKeo99CXDBtHVSJJBWf0Tyk0T5aT8qtlPhw1BHHhpX1G13RrXgUGGSioRT1HvtWDRkUHo0PH0tPZu6GAcntV9mxBmgBmitBLbxg6tAshX9Tee7RilGdZ1-6k32xIow/s16000/8.png?w=640&ssl=1

Deploy agent inside the target machine by simple copy-paste

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsEX9r-wdZ4ZfWHLmA6XzAH1yAljGty0a73_PoRJOyy6P9yEKdDCDOJapJ0vMagsijbqeAt6hcLu84hRqSW4qiiZrRkOA5Q293IXlnJjObsMgakAHlMYFKUIwxoybTh1lrQDfJmXWCQ9kuMWppjhbGClZVV_akS-jaRPd3ttp3q7dH3UEVp7ICWIBoAg/s16000/9.png?w=640&ssl=1

In the case of Windows, execute it on PowerShell (Bypass the execution policy first)

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9zviKsLXzgPE8Rl6WFvFY0xzwzC2p2xehhWnlxSUoYlsf1oQ86jLh86ECDE-EAXvdKjI76KLL6CMSkvwNgdRPeTwb1ACMqtAxQS2hIPMwnkCymW7QmwY0z8lvfAGRES6PwWudqQnXkBVUqEAw_TymIXmJ-c7rOZajCWPFqt9Op5FlZA6U8cEE0Y8JnQ/s16000/11.png?w=640&ssl=1

Deploy agent inside the target machine by simple copy-paste.

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNdDdtg34wHpjKalsux0817796ZADbAjfxxmbWoWN-YBdh7o7wYHx7zpqE4oVsCxh1qIflYI0LxxW-cYfWHp_Y3FClKog0pqX3GAacWl5JtXs6RGC5bEiNrr1G0ohm128MMG8cSFJQWrIkPtwCJUJZWxIp9MEwDn8-5Dq-okFHAM1K99phjOkcW5ajtg/s16000/12.png?w=640&ssl=1

The agent pops back onto the caldera which specifies the command which was executed on the victim end was successful

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxB-Phbt03Yajsq4oy8fsPjPW-TgiSJiNFeMjWRerALNbgh7ROXOgzCAD0iu9gHOo2KQ2RGJHVq407kIxbFXk_xoTLd4GGx8mOpVHxNm3jIOHIOK5XwAQjtRZTbXkr4CKKIP7ZfAHl9B33QexfROLrSOr4snZai3notJOAqlbYD_5Nm2cI4sVZg1N6dw/s16000/13.png?w=640&ssl=1

Step2: Abilities

An ability is a specific ATT&CK tactic/tech[...]

___________________________
@hacking_Attack
@Hacking_Video