Cervantes is an opensource (https://www.kitploit.com/search/label/Opensource) collaborative platform for pentesters (https://www.kitploit.com/search/label/Pentesters) or red teams (https://www.kitploit.com/search/label/Red%20Teams) who want to save time to manage their projects, clients, vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) and reports in one place.Features OpenSource Multiplatform Multilanguage Team Collaboration BuiltIn dashbaords and analytics Manage your clients and Offensive Security projects One click reports creation And more
Runtime requirements Docker Docker compose How to run it locally with Docker compose First you need to clone this repository git clone https://github.com/CervantesSec/docker.git After that you need to start your docker containers: docker-compose -p Cervantes up -d After this, open your browser at http://localhost (http://localhost/) Default User is: admin@cervantes.local - Admin123. How to run it locally from source Install dotnet sdk from https://dotnet.microsoft.com/en-us/download Install PostgreSQL (https://www.kitploit.com/search/label/PostgreSQL) https://www.postgresql.org/download/ Clone this repository git clone https://github.com/CervantesSec/cervantes.git In Cervantes.Web -> appsettings.json edit the DefaultConnection with your database parameters {
"ConnectionStrings": {
"DefaultConnection": "Server=localhost;Database=cervantes;Username=postgres;Password=postgres"
},
"Logging": {
"LogLevel": {
"Default": "Trace",
"Microsoft": "Warning",
"Microsoft.Hosting.Lifetime": "Information",
"Cervantes.*": "Trace"
}
},
"AllowedHosts": "*",
"EmailConfiguration": {
"SmtpServer": "smtp.office365.com",
"SmtpPort": 587,
"SmtpUsername": "EMAIL",
"SmtpPassword": "PASSWORD"
}
} NOTE if your using linux install wkhtmltopdf and and copy the wkhtmltopdf and wkhtmltoimage from /usr/bin to /CERVANTES_PATH/Cervantes.Web/wwwroot/Rotativa/Linux/ Run the project dotnet run --project /CERVANTES_PATH/Cervantes.Web/ After this, open your browser at http://localhost:5001 (http://localhost:5001/) Default User is: admin@cervantes.local - Admin123. How to contribute Here are some things you could do to become a contributor: ★ Star this project on Github ★ Suggest new features or ideas Improve the code of the platform components Report security issues Before you jump to make any changes make sure you have read the contributing guidelines (https://github.com/CervantesSec/cervantes/blob/main/CONTRIBUTING.md). This would save us all time. Thanks! How to report bugs If you have bugs to report please use the issues (https://github.com/CervantesSec/cervantes/issues) tab on Github to submit the details.
Download Cervantes (https://github.com/CervantesSec/cervantes)
___________________________
@hacking_Attack
@Hacking_Video
Runtime requirements Docker Docker compose How to run it locally with Docker compose First you need to clone this repository git clone https://github.com/CervantesSec/docker.git After that you need to start your docker containers: docker-compose -p Cervantes up -d After this, open your browser at http://localhost (http://localhost/) Default User is: admin@cervantes.local - Admin123. How to run it locally from source Install dotnet sdk from https://dotnet.microsoft.com/en-us/download Install PostgreSQL (https://www.kitploit.com/search/label/PostgreSQL) https://www.postgresql.org/download/ Clone this repository git clone https://github.com/CervantesSec/cervantes.git In Cervantes.Web -> appsettings.json edit the DefaultConnection with your database parameters {
"ConnectionStrings": {
"DefaultConnection": "Server=localhost;Database=cervantes;Username=postgres;Password=postgres"
},
"Logging": {
"LogLevel": {
"Default": "Trace",
"Microsoft": "Warning",
"Microsoft.Hosting.Lifetime": "Information",
"Cervantes.*": "Trace"
}
},
"AllowedHosts": "*",
"EmailConfiguration": {
"SmtpServer": "smtp.office365.com",
"SmtpPort": 587,
"SmtpUsername": "EMAIL",
"SmtpPassword": "PASSWORD"
}
} NOTE if your using linux install wkhtmltopdf and and copy the wkhtmltopdf and wkhtmltoimage from /usr/bin to /CERVANTES_PATH/Cervantes.Web/wwwroot/Rotativa/Linux/ Run the project dotnet run --project /CERVANTES_PATH/Cervantes.Web/ After this, open your browser at http://localhost:5001 (http://localhost:5001/) Default User is: admin@cervantes.local - Admin123. How to contribute Here are some things you could do to become a contributor: ★ Star this project on Github ★ Suggest new features or ideas Improve the code of the platform components Report security issues Before you jump to make any changes make sure you have read the contributing guidelines (https://github.com/CervantesSec/cervantes/blob/main/CONTRIBUTING.md). This would save us all time. Thanks! How to report bugs If you have bugs to report please use the issues (https://github.com/CervantesSec/cervantes/issues) tab on Github to submit the details.
Download Cervantes (https://github.com/CervantesSec/cervantes)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Nanodump : A Crappy LSASS Dumper With No ASCII Art
Nanodump, a flexible tool that creates a minidump of the LSASS process. Features* It uses syscalls (with SysWhispers2) for most operations.
* Syscalls are called from an ntdll address to bypass some syscall detections.
* It sets the syscall callback hook to NULL.
* Windows APIs are called using dynamic invoke.
* You can choose to download the dump without touching disk or write it to a file.
* The minidump by default has an invalid signature to avoid detection.
* It reduces the size of the dump by ignoring irrelevant DLLs. The (nano)dump tends to be arround 10 MiB in size.
* You don’t need to provide the PID of LSASS.
* No calls to dbghelp or any other library are made, all the dump logic is implemented in nanodump.
* Supports process forking.
* Supports snapshots.
* Supports handle duplication.
* Supports MalSecLogon.
* Supports the PPL userland exploit.
* You can load nanodump in LSASS as a Security Support Provider (SSP).
* You can use the .exe version to run nanodump outside of Cobalt Strike https://s.w.org/images/core/emoji/14.0.0/72x72/1f604.png . UsageClonegit clone https://github.com/helpsystems/nanodump.git Compile (optional)On Linux with MinGW
On Windows with MSVC (No BOF support)
nmake -f Makefile.msvc ImportImport the
beacon> nanodump Restore the signatureOnce you downloaded the minidump, restore the invalid signature
scripts/restore_signature Process forkingTo avoid opening a handle to LSASS with
This will make nanodump create a handle to LSASS with
This will make nanodump create a handle to LSASS with
If one is found, it will copy it and use it to create the minidump.
Note that it is not guaranteed to find such handle. MalSecLogonTo avoid opening a handle to LSASS, you can use MalSecLogon, which is a technique that (ab)uses
To enable this feature, use the
Take into account that an unsigned nanodump binary needs to be written to disk to use this feature. MalSecLogon and handle duplicationAs said before, using MalSecLogon requires a nanodump binary to be written to disk.
This can be avoided if
The trick is to leak a handle to LSASS using MalSecLogon, but instead of leaking it into nanodump.exe, leak it into another binary and then duplicate the leaked handle so that nanodump can used it. Load nanodump as an SSPYou can load nanodump as an SSP in LSASS to avoid opening a handle. The dump will be written to disk with an invalid signature at
To change the dump path and signature configuration, modify the function
___________________________
@hacking_Attack
@Hacking_Video
Nanodump : A Crappy LSASS Dumper With No ASCII Art
Nanodump, a flexible tool that creates a minidump of the LSASS process. Features* It uses syscalls (with SysWhispers2) for most operations.
* Syscalls are called from an ntdll address to bypass some syscall detections.
* It sets the syscall callback hook to NULL.
* Windows APIs are called using dynamic invoke.
* You can choose to download the dump without touching disk or write it to a file.
* The minidump by default has an invalid signature to avoid detection.
* It reduces the size of the dump by ignoring irrelevant DLLs. The (nano)dump tends to be arround 10 MiB in size.
* You don’t need to provide the PID of LSASS.
* No calls to dbghelp or any other library are made, all the dump logic is implemented in nanodump.
* Supports process forking.
* Supports snapshots.
* Supports handle duplication.
* Supports MalSecLogon.
* Supports the PPL userland exploit.
* You can load nanodump in LSASS as a Security Support Provider (SSP).
* You can use the .exe version to run nanodump outside of Cobalt Strike https://s.w.org/images/core/emoji/14.0.0/72x72/1f604.png . UsageClonegit clone https://github.com/helpsystems/nanodump.git Compile (optional)On Linux with MinGW
On Windows with MSVC (No BOF support)
nmake -f Makefile.msvc ImportImport the
NanoDump.cnascript on Cobalt Strike. RunRun the nanodumpcommand in the Beacon console.beacon> nanodump Restore the signatureOnce you downloaded the minidump, restore the invalid signature
scripts/restore_signature Process forkingTo avoid opening a handle to LSASS with
PROCESS_VM_READ, you can use the --forkparameter.This will make nanodump create a handle to LSASS with
PROCESS_CREATE_PROCESSaccess and then create a ‘clone’ of the process. This new process will then be dumped. While this will result in a process creation and deletion, it removes the need to read LSASS directly. SnapshotSimilarly to the --forkoption, you can use --snapshotto create a snapshot of the LSASS process.This will make nanodump create a handle to LSASS with
PROCESS_CREATE_PROCESSaccess and then create a snapshot of the process using PssNtCaptureSnapshot. This new process will then be dumped. The snapshot will be freed automatically upon completion. Handle duplicationAs opening a handle to LSASS can be detected, nanodump can instead search for existing handles to LSASS.If one is found, it will copy it and use it to create the minidump.
Note that it is not guaranteed to find such handle. MalSecLogonTo avoid opening a handle to LSASS, you can use MalSecLogon, which is a technique that (ab)uses
CreateProcessWithLogonWto leak an LSASS handle.To enable this feature, use the
--malseclogonparameter.Take into account that an unsigned nanodump binary needs to be written to disk to use this feature. MalSecLogon and handle duplicationAs said before, using MalSecLogon requires a nanodump binary to be written to disk.
This can be avoided if
--malseclogonand --dupare used together with --binary.The trick is to leak a handle to LSASS using MalSecLogon, but instead of leaking it into nanodump.exe, leak it into another binary and then duplicate the leaked handle so that nanodump can used it. Load nanodump as an SSPYou can load nanodump as an SSP in LSASS to avoid opening a handle. The dump will be written to disk with an invalid signature at
C:\Windows\Temp\report.docxby default. Once the dump is completed, DllMainwill return FALSE to make LSASS unload the nanodump DLL.To change the dump path and signature configuration, modify the function
NanoDumpin entry.c and recompile. Upload and load a nanodump DLLI[...]___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Nanodump : A Crappy LSASS Dumper With No ASCII Art
Nanodump, a flexible tool that creates a minidump of the LSASS process. It uses syscalls (with SysWhispers2) for most operations.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
BackupOperatorToDA : From An Account Member Of The Group Backup Operators To Domain Admin
BackupOperatorToDA, From An Account Member Of The Group Backup Operators To Domain Admin Without RDP Or WinRM On The Domain Controller.
If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller.
All credit from filip_dragovic with his inital POC ! I build this project because I wanted to have a more generic binary with parameters and also being able to export the SAM database on the remote share !
PS C:\Users\mpgn\POC> .\BackupOperatorToDA.exe -h
Backup Operator to Domain Admin (by @mpgn_x64)
This tool exist thanks to @filip_dragovic / https://github.com/Wh04m1001
Mandatory argument:
-t \computer_name (ex: \dc01.pouldard.wizard
-o Where to store the sam / system / security files (can be UNC path)
Optional arguments:
-u Username
-p Password
-d Domain
-h help
Example:
* Using the user RON member of the Backup Operators group on another server than the DC
* I dump and export the SAM database on the remote share
* Then I read the SAM file with secretdump
* An I use the computer account fo the DC to dump the NTDS !
What’s the magic ?
The code is really simple, there is only 3 steps:
*
*
*
Blackfield from HackTheBox
This box was designed by aas_s3curity to exploit a user from the group “Backup Operators” to become domain admin and get the root flag. I search a little bit on the available writeups but all of them where using WinRM to exploit the “Backup Operators” group.
With this POC you don’t need to have an access with WinRM or RPD :
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglJ4Mi-qLbPl6gP87Z_8Upkoza6T1Lx0nAVDy6HuY_BrzT-vZ_a7_k4p9BDymtKFbdYYhmqAnyKXEgAaj6k-NGSVA7TKpLUOA5ybxKWSRhXt0LkvjqBRtL8hUlch2ez7PmYb5RhAYygCGu3TmnjucvQIeRgZtwJaeeMELbuAOY4tI-DFS3O-JwMuit/s1374/154149493-094cada5-61a5-431d-b95c-ae5be6f65ee1.png
Download
___________________________
@hacking_Attack
@Hacking_Video
BackupOperatorToDA : From An Account Member Of The Group Backup Operators To Domain Admin
BackupOperatorToDA, From An Account Member Of The Group Backup Operators To Domain Admin Without RDP Or WinRM On The Domain Controller.
If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller.
All credit from filip_dragovic with his inital POC ! I build this project because I wanted to have a more generic binary with parameters and also being able to export the SAM database on the remote share !
PS C:\Users\mpgn\POC> .\BackupOperatorToDA.exe -h
Backup Operator to Domain Admin (by @mpgn_x64)
This tool exist thanks to @filip_dragovic / https://github.com/Wh04m1001
Mandatory argument:
-t \computer_name (ex: \dc01.pouldard.wizard
-o Where to store the sam / system / security files (can be UNC path)
Optional arguments:
-u Username
-p Password
-d Domain
-h help
Example:
* Using the user RON member of the Backup Operators group on another server than the DC
* I dump and export the SAM database on the remote share
* Then I read the SAM file with secretdump
* An I use the computer account fo the DC to dump the NTDS !
What’s the magic ?
The code is really simple, there is only 3 steps:
*
RegConnectRegistryA: Establishes a connection to a predefined registry key on another computer.*
RegOpenKeyExA: Opens the specified registry key*
RegSaveKeyA: Saves the specified key and all of its subkeys and values to a new fileBlackfield from HackTheBox
This box was designed by aas_s3curity to exploit a user from the group “Backup Operators” to become domain admin and get the root flag. I search a little bit on the available writeups but all of them where using WinRM to exploit the “Backup Operators” group.
With this POC you don’t need to have an access with WinRM or RPD :
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglJ4Mi-qLbPl6gP87Z_8Upkoza6T1Lx0nAVDy6HuY_BrzT-vZ_a7_k4p9BDymtKFbdYYhmqAnyKXEgAaj6k-NGSVA7TKpLUOA5ybxKWSRhXt0LkvjqBRtL8hUlch2ez7PmYb5RhAYygCGu3TmnjucvQIeRgZtwJaeeMELbuAOY4tI-DFS3O-JwMuit/s1374/154149493-094cada5-61a5-431d-b95c-ae5be6f65ee1.png
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
BackupOperatorToDA : From An Account Member Of The Group Backup
BackupOperatorToDA, From An Account Member Of The Group Backup Operators To Domain Admin Without RDP Or WinRM On The Domain Controller
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Nanodump : A Crappy LSASS Dumper With No ASCII Art Nanodump, a flexible tool that creates a minidump of the LSASS process. Features* It uses syscalls (with SysWhispers2) for most operations. * Syscalls are called from an ntdll address…
f used with no parameters, an unsigned nanodump DLL will be uploaded to the Temp folder. Once the dump has been created, manually delete the DLL with the
beacon> load_ssp
beacon> delete_file C:\Windows\Temp[RANDOM].dll PPL bypassIf LSASS is running as Protected Process Light (PPL), you can try to bypass it using a userland exploit discovered by Project Zero. If it is successful, the dump will be written to disk.
To access this feature, use the
beacon> nanodump_ppl -v -w C:\Windows\Temp\lsass.dmp Parameters–getpidGet PID of LSASS and leave.
This is just for convenience, nanodump does not need the PID of LSASS. –write -w < path > (required for EXE)Where to write the dumpfile.
* BOF: If this parameter is not provided, the dump will be downloaded in a fileless manner.
* EXE: This parameter is required given that no C2 channel exists –valid -vThe minidump will have a valid signature.
If not entered, the signature will be invalid. Before analyzing the dump restore the signature of the dump, with:
If used as BOF, an unsigned binary will be written to disk unless –dup is also provided! –binary -b < path >Path to a binary such as
This option is used exclusively with
beacon> nanodump –fork –write C:\lsass.dmp
Use MalSecLogon to leak an LSASS handle in a notepad process, duplicate that handle to get access to LSASS, then read it indirectly by creating a fork and download the dump with a valid signature:
beacon> nanodump –malseclogon –dup –fork –binary C:\Windows\notepad.exe –valid
Get a handle with MalSecLogon, read LSASS indirectly by using a fork and write the dump to disk with a valid signature (a nanodump binary will be uploaded!):
beacon> nanodump –malseclogon –fork –valid –write C:\Windows\Temp\lsass.dmp HTTPS redirectorsIf you are using an HTTPS redirector (as you should), you might run into issues when downloading the dump filessly due to the size of the requests that leak the dump.
Increase the max size of requests on your web server to allow nanodump to download the dump. NGINXlocation ~ ^…$ {
…
client_max_body_size 50M;
}
Apache2
LimitRequestBody 52428800 Download
___________________________
@hacking_Attack
@Hacking_Video
delete_filecommand.beacon> load_ssp
beacon> delete_file C:\Windows\Temp[RANDOM].dll PPL bypassIf LSASS is running as Protected Process Light (PPL), you can try to bypass it using a userland exploit discovered by Project Zero. If it is successful, the dump will be written to disk.
To access this feature, use the
nanodump_pplcommandbeacon> nanodump_ppl -v -w C:\Windows\Temp\lsass.dmp Parameters–getpidGet PID of LSASS and leave.
This is just for convenience, nanodump does not need the PID of LSASS. –write -w < path > (required for EXE)Where to write the dumpfile.
* BOF: If this parameter is not provided, the dump will be downloaded in a fileless manner.
* EXE: This parameter is required given that no C2 channel exists –valid -vThe minidump will have a valid signature.
If not entered, the signature will be invalid. Before analyzing the dump restore the signature of the dump, with:
scripts/restore_signature –fork -fFork LSASS and dump this new process. –snapshot -sCreate a snapshot of LSASS and dump this new process. –dup -dTry to find an existing handle to LSASS and duplicate it. –malseclogon -mLeak a handle to LSASS using MalSecLogon.If used as BOF, an unsigned binary will be written to disk unless –dup is also provided! –binary -b < path >Path to a binary such as
C:\Windows\notepad.exe.This option is used exclusively with
--malseclogonand --dup. ExamplesRead LSASS indirectly by creating a fork and write the dump to disk with an invalid signature:beacon> nanodump –fork –write C:\lsass.dmp
Use MalSecLogon to leak an LSASS handle in a notepad process, duplicate that handle to get access to LSASS, then read it indirectly by creating a fork and download the dump with a valid signature:
beacon> nanodump –malseclogon –dup –fork –binary C:\Windows\notepad.exe –valid
Get a handle with MalSecLogon, read LSASS indirectly by using a fork and write the dump to disk with a valid signature (a nanodump binary will be uploaded!):
beacon> nanodump –malseclogon –fork –valid –write C:\Windows\Temp\lsass.dmp HTTPS redirectorsIf you are using an HTTPS redirector (as you should), you might run into issues when downloading the dump filessly due to the size of the requests that leak the dump.
Increase the max size of requests on your web server to allow nanodump to download the dump. NGINXlocation ~ ^…$ {
…
client_max_body_size 50M;
}
Apache2
LimitRequestBody 52428800 Download
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to catch a Reverse shell over the Internet
https://cdn-images-1.medium.com/max/1004/0*FsTiPB2OhS23_W0d.png
In this blog, I talk about exposing one local port to the internet and using it to catch reverse shells like we would do in any local…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How to catch a Reverse shell over the Internet
https://cdn-images-1.medium.com/max/1004/0*FsTiPB2OhS23_W0d.png
In this blog, I talk about exposing one local port to the internet and using it to catch reverse shells like we would do in any local…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to catch a Reverse shell over the Internet
In this blog, I talk about exposing one local port to the internet and using it to catch reverse shells like we would do in any local…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Best article about how to start hacking
https://toptrend009.blogspot.com/2022/06/how-to-learn-hacking-from-zero.html
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Best article about how to start hacking
https://toptrend009.blogspot.com/2022/06/how-to-learn-hacking-from-zero.html
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Best article about how to start hacking
https://toptrend009.blogspot.com/2022/06/how-to-learn-hacking-from-zero.html
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Symfonos:4 Vulnhub Walkthrough
https://cdn-images-1.medium.com/max/881/0*o-FoJXP8N46Cw_8G
Symfonos:4 Vulnhub Walkthrough
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Symfonos:4 Vulnhub Walkthrough
https://cdn-images-1.medium.com/max/881/0*o-FoJXP8N46Cw_8G
Symfonos:4 Vulnhub Walkthrough
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Symfonos:4 Vulnhub Walkthrough
Symfonos:4 Vulnhub Walkthrough
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Why I Applied for Tech Fellowship Though I am not a Good Programmer
https://cdn-images-1.medium.com/max/1267/1*jZD79qzEbyZ_atHH8zGN1w.jpeg
Last May, I got an email from Major League Hacking, an organization that plans hackathons and tech events. I subscribed to receive their…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Why I Applied for Tech Fellowship Though I am not a Good Programmer
https://cdn-images-1.medium.com/max/1267/1*jZD79qzEbyZ_atHH8zGN1w.jpeg
Last May, I got an email from Major League Hacking, an organization that plans hackathons and tech events. I subscribed to receive their…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Why I Applied for Tech Fellowship Though I am not a Good Programmer
Last May, I got an email from Major League Hacking, an organization that plans hackathons and tech events. I subscribed to receive their…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Capital One Hacked by an Ex-Amazon Employee
https://cdn-images-1.medium.com/max/600/0*4NVEW6EKdwVRFbHc
A former Amazon web services employee was convicted after stealing data of over 100 million people, including social security numbers and…
Continue reading on Cybersecurity and Cyber Crime »
___________________________
@hacking_Attack
@Hacking_Video
Capital One Hacked by an Ex-Amazon Employee
https://cdn-images-1.medium.com/max/600/0*4NVEW6EKdwVRFbHc
A former Amazon web services employee was convicted after stealing data of over 100 million people, including social security numbers and…
Continue reading on Cybersecurity and Cyber Crime »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Capital One Hacked by an Ex-Amazon Employee
A former Amazon web services employee was convicted after stealing data of over 100 million people, including social security numbers and…
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place
https://blogger.googleusercontent.com/img/a/AVvXsEgYS0f96ejBYQV1yTPRDyheJ997s0FUvi3F7OiJJvH6quMi4Yd7rvyYEGE2P6GmfNsOvWl_FiY0GyO3-FyXBcCbB3tNQhnuL-GmgvAD3H4cKgYO7QywtKixz54qxp_ut1yu-H8IELj0af_ZPya2sbVzXROFujOZu9HEIfVgq8bsr2TG9-XfmpBE42MK=s16000
Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place.
Features
* OpenSource
* Multiplatform
* Multilanguage
* Team Collaboration
* BuiltIn dashbaords and analytics
* Manage your clients and Offensive Security projects
* One click reports creation
* And more
Runtime requirements
* Docker
* Docker compose
How to run it locally with Docker compose
1. First you need to clone this repository
1. After that you need to start your docker containers:
1.
After this, open your browser at http://localhost
2.
Default User is:
How to run it locally from source
1.
Install dotnet sdk from https://dotnet.microsoft.com/en-us/download
2.
Install PostgreSQL https://www.postgresql.org/download/
3.
Clone this repository
1. In Cervantes.Web -> appsettings.json edit the DefaultConnection with your database parameters
1.
NOTE if your using linux install wkhtmltopdf and and copy the wkhtmltopdf and wkhtmltoimage from /usr/bin to /CERVANTES_PATH/Cervantes.Web/wwwroot/Rotativa/Linux/
2.
Run the project
1.
After this, open your browser at http://localhost:5001
2.
Default User is:
How to contribute
Here are some things you could do to become a contributor:
* ★ Star this project on Github ★
* Suggest new features or ideas
* Improve the code of the platform components
* Report security issues
Before you jump to make any changes make sure you have read the contributing guidelines. This would save us all time. Thanks!
How to report bugs
If you have bugs to report please use the issues tab on Github to submit the details.
Download Cervantes
___________________________
@hacking_Attack
@Hacking_Video
Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place
https://blogger.googleusercontent.com/img/a/AVvXsEgYS0f96ejBYQV1yTPRDyheJ997s0FUvi3F7OiJJvH6quMi4Yd7rvyYEGE2P6GmfNsOvWl_FiY0GyO3-FyXBcCbB3tNQhnuL-GmgvAD3H4cKgYO7QywtKixz54qxp_ut1yu-H8IELj0af_ZPya2sbVzXROFujOZu9HEIfVgq8bsr2TG9-XfmpBE42MK=s16000
Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place.
Features
* OpenSource
* Multiplatform
* Multilanguage
* Team Collaboration
* BuiltIn dashbaords and analytics
* Manage your clients and Offensive Security projects
* One click reports creation
* And more
Runtime requirements
* Docker
* Docker compose
How to run it locally with Docker compose
1. First you need to clone this repository
git clone https://github.com/CervantesSec/docker.git1. After that you need to start your docker containers:
docker-compose -p Cervantes up -d1.
After this, open your browser at http://localhost
2.
Default User is:
admin@cervantes.local - Admin123.How to run it locally from source
1.
Install dotnet sdk from https://dotnet.microsoft.com/en-us/download
2.
Install PostgreSQL https://www.postgresql.org/download/
3.
Clone this repository
git clone https://github.com/CervantesSec/cervantes.git1. In Cervantes.Web -> appsettings.json edit the DefaultConnection with your database parameters
{
"ConnectionStrings": {
"DefaultConnection": "Server=localhost;Database=cervantes;Username=postgres;Password=postgres"
},
"Logging": {
"LogLevel": {
"Default": "Trace",
"Microsoft": "Warning",
"Microsoft.Hosting.Lifetime": "Information",
"Cervantes.*": "Trace"
}
},
"AllowedHosts": "*",
"EmailConfiguration": {
"SmtpServer": "smtp.office365.com",
"SmtpPort": 587,
"SmtpUsername": "EMAIL",
"SmtpPassword": "PASSWORD"
}
}1.
NOTE if your using linux install wkhtmltopdf and and copy the wkhtmltopdf and wkhtmltoimage from /usr/bin to /CERVANTES_PATH/Cervantes.Web/wwwroot/Rotativa/Linux/
2.
Run the project
dotnet run --project /CERVANTES_PATH/Cervantes.Web/1.
After this, open your browser at http://localhost:5001
2.
Default User is:
admin@cervantes.local - Admin123.How to contribute
Here are some things you could do to become a contributor:
* ★ Star this project on Github ★
* Suggest new features or ideas
* Improve the code of the platform components
* Report security issues
Before you jump to make any changes make sure you have read the contributing guidelines. This would save us all time. Thanks!
How to report bugs
If you have bugs to report please use the issues tab on Github to submit the details.
Download Cervantes
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities…
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
AOL 3.0 reverse engineered - Using AOL (1996) in 2022
https://external-preview.redd.it/DngsOAcw-cxg5v-npE47WNC3N1tg9iAQlhnq7FHJPzU.jpg?width=320&crop=smart&auto=webp&s=3be65b5f71e84542d0a8a09c324a128d45ef226a submitted by /u/endless
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
AOL 3.0 reverse engineered - Using AOL (1996) in 2022
https://external-preview.redd.it/DngsOAcw-cxg5v-npE47WNC3N1tg9iAQlhnq7FHJPzU.jpg?width=320&crop=smart&auto=webp&s=3be65b5f71e84542d0a8a09c324a128d45ef226a submitted by /u/endless
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Reddit
r/hacking on Reddit: AOL 3.0 reverse engineered - Using AOL (1996) in 2022
Posted by u/endless - 145 votes and 13 comments
hacking: security in practice
Hacking is dead!
Hacking and breaking is completely dead! Now there is no way to break into systems remotely and phish someone because everyone has/have 200 IQ nowadays, hmm we're wasting our time to learn stupid hacks. And look at these poor youtubers who are repeating same things again and again and showing stupid tools like "Hydra" annnnnnddd "Metasploit", really just imagine these stupid freaking dire names which makes no sense. Haha lol I spent almost 5 years learning everything and now I'm full and I know everything better than every youtuber and everyone who call himself genius. I don't use other people useless tools like Meeetaaasploitttt because I can create my own tools, but still even someone like me didn't hack anything til now then how and why these fucking youtubers making fake useless old tips tricks and fake stories all the time which makes no fucking real sense! Hmmm you started calling yourself a hacker because you can hack wifi, oooooo thats good becauseee this is not something big you proud of because everyone can do that if the router has stupid poor password, Lol I mean what heck is really going on in this fucking world, Lolllllll hacking is nothing not even a name, humans are believing in this cartoon screen technology hahhaha hell... I'm out now, I'm on my own, there is nothig left now to learn but still all of that are useless, Fuck the term Hacking!!! Have a nice day.
submitted by /u/ak_invisible
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Hacking is dead!
Hacking and breaking is completely dead! Now there is no way to break into systems remotely and phish someone because everyone has/have 200 IQ nowadays, hmm we're wasting our time to learn stupid hacks. And look at these poor youtubers who are repeating same things again and again and showing stupid tools like "Hydra" annnnnnddd "Metasploit", really just imagine these stupid freaking dire names which makes no sense. Haha lol I spent almost 5 years learning everything and now I'm full and I know everything better than every youtuber and everyone who call himself genius. I don't use other people useless tools like Meeetaaasploitttt because I can create my own tools, but still even someone like me didn't hack anything til now then how and why these fucking youtubers making fake useless old tips tricks and fake stories all the time which makes no fucking real sense! Hmmm you started calling yourself a hacker because you can hack wifi, oooooo thats good becauseee this is not something big you proud of because everyone can do that if the router has stupid poor password, Lol I mean what heck is really going on in this fucking world, Lolllllll hacking is nothing not even a name, humans are believing in this cartoon screen technology hahhaha hell... I'm out now, I'm on my own, there is nothig left now to learn but still all of that are useless, Fuck the term Hacking!!! Have a nice day.
submitted by /u/ak_invisible
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Hacking is dead!
Hacking and breaking is completely dead! Now there is no way to break into systems remotely and phish someone because everyone has/have 200 IQ...