Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
https://b.thumbs.redditmedia.com/-0NsFh4nEHWoJbZe2PtOxVgWCc9jqAL6-rXLWXS8wVw.jpg Need to know if these are related to haking or something? Are any of these resemble something related to finding or retrieving something harmful? If someone could explain that would be great.



https://preview.redd.it/xmyqpctunkp91.png?width=945&format=png&auto=webp&s=d55f8547d53f16ca09f91139ba5fe8a53f5830ba

submitted by /u/MirzaAlif247
[link] [comments]
SCodeScanner stands for Source Code scanner (https://www.kitploit.com/search/label/Scanner) where the user can scans (https://www.kitploit.com/search/label/Scans) the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) inside the source code before code gets published in Prod.
FeaturesSupported PHP (https://github.com/agrawalsmart7/scodescanner/tree/main/src/php) Language
Supported YAML (https://github.com/agrawalsmart7/scodescanner/tree/main/src/yaml) Language
Pass results to bug tracking (https://www.kitploit.com/search/label/Tracking) services like Jira also Slack (https://www.kitploit.com/search/label/Slack) (Sending files to group to multiple people at once).
Gives results in JSON format, which can easily be used to any other program.Works with Rules. We only need to create some rules which the target rule is not present in php/yaml directory.Rules that can scan advance patternsAchievementsSCodeScanner received 5 CVEs for finding vulnerabilities in multiple CMS plugins.CVE-2022-1465CVE-2022-1474CVE-2022-1527CVE-2022-1532CVE-2022-1604How to run?Download the repository -
Run pip3 install -r requirements.txt
And run python3 scscanner.py --help
Feedback/ImporvementsI would love to hear your feedback on this tool. Open issues if you found any. And open PR request if you have something.ContactUtkarsh Agrawal (https://twitter.com/agrawalsmart7)
Website (https://smart7.in/)

Download Scodescanner (https://github.com/agrawalsmart7/scodescanner)

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Recon Tool: ReconSpider

Recon Tool: ReconSpiderPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes ReconSpiderReconSpider by bhavsec is one of the most advanced Open Source Intelligence (OSINT) Framework and Recon for scanning IP Addresses, Emails, Websites, and Organizations and finding out information from different sources. ReconSpider can be used by Infosec Researchers, Penetration Testers, Bug Hunters, and Cyber Crime Investigators to find deep information about their target. It also allows you to aggregate all the raw data, visualize it on a dashboard and facilitate alerting and monitoring of the data.

Recon Spider also combines the capabilities of Wave, Photon and Recon Dog to do a comprehensive enumeration of attack surface.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Why it’s called ReconSpider?ReconSpider = Recon + Spider

Recon = Reconnaissance

Reconnaissance is a mission to obtain information by various detection methods, about the activities and resources of an enemy or potential enemy, or geographic characteristics of a particular area.

Spider = Web crawler

A Web crawler, sometimes called a spider or spiderbot and often shortened to crawler, is an Internet bot that systematically browses the World Wide Web, typically for the purpose of Web indexing (web spidering). Version (beta)ReconSpider : 1.0.7Trending: OSINT Tool: Social Hunter
Trending: Offensive Security Tool: fuxploider Overview of the tool:* Performs OSINT scan on a IP Address, Emails, Websites, Organizations and find out information from different sources.
* Correlates and collaborate the results, show them in a consolidated manner.
* Use specific script / launch automated OSINT for consolidated data.
* Currently available in only Command Line Interface (CLI). Mind Map (v1)Check out their mind map to see visually organize information of this tool regarding api, services and techniques and more. https://bhavsec.com/img/reconspider_map.png ReconSpider Bannerhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-Banner.png DocumentationInstalling and using ReconSpider is very easy. Installation process is very simple.

1. Downloading or cloning ReconSpider github repository.
2. Installing all dependencies.
3. Setting up the Database. Setting up the environmentStep 1 – Cloning ReconSpider on your linux system.

In order to download ReconSpider simply clone the GitHub repository. Below is the command which you can use in order to clone ReconSpider repository. git clone https://github.com/bhavsec/reconspider.gitStep 2 – Make sure python3 and python3-pip is installed on your system.

You can also perform a check by typing this command in your terminal. sudo apt install python3 python3-pipStep 3 – Installing all dependencies.

Once you clone and check python installation, you will find directory name as reconspider. Just go to that directory and install using these commands: cd reconspidersudo python3 setup.py installStep 4 – Setting up the Database.

IP2Proxy Database https://lite.ip2location.com/database/px8-ip-proxytype-country-region-city-isp-domain-usagetype-asn-lastseenDownload database, extract it and move to reconspider/plugins/ directory.
Trending: How to Exploit “improper error handling” in Web Applications Updating API KeysAPIs included in ReconSpider are FREE and having limited and restricted usage per month, Please update the current APIs with New APIs in setup.py file, and re-install once done to reflect the changes.

Warning: Not updating the APIs ca[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Recon Tool: ReconSpider Recon Tool: ReconSpiderPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode. Reading Time: 3 Minutes ReconS…
n result in not showing the expected output or it may show errors.

You need to create the account and get the API Keys from the following websites.

* Shodan.iohttps://developer.shodan.io/api
* NumVerify – https://numverify.com/documentation
* IP Stack – https://ipstack.com/documentation
* Google Maps – https://developers.google.com/maps/documentation/places/web-service/get-api-key Usage (Click here to see the full usage)ReconSpider Full Wiki and How-to GuidePlease go through the ReconSpider Wiki Guide for a detailed explanation of each and every option and feature.
Clone the repo from here: GitHub Link
Trending: How do QR Codes work and how criminal hackers use them to generate phishing attacks – Demo https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Social-Hunter-300x150.png OSINT Tool: Social HunterSeptember 22, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/dnsReaper-300x150.png Offensive Security Tool: dnsReaperSeptember 16, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/fuxploider-300x150.png Offensive Security Tool: fuxploiderSeptember 9, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ZenBuster-300x150.png Recon Tool: ZenBusterSeptember 2, 2022
Reading Time: 4 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: ReconSpider first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SCodeScanner - Stands For Source Code Scanner Where The User Can Scans The Source Code For Finding The Critical Vulnerabilities

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB8XwFXLSZNCYm28Vi0TzfVTKdKOKVeDzD7IyCLkQNpElSpPzYL9MQj6JKtR4bIELZZuEfcz9UHAB3qsV7I1AD4_A7LaPWAIqX40BxcMTWJBWLa8D0du4mxfTAugKevmd_5to_4cxCvRTtu4xOPHlgs0yoszqzzyIez5ZAza4O0OEcLsOA2YiRnoOtKA/w640-h344/SCodeScanner.png
SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod.
Features

1. Supported PHP Language

2. Supported YAML Language

3. Pass results to bug tracking services like Jira also Slack (Sending files to group to multiple people at once).

4. Gives results in JSON format, which can easily be used to any other program.
5. Works with Rules. We only need to create some rules which the target rule is not present in php/yaml directory.
6. Rules that can scan advance patterns

Achievements

SCodeScanner received 5 CVEs for finding vulnerabilities in multiple CMS plugins.

* CVE-2022-1465
* CVE-2022-1474
* CVE-2022-1527
* CVE-2022-1532
* CVE-2022-1604

How to run?

* Download the repository -

* Run pip3 install -r requirements.txt

* And run python3 scscanner.py --help
Feedback/Imporvements

I would love to hear your feedback on this tool. Open issues if you found any. And open PR request if you have something.

Contact

Utkarsh Agrawal
Website
Download Scodescanner

___________________________
@hacking_Attack
@Hacking_Video