Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Kage : Graphical User Interface For Metasploit Meterpreter And Session Handler

Kage (ka-geh) is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads.
For now it only supports windows/meterpreter& android/meterpreter.

Getting Started

Please follow these instructions to get a copy of Kage running on your local machine without any problems.

Prerequisites

* Metasploit-framework must be installed and in your PATH:
* Msfrpcd
* Msfvenom
* Msfdb
Installing

You can install Kage binaries from here.

for developers

to run the app from source code:

Download source code
git clone https://github.com/WayzDev/Kage.git
Install dependencies and run kage
cd Kage
yarn # or npm install
yarn run dev # or npm run dev
to build project
yarn run build
Download

___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Cirrusgo : A Fast Tool To Scan SAAS, PAAS App Written In Go

Cirrusgo is a fast tool to scan SAAS,PAAS App written in Go

SAAS App Support :

* salesforce
* contentful (next version)

Note flag -o output not working

install : golang 1.18Ver

go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest
or
go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest

Help

cirrusgo –help

_ _
/ /() _ _ / /
/ / / // // // / / // // / / _ \
/ / / // / / / / // /(_ )/ // // // /
____///// // _,/// _/ ____/ v0.0.1
cirrusgo –help
-u, –url Define single URL to fuzz
-l, –list Show App List
-c, –check only check endpoint
-V, –version Show current version
-h, –help Display its help
[cirrusgo [app] [options] ..]
cirrusgo salesforce –help
-u, –url Define single URL
-c, –check only check endpoint
-lobj, –listobj pull the object list.
-gobj –getobj pull the object.
-obj –objects set the object name. Default value is “User” object.
Juicy Objects: Case,Account,User,Contact,Document,Cont
entDocument,ContentVersion,ContentBody,CaseComment,Not
e,Employee,Attachment,EmailMessage,CaseExternalDocumen
t,Attachment,Lead,Name,EmailTemplate,EmailMessageRelation
-gre –getrecord pull the Record id.
-re –recordid set the recode id to dump the record
-cw –chkWritable check all Writable objects
-f, –full dump all pages of objects.
–dump
-H, –header Pass custom header to target
-proxy, –proxy Use proxy to fuzz
-o, –output File to save results
[flags payload]
[command: cirrusgo salesforce –payload options]
-payload, –payload Generator payload for test manual Default “ObjectList”
GetItems -obj set object
-page set page
-pages set pageSize
GetRecord -re set recoder id
WritableOBJ -obj set object
SearchObj -obj set object
-page set page
-pages set pageSize
AuraContext -fwuid set UID
-App set AppName
-markup set markup
ObjectList no options
Dump no options
-h, –help Display its help

Example

cirrusgo salesforce -u https://loclhost -gobj

dump

cirrusgo salesforce -u https://localhost/ -f

check Writable Objects

cirusgo salesforce -u https://localhost/ -cw
Download

___________________________
@hacking_Attack
@Hacking_Video
How I hacked my University Servers

Fri Aug 5 around 1:00 a.m. was surfing the internet and like every other day i logged on my uni portal to check my attendance and if any…Continue reading on Medium »
Read more...
The 160 Hours Bug Bounty Hunting Challenge — Bug Hacking

Bug bounty is one of the hot topics nowadays. If you are actively following cybersecurity people on social networks (especially Twitter)…Continue reading on Medium »
Read more...
https://b.thumbs.redditmedia.com/f1kS0brkCaecjrAsyLvsq1K0cQ53Q6gsb9bs0aLAHGE.jpg I downloaded database, and in folder there are those files:



https://preview.redd.it/bak8csa04oi91.png?width=465&format=png&auto=webp&s=9ecbf8fbdff7db416b043af69fd05ed0c4a62fcb

When I open index.html there is input field where I insert email. After clicking on search button, it ask me where to save file. But saved file have same content as 1.php file



https://preview.redd.it/i8jsavcj4oi91.png?width=646&format=png&auto=webp&s=b56544a076f16386f620efc494b8fd6349a9033c

So I don't know how I am supposed to search through database which is this db.txt file (approximately 2GBs)

submitted by /u/wannacry011
[link] [comments]