Aurora Improper Input Sanitization Bugfix Review
https://medium.com/immunefi/aurora-improper-input-sanitization-bugfix-review-a9376dac046f?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/immunefi/aurora-improper-input-sanitization-bugfix-review-a9376dac046f?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Aurora Improper Input Sanitization Bugfix Review
Summary
SummaryContinue reading on Immunefi » (https://medium.com/immunefi/aurora-improper-input-sanitization-bugfix-review-a9376dac046f?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Aurora Improper Input Sanitization Bugfix Review
Summary
SpyCast - A Crossplatform mDNS Enumeration Tool
http://www.kitploit.com/2022/09/spycast-crossplatform-mdns-enumeration.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/09/spycast-crossplatform-mdns-enumeration.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
SpyCast - A Crossplatform mDNS Enumeration Tool
SpyCast is a crossplatform mDNS (https://www.kitploit.com/search/label/mDNS) enumeration (https://www.kitploit.com/search/label/Enumeration) tool that can work either in active (https://www.kitploit.com/search/label/Active) mode by recursively querying services, or in passive mode by only listening to multicast packets.
Building cargo build --release OS specific bundle packages (for example dmg and app bundles on OSX) can be built via: cargo tauri build SpyCast can also be built without the default UI, in which case all output will be printed on the terminal: cargo build --no-default-features --release Running Run SpyCast in active mode (it will recursively query all available mDNS services): ./target/release/spycast Run in passive mode (it won't produce any mDNS traffic (https://www.kitploit.com/search/label/Traffic) and only listen for multicast packets): ./target/release/spycast --passive Other options Run spycast --help for the complete list of options. License This project is made with ♥ by @evilsocket (https://twitter.com/evilsocket) and it is released under the GPL3 license.
Download Spycast (https://github.com/evilsocket/spycast)
___________________________
@hacking_Attack
@Hacking_Video
Building cargo build --release OS specific bundle packages (for example dmg and app bundles on OSX) can be built via: cargo tauri build SpyCast can also be built without the default UI, in which case all output will be printed on the terminal: cargo build --no-default-features --release Running Run SpyCast in active mode (it will recursively query all available mDNS services): ./target/release/spycast Run in passive mode (it won't produce any mDNS traffic (https://www.kitploit.com/search/label/Traffic) and only listen for multicast packets): ./target/release/spycast --passive Other options Run spycast --help for the complete list of options. License This project is made with ♥ by @evilsocket (https://twitter.com/evilsocket) and it is released under the GPL3 license.
Download Spycast (https://github.com/evilsocket/spycast)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Recon Tool: BF ActiveSub
Recon Tool: BF ActiveSubPost Views: 42 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Subdomain Brute-Force The Pure and Fast Programming WayA Subdomain enumeration tool that supports active attack mode (not passive recon) written by Black Hat Ethical Hacking What is Subdomain Enumeration/Brute-Force?Brute force means guessing possible combinations of the target until the expected output is discovered. So, in the subdomain context, the brute-forcing is to try the possible combination of words, alphabets, and numbers before the main domain in order to get a subdomain that is resolved to IP address. Sometimes subdomains are not indexed on search engines and are not available on online DNS aggregators sites in that case brute forcing is the best way to find out the subdomains which may have been forgotten by the organization. It is like a treasure for an adversary.
Our tool has 0 false positives as it verifies it before bringing the result, and is focused on active scanning rather than passive.
It will resolve if the Host is Alive and Output the Results after bruteforcing using Pipe for Speed – Bounty Quick Technique
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course About this ToolBF ActiveSub is a tool written by us in Bash. It was written for internal use to find more subdomains when performing Recon. ‘host’ is a Linux command that resolves a host if it’s alive by providing it with an IP. After brute-forcing it from a wordlist provided, that checks prefixes of 500/5000 top combinations. The way it’s written as we know stdin and stderr can be controlled, so we redirect it to &> /dev/null; which in the terminal world, it’s like black hole, and then after resolving if it exists, outputs the result in your terminal, or save it to a new list.
This is an Active Recon scan, and not Passive.
Pure BF, and allows you to get even more targets when you are performing Bug Bounty or Pentesting and you know you want to be different from just getting the same results everyone gets, using the same default tools and configs that will maximize your potential bounty, since you will have more subdomains to work with than others, and speed is very important in such action. Installation* Requirements:
Trending: Offensive Security Tool: DDoS-Layer7-bheh Instructions and Usage ExampleTake a list that we provide, add a domain, and it will bruteforce it
Basically, using the below examples, you can perform in various one-liners since it supports piping as follows:
* Usage Example With Output in your Terminal:
i.e:
Recon Tool: BF ActiveSub
Recon Tool: BF ActiveSubPost Views: 42 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Subdomain Brute-Force The Pure and Fast Programming WayA Subdomain enumeration tool that supports active attack mode (not passive recon) written by Black Hat Ethical Hacking What is Subdomain Enumeration/Brute-Force?Brute force means guessing possible combinations of the target until the expected output is discovered. So, in the subdomain context, the brute-forcing is to try the possible combination of words, alphabets, and numbers before the main domain in order to get a subdomain that is resolved to IP address. Sometimes subdomains are not indexed on search engines and are not available on online DNS aggregators sites in that case brute forcing is the best way to find out the subdomains which may have been forgotten by the organization. It is like a treasure for an adversary.
Our tool has 0 false positives as it verifies it before bringing the result, and is focused on active scanning rather than passive.
It will resolve if the Host is Alive and Output the Results after bruteforcing using Pipe for Speed – Bounty Quick Technique
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course About this ToolBF ActiveSub is a tool written by us in Bash. It was written for internal use to find more subdomains when performing Recon. ‘host’ is a Linux command that resolves a host if it’s alive by providing it with an IP. After brute-forcing it from a wordlist provided, that checks prefixes of 500/5000 top combinations. The way it’s written as we know stdin and stderr can be controlled, so we redirect it to &> /dev/null; which in the terminal world, it’s like black hole, and then after resolving if it exists, outputs the result in your terminal, or save it to a new list.
This is an Active Recon scan, and not Passive.
Pure BF, and allows you to get even more targets when you are performing Bug Bounty or Pentesting and you know you want to be different from just getting the same results everyone gets, using the same default tools and configs that will maximize your potential bounty, since you will have more subdomains to work with than others, and speed is very important in such action. Installation* Requirements:
apt-get install lolcatapt-get install figlet* Installation git clone https://github.com/blackhatethicalhacking/bf_active_sub.gitcd bf_active_subchmod +x bheh_bf_sub.shTrending: OSINT Tool: Social HunterTrending: Offensive Security Tool: DDoS-Layer7-bheh Instructions and Usage ExampleTake a list that we provide, add a domain, and it will bruteforce it
Basically, using the below examples, you can perform in various one-liners since it supports piping as follows:
* Usage Example With Output in your Terminal:
cat 500_Top_Prefix_subdomains.txt | ./bheh_bf_sub.sh example.comcat 5000_Top_Prefix_subdomains.txt | ./bheh_bf_sub.sh example.com* Usage Example With Output Saved in a new File: cat 500_Top_Prefix_subdomains.txt | ./bheh_bf_sub.sh example.com > resolved_domains.txtcat 5000_Top_Prefix_subdomains.txt | ./bheh_bf_sub.sh example.com > resolved_domains.txtIf you want to save the results, then simply add: > results.txt after your one-liner.i.e:
cat 500_Top_Prefix_subdomains.txt | ./bheh_bf_sub.sh example.com > resolved_domains.txt > results.txtScreenshotshttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/68747470733a2f2f696d6775722e636f6d2f64484145626e4e2e706e67-1024x458.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/19[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Recon Tool: BF ActiveSub Recon Tool: BF ActiveSubPost Views: 42 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode. Reading Time: 3 Minutes Subdomain…
1523436-703b921d-a314-46bf-a50d-c060e54298b9-1024x198.png CompatibilityTested on Kali Linux, Parrot OS – Any Debian based that uses apt package manager.
Trending: How to Exploit “improper error handling” in Web Applications DisclaimerThis tool is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of this tool. We use it to test under NDA agreements with clients and their consents for Pentesting purposes and we never encourage to misuse or take responsibility for any damage caused!
Clone the repo from here: GitHub Link
Trending: Write up: Hacking is an art, and so is subdomain enumeration https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-300x150.png Recon Tool: ReconSpiderSeptember 23, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Social-Hunter-300x150.png OSINT Tool: Social HunterSeptember 22, 2022
Reading Time: 2 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/dnsReaper-300x150.png Offensive Security Tool: dnsReaperSeptember 16, 2022
Reading Time: 4 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/fuxploider-300x150.png Offensive Security Tool: fuxploiderSeptember 9, 2022
Reading Time: 2 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: BF ActiveSub first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Trending: How to Exploit “improper error handling” in Web Applications DisclaimerThis tool is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of this tool. We use it to test under NDA agreements with clients and their consents for Pentesting purposes and we never encourage to misuse or take responsibility for any damage caused!
Clone the repo from here: GitHub Link
Trending: Write up: Hacking is an art, and so is subdomain enumeration https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-300x150.png Recon Tool: ReconSpiderSeptember 23, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Social-Hunter-300x150.png OSINT Tool: Social HunterSeptember 22, 2022
Reading Time: 2 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/dnsReaper-300x150.png Offensive Security Tool: dnsReaperSeptember 16, 2022
Reading Time: 4 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/fuxploider-300x150.png Offensive Security Tool: fuxploiderSeptember 9, 2022
Reading Time: 2 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: BF ActiveSub first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Shodan Dorks - The God’s Eye
https://shahjerry33.medium.com/shodan-dorks-the-gods-eye-f224f9b3984f?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://shahjerry33.medium.com/shodan-dorks-the-gods-eye-f224f9b3984f?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Shodan Dorks - The God’s Eye
Summary :
Summary :Continue reading on Medium » (https://shahjerry33.medium.com/shodan-dorks-the-gods-eye-f224f9b3984f?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Shodan Dorks - The God’s Eye
Summary :
Dark Reading: Attacks/Breaches
What Lurks in the Shadows of Cloud Security?
Organizations looking to get ahead in cloud security have gone down the path of deploying CSPM tooling with good results. Still, there’s a clear picture that data security and security operations are next key areas of interest.
What Lurks in the Shadows of Cloud Security?
Organizations looking to get ahead in cloud security have gone down the path of deploying CSPM tooling with good results. Still, there’s a clear picture that data security and security operations are next key areas of interest.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SpyCast - A Crossplatform mDNS Enumeration Tool
https://blogger.googleusercontent.com/img/a/AVvXsEgHcpB_kwRzDtlpUcYBO1EUsw74pQsZhJ4nBBcCCxDbwgcin7Fp5fRW3F_Z1u-Ccy8qf0CEgUlX2hAeiKkd7tO3sUfeQxWL4HAcOTgdlylDZx-6OLsaxXrmwo2KzPAZmJ9XTCzYhyMvZGe299sM0KE85boqPjvaS2gasNVgLh98gGHI8qWp_V6CXKuehQ=w640-h414
SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets.
Building
OS specific bundle packages (for example dmg and app bundles on OSX) can be built via:
SpyCast can also be built without the default UI, in which case all output will be printed on the terminal:
Running
Run SpyCast in active mode (it will recursively query all available mDNS services):
Run in passive mode (it won't produce any mDNS traffic and only listen for multicast packets):
Other options
Run
License
This project is made with ♥ by @evilsocket and it is released under the GPL3 license.
Download Spycast
___________________________
@hacking_Attack
@Hacking_Video
SpyCast - A Crossplatform mDNS Enumeration Tool
https://blogger.googleusercontent.com/img/a/AVvXsEgHcpB_kwRzDtlpUcYBO1EUsw74pQsZhJ4nBBcCCxDbwgcin7Fp5fRW3F_Z1u-Ccy8qf0CEgUlX2hAeiKkd7tO3sUfeQxWL4HAcOTgdlylDZx-6OLsaxXrmwo2KzPAZmJ9XTCzYhyMvZGe299sM0KE85boqPjvaS2gasNVgLh98gGHI8qWp_V6CXKuehQ=w640-h414
SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets.
Building
cargo build --releaseOS specific bundle packages (for example dmg and app bundles on OSX) can be built via:
cargo tauri buildSpyCast can also be built without the default UI, in which case all output will be printed on the terminal:
cargo build --no-default-features --releaseRunning
Run SpyCast in active mode (it will recursively query all available mDNS services):
./target/release/spycastRun in passive mode (it won't produce any mDNS traffic and only listen for multicast packets):
./target/release/spycast --passiveOther options
Run
spycast --helpfor the complete list of options.License
This project is made with ♥ by @evilsocket and it is released under the GPL3 license.
Download Spycast
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
SpyCast - A Crossplatform mDNS Enumeration Tool
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Shodan Dorks - The God’s Eye
https://cdn-images-1.medium.com/max/830/1*9hfVWtZq4ajl1MaJSJifag.jpeg
Summary :
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Shodan Dorks - The God’s Eye
https://cdn-images-1.medium.com/max/830/1*9hfVWtZq4ajl1MaJSJifag.jpeg
Summary :
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Shodan Dorks - The God’s Eye
Summary :