Hacking on Medium
A Simple Buffer Overflow Demonstration — Part 2

https://cdn-images-1.medium.com/max/1024/1*_VFcEO6D1yItAxBx00GPdg.jpeg
Hello Security folks, In previous article, we came to know about what is Buffer Overflow, Its types, and how it occurs. In this article…

Continue reading on Medium »

Hacking on Medium
Hacktivism — A growing threat

https://cdn-images-1.medium.com/max/600/1*r8-czTZQaShexU-8f5g5sg.png
Hacktivism is often associated with the term Cyberwar, and is sometimes associated with “Cyber Terror”. A DIR server is an Internet…

Continue reading on Medium »

Hacking on Medium
Belkasoft CTF4 (Kidnapping Case)

https://cdn-images-1.medium.com/max/640/0*1DZnje4tXpZUqA-c.png
In this article, we’ll look at how to solve the CTF (Capture The Flag) of a Kidnapping Case that happened somewhere of a school-going boy…

Continue reading on Medium »

Hacking on Medium
SBI Credit Card Customers on target of Cyber Thugs, know measures to save your money!

https://cdn-images-1.medium.com/max/640/0*BCGlp_i_bsmkUNnI.jpg
Customers using the SBI’s Credit Cards as well as Debit Cards in the National Capital Territory of Delhi need to be careful.

Continue reading on Medium »

Hacking on Medium
Using Public Wi-Fi is Threat to Cater to Cyberattacks

https://cdn-images-1.medium.com/max/640/0*NLYVyC-tgd1m2Fvm.jpg
Using Public Wi-Fi is a threat to cater to Cyberattacks!

Continue reading on Medium »

Hacking on Medium
Dina:1.0.1 vulnhub walkthrough

https://cdn-images-1.medium.com/max/640/0*RjAoQcuMhV1GuTra.jpg
Dina:1.0.1[vulnhub]→ walkthrough
We will be looking at how I can solved dina:1.0.1 machine. In this machine we find
flag.txt file and root…

Continue reading on Medium »

Hacking on Medium
Squashed Image | Defend the Web

https://cdn-images-1.medium.com/max/700/0*ESG-hiC0AjZsxAgh.jpg
More stegosaurus shenanigans

Continue reading on Medium »

MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy
https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5

Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium » (https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5)

MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy

Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium »
Read more...

A Story Of My First Bug Bounty

Hello everyone,Continue reading on Medium »
Read more...

Kali Linux Tutorials
CRLFsuite : Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection.

Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h

Features

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Single URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Multiple URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png WAF detection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png XSS through CRLF injection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Stdin supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png GET & POST method supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Concurrency

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Powerful payloads (WAF evasion payloads are also included)

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Fast and efficient scanning with negligible false-positive

Arguments
ArgumentDiscription-u/–urltarget URL-i/–import-urlsImport targets from the file-s/–stdinScan URLs from stdin-o/–outputPath for output file-m/–methodRequest method (GET/POST)-d/–dataPOST data-uA/–user-agentSpecify User-Agent-To/–timeoutConnection timeout-c/–cookiesSpecify cookies-v/–verifyVerify SSL cert.-t/–threadsNumber of concurrent threads-sB/–skip-bannerSkip banner and args info-sP/–show-payloadsShow all the available CRLF payloads
Usage

Single URL scanning:

$ crlfsuite -u “http://testphp.vulnweb.com”

Multiple URLs scanning:

$ crlfsuite -i targets.txt

from stdin:

$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s

Specifying cookies :

$ crlfsuite -u “http://testphp.vulnweb.com” –cookies “key=val; newkey=newval”

Using POST method:

$ crlfsuite -i targets.txt -m POST -d “key=val&newkey=newval”
Download