Kali Linux Tutorials
Shomon : Shodan Monitoring Integration For TheHive

ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever!

Functionalities

* Can be used as Webhook OR Stream listener
* Webhook listener opens a restful API endpoint for Shodan to send alerts. This means you need to make this endpoint available to public net
* Stream listener connects to Shodan and fetches/parses the alert stream

* Utilizes shadowscatcher/shodan (fantastic work) for Shodan interaction.
* Console logs are in JSON format and can be ingested by any other further log management tools
* CI/CD via Github Actions ensures that a proper Release with changelogs, artifacts, images on ghcr and dockerhub will be provided
* Provides a working docker-compose file file for TheHive, dependencies
* Super fast and Super mini in size
* Complete code refactoring in v2.0 resulted in more modular, maintainable code
* Via conf file or environment variables alert specifics including tags, type, alert-template can be dynamically adjusted. See config file.
* Full banner can be included in Alert with direct link to Shodan Finding.
IP is added to observables
Usage

* Parameters should be provided via conf.yamlor environment variables. Please see config file and docker-compose file
* After conf or environment variables are set simply issue command: ./shomon

Notes

* Alert reference is first 6 chars of md5(“ip:port”)
* Only 1 mod can be active at a time. Webhook and Stream listener can not be activated together.

Setup & Compile Instructions

Get latest compiled binary from releases

1. Check Releases section.

Compile from source code

1. Make sure that you have a working Golang workspace.
2. go build .
* go build -ldflags="-s -w" .could be used to customize compilation and produce smaller binary.
Using Public Container Registries

1. Thanks to new CI/CD integration, latest versions of built images are pushed to ghcr, DockerHub and can be utilized via:
* docker pull ghcr.io/kaansk/shomon
* docker pull kaansk/shomon
Using Dockerfile

1. Edit config file or provide environment variables to commands bellow
2. docker build -t shomon .
3. docker run -it shomon

Using docker-compose file

1. Edit environment variables and configurations in docker-compose file
2. docker-compose run -d
Click Here To Download

Hacking on Medium
VulnHub — XSS-SQLInjection

https://cdn-images-1.medium.com/max/700/1*mfBIzh6obc3vTafKt2LkDQ.jpeg
Reconocimiento y enumeración:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
2K KIDS 2 | FIRST LOOK | SHOT FLIM | HISHAM EXPLORER MEDIA

HISHAM EXPLORER MEDIA

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Error de recuperación de GitHub podría haber permitido a atacantes apoderarse de los repositorios…

https://cdn-images-1.medium.com/max/1228/0*A7nsbOk6Pm_XZ8H4
El servicio de alojamiento de repositorios basado en la nube GitHub ha abordado una falla de seguridad de alta gravedad que podría haberse…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme Epoch Room Write-Up

https://cdn-images-1.medium.com/max/960/1*80nUcj1c5DkJ_6nRFdnPdg.png
This is a Write-Up for the Tryhackme room Epoch.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
An Overview of OAuth 2.0

https://cdn-images-1.medium.com/max/600/1*LwpZChdbbHsRZBeQgiJoTQ.png
While surfing the web, you’ve almost likely come across websites that allow you to log in using your social media account. This…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Generate a memorizable private key from passwords. Say goodbye to the compromised private key.

https://cdn-images-1.medium.com/max/926/1*CfVxvPxWs3wbFzM4PrveGg.png
Stop worrying about the compromised or lost private key. You don’t need to worry about hacking or stealing seed phrases or your wife…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Overthewire — Bandit 0 al 10 (solución)

https://cdn-images-1.medium.com/max/626/1*1zciqU8Re66yZSuY0zt3Vg.png
Nota: verifique que el idioma de la página este en original o inglés.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box: Beatles

https://cdn-images-1.medium.com/max/1024/0*hkA5H1Bp9bvF7-tU
To start we unzip the file and see that we get two new files:
BAND.zip and m3ss@g#_f0r_pAul

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox(HTB): Netmon Walkthrough

https://cdn-images-1.medium.com/max/700/1*SpHO2xE0rbN3PW7tIokE0A.png
Hello Hackers! This is a walkthrough of the “Netmon” machine from HackTheBox. The HTB is an online platform that challenges your skills in…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Team Finance Hacked and their credibility is now wrecked

https://cdn-images-1.medium.com/max/1024/0*Q89AjnYr5_QqSaDt.jpg
Four projects got rugged through their shared anti-rug mechanism.

Continue reading on CryptoStars »

___________________________
@hacking_Attack
@Hacking_Video

I want to test ios application but I don't have iPhone I have only linux any idea somebody please help me
https://www.reddit.com/r/Pentesting/comments/yiiym7/i_want_to_test_ios_application_but_i_dont_have/

submitted by /u/sangwal (https://www.reddit.com/user/sangwal)
[link] (https://www.reddit.com/r/Pentesting/comments/yiiym7/i_want_to_test_ios_application_but_i_dont_have/) [comments] (https://www.reddit.com/r/Pentesting/comments/yiiym7/i_want_to_test_ios_application_but_i_dont_have/)

___________________________
@hacking_Attack
@Hacking_Video