KitPloit - PenTest Tools!
Dismember - Scan Memory For Secrets And More

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3HLOoTulgmqDZZ0fhgI2hve0yZQrOMmveSvymJf8arD4LCwmD8U9Vl562V61pVhKTd6HtSkTaR-WkDTjVlb0g1xXMV4n-4gHLWbvP8PQgo43a_qRE_aUEEl3mO-BFf7HZMZivFuU9PXCBKa-0zlbJA86Z1bVUXmgYj99TLJjux1KS4jYQBaeJK_0OEw/w640-h256/dismember.gif Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things.

It will eventually become a full /proctoolkit.

Using the grepcommand, it can match a regular expression across all memory for all (accessible) processes. This could be used to find sensitive data in memory, identify a process by something included in its memory, or to interrogate a processes' memory for interesting information.

There are many built-in patterns included via the scancommand, which effectively works as a secret scanner against the memory on your machine.

Dismember can be used to search memory of all processes it has access to, so running it as root is the most effective method.

Commands are also included to list processes, explore process status and related information, draw process trees, and more... Main CommandsCommand Description grepSearch process memory for a given string or regex scanSearch process memory for a set of predefined secret patterns Utility CommandsCommand Description filesShow a list of files being accessed by a process findFind a PID given a process name. If multiple processes match, the first one is returned. infoShow information about a process kernelShow information about the kernel killKill a process (or processes) using SIGKILL listList all processes currently available on the system resumeResume a suspended process using SIGCONT suspendSuspend a process using SIGSTOP (use 'dismember resume' to leave suspension) treeShow a tree diagram of a process and all children (defaults to PID 1). InstallationGrab a binary from the latest release and add it to your path. Usage ExamplesSearch for a pattern in a process by PID# search memory owned by process 1234
dismember grep -p 1234 'the password is .*'Search for a pattern in a process by name# search memory owned by processes named "nginx" for a login form submission
dismember grep -n nginx 'username=liamg&password=.*'Search for a pattern across all processes# find a github api token across all processes
dismember grep 'gh[pousr]_[0-9a-zA-Z]{36}'Search for secrets in memory across all processes# search all accessible memory for common secrets
dismember scanFAQIsn't this information all just sitting in /proc?

Pretty much. Dismember just reads and presents it for the most part. If you can get away with grep whatever /proc/[pid]/blahthen go for it! I built this as an educational experience because I couldn't sleep one night and stayed up late reading the procman-pages (I live an extremely rock 'n' roll lifestyle). It's not a replacement for existing tools, but perhaps it can complement them.

Do you know how horrific some of these commands seem when read out of context? Yes. Download Dismember

___________________________
@hacking_Attack
@Hacking_Video

Web App pentesting/Bug Bounty Bible
https://medium.com/@saitle74/web-app-pentesting-bug-bounty-bible-986fa5a87953?source=rss------bug_bounty-5

Wassup everyone, I hope you all are doing great at your lives and I know you all might be brutally cussing me right now for not uploading…Continue reading on Medium » (https://medium.com/@saitle74/web-app-pentesting-bug-bounty-bible-986fa5a87953?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Web App pentesting/Bug Bounty Bible

Wassup everyone, I hope you all are doing great at your lives and I know you all might be brutally cussing me right now for not uploading…Continue reading on Medium »
Read more...

P1 Bug Bounties: What is an IDOR, and how does IDOR == $$$?

TL;DR- A brief post about what an IDOR is, and what they mean to the bug-hunting world.Continue reading on The Gray Area »
Read more...

Question about Pen Test Consultant Job
https://www.reddit.com/r/Pentesting/comments/yw1lqy/question_about_pen_test_consultant_job/

Hi. I am looking to be a pen tester for a consulting company, not an internal pen tester. So I would be doing a pen test then bouncing to the next company and so on. My question is, Does the consultant company that hired me give me a checklist to go through/enumerate ? Like one big playbook of things I would be testing for each company ? Or would a consulting pen testing job be more customized for what the client wants ? I am asking this question because I am trying to understand how much knowledge I need for each subject. I have the oscp and am pursuing the crto. My web knowledge is good but not crazy good. I also wanted to know if I need to be an expert in each category before getting the job. I would be getting a junior/entry level pen testing job. Ty submitted by /u/awpish (https://www.reddit.com/user/awpish)
[link] (https://www.reddit.com/r/Pentesting/comments/yw1lqy/question_about_pen_test_consultant_job/) [comments] (https://www.reddit.com/r/Pentesting/comments/yw1lqy/question_about_pen_test_consultant_job/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A Technical Analysis of Royal Ransomware [PDF]

https://external-preview.redd.it/Q45JJj_VG-_ru4kB_3KctUacjOK6we41LlpLbkYO1Ao.jpg?width=320&crop=smart&auto=webp&s=ee1e20a73e0be92a5e5bb37f0f00965e8a942d71 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Getting a job in USA

Hi, I am a Korean and I have a Master's degree in Software Security. I want to get a job(pentesting) in Columbus, Ohio, USA. I was wondering if I have OSCP, OSWP, and OSEP, would it be helpful to get a job easier even if I don't have a US school diploma?

​

If I wanna get a job, should I just go to school for master's degree instead of getting certificates?

submitted by /u/Plus-Unit-4461
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are reverse tcp shells now defunct?

Was wondering what the communities sentiment on this is, since it seems that rev http is the new standard for most reverse shell payloads.

Also I know they still work (function well) but is there any point in using them in pentests anymore or are they becoming a thing of the past?

submitted by /u/Aleks_Leeks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Analysis Review of Team Finance Exploit

https://cdn-images-1.medium.com/max/940/1*m-7NMYMQWNJbsWQbLvBwfw.png
The Team Finance white hat hacker address has returned $13.4 million in digital assets as of this writing.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web App pentesting/Bug Bounty Bible

Wassup everyone, I hope you all are doing great at your lives and I know you all might be brutally cussing me right now for not uploading…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Een password manager gebruiken?

https://cdn-images-1.medium.com/max/1600/1*pbKM5aFjF3XK2sI2P8GNRw.png
Eerst wat is een password manager? Een password manager is een programma (software) dat helpt in het onthouden, beheren en verbeteren…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
P1 Bug Bounties: What is an IDOR, and how does IDOR == $$$?

https://cdn-images-1.medium.com/max/833/1*GxtT2xblK5V0NIaXj0vsOg.jpeg
TL;DR- A brief post about what an IDOR is, and what they mean to the bug-hunting world.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Port Forwarding CheatSheet

https://cdn-images-1.medium.com/max/742/0*YWbU8hARuHWWpPTl.jpg
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ataques a redes Wi-Fi

https://cdn-images-1.medium.com/max/2600/1*CABHxpgY1e4UoQ_H91fsJg.jpeg
Não há uma resposta única para a questão de como proteger as redes Wi-Fi contra ataques, pois as medidas de segurança apropriadas variarão…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video