Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Pinecone : A WLAN Red Team Framework Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented…
op
[i] Stopping hostapd-wpe and dnsmasq…
net.ipv4.ip_forward = 0
[i] Flushing NAT table in iptables…

When you are done using a module, you can deactivate it by using the backcommand. You can also activate another module issuing the usecommand again.

Shell commands may be executed with the command shellor the !shortcut:

pinecone > !ls
LICENSE modules module_template.py pinecone pinecone.py README.md requirements.txt TODO.md

Currently, Pinecone reconnaissance SQLite database is stored in the db/ directory inside the project root folder. All the temporary files that Pinecone needs to use are stored in the tmp/ directory also under the project root folder. Download

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How to create a CVE entry?

Hello fellow hacking enthusiasts,

I recently discovered a stored XSS vulnerability in a small paying web app that is used by not many users (maybe 200 or 300 active users).

I obviously will report it to the developers, but I want to know if it is possible to request a CVE ID? Or are CVEs reserved for bigger companies? If it is possible, how should I proceed? First report to the developers, then to MITRE (or another CNA)?

Thanks!

submitted by /u/ez-kiel
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Has anyone been able to successfully run opendrop on RPi 0 W?

Hey I'm trying to run opendrop, basically airdrop for raspberry pi. theoretically it should work since the 0 w uses the same net chip as the 3 b which is what the developers confirmed that works.

https://github.com/seemoo-lab/opendrop/issues/76 a dev said they weren't able to power the chip for owl to be used to I was just wondering if anyone else has successfully done it with their raspberry pi 0 w I'm currently stuck on installing owl

would love to have an airdropping keychain

submitted by /u/Plenty_Airline_5803
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Reverse shell

Is it possible to get a reverse shell on iPhone similar to how androRAT does with android?

submitted by /u/Dchemist909
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

_ _ _ _ / _// _ \_ _ _ / _ \()\ _ _ _ \_ \/ / / / _ \/ _ `_ \/ / / / / _/ _/ _ \ | / / _ \/ _/ _/ / /_/ / /_/ / / / / / / /_/ / ( ) /_/ /_/ / |/ / _/ / /_/_/\_/_/ /_/ /_/_/_/_/\_/\_/|_/\_/_/ A easy-to-use python tool to perform dns recon with multiple optionsInstallation:It can be installed in any OS with python3Manual installationgit clone https://github.com/D3Ext/SDomDiscovercd SDomDiscoverpip3 install -r requirements.txtOne-linergit clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.pyUsage:Common usagesTo see the help panel and other parameterspython3 SDomDiscover.py -hMain usage of the tool to dump the valid domains in the SSL certificatepython3 SDomDiscover.py -d example.comUsed to perform all the queries and recognizementpython3 SDomDiscover.py -d domain.com --allDownload SDomDiscover
Read more...
I'm Hosting One on One talks to share insight and ideas about GraphQL security, send me a message if you are interested.
https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/

I am a Security Researcher with Escape technologies, and after pentesting countless GraphQL endpoints I'd like to share this knowledge and hear your thoughts, what vulnerabilities you have encountered, are you involved in solutions and what tools do you use? feel free to message me here to setup a meeting. submitted by /u/MdotTIM (https://www.reddit.com/user/MdotTIM)
[link] (https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/)

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWZsNgEIe1_Pu9PwMdP768kAuHMo2Mm0ysnIOOgTxwZVYQ5wO1EkkdA9ppdkTEBp3O_L0-GfFeoKvlqpKnLys0keVDlT9praR5630m-64MhCWgkvzOzh68i4d4op1awxlLfhVjtRQxfuvoiYoDojeVRA3adoegxvS4I7d_s3WajH1v66edGZGcynjJ1w/w400-h640/SDomDiscover_1_demo.png
_____ ____ ____ _
/ ___// __ \____ ____ ___ / __ \(_)_____________ _ _____ _____
\__ \/ / / / __ \/ __ `__ \/ / / / / ___/ ___/ __ \ | / / _ \/ ___/
___/ / /_/ / /_/ / / / / / / /_/ / (__ ) /__/ /_/ / |/ / __/ /
/____/_____/\____/_/ /_/ /_/_____/_/____/\___/\____/|___/\___/_/



A easy-to-use python tool to perform dns recon with multiple options


Installation:


It can be installed in any OS with python3

Manual installation

git clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txt


One-liner

git clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.py


Usage:


Common usages

To see the help panel and other parameters

python3 SDomDiscover.py -h

Main usage of the tool to dump the valid domains in the SSL certificate

python3 SDomDiscover.py -d example.com

Used to perform all the queries and recognizement

python3 SDomDiscover.py -d domain.com --all
Download SDomDiscover

___________________________
@hacking_Attack
@Hacking_Video
_____ ____ ____ _
/ ___// __ \____ ____ ___ / __ \(_)_____________ _ _____ _____
\__ \/ / / / __ \/ __ `__ \/ / / / / ___/ ___/ __ \ | / / _ \/ ___/
___/ / /_/ / /_/ / / / / / / /_/ / (__ ) /__/ /_/ / |/ / __/ /
/____/_____/\____/_/ /_/ /_/_____/_/____/\___/\____/|___/\___/_/

A easy-to-use python tool to perform dns recon (https://www.kitploit.com/search/label/Recon) with multiple optionsInstallation:It can be installed in any OS with python3Manual installationgit clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txtOne-linergit clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.pyUsage:Common usagesTo see the help panel and other parameterspython3 SDomDiscover.py -hMain usage of the tool to dump the valid (https://www.kitploit.com/search/label/Valid) domains in the SSL certificatepython3 SDomDiscover.py -d example.comUsed to perform all the queries and recognizementpython3 SDomDiscover.py -d domain.com --all

Download SDomDiscover (https://github.com/D3Ext/SDomDiscover)

___________________________
@hacking_Attack
@Hacking_Video