Kali Linux Tutorials
CRLFsuite : Fast CRLF Injection Scanning Tool

CRLFsuite is a fast tool specially designed to scan CRLF injection.

Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h

Features

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Single URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Multiple URL scanning

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png WAF detection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png XSS through CRLF injection

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Stdin supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png GET & POST method supported

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Concurrency

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Powerful payloads (WAF evasion payloads are also included)

https://s.w.org/images/core/emoji/14.0.0/72x72/2714.png Fast and efficient scanning with negligible false-positive

Arguments
ArgumentDiscription-u/–urltarget URL-i/–import-urlsImport targets from the file-s/–stdinScan URLs from stdin-o/–outputPath for output file-m/–methodRequest method (GET/POST)-d/–dataPOST data-uA/–user-agentSpecify User-Agent-To/–timeoutConnection timeout-c/–cookiesSpecify cookies-v/–verifyVerify SSL cert.-t/–threadsNumber of concurrent threads-sB/–skip-bannerSkip banner and args info-sP/–show-payloadsShow all the available CRLF payloads
Usage

Single URL scanning:

$ crlfsuite -u “http://testphp.vulnweb.com”

Multiple URLs scanning:

$ crlfsuite -i targets.txt

from stdin:

$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s

Specifying cookies :

$ crlfsuite -u “http://testphp.vulnweb.com” –cookies “key=val; newkey=newval”

Using POST method:

$ crlfsuite -i targets.txt -m POST -d “key=val&newkey=newval”
Download

Kali Linux Tutorials
COM-Hunter : COM Hijacking VOODOO

COM-hunter is a COM Hijacking persistence tool written in C#.

Features

* Finds out entry valid CLSIDs in the victim’s machine.
* Finds out valid CLSIDs via Task Scheduler in the victim’s machine.
* Finds out if someone already used any of those valid CLSIDs in order to do COM persistence (LocalServer32/InprocServer32).
* Finds out if someone already used any of valid CLSID via Task Scheduler in order to do COM persistence (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence with general valid CLSIDs (LocalServer32/InprocServer32).
* Tries to do automatically COM Hijacking Persistence via Task Scheduler.
* Tries to use “TreatAs” key in order to refere to a different component.

Usage

[+] Usage:
.\COM-Hunter.exe
-> General Options:
-h, –help Shows help and exits.
-v, –version Shows current version and exits.
-a, –about Shows info, credits about the tool and exits.
-> Modes:
Search Search Mode
Persist Persist Mode
-> Search Mode:
Get-Entry Searches for valid CLSIDs entries.
Get-Tasksch Searches for valid CLSIDs entries via Task Scheduler.
Find-Persist Searches if someone already used a valid CLSID (Defence).
Find-Tasksch Searches if someone already used a valid CLSID via Task Scheduler (Defence).
-> Persist Mode:
General Uses General method to apply COM Hijacking Persistence in Registry.
Tasksch Try to do COM Hijacking Persistence via Task Scheduler.
TreatAs Uses TreatAs Registry key to apply COM Hijacking Persistence in Registry.
-> General Usage:
.\COM-Hunter.exe Persist General
-> Tasksch Usage:
.\COM-Hunter.exe Persist Tasksch
-> TreatAs Usage:
.\COM-Hunter.exe Persist TreatAs

Example Usages

* Get-Entry (Search Mode):

.\COM-Hunter.exe Search Get-Entry

Find-Persist (Search Mode):

.\COM-Hunter.exe Search Find-Persist

General (Persist Mode):

.\COM-Hunter.exe Persist General ‘HKCU:Software\Classes\CLSID…’ C:\Users\nickvourd\Desktop\beacon.dll

Example Format Valid CLSIDs

Software\Classes\CLSID...

HKCU:Software\Classes\CLSID…

HKCU:\Software\Classes\CLSID…

HKCU\Software\Classes\CLSID…

HKEY_CURRENT_USER:Software\Classes\CLSID…

HKEY_CURRENT_USER:\Software\Classes\CLSID…

HKEY_CURRENT_USER\Software\Classes\CLSID…
Download

Zenbuster - Multi-threaded URL Enumeration/Brute-Forcing Tool
http://www.kitploit.com/2022/07/zenbuster-multi-threaded-url.html

ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin (@0xTas (https://twitter.com/0xTas)). I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity (https://www.kitploit.com/search/label/Cybersecurity) tooling in general. ZenBuster may not be the fastest or most comprehensive tool of its kind. It is however, simple to use, decently flexible, and in practice only marginally slower than other "tried-and-true" tools like Gobuster. Personally, I have been using it to help me solve CTF challenges on platforms like TryHackMe, and have found my implementation to be satisfactorily reliable. This software is intended for use in CTF challenges, or by security professionals to gather information on their targets: It is capable of brute-force (https://www.kitploit.com/search/label/Brute-force) enumerating subdomains and also URI resources (directories/files). Both methods of enumeration require use of an appropriate wordlist or dictionary file. Features Include: Hostname format supports standard, IPv4, and IPv6. Support for logging results to a file with -O [filename]. Specifying custom ports for nonstandard webservers with -p . Optional file extensions in directory mode with -x . Quiet mode for less distracting output with -Q. Color can be disabled for less distracting output with -nc/-nl. Tested on Python versions 3.9 and 3.10, with theoretical support for versions >= 3.6 CAUTION/DISCLAIMER ZenBuster is capable of producing a potentially unwelcome number of HTTP requests in a short amount of time. The developers and contributors are not liable or responsible for any damage caused by misuse or abuse of this software. Please Enumerate Responsibly! License

ZenBuster is licensed under the GNU GPLv3 License, see here for more information. Credits Yin-Yang ASCII art in the banners were created by Joan G. Stark (jgs) and Hayley Jane Wakenshaw (hjw). Modifications were made by me, when specified with: 'zg'.
Installation Firstly, ensure that Python version >= 3.6 is installed, then clone the repository with: git clone https://github.com/0xTas/zenbuster.git Next, cd zenbuster. Dependencies ZenBuster relies on 3 external libraries to function, and it is recommended to install these with: pip install -r requirements.txt The modules that will be installed and their purposes are as follows: Python requests (https://pypi.org/project/requests/) The backbone of each enumeration request. Without this, the script will not function. termcolor (https://pypi.org/project/termcolor/) Enables colored terminal output. Non-critical, the script can still run without color if this is not present. colorama (Windows only) (https://pypi.org/project/colorama/) Primes the Windows terminal to accept ANSI color codes (from Termcolor). Non-critical. These dependencies may be installed manually, with pip using requirements.txt, or via interaction with the script upon first run.
Usage Once dependencies have been installed, you can run the program in the following ways: On Linux (+Mac?): ./zenbuster.py [options] or python3 zenbuster.py [options] On Windows: python zenbuster.py [options] [Options] Short Flag Long Flag Purpose -h --help Displays the help screen and exits -d --dirs Enables Directory Enumeration (https://www.kitploit.com/search/label/Enumeration) Mode -s -ssl Forces usage of HTTPS in requests -v --verbose Prints verbose info to terminal/log -q --quiet Minimal terminal output until final results -nc --no-color Disables colored terminal output -nl --no-lolcat Disables lolcat-printed banner (Linux only) -u --host Host to target for the scan -w --wordlist Path to wordlist/dictionary file -x --ext Comma-separated list of file extensions (Dirs only) -p --port Custom port option for nonstandard webservers -o [filename] --out-file Log results to a file (accepts custom name/path) Example Usage ./zenbuster.py -d -w /usr/share/wordlists/dirb/common.txt -u target.thm -v python3 zenbuster.py -w ../subdomains.txt --host target.thm --ssl -O myResults.log zenbuster -w subdomains.txt -u target.thm --quiet (With .bashrc alias)
Planned Features/Improvements Increased levels of optional verbosity. Allow optional throttling of task thread-count. Allow users to modify the list of ignored status codes. Allow greater user control over various request headers. Allow optional ignoring of responses based on content-length. Expand subdomain enumeration (https://www.kitploit.com/search/label/Subdomain%20Enumeration) to include OSINT methods instead of just brute-forcing. Explore a more comprehensive and source-readable solution to fancy colored output (possibly using rich (https://pypi.org/project/rich/)).
Known Issues/Limitations Enumerating long endpoints may result in ugly terminal output due to line-wraping on smaller console windows. Logging to a file is recommended, especially on Windows. If target host is a vHost on a shared webserver, enumeration via IP may not function as expected. Use domain/hostname instead.

Download Zenbuster (https://github.com/0xTas/zenbuster)

Hacking on Medium
Security Source Code Review

The way to be safe is never to be Secure - Benjamin Franklin

Continue reading on Medium »

Hacking on Medium
Wireless Hacking

https://cdn-images-1.medium.com/max/2600/0*a8jP-e2ffcyJhLxu
WPA/WPA2 Cracking

Continue reading on Medium »

KitPloit - PenTest Tools!
Zenbuster - Multi-threaded URL Enumeration/Brute-Forcing Tool

https://blogger.googleusercontent.com/img/a/AVvXsEi9pYeob2mXu7cnwIfM_BLsokyDEfTHEh8r_Bcc59ZU-4N5-Rm0kXCfEpPoQwGCFWwUt0M7x44EdXquMlM0ZgZCGFXYOTAQq-M0EAKMEMns0FVolknn2SzZUywKK9iMFxiwNPTeEfFLykhzjgO_BU1Mr22xrgB1KgYHTsOD0tZb0GxQ8AYLijfRqmY9=w608-h640 ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin (@0xTas).

I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general. ZenBuster may not be the fastest or most comprehensive tool of its kind. It is however, simple to use, decently flexible, and in practice only marginally slower than other "tried-and-true" tools like Gobuster. Personally, I have been using it to help me solve CTF challenges on platforms like TryHackMe, and have found my implementation to be satisfactorily reliable.
This software is intended for use in CTF challenges, or by security professionals to gather information on their targets:

* It is capable of brute-force enumerating subdomains and also URI resources (directories/files).
* Both methods of enumeration require use of an appropriate wordlist or dictionary file.
* Features Include:
1. Hostname format supports standard, IPv4, and IPv6.
2. Support for logging results to a file with -O [filename].
3. Specifying custom ports for nonstandard webservers with -p .
4. Optional file extensions in directory mode with -x .
5. Quiet mode for less distracting output with -Q.
6. Color can be disabled for less distracting output with -nc/-nl.
7. Tested on Python versions 3.9 and 3.10, with theoretical support for versions >= 3.6 CAUTION/DISCLAIMERZenBuster is capable of producing a potentially unwelcome number of HTTP requests in a short amount of time.

The developers and contributors are not liable or responsible for any damage caused by misuse or abuse of this software.

Please Enumerate Responsibly! Licensehttps://camo.githubusercontent.com/555cfccab30d7e960e97fca169185250a39c44c21aa9dfd2ab0f25589cc361cd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f30785461732f7a656e6275737465723f636f6c6f723d253233353245324530266c6162656c3d4c6963656e7365266c6f676f3d474e55266c6f676f436f6c6f723d253233464646464646267374796c653d666c61742d737175617265 ZenBuster is licensed under the GNU GPLv3 License, see here for more information. CreditsYin-Yang ASCII art in the banners were created by Joan G. Stark (jgs) and Hayley Jane Wakenshaw (hjw). Modifications were made by me, when specified with: 'zg'. InstallationFirstly, ensure that Python version >= 3.6 is installed, then clone the repository with: git clone https://github.com/0xTas/zenbuster.gitNext, cd zenbuster. DependenciesZenBuster relies on 3 external libraries to function, and it is recommended to install these with: pip install -r requirements.txtThe modules that will be installed and their purposes are as follows:

1. Python requests

* The backbone of each enumeration request. Without this, the script will not function.

2. termcolor

* Enables colored terminal output. Non-critical, the script can still run without color if this is not present.

3. colorama (Windows only)

* Primes the Windows terminal to accept ANSI color codes (from Termcolor). Non-critical.
These dependencies may be installed manually, with pipusing requirements.txt, or via interaction with the script upon first run. UsageOnce dependencies have been installed, you can run the program in the following ways: On Linux (+Mac?):./zenbuster.py [options]or python3 zenbuster.py [options]On Windows:python zenbuster.py [options][Options]Short Flag Long Flag Purpose -h --help Displays the help screen and [...]

exits -d --dirs Enables Directory Enumeration Mode -s -ssl Forces usage of HTTPS in requests -v --verbose Prints verbose info to terminal/log -q --quiet Minimal terminal output until final results -nc --no-color Disables colored terminal output -nl --no-lolcat Disables lolcat-printed banner (Linux only) -u <hostname--host Host to target for the scan -w <wordlist--wordlist Path to wordlist/dictionary file -x <exts--ext Comma-separated list of file extensions (Dirs only) -p <port#--port Custom port option for nonstandard webservers -o [filename] --out-file Log results to a file (accepts custom name/path) Example Usage./zenbuster.py -d -w /usr/share/wordlists/dirb/common.txt -u target.thm -vpython3 zenbuster.py -w ../subdomains.txt --host target.thm --ssl -O myResults.logzenbuster -w subdomains.txt -u target.thm --quiet(With .bashrc alias) Planned Features/Improvements* Increased levels of optional verbosity.
* Allow optional throttling of task thread-count.
* Allow users to modify the list of ignored status codes.
* Allow greater user control over various request headers.
* Allow optional ignoring of responses based on content-length.
* Expand subdomain enumeration to include OSINT methods instead of just brute-forcing.
* Explore a more comprehensive and source-readable solution to fancy colored output (possibly using rich). Known Issues/Limitations* Enumerating long endpoints may result in ugly terminal output due to line-wraping on smaller console windows. Logging to a file is recommended, especially on Windows.
* If target host is a vHost on a shared webserver, enumeration via IP may not function as expected. Use domain/hostname instead. Download Zenbuster

A Story Of My First Bug Bounty
https://medium.com/@rajqureshi07/a-story-of-my-first-bug-bounty-dda320db78d9?source=rss------bug_bounty-5

Hello everyone,Continue reading on Medium » (https://medium.com/@rajqureshi07/a-story-of-my-first-bug-bounty-dda320db78d9?source=rss------bug_bounty-5)

hacking: security in practice
I had a backdoor running on my PC for two weeks, what should I do ?

So, two weeks ago, I installed some shady stuff, hacking tools ( script kiddie stuff tbh ) and other things like that from a random forum, it looked clean and stuff but one of the thing I downloaded wasn't working well and it just seemed weird for some reason. Got rid of it, didn't really thought much about it. Fast forward today, I notice in my task manager that at the startup there's a process called "Windows services" actually two of them. Browse to the directory and there's a .zip called license and other things that doesn't seems very official for something in the system32 directory. So I try to shut them off with the task manager to delete it and I can't. So I make them not able to start at the startup and then restart my PC, and finally the files. I don't really save my password with my browser, at least not the most important one so I feel safe and I had no connection attempt to my steam account, epic games, Minecraft etc. Should I be worried ?

submitted by /u/Logane72
[link] [comments]

hacking: security in practice
Offline stores in Canada to buy Alfa wireless tools

Any Canada peeps in here? My friend has been staying in Ontario for a while and he will be returning soon so I just wanted to know if there are any offline stores in Ontario where he could find the Alfa AWUS036NHA wifi adapter which comes with the ar9271 chipset below the 50$ price tag. Please help me out if you know about any offline stores in Ontario where I could find this adapter.

I'm not considering online stores as it would take some time to deliver and he will have to leave soon.

submitted by /u/SolomonDaGod
[link] [comments]

hacking: security in practice
Would it be possible to track APT's through their infrastructure?

So I was wondering after reading Sandworm the book,...

Would it be possible, to look at the infrastructure like a Command and Control server and take a few unique aspects of their configuration and scan the internet for those same unique identifiers?

For example, a hacking group uses TCP Port 50051, would it be possible to scan millions of IP's on just that one port?

Or is it possible to simply open and execute malware, and see which IP's it tries to connect to? And then Nmap that IP and see if its vulnerable for some exploits, infect it with your own malware and track the hackers that way?

Or... does someone have an explanation on how this cat and mouse game could be played? Maybe a blog? I am quite a noob to it all, but super interested after reading books listening to DarknetDiaries etc.

Thanks in advance and have a wonderful Sunday folks :)

submitted by /u/Routine_Inspection_5
[link] [comments]