KitPloit - PenTest Tools!
modDetective - Tool That Chronologizes Files Based On Modification Time In Order To Investigate Recent System Activity

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqJtKPfbIhQBZqfVy4DUHEh8KlINCjJkOp1c9sN4Xb2hVIxz5RbmYOpxw5G8vFic45mJN3woPRpG4E7DzuDdksByD3D0N3xO8KLEnpUd2N4lddF7SKw3yR54K8JI11-RgX97TodUDc-NEbZoZdY5cA5K1eQ1OPfB__XenOt3JPjBBISL0BRlDNySAW/w640-h216/modDetective.png
modDetective is a small Python tool that chronologizes files based on modification time in order to investigate recent system activity. This can be used in CTF's in order to pinpoint where escalation and attack vectors may exist.
https://camo.githubusercontent.com/d212edb00617235c0c2216b103990e653ef49ed6a1b92d8a7292b074547f735b/68747470733a2f2f61736369696e656d612e6f72672f612f3234343734312e737667

To see the tool in its most useful form, try running the command as follows: python3 modDetective.py -i /usr/share,/usr/lib,/lib. This will ignore the /usr/lib, /usr/share, and /lib directories, which tend not to have anything of interest. Also note that by default the "dynamic" directories are ignored (/proc, /sys, /run, /snap, /dev).

What is modDetective Doing?

modDetective is very elementary in how it operates. It simply walks the filesystem, with bounds determined by user specified options (-i is for ignore, meaning the tool will walk every directory EXCEPT for the ones specified in the -i option, and -e is for exclusive, meaning the tool will ONLY walk the directories specified). While walking, it picks up the modification times of each file, then orders these modification times in order to output them chronologically.

Additionally, in the output you will potentially see some files highlighted red. These files are denoted as "Indicators of User Activity," Since recent modifications to these files indicate that a user is currently active. As of now, these files include .swp files, .bash_history, .python_history and .viminfo. This list will be extended as I brainstorm more files that indicate present user activity.

Requirements

modDetective currently works only with python3; python2 compatability will be completed shortly (hence the lack of f strings). Standard libraries should be fine.
Download modDetective

___________________________
@hacking_Attack
@Hacking_Video

Un3xpected DoS Attack on Profile Pictur3

Hey Everyone, Hope y’all doing gr3at and aw3some!Continue reading on InfoSec Write-ups »
Read more...

modDetective - Tool That Chronologizes Files Based On Modification Time In Order To Investigate Recent System Activity
http://www.kitploit.com/2022/07/moddetective-tool-that-chronologizes.html

___________________________
@hacking_Attack
@Hacking_Video

modDetective is a small Python tool that chronologizes files based on modification (https://www.kitploit.com/search/label/Modification) time in order to investigate recent system activity. This can be used in CTF's in order to pinpoint (https://www.kitploit.com/search/label/Pinpoint) where escalation (https://www.kitploit.com/search/label/Escalation) and attack vectors may exist.

___________________________
@hacking_Attack
@Hacking_Video

To see the tool in its most useful form, try running the command as follows: python3 modDetective.py -i /usr/share,/usr/lib,/lib. This will ignore the /usr/lib, /usr/share, and /lib directories, which tend not to have anything of interest. Also note that by default the "dynamic" directories are ignored (/proc, /sys, /run, /snap, /dev). What is modDetective Doing? modDetective is very elementary in how it operates. It simply walks the filesystem, with bounds determined by user specified options (-i is for ignore, meaning the tool will walk every directory (https://www.kitploit.com/search/label/Directory) EXCEPT for the ones specified in the -i option, and -e is for exclusive, meaning the tool will ONLY walk the directories specified). While walking, it picks up the modification times of each file, then orders these modification times in order to output them chronologically. Additionally, in the output you will potentially see some files highlighted red. These files are denoted as "Indicators of User Activity," Since recent modifications to these files indicate that a user is currently active. As of now, these files include .swp files, .bash_history, .python_history and .viminfo. This list will be extended as I brainstorm more files that indicate present user activity. Requirements modDetective currently works only with python3; python2 (https://www.kitploit.com/search/label/Python2) compatability will be completed shortly (hence the lack of f strings). Standard libraries should be fine.

Download modDetective (https://github.com/itsKindred/modDetective)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: Hunting Open Redirect Vulnerabilities For $$$
https://faiyazhacks.medium.com/bug-bounty-hunting-open-redirect-vulnerabilities-for-e5b760abea8e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article was originally published at BePracticalContinue reading on Medium » (https://faiyazhacks.medium.com/bug-bounty-hunting-open-redirect-vulnerabilities-for-e5b760abea8e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
mirror links

How do I know that a mirror link for a certain site isn't a phishing site?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: Hunting Open Redirect Vulnerabilities For $$$

This article was originally published at BePracticalContinue reading on Medium »
Read more...

How often do you communicate with non-technical people in this field?
https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/

New to reddit so apologies for any formatting issues etc. Background: I’m at the start of my cybersec studies towards pentesting. I’m autistic with the classic stereotypical traits; eidetic memory, hyper focus and unwavering persistence, pattern recognition and a real knack for spotting faults in anything, which I’ve been told gives me quite the leg-up in this field. The major problem I face however is communication. I can communicate facts and technical details fine, but when it comes to translating that to normal talk, for business stakeholders and the like, I’m completely lost. It’s something I’m working on constantly, but I’m worried how often I will need to do this in this field So my question(s) to the experts and CISO’s: How often will I need to consult with people in this manner, or is that mainly the job of a consultant? Will this disadvantage override my other skills in being hired? (Obviously each company is different, but what’s the general consensus in this industry?) I’ve already faced a lot of discrimination and being overlooked in life, despite my innate skills being exactly what people have needed, so I’m hoping this industry will be better! (So many jobs emphasise communication and being bubbly & friendly which I think is ridiculous, just let me hyper focus and get on with my job and provide thorough work for you) I’m also in Nz, if there’s any kiwi experts here to give their opinion. Thank you! submitted by /u/sleepless_synesthete (https://www.reddit.com/user/sleepless_synesthete)
[link] (https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/) [comments] (https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HacktheBox[Catch]

https://cdn-images-1.medium.com/max/1033/1*YP-vBFukkb99inQAsq9d6w.png
A full Nmap TCP scan identifies ports 22, 80, 3000, 5000, and 8000 are open:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phases of Hacking

https://cdn-images-1.medium.com/max/1023/1*UKNzp6TngJQvyHqKlZScyg.png
Hacking typically involves five phases. These five procedures don’t have to be carried out in order by a hacker. Simply defined, an…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jak skutecznie łamać hasła?

Do łamania haseł używamy narzędzi takich jak: hydra, medusa, Burp Suite, ncrack, hashcat, john - lecz jak mamy robić to skutecznie? Hasła…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Source Code Review Continues….

https://cdn-images-1.medium.com/max/1600/0*jK9lwjimIVt730tA
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video