Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
Rekono : Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced vulnerability management is needed. Moreover, Rekono includes a Telegram bot that can be used to perform executions easily from anywhere and using any device. Features* Combine hacking tools to create pentesting processes* Execute pentesting processes* Execute pentesting tools* Review findingsand receive them via emailor Telegramnotifications
* Use Defect-Dojointegration to import the findings detected by Rekono
* Execute toolsand processesfrom Telegram Bot* Wordlistsmanagement Why Rekono?Do you ever think about the steps that you follow when start a pentesting? Probably you start performing some OSINT tasks to gather public information about the target. Then, maybe you run hosts discovery and ports enumeration tools. When you know what the target exposes, you can execute more specific tools for each service, to get more information and maybe, some vulnerabilities. And finally, if you find the needed information, you will look for a public exploit to get you into the target machine. I know, I know, this is an utopic scenario, and in the most cases the vulnerabilities are found due to the pentester skills and not by scanning tools. But before using your skills, how many time do you spend trying to get as information as possible with hacking tools? Probably, too much.

Why not automate this process and focus on find vulnerabilities using your skills and the information that Rekono sends you? Supported tools* theHarvester
* EmailHarvester
* EmailFinder
* Nmap
* Sslscan
* SSLyze
* SSH Audit
* SMBMap
* Dirsearch
* GitLeaks & GitDumper
* Log4j Scanner
* CMSeeK
* OWASP JoomScan
* OWASP ZAP
* Nikto
* SearchSploit
* Metasploit

Thanks to all the contributors of these amazing tools! InstallationDockerExecute the following commands in the root directory of the project:

docker-compose build
docker-compose up -d

If you need more than one tool running at the same time, you can set the number of executions-worker instances:

docker-compose up -d –scale executions-worker=5 Using Rekono CLIIf your system is Linux, you can use rekono-cli to install Rekono in your system

pip3 install rekono-cli
rekono install ConfigurationYou can configure Rekono using two main methods: config.yamlfile and environemnt variables. The properties will be obtained in the following priority:

1. From environment variables
2. From configuration file. You can use the config.yamlas template
3. Default value

Rekono supports the following properties:
Environment VariableConfiguration PropertyDefault ValueDescriptionREKONO_HOMEN/A/opt/rekono or where the source code livesPath to the Rekono homeRKN_FRONTEND_URLfrontend.urlhttp://127.0.0.1:3000URL used to include links to the Rekono frontend in the notificationsRKN_DB_NAMEdatabase.namerekonoDatabase nameRKN_DB_USERdatabase.userN/ADatabase userRKN_DB_PASSWORDdatabase.passwordN/ADatabase passwordRKN_DB_HOSTdatabase.host127.0.0.1Database hostRKN_DB_PORTdatabase.port5432Database portRKN_RQ_HOSTrq.host127.0.0.1Redis Queue hostRKN_RQ_PORTrq.port6379Redis Queue [...]

5 views14:58

Kali Linux Tutorials Rekono : Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings…

portRKN_EMAIL_HOSTemail.host127.0.0.1SMTP hostRKN_EMAIL_PORTemail.port587SMTP portRKN_EMAIL_USERemail.userN/ASMTP userRKN_EMAIL_PASSWORDemail.passwordN/ASMTP passwordRKN_TELEGRAM_BOTtelegram.botRekonoTelegram Bot name to be included in the frontendRKN_TELEGRAM_TOKENtelegram.tokenN/ATelegram Bot token. How to get one?RKN_DD_URLdefect-dojo.urlhttp://127.0.0.1:8080Defect-Dojo URLRKN_DD_API_KEYdefect-dojo.api-keyN/ADefect-Dojo API keyN/Adefect-dojo.verifyTrueIndicate if Defect-Dojo certificate should be verifiedN/Adefect-dojo.tags[rekono]Tags included in the items created by Rekono in Defect-DojoN/Adefect-dojo.product-typeRekono ProjectProduct type naem related to products created by Rekono in Defect-DojoN/Adefect-dojo.test-typeRekono Findings ImportTest type name related to tests created by Rekono in Defect-DojoN/Adefect-dojo.testRekono TestTest name related to findings imported by Rekono in Defect-DojoRKN_OTP_EXPIRATION_HOURSsecurity.otp-expiration-hours24Expiration time in hours for One Time Passwords created by RekonoRKN_UPLOAD_FILES_MAX_MBsecurity.upload-files-max-mb500MB limit for files uploaded to Rekono. For example, wordlists filesRKN_TRUSTED_PROXYN/AFalseIndicate if Rekono is running with a trusted reverse proxyRKN_ALLOWED_HOSTSsecurity.allowed-hosts[localhost, 127.0.0.1, ::1]Hosts allowed to access RekonoRKN_SECRET_KEYsecurity.secret-keyGenerated randomlySecurity key used to sign JWT tokens
To configure also the Rekono frontend based on the previous properties, you can run the following command:

This command will add this properties to the rekono/frontend/.envfile:

* VUE_APP_DEFECTDOJO: Enable or disable Defect-Dojo integration features in the frontend
* VUE_APP_DEFECTDOJO_URL: Defect-Dojo URL
* VUE_APP_TELEGRAM_BOT: Name of the Telegram Bot to be displayed in the UI

Of course, you can also configure this properties in the rekono/frontend/.envfile directly Download

5 views14:58

Hacking Articles Tips Tricks Videos Tutorials

5 views14:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Toxssin : An XSS Exploitation Command-Line Interface And Payload Generator

Toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).

This project started as (and still is) a research-based creative endeavor to explore the exploitability depth that an XSS vulnerability may introduce by using vanilla JavaScript, trusted certificates and cheap tricks. Screenshotshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlPabedtDD-ZOiOU1uaesF6sGkCM69KJGagr8kQt1SM_vOofPsRv-dShg-j94T7y8Q3KtaWiWLgDXe9YqLPv14MoUZ-pi5N7SL1_VhPYfw7fJa54Hd6GLhHNGvNgLCZUoUOSvr_VoS6Ge5RYzy3b1CwF5ldiVUxQ_VN_GnQGsPkIGTLiPUXSSOIxfe/s952/68747470733a2f2f7261772e6769746875622e636f6d2f74336c336d61636875732f746f787373696e2f6d61737465722f53637265656e73686f74732f746f787373696e2d312e706e67.png CapabilitiesBy default, toxssin intercepts:

* cookies (if HttpOnly not present),
* keystrokes,
* paste events,
* input change events,
* file selections,
* form submissions,
* server responses,
* table data (static as well as updates),

Most importantly, toxssin:

* attempts to maintain XSS persistence while the user browses the website by intercepting http requests & responses and re-writing the document,
* supports session management, meaning that, you can use it to exploit reflected as well as stored XSS,
* supports custom JS script execution against sessions,
* automatically logs every session. Installation & Usagegit clone https://github.com/t3l3machus/toxssin
cd ./toxssin
pip3 install -r requirements.txt

To start toxssin.py, you will need to supply ssl certificate and private key files.

If you don’t own a domain with a trusted certificate, you can issue and use self-signed certificates with the following command (although this won’t take you far):

openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365

It is strongly recommended to run toxssin with a trusted certificate (see How to get a Valid Certificate in this document). That said, you can start the toxssin server like this:

python3 toxssin.py -u https://your.domain.com -c /your/certificate.pem -k /your/privkey.pem

Visit the project’s wiki for additional information. XSS Exploitation ObstaclesIn my experience, there are 4 major obstacles when it comes to Cross-Site Scripting attacks attempting to include external JS scripts:

1. the “Mixed Content” error, which can be resolved by serving the JavaScript payload via https (even with a self-signed certificate).
2. the “NET::ERR_CERT_AUTHORITY_INVALID” error, which indicates that the server’s certificate is untrusted / expired and can be bypassed by using a certificate issued by a trusted Authority.
3. Cross-origin resource sharing (CORS), which is handled appropriately by the toxssin server.
4. Content-Security-Policyheader with the script-srcset to specific domain(s) only will block scripts with cross-domain src from loading. Toxssin relies on the eval()function to deliver its poison, so, if the website has a CSP and the unsafe-evalsource expression is not specified in the script-srcdirective, the attack will most likely fail (i’m working on a second poison delivery method to work around this).

Note: The “Mixed Content” error can of course occur when the target website is hosted via http and the JavaScript payload via https. This limits the scope of toxssin to https only webistes, as (by default) toxssin is started with ssl only. Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Toxssin : An XSS Exploitation Command-Line Interface

Toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities.

4 viewsedited 14:59

About

Blog

Apps

Platform