Kali Linux Tutorials
BirDuster : A Multi Threaded Python Script Designed To Brute Force Directories

BirDusteris a Python based knockoff of the original DirBuster.

BirDusteris a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within.

Installation

Use PIP: pip3 install --user BirDuster

Clone source:

git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install –user -r requirements.txt
python3 BirDuster.py –help

Usage

BirDusterhas the following flags and options (which you can see with the -hflag):

* -h/--help: Show help and exit.
* -v,-vv,-vvv/--verbosity: Verbosity level.
* -p/--port: Port to use while dirbusting. Default 80/443.
* -P/--pfile: If you want to test several ports just write them to a file with newlines.
* -t/--threads: Amount of concurrent threads. Default is 15.
* -o/--output: Output CSV of responses. Default is domain_output.csv.
* -l/--dlist: Directory list file. Default is dir_list.txt.
* -w/--writereponse: Will write HTTP/S responses to files. Default is False.
* -i/--ignorecertificate: Ignore SSL certificate errors. Default is False.
* -u/--useragent: User-Agent to use. Default is random user-agent.
* --ssl: Use SSL or not. -iflag will automatically turn on SSL.
* --timeout: Change default socket timeout. Default is 3 seconds.

usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [–ssl]
[–timeout TIMEOUT]
domain
positional arguments:
domain domain or host to buster
Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Practices for Cybersecurity that Every Business Should Adopt

https://cdn-images-1.medium.com/max/1024/1*1EbFToFhZppq3eI1hhokqw.jpeg
One of the main issues that a company in the current digital era must concentrate on is staff awareness of Cyber Security.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Un almacenamiento seguro para la web, ¿Es posible?

https://cdn-images-1.medium.com/max/1366/1*KCsPz21EQFPgqIqI50C0Sw.jpeg
Muchas veces me he visto en la situación de guardar información a nivel de frontend, pero no quiero que sea accesible para el cliente ni…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Profil3r Tool — OSINT Tool

https://cdn-images-1.medium.com/max/640/0*usOKSaNYeLfADepZ.png
Profil3r Tool

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Create Custom Wordlist Using Crunch

https://cdn-images-1.medium.com/max/640/0*fiA6TZ9jH5jyejgl.jpg
Create Custom Wordlist Using Crunch

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proxify : Proxy Tool For HTTP/HTTPS Traffic Capture

https://cdn-images-1.medium.com/max/640/0*LxtBdg5OkxChFwxy.png
Proxy Tool For HTTP/HTTPS Traffic Capture

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Step 10: Login Brute Forcing

https://cdn-images-1.medium.com/max/1488/1*57oZFCFhHCr3zFw8xWSPvA.png
So I hit a wall and had a bit of a meltdown. It all started with what I thought would be an easy box on HTB.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Information Security Breaks The Classic IT Model

https://cdn-images-1.medium.com/max/800/0*MBHLB5ADRlDkqs2F
From The Other Side Of The PO Blog: Part 4

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/6ni3y9qiq3891.png?width=640&crop=smart&auto=webp&s=d8b14239b68a070b34dbd8fa39d796ab6554adf9 submitted by /u/Intrepid_Disaster_66
[link] [comments]

PocketPay Mobile Application Bug Bounty Campaign
https://medium.com/pocketpay/pocketpay-mobile-application-bug-bounty-campaign-4eb7c02727d8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

PocketPay apps are being launched on Android and iOS app stores. It’s time for the community to evolve and make things right; yes, it’s a…Continue reading on PocketPay » (https://medium.com/pocketpay/pocketpay-mobile-application-bug-bounty-campaign-4eb7c02727d8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -22 — (Account Takeover Via Sinf file)

Greetings to all from Porta Petrion,Continue reading on Medium »
Read more...