MSA Weekly 1 — “5 OS Cyber Security, kamu harus tau!”

Dimasa digital saat ini, kita tentu tidak asing dengan istilah keamanan siber atau cyber security. dikutip dari Cisco, cyber security…Continue reading on Medium »
Read more...

Scout - Lightweight URL Fuzzer And Spider: Discover A Web Server'S Undisclosed Files, Directories And VHOSTs
http://www.kitploit.com/2022/06/scout-lightweight-url-fuzzer-and-spider.html

___________________________
@hacking_Attack
@Hacking_Video

Scout is a URL fuzzer (https://www.kitploit.com/search/label/Fuzzer) and spider (https://www.kitploit.com/search/label/Spider) for discovering undisclosed VHOSTS, files and directories on a web server.
A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage Discover URLs on a given web server. version Display scout version. vhost Discover VHOSTs on a given web server. Flags: -d, --debug Enable debug logging. -h, --help help for scout -n, --no-colours Disable coloured output. -p, --parallelism int Parallel routines to use for sending requests. (default 10) -k, --skip-ssl-verify Skip SSL certificate verification. -w, --wordlist string Path to wordlist (https://www.kitploit.com/search/label/Wordlist) file. If this is not specified an internal wordlist will be used. ">Usage:
scout [command]

Available Commands:
help Help about any command
url Discover URLs on a given web server.
version Display scout version.
vhost Discover VHOSTs on a given web server.

Flags:
-d, --debug Enable debug logging.
-h, --help help for scout
-n, --no-colours Disable coloured output.
-p, --parallelism int Parallel routines to use for sending requests. (default 10)
-k, --skip-ssl-verify Skip SSL certificate verification.
-w, --wordlist string Path to wordlist file. If this is not specified an internal wordlist will be used.
Discover URLs Flags -x, --extensions File extensions to detect. (default php,htm,html,txt]) -f, --filename Filename to seek in the directory (https://www.kitploit.com/search/label/Directory) being searched. Useful when all directories report 404 status. -H, --header Extra header to send with requests e.g. -H "Cookie: PHPSESSID=blah" -c, --status-codes HTTP status codes which indicate a positive find. (default 200,400,403,500,405,204,401,301,302) -m, --method HTTP method to use. -s, --spider Scan page content for links and confirm their existence. Full example $ scout url http://192.168.1.1

[+] Target URL http://192.168.1.1
[+] Routines 10
[+] Extensions php,htm,html
[+] Positive Codes 200,302,301,400,403,500,405,204,401,301,302

[302] http://192.168.1.1/css
[302] http://192.168.1.1/js
[302] http://192.168.1.1/language
[302] http://192.168.1.1/style
[302] http://192.168.1.1/help
[401] http://192.168.1.1/index.htm
[302] http://192.168.1.1/image
[200] http://192.168.1.1/log.htm
[302] http://192.168.1.1/script
[401] http://192.168.1.1/top.html
[200] http://192.168.1.1/shares
[200] http://192.168.1.1/shares.php
[200] http://192.168.1.1/shares.htm
[200] http://192.168.1.1/shares.html
[401] http://192.168.1.1/traffic.htm
[401] http://192.168.1.1/reboot.htm
[302] http://192.168.1.1/debug
[401] http://192.168.1.1/debug.htm
[401] http://192.168.1.1/debug.html
[4 01] http://192.168.1.1/start.htm

Scan complete. 28 results found.
Discover VHOSTs $ scout vhost https://google.com

[+] Base Domain google.com
[+] Routines 10
[+] IP -
[+] Port -
[+] Using SSL true

account.google.com
accounts.google.com
blog.google.com
code.google.com
dev.google.com
local.google.com
m.google.com
mail.google.com
mobile.google.com
www.google.com
admin.google.com
chat.google.com

Scan complete. 12 results found.
Installation curl -s "https://raw.githubusercontent.com/liamg/scout/master/scripts/install.sh" | bash

Download Scout (https://github.com/liamg/scout)

___________________________
@hacking_Attack
@Hacking_Video

How to find bugs : ULTIMATE TIPS
https://medium.com/@ishantchandola9890/there-is-consistently-one-more-bug-to-fix-c5016ebde4b1?source=rss------bug_bounty-5

There is consistently one more bug to fix. On the off chance that we don’t fix 100% of the bugs in our site, the site will be totally…Continue reading on Medium » (https://medium.com/@ishantchandola9890/there-is-consistently-one-more-bug-to-fix-c5016ebde4b1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

MSA Weekly 1 — “5 OS Cyber Security, kamu harus tau!”
https://medium.com/@miziimoklet/msa-weekly-1-5-os-cyber-security-kamu-harus-tau-b16f5a718cfe?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Dimasa digital saat ini, kita tentu tidak asing dengan istilah keamanan siber atau cyber security. dikutip dari Cisco, cyber security…Continue reading on Medium » (https://medium.com/@miziimoklet/msa-weekly-1-5-os-cyber-security-kamu-harus-tau-b16f5a718cfe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Dismember: Scan memory for secrets/interesting data

https://external-preview.redd.it/ng0y0DjTtkq1nj_-72ASVOlwGnNwIdF_8s2Bxm8Ic0Y.jpg?width=640&crop=smart&auto=webp&s=419f7000748c0dacc718a8749a3ef8e91873dabe submitted by /u/pope_friction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Turning a kids ride-on car toy into an autonomous vehicle

As a software engineer I have the skills necessary to drive a small robot kit, or a Jetbot with some level of autonomy; object detection, obstacle avoidance, lane following, etc.

I am looking for the next level which is driving a toy car around my neighborhood. Facebook marketplace is loaded with kids toy cars, and some are remote controlled similar to this one. While looking up the remote pairing procedure here, I can see that there's some code the remote is sending, which the vehicle reads and pairs with.

In hacking this, I see that I have two options:

1. Figure out how to pair and Arduino or Raspberry Pi Pico, or STM32 Black Pill with the car, then I can simply use the car "natively", by sending the correct commands
2. Add my own bluetooth receiver and motor controller, and control the car that way.

I prefer option 1, however I have no experience in this type of hack. How would I go about this?

submitted by /u/autojazari
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to track what apps do?

I am specifically asking if there is a way to track packets/data programs on Windows send to internal and external computer hardware? For example, GPU or motherboard and keyboard or mouse. I know you can track web requests in python and then recreate them. So, is there a way to do it with hardware and programs (doesn't have to be in python)? And if there is a way, then how?

submitted by /u/fininimini
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Find out what sites someone signed up on using their email?

I found a tool kind of like social-analyzer that allows you to enter in a users email address and it returns a list of websites the email was used on to sign up on. There was another one I also used for usernames besides social-analyzer, does anyone else know of some I can use on kali linux?

submitted by /u/Negative-Coach2914
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to find bugs : ULTIMATE TIPS

There is consistently one more bug to fix. On the off chance that we don’t fix 100% of the bugs in our site, the site will be totally…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kubernetes Goat walkthrough-I

https://cdn-images-1.medium.com/max/1908/1*A-oxcb49u0oM3V03ar_L1g.png
This blog explains the pentest for Kubernetes, we are going to use a vulnerable Kubernetes cluster. Kubernetes Goat was designed by Madhu…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Happens With Your Stolen Crypto

https://cdn-images-1.medium.com/max/1920/1*0VJyM3CM1ynsw0K4uwgX_A.jpeg
In this article we’re following the trail and understanding what happens with stolen crypto, and how a hacker will try to muddle the trail.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video