Hacking on Medium
Using Public Wi-Fi is Threat to Cater to Cyberattacks

https://cdn-images-1.medium.com/max/640/0*NLYVyC-tgd1m2Fvm.jpg
Using Public Wi-Fi is a threat to cater to Cyberattacks!

Continue reading on Medium »

Hacking on Medium
Dina:1.0.1 vulnhub walkthrough

https://cdn-images-1.medium.com/max/640/0*RjAoQcuMhV1GuTra.jpg
Dina:1.0.1[vulnhub]→ walkthrough
We will be looking at how I can solved dina:1.0.1 machine. In this machine we find
flag.txt file and root…

Continue reading on Medium »

Hacking on Medium
Squashed Image | Defend the Web

https://cdn-images-1.medium.com/max/700/0*ESG-hiC0AjZsxAgh.jpg
More stegosaurus shenanigans

Continue reading on Medium »

MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy
https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5

Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium » (https://medium.com/@cakraadi/msa-weekly-4-cara-mendapatakn-subdomain-menggunakan-subfinder-sudomy-26ecc517779f?source=rss------bug_bounty-5)

MSA Weekly 4 — “Cara Mendapatakn Subdomain Menggunakan Subfinder & Sudomy

Dalam proses penetration atau hacking ada beberapa step/workflow yang biasa dilakukan oleh para penetration tester atau hacker sebelum…Continue reading on Medium »
Read more...

A Story Of My First Bug Bounty

Hello everyone,Continue reading on Medium »
Read more...

Kali Linux Tutorials
CRLFsuite : Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection.

Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h

Features

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Single URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Multiple URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png WAF detection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png XSS through CRLF injection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Stdin supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png GET & POST method supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Concurrency

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Powerful payloads (WAF evasion payloads are also included)

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Fast and efficient scanning with negligible false-positive

Arguments
ArgumentDiscription-u/–urltarget URL-i/–import-urlsImport targets from the file-s/–stdinScan URLs from stdin-o/–outputPath for output file-m/–methodRequest method (GET/POST)-d/–dataPOST data-uA/–user-agentSpecify User-Agent-To/–timeoutConnection timeout-c/–cookiesSpecify cookies-v/–verifyVerify SSL cert.-t/–threadsNumber of concurrent threads-sB/–skip-bannerSkip banner and args info-sP/–show-payloadsShow all the available CRLF payloads
Usage

Single URL scanning:

$ crlfsuite -u “http://testphp.vulnweb.com”

Multiple URLs scanning:

$ crlfsuite -i targets.txt

from stdin:

$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s

Specifying cookies :

$ crlfsuite -u “http://testphp.vulnweb.com” –cookies “key=val; newkey=newval”

Using POST method:

$ crlfsuite -i targets.txt -m POST -d “key=val&newkey=newval”
Download

Kali Linux Tutorials
COM-Hunter : COM Hijacking VOODOO

COM-hunter is a COM Hijacking persistence tool written in C#.

Features

* Finds out entry valid CLSIDs in the victim’s machine.
* Finds out valid CLSIDs via Task Scheduler in the victim’s machine.
* Finds out if someone already used any of those valid CLSIDs in order to do COM persistence (LocalServer32/InprocServer32).
* Finds out if someone already used any of valid CLSID via Task Scheduler in order to do COM persistence (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence with general valid CLSIDs (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence via Task Scheduler.
* Tries to use “TreatAs” key in order to refere to a different component.

Usage

[+] Usage:
.\COM-Hunter.exe
-> General Options:
-h, –help Shows help and exits.
-v, –version Shows current version and exits.
-a, –about Shows info, credits about the tool and exits.
-> Modes:
Search Search Mode
Persist Persist Mode
-> Search Mode:
Get-Entry Searches for valid CLSIDs entries.
Get-Tasksch Searches for valid CLSIDs entries via Task Scheduler.
Find-Persist Searches if someone already used a valid CLSID (Defence).
Find-Tasksch Searches if someone already used a valid CLSID via Task Scheduler (Defence).
-> Persist Mode:
General Uses General method to apply COM Hijacking Persistence in Registry.
Tasksch Try to do COM Hijacking Persistence via Task Scheduler.
TreatAs Uses TreatAs Registry key to apply COM Hijacking Persistence in Registry.
-> General Usage:
.\COM-Hunter.exe Persist General
-> Tasksch Usage:
.\COM-Hunter.exe Persist Tasksch
-> TreatAs Usage:
.\COM-Hunter.exe Persist TreatAs

Example Usages

* Get-Entry (Search Mode):

.\COM-Hunter.exe Search Get-Entry

Find-Persist (Search Mode):

.\COM-Hunter.exe Search Find-Persist

General (Persist Mode):

.\COM-Hunter.exe Persist General ‘HKCU:Software\Classes\CLSID…’ C:\Users\nickvourd\Desktop\beacon.dll

Example Format Valid CLSIDs

Software\Classes\CLSID...

HKCU:Software\Classes\CLSID…

HKCU:\Software\Classes\CLSID…

HKCU\Software\Classes\CLSID…

HKEY_CURRENT_USER:Software\Classes\CLSID…

HKEY_CURRENT_USER:\Software\Classes\CLSID…

HKEY_CURRENT_USER\Software\Classes\CLSID…
Download

Zenbuster - Multi-threaded URL Enumeration/Brute-Forcing Tool
http://www.kitploit.com/2022/07/zenbuster-multi-threaded-url.html

ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin (@0xTas (https://twitter.com/0xTas)). I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity (https://www.kitploit.com/search/label/Cybersecurity) tooling in general. ZenBuster may not be the fastest or most comprehensive tool of its kind. It is however, simple to use, decently flexible, and in practice only marginally slower than other "tried-and-true" tools like Gobuster. Personally, I have been using it to help me solve CTF challenges on platforms like TryHackMe, and have found my implementation to be satisfactorily reliable. This software is intended for use in CTF challenges, or by security professionals to gather information on their targets: It is capable of brute-force (https://www.kitploit.com/search/label/Brute-force) enumerating subdomains and also URI resources (directories/files). Both methods of enumeration require use of an appropriate wordlist or dictionary file. Features Include: Hostname format supports standard, IPv4, and IPv6. Support for logging results to a file with -O [filename]. Specifying custom ports for nonstandard webservers with -p . Optional file extensions in directory mode with -x . Quiet mode for less distracting output with -Q. Color can be disabled for less distracting output with -nc/-nl. Tested on Python versions 3.9 and 3.10, with theoretical support for versions >= 3.6 CAUTION/DISCLAIMER ZenBuster is capable of producing a potentially unwelcome number of HTTP requests in a short amount of time. The developers and contributors are not liable or responsible for any damage caused by misuse or abuse of this software. Please Enumerate Responsibly! License

ZenBuster is licensed under the GNU GPLv3 License, see here for more information. Credits Yin-Yang ASCII art in the banners were created by Joan G. Stark (jgs) and Hayley Jane Wakenshaw (hjw). Modifications were made by me, when specified with: 'zg'.
Installation Firstly, ensure that Python version >= 3.6 is installed, then clone the repository with: git clone https://github.com/0xTas/zenbuster.git Next, cd zenbuster. Dependencies ZenBuster relies on 3 external libraries to function, and it is recommended to install these with: pip install -r requirements.txt The modules that will be installed and their purposes are as follows: Python requests (https://pypi.org/project/requests/) The backbone of each enumeration request. Without this, the script will not function. termcolor (https://pypi.org/project/termcolor/) Enables colored terminal output. Non-critical, the script can still run without color if this is not present. colorama (Windows only) (https://pypi.org/project/colorama/) Primes the Windows terminal to accept ANSI color codes (from Termcolor). Non-critical. These dependencies may be installed manually, with pip using requirements.txt, or via interaction with the script upon first run.
Usage Once dependencies have been installed, you can run the program in the following ways: On Linux (+Mac?): ./zenbuster.py [options] or python3 zenbuster.py [options] On Windows: python zenbuster.py [options] [Options] Short Flag Long Flag Purpose -h --help Displays the help screen and exits -d --dirs Enables Directory Enumeration (https://www.kitploit.com/search/label/Enumeration) Mode -s -ssl Forces usage of HTTPS in requests -v --verbose Prints verbose info to terminal/log -q --quiet Minimal terminal output until final results -nc --no-color Disables colored terminal output -nl --no-lolcat Disables lolcat-printed banner (Linux only) -u --host Host to target for the scan -w --wordlist Path to wordlist/dictionary file -x --ext Comma-separated list of file extensions (Dirs only) -p --port Custom port option for nonstandard webservers -o [filename] --out-file Log results to a file (accepts custom name/path) Example Usage ./zenbuster.py -d -w /usr/share/wordlists/dirb/common.txt -u target.thm -v python3 zenbuster.py -w ../subdomains.txt --host target.thm --ssl -O myResults.log zenbuster -w subdomains.txt -u target.thm --quiet (With .bashrc alias)
Planned Features/Improvements Increased levels of optional verbosity. Allow optional throttling of task thread-count. Allow users to modify the list of ignored status codes. Allow greater user control over various request headers. Allow optional ignoring of responses based on content-length. Expand subdomain enumeration (https://www.kitploit.com/search/label/Subdomain%20Enumeration) to include OSINT methods instead of just brute-forcing. Explore a more comprehensive and source-readable solution to fancy colored output (possibly using rich (https://pypi.org/project/rich/)).
Known Issues/Limitations Enumerating long endpoints may result in ugly terminal output due to line-wraping on smaller console windows. Logging to a file is recommended, especially on Windows. If target host is a vHost on a shared webserver, enumeration via IP may not function as expected. Use domain/hostname instead.

Download Zenbuster (https://github.com/0xTas/zenbuster)

Hacking on Medium
Security Source Code Review

The way to be safe is never to be Secure - Benjamin Franklin

Continue reading on Medium »

Hacking on Medium
Wireless Hacking

https://cdn-images-1.medium.com/max/2600/0*a8jP-e2ffcyJhLxu
WPA/WPA2 Cracking

Continue reading on Medium »