A proof-of-concept (PoC) exploit code has been made available for the recently disclosed critical security flaw affecting Fortinet FortiOS…Continue reading on Medium » (https://medium.com/@ronnie.rodrigues/poc-exploit-released-for-critical-fortinet-auth-bypass-bug-under-dff893bb3025?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Learning Methodology for Web Security
https://medium.com/@cowdex/my-learning-methodology-for-web-security-ffd318f5d935?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, to give something back to the infosec community I decided to start a new series on web application pen-testing. And this would be…Continue reading on Medium » (https://medium.com/@cowdex/my-learning-methodology-for-web-security-ffd318f5d935?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Learning Methodology for Web Security

Hello, to give something back to the infosec community I decided to start a new series on web application pen-testing. And this would be…Continue reading on Medium »
Read more...

Matano - The Open-Source Security Lake Platform For AWS
http://www.kitploit.com/2022/10/matano-open-source-security-lake.html

___________________________
@hacking_Attack
@Hacking_Video

Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache (https://www.kitploit.com/search/label/Apache) Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.

___________________________
@hacking_Attack
@Hacking_Video

Features Collect data from all your sources Matano lets you collect log data from sources using S3 (https://github.com/matanolabs/matano) or SQS based ingestion. Ingest, transform, normalize log data Matano normalizes and transforms your data using Vector Remap Language (VRL) (https://vector.dev/docs/reference/vrl/). Matano works with the Elastic Common Schema (ECS) (https://www.elastic.co/guide/en/ecs/current/index.html) by default and you can define your own schema. Store data in S3 object storage Log data is always stored in S3 object storage, for cost effective, long term, durable storage. Apache Iceberg Data lake All data is ingested into an Apache Iceberg based data lake, allowing you to perform ACID transactions, time travel, and more on all your log data. Apache Iceberg is an open table format, so you always own your own data, with no vendor lock-in. Serverless Matano is a fully serverless (https://www.kitploit.com/search/label/Serverless) platform, designed for zero-ops and unlimited elastic (https://www.kitploit.com/search/label/Elastic) horizontal scaling. Detections as code Write Python detections to implement realtime alerting (https://www.kitploit.com/search/label/Alerting) on your log data. Installing View the complete installation instructions. You can install the matano CLI to deploy Matano into your AWS account, and manage your Matano deployment. Requirements Docker Installation Matano provides a nightly release (https://github.com/matanolabs/matano/releases/tag/nightly) with the latest prebuilt files to install the Matano CLI on GitHub. You can download and execute these files to install Matano. For example, to install the Matano CLI for Linux, run: curl -OL https://github.com/matanolabs/matano/releases/download/nightly/matano-linux-x64.sh
chmod +x matano-linux-x64.sh
sudo ./matano-linux-x64.sh Getting started Read the complete docs on getting started. Deployment To get started with Matano, run the matano init command. Make sure you have AWS credentials (https://www.kitploit.com/search/label/Credentials) in your environment (or in an AWS CLI profile). The interactive CLI wizard will walk you through getting started by generating an initial Matano directory (https://www.matano.dev/docs/matano-directory) for you, initializing your AWS account, and deploying Matano into your AWS account.

___________________________
@hacking_Attack
@Hacking_Video

Initial deployment takes a few minutes. Documentation View our complete documentation. License Apache-2.0 License (https://github.com/matanolabs/matano/blob/main/LICENSE)

___________________________
@hacking_Attack
@Hacking_Video

Download Matano (https://github.com/matanolabs/matano)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Recon Tool: Collector

Recon Tool: CollectorPost Views: 73 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes CollectorCollector, by thenurhabib, is an Intelligent automated tool used to collect every vulnerable XSS (Cross-Site Scripting) parameter via Wayback Machine.

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/SS1-1-1024x576.png
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Main Features* Find XSS vulnerable patameters.
* Crwal entire website and collect every URL
* Advance Error Handling.
* Collect GET parameters.

This Framework also crawls URLs and JS Files for sensitive information.
This tool is ideal for Bug Bounty Hunting, Recon, and the Red Team to quickly grab vulnerable parameters for XSS from entire domain, passively so it will be real fast, and then probe and test them manually to confirm if they are vulnerable.
Trending: Offensive Security Tool: VLANPWN
Trending: Recon Tool: ReconSpider Installationgit clone https://www.github.com/thenurhabib/collectorcd collectorpip install -r requirements.txtpython3 collector.py -hUsagepython3 collector.py -d pull --host example.comTrending: How to Exploit “improper error handling” in Web Applications Available command line optionshttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/SS2-1-1024x690.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/SS3-1024x591.png
Clone the repo from here: GitHub Link
Trending: Write up: A primer on OS Command Injection Attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/VLANPWN-300x150.png Offensive Security Tool: VLANPWNOctober 7, 2022
Reading Time: 2 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ProtOSINT-300x150.png OSINT Tool: ProtOSINTSeptember 30, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/BF_ActiveSub-300x150.png Recon Tool: BF ActiveSubSeptember 29, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-300x150.png Recon Tool: ReconSpiderSeptember 23, 2022
Reading Time: 3 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: Collector first appeared on Black Hat Ethical Hacking.

Dark Reading: Attacks/Breaches
Care and Feeding of the SOC's Most Powerful Tool: Your Brain

Once overloaded, our brains can't process information effectively, performance decreases, and even the simplest of tasks seem foreign.

hacking: security in practice
Disposable root shells

Found this cool article about something i was searching for a long time.

https://blog.thc.org/disposable-root-servers

https://www.thc.org/segfault/

submitted by /u/GoldeN2k1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
EvilnoVNC – Ready To Go Phishing Platform

EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection.

In addition, this tool allows us to see in real time all of the victim’s actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more.

Requirements

* Docker Chromium
* Download

It’s recommended to clone the complete repository or download the zip file.
Additionally, it’s necessary to build Docker manually. You can do this by running the following commands:

git clone https://github.com/JoelGMSec/EvilnoVNC
cd EvilnoVNC ; sudo chown -R 103 Downloads
sudo docker build -t joelgmsec/evilnovnc .

Usage
./start.sh -h

_____ _ _ __ ___ _ ____
| ____|_ _(_) |_ __ __\ \ / / \ | |/ ___|
| _| \ \ / / | | '_ \ / _ \ \ / /| \| | |
| |___ \ V /| | | | | | (_) \ V / | |\ | |___
|_____| \_/ |_|_|_| |_|\___/ \_/ |_| \_|\____|

---------------- by @JoelGMSec --------------

Usage: ./start.sh $resolution $url

Examples:
1280x720 16bits: ./start.sh 1280x720x16 http://example.com
1280x720 24bits: ./start.sh 1280x720x24 http://example.com
1920x1080 16bits: ./start.sh 1920x1080x16 http://example.com
1920x1080 24bits: ./start.sh 1920x1080x24 http://example.com
Features & To Do

* Export Evil-Chromium profile to host
* Save download files on host
* Disable parameters in URL (like password)
* Disable key combinations (like Alt+1 or Ctrl+S)
* Disable access to Thunar
* Decrypt cookies in real time
* Expand cookie life to 99999999999999999
* Dynamic title from original website
* Dynamic resolution from preload page
* Replicate real user-agent and other stuff
* Basic keylogger
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Matano - The Open-Source Security Lake Platform For AWS

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqX3w4a55hJEMy-NZgBEQXV6orLxnR9zMqLFoAwGaVr2rIvB9-Fk2tDQKvTsmigZkR0cxrKFvEKOWTKbfH9P8EldUNDj69w-GCkfqORU6Nt05MAlNxvdGMblhjtmMXpG7cTjDVnORQgVLR73y53lG5JPoiEO8clQY4CuBzqtCyd7WT2zpH1qClkuX6Rw/w640-h260/matano.png Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account. https://blogger.googleusercontent.com/img/a/AVvXsEghH3oRgeqp6V4_fAgJpLhPQm2l9025YQD8EMo6nlCkJ8CVVPVb4zcpH34m9sMZzSi9Ib-d3PzbN0VkcUj4-aj3DscaFqqFajwB65YGe5gFnpRcQau2t171qCmKXwmGm8Zs-NOUbGuOAn3XQwKT03r3vDISVeVZmngXtJte3dX1MXzd3DJTuSUs_96V4A=w640-h324 FeaturesCollect data from all your sourcesMatano lets you collect log data from sources using S3 or SQS based ingestion. Ingest, transform, normalize log dataMatano normalizes and transforms your data using Vector Remap Language (VRL). Matano works with the Elastic Common Schema (ECS) by default and you can define your own schema. Store data in S3 object storageLog data is always stored in S3 object storage, for cost effective, long term, durable storage. Apache Iceberg Data lakeAll data is ingested into an Apache Iceberg based data lake, allowing you to perform ACID transactions, time travel, and more on all your log data. Apache Iceberg is an open table format, so you always own your own data, with no vendor lock-in. ServerlessMatano is a fully serverless platform, designed for zero-ops and unlimited elastic horizontal scaling. Detections as codeWrite Python detections to implement realtime alerting on your log data. InstallingView the complete installation instructions.

You can install the matano CLI to deploy Matano into your AWS account, and manage your Matano deployment. Requirements* Docker InstallationMatano provides a nightly release with the latest prebuilt files to install the Matano CLI on GitHub. You can download and execute these files to install Matano.

For example, to install the Matano CLI for Linux, run: curl -OL https://github.com/matanolabs/matano/releases/download/nightly/matano-linux-x64.sh
chmod +x matano-linux-x64.sh
sudo ./matano-linux-x64.shGetting startedRead the complete docs on getting started. DeploymentTo get started with Matano, run the matano initcommand. Make sure you have AWS credentials in your environment (or in an AWS CLI profile).

The interactive CLI wizard will walk you through getting started by generating an initial Matano directory for you, initializing your AWS account, and deploying Matano into your AWS account. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdUK3Bqj7b8cajuoKx8yCaCWNPO9Kw4z1Viin9wfpjMEY9g69mywobrF4HMDwNQ4EXY6kqnq_6ev83VvRhhJxHENDz1FRUeHx5UkGRaG99-p1uAH8-Y4cAeS5v8yLNoKXrOFnrCsSUo-5X4uVzSbJUsyUy6wxumr-WbLnWRDSS3jbzb8dnQzXHVLVR0Q/w640-h360/matano_9_matano-init.gif Initial deployment takes a few minutes. DocumentationView our complete documentation. License* Apache-2.0 License https://blogger.googleusercontent.com/img/a/AVvXsEj-DaZt9qjgneGKVtokDwUlMsD-thDPFseA82GXz6jz4y7alXG80CkSZhc8DPha4RfvcPdSBtt7gdWGJsp0eZX3yRCk7LPCNTHb1Lx_aALQVd4gnkN_E4YhJl-AtX2ZMNKnKjTyMUfrGgOlp1MUPVyR6STd11WMiYXGG3XZv7gyKlfmMY57brHm1OmFLg=s320 Download Matano

___________________________
@hacking_Attack
@Hacking_Video