Hacking Articles Tips Tricks Videos Tutorials

6 views11:54

SCodeScanner stands for Source Code scanner (https://www.kitploit.com/search/label/Scanner) where the user can scans (https://www.kitploit.com/search/label/Scans) the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) inside the source code before code gets published in Prod.
FeaturesSupported PHP (https://github.com/agrawalsmart7/scodescanner/tree/main/src/php) Language
Supported YAML (https://github.com/agrawalsmart7/scodescanner/tree/main/src/yaml) Language
Pass results to bug tracking (https://www.kitploit.com/search/label/Tracking) services like Jira also Slack (https://www.kitploit.com/search/label/Slack) (Sending files to group to multiple people at once).
Gives results in JSON format, which can easily be used to any other program.Works with Rules. We only need to create some rules which the target rule is not present in php/yaml directory.Rules that can scan advance patternsAchievementsSCodeScanner received 5 CVEs for finding vulnerabilities in multiple CMS plugins.CVE-2022-1465CVE-2022-1474CVE-2022-1527CVE-2022-1532CVE-2022-1604How to run?Download the repository -
Run pip3 install -r requirements.txt
And run python3 scscanner.py --help
Feedback/ImporvementsI would love to hear your feedback on this tool. Open issues if you found any. And open PR request if you have something.ContactUtkarsh Agrawal (https://twitter.com/agrawalsmart7)
Website (https://smart7.in/)

Download Scodescanner (https://github.com/agrawalsmart7/scodescanner)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

7 viewsedited 11:54

Hacking Articles Tips Tricks Videos Tutorials

6 views12:03

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Recon Tool: ReconSpider

Recon Tool: ReconSpiderPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes ReconSpiderReconSpider by bhavsec is one of the most advanced Open Source Intelligence (OSINT) Framework and Recon for scanning IP Addresses, Emails, Websites, and Organizations and finding out information from different sources. ReconSpider can be used by Infosec Researchers, Penetration Testers, Bug Hunters, and Cyber Crime Investigators to find deep information about their target. It also allows you to aggregate all the raw data, visualize it on a dashboard and facilitate alerting and monitoring of the data.

Recon Spider also combines the capabilities of Wave, Photon and Recon Dog to do a comprehensive enumeration of attack surface.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Why it’s called ReconSpider?ReconSpider = Recon + Spider

Recon = Reconnaissance

Reconnaissance is a mission to obtain information by various detection methods, about the activities and resources of an enemy or potential enemy, or geographic characteristics of a particular area.

Spider = Web crawler

A Web crawler, sometimes called a spider or spiderbot and often shortened to crawler, is an Internet bot that systematically browses the World Wide Web, typically for the purpose of Web indexing (web spidering). Version (beta)ReconSpider : 1.0.7Trending: OSINT Tool: Social Hunter
Trending: Offensive Security Tool: fuxploider Overview of the tool:* Performs OSINT scan on a IP Address, Emails, Websites, Organizations and find out information from different sources.
* Correlates and collaborate the results, show them in a consolidated manner.
* Use specific script / launch automated OSINT for consolidated data.
* Currently available in only Command Line Interface (CLI). Mind Map (v1)Check out their mind map to see visually organize information of this tool regarding api, services and techniques and more. https://bhavsec.com/img/reconspider_map.png ReconSpider Bannerhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-Banner.png DocumentationInstalling and using ReconSpider is very easy. Installation process is very simple.

1. Downloading or cloning ReconSpider github repository.
2. Installing all dependencies.
3. Setting up the Database. Setting up the environmentStep 1 – Cloning ReconSpider on your linux system.

In order to download ReconSpider simply clone the GitHub repository. Below is the command which you can use in order to clone ReconSpider repository. git clone https://github.com/bhavsec/reconspider.gitStep 2 – Make sure python3 and python3-pip is installed on your system.

You can also perform a check by typing this command in your terminal. sudo apt install python3 python3-pipStep 3 – Installing all dependencies.

Once you clone and check python installation, you will find directory name as reconspider. Just go to that directory and install using these commands: cd reconspidersudo python3 setup.py installStep 4 – Setting up the Database.

IP2Proxy Database https://lite.ip2location.com/database/px8-ip-proxytype-country-region-city-isp-domain-usagetype-asn-lastseenDownload database, extract it and move to reconspider/plugins/ directory.
Trending: How to Exploit “improper error handling” in Web Applications Updating API KeysAPIs included in ReconSpider are FREE and having limited and restricted usage per month, Please update the current APIs with New APIs in setup.py file, and re-install once done to reflect the changes.

Warning: Not updating the APIs ca[...]