Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

_ _ _ _ / _// _ \_ _ _ / _ \()\ _ _ _ \_ \/ / / / _ \/ _ `_ \/ / / / / _/ _/ _ \ | / / _ \/ _/ _/ / /_/ / /_/ / / / / / / /_/ / ( ) /_/ /_/ / |/ / _/ / /_/_/\_/_/ /_/ /_/_/_/_/\_/\_/|_/\_/_/ A easy-to-use python tool to perform dns recon with multiple optionsInstallation:It can be installed in any OS with python3Manual installationgit clone https://github.com/D3Ext/SDomDiscovercd SDomDiscoverpip3 install -r requirements.txtOne-linergit clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.pyUsage:Common usagesTo see the help panel and other parameterspython3 SDomDiscover.py -hMain usage of the tool to dump the valid domains in the SSL certificatepython3 SDomDiscover.py -d example.comUsed to perform all the queries and recognizementpython3 SDomDiscover.py -d domain.com --allDownload SDomDiscover
Read more...
I'm Hosting One on One talks to share insight and ideas about GraphQL security, send me a message if you are interested.
https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/

I am a Security Researcher with Escape technologies, and after pentesting countless GraphQL endpoints I'd like to share this knowledge and hear your thoughts, what vulnerabilities you have encountered, are you involved in solutions and what tools do you use? feel free to message me here to setup a meeting. submitted by /u/MdotTIM (https://www.reddit.com/user/MdotTIM)
[link] (https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/xe0qm6/im_hosting_one_on_one_talks_to_share_insight_and/)

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SDomDiscover - A Easy-To-Use Python Tool To Perform DNS Recon

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWZsNgEIe1_Pu9PwMdP768kAuHMo2Mm0ysnIOOgTxwZVYQ5wO1EkkdA9ppdkTEBp3O_L0-GfFeoKvlqpKnLys0keVDlT9praR5630m-64MhCWgkvzOzh68i4d4op1awxlLfhVjtRQxfuvoiYoDojeVRA3adoegxvS4I7d_s3WajH1v66edGZGcynjJ1w/w400-h640/SDomDiscover_1_demo.png
_____ ____ ____ _
/ ___// __ \____ ____ ___ / __ \(_)_____________ _ _____ _____
\__ \/ / / / __ \/ __ `__ \/ / / / / ___/ ___/ __ \ | / / _ \/ ___/
___/ / /_/ / /_/ / / / / / / /_/ / (__ ) /__/ /_/ / |/ / __/ /
/____/_____/\____/_/ /_/ /_/_____/_/____/\___/\____/|___/\___/_/



A easy-to-use python tool to perform dns recon with multiple options


Installation:


It can be installed in any OS with python3

Manual installation

git clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txt


One-liner

git clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.py


Usage:


Common usages

To see the help panel and other parameters

python3 SDomDiscover.py -h

Main usage of the tool to dump the valid domains in the SSL certificate

python3 SDomDiscover.py -d example.com

Used to perform all the queries and recognizement

python3 SDomDiscover.py -d domain.com --all
Download SDomDiscover

___________________________
@hacking_Attack
@Hacking_Video
_____ ____ ____ _
/ ___// __ \____ ____ ___ / __ \(_)_____________ _ _____ _____
\__ \/ / / / __ \/ __ `__ \/ / / / / ___/ ___/ __ \ | / / _ \/ ___/
___/ / /_/ / /_/ / / / / / / /_/ / (__ ) /__/ /_/ / |/ / __/ /
/____/_____/\____/_/ /_/ /_/_____/_/____/\___/\____/|___/\___/_/

A easy-to-use python tool to perform dns recon (https://www.kitploit.com/search/label/Recon) with multiple optionsInstallation:It can be installed in any OS with python3Manual installationgit clone https://github.com/D3Ext/SDomDiscover
cd SDomDiscover
pip3 install -r requirements.txtOne-linergit clone https://github.com/D3Ext/SDomDiscover && cd SDomDiscover && pip3 install -r requirements.txt && python3 SDomDiscover.pyUsage:Common usagesTo see the help panel and other parameterspython3 SDomDiscover.py -hMain usage of the tool to dump the valid (https://www.kitploit.com/search/label/Valid) domains in the SSL certificatepython3 SDomDiscover.py -d example.comUsed to perform all the queries and recognizementpython3 SDomDiscover.py -d domain.com --all

Download SDomDiscover (https://github.com/D3Ext/SDomDiscover)

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
SDomDiscover : A Easy-To-Use Python Tool To Perform DNS Recon

SDomDiscover a easy-to-use python tool to perform dns recon, subdomain enumeration and much more

The purpouse of this tool is helping bug haunters and pentesters during reconnaissance

If you want to know more about the tool you can read my own post in my blog (written in spanish)

Installation

It can be used in any system with python3

You can easily install AORT using pip:

pip3 install aort

If you want to install it from source:

git clone https://github.com/D3Ext/AORT
cd AORT
pip3 install -r requirements.txt

One-liner

git clone https://github.com/D3Ext/AORT && cd AORT && pip3 install -r requirements.txt && python3 AORT.py

Usage

Common usages

If installed with pip3:

aort

To see the help panel and other parameters

python3 AORT.py -h

Main usage of the tool to dump the valid domains in the SSL certificate

python3 AORT.py -d example.com

Used to perform all the queries and recognizement

python3 AORT.py -d domain.com –all

Features

* Enumerate subdomains using passive techniques

* A lot of extra queries to enumerate the DNS

* Domain Zone trasnfer attack

* WAF type detection

* Subdomain Takeover checker

* Wayback machine support to enumerate endpoints

* Email harvesting

Third part

The tool uses different services to get subdomains in different ways

The WAF detector was modified and addapted from CRLFSuite concept

All DNS queries are scripted in python at 100%

Email harvesting using Proxycrawl API with personal token (you can register a free account with 100 uses)
Download

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Cyberattacks Are Now Increasingly Hands-On, Break Out More Quickly

Interactive intrusion campaigns jumped nearly 50%, while the breakout time between initial access and lateral movement shrank to less than 90 minutes, putting pressure on defenders to react quickly.
Dark Reading: Attacks/Breaches
To Ease the Cybersecurity Worker Shortage, Broaden the Candidate Pipeline

With enough passion, intelligence, and effort, anyone can be a successful cybersecurity professional, regardless of education or background.
Dark Reading: Attacks/Breaches
TeamTNT Hits 150K Docker Containers via Malicious Cloud Images

Honeypot activity exposed two credentials that the threat actor is using to host and distribute malicious container images, security vendor says.