Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
modDetective - Tool That Chronologizes Files Based On Modification Time In Order To Investigate Recent System Activity

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqJtKPfbIhQBZqfVy4DUHEh8KlINCjJkOp1c9sN4Xb2hVIxz5RbmYOpxw5G8vFic45mJN3woPRpG4E7DzuDdksByD3D0N3xO8KLEnpUd2N4lddF7SKw3yR54K8JI11-RgX97TodUDc-NEbZoZdY5cA5K1eQ1OPfB__XenOt3JPjBBISL0BRlDNySAW/w640-h216/modDetective.png
modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity. This can be used in CTF's in order to pinpoint where escalation and attack vectors may exist.
https://camo.githubusercontent.com/d212edb00617235c0c2216b103990e653ef49ed6a1b92d8a7292b074547f735b/68747470733a2f2f61736369696e656d612e6f72672f612f3234343734312e737667

To see the tool in its most useful form, try running the command as follows: python3 modDetective.py -i /usr/share,/usr/lib,/lib. This will ignore the /usr/lib, /usr/share, and /lib directories, which tend not to have anything of interest. Also note that by default the "dynamic" directories are ignored (/proc, /sys, /run, /snap, /dev).

What is modDetective Doing?

modDetective is very elementary in how it operates. It simply walks the filesystem, with bounds determined by user specified options (-i is for ignore, meaning the tool will walk every directory EXCEPT for the ones specified in the -i option, and -e is for exclusive, meaning the tool will ONLY walk the directories specified). While walking, it picks up the modification times of each file, then orders these modification times in order to output them chronologically.

Additionally, in the output you will potentially see some files highlighted red. These files are denoted as "Indicators of User Activity," Since recent modifications to these files indicate that a user is currently active. As of now, these files include .swp files, .bash_history, .python_history and .viminfo. This list will be extended as I brainstorm more files that indicate present user activity.

Requirements

modDetective currently works only with python3; python2 compatability will be completed shortly (hence the lack of f strings). Standard libraries should be fine.
Download modDetective

___________________________
@hacking_Attack
@Hacking_Video
Un3xpected DoS Attack on Profile Pictur3

Hey Everyone, Hope y’all doing gr3at and aw3some!Continue reading on InfoSec Write-ups »
Read more...
modDetective is a small Python tool that chronologizes files based on modification (https://www.kitploit.com/search/label/Modification) time in order to investigate recent system activity. This can be used in CTF's in order to pinpoint (https://www.kitploit.com/search/label/Pinpoint) where escalation (https://www.kitploit.com/search/label/Escalation) and attack vectors may exist.

___________________________
@hacking_Attack
@Hacking_Video
To see the tool in its most useful form, try running the command as follows: python3 modDetective.py -i /usr/share,/usr/lib,/lib. This will ignore the /usr/lib, /usr/share, and /lib directories, which tend not to have anything of interest. Also note that by default the "dynamic" directories are ignored (/proc, /sys, /run, /snap, /dev). What is modDetective Doing? modDetective is very elementary in how it operates. It simply walks the filesystem, with bounds determined by user specified options (-i is for ignore, meaning the tool will walk every directory (https://www.kitploit.com/search/label/Directory) EXCEPT for the ones specified in the -i option, and -e is for exclusive, meaning the tool will ONLY walk the directories specified). While walking, it picks up the modification times of each file, then orders these modification times in order to output them chronologically. Additionally, in the output you will potentially see some files highlighted red. These files are denoted as "Indicators of User Activity," Since recent modifications to these files indicate that a user is currently active. As of now, these files include .swp files, .bash_history, .python_history and .viminfo. This list will be extended as I brainstorm more files that indicate present user activity. Requirements modDetective currently works only with python3; python2 (https://www.kitploit.com/search/label/Python2) compatability will be completed shortly (hence the lack of f strings). Standard libraries should be fine.

Download modDetective (https://github.com/itsKindred/modDetective)

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
mirror links

How do I know that a mirror link for a certain site isn't a phishing site?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video