About nuvola To get started with nuvola and its database schema, check out the nuvola Wiki (https://github.com/primait/nuvola/wiki). No data is sent or shared with Prima Assicurazioni. How to contribute reporting bugs and issues reporting new improvements reviewing issues and pull requests fixing bugs and issues creating new rules improving the overall quality Presentations RomHack 2022 Slides (https://github.com/primait/nuvola/tree/master/assets/slides/RomHack_2022-You_shall_not_PassRole.pdf) Demos (https://github.com/primait/nuvola/tree/master/assets/demos/) License nuvola uses graph theory (https://www.kitploit.com/search/label/Graph%20Theory) to reveal possible attack paths and security misconfigurations (https://www.kitploit.com/search/label/Misconfigurations) on cloud environments. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed (https://www.kitploit.com/search/label/Distributed) in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this repository and program. If not, see http://www.gnu.org/licenses/.

Download Nuvola (https://github.com/primait/nuvola)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Recon Tool: SecretScanner

Recon Tool: SecretScannerPost Views: 39 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes SecretScannerDeepfence SecretScanner can find unprotected secrets in container images or file systems.

* SecretScanner is a standalone tool that retrieves and searches container and host filesystems, matching the contents against a database of approximately 140 secret types.
* SecretScanner is also included in ThreatMapper, an open source scanner that identifies vulnerable dependencies and unprotected secrets in cloud native applications, and ranks these vulnerabilities based on their risk-of-exploit (example)
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course What are Secrets?Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure (such as accounts, devices, networks, and cloud-based services), applications, storage, databases, and other kinds of critical data for an organization. For example, passwords, AWS access IDs, AWS secret access keys, Google OAuth Key, etc. are secrets. However, sometimes attackers can easily access secrets due to flawed security policies or inadvertent mistakes by developers. Sometimes
developers use default secrets or leave hard-coded secrets such as passwords, API keys, encryption keys, SSH keys, tokens, etc. in container images, especially during rapid development and deployment cycles in CI/CD pipeline. Also, sometimes users store passwords in plain text. Leakage of secrets to unauthorized entities can put your organization and infrastructure at a serious security risk.

SecretScanner by Deepfence helps users scan their container images or local directories on hosts and outputs a JSON file with details of all the secrets found.

Check out their blog for more details. When to use SecretScannerUse SecretScanner if you need a lightweight, efficient method to scan container images and filesystems for possible secrets (keys, tokens, passwords). You can then review these possible ‘secrets’ to determine if any of them should be removed from production deployments.
Trending: Offensive Security Tool: Mangle
Trending: Offensive Security Tool: WinPwnage Quick StartFor full instructions, refer to the SecretScanner Documentation.

Install docker and run SecretScanner on a container image using the following instructions:

* Build SecretScanner:
./bootstrap.sh
docker build --rm=true --tag=deepfenceio/deepfence_secret_scanner:latest -f Dockerfile .
* Or, pull the latest build from docker hub by doing:
docker pull deepfenceio/deepfence_secret_scanner:latest
* Pull a container image for scanning:
docker pull node:8.11
* Scan the container image:

docker run -it --rm --name=deepfence-secretscanner -v $(pwd):/home/deepfence/output -v /var/run/docker.sock:/var/run/docker.sock deepfenceio/deepfence_secret_scanner:latest -image-name node:8.11 Trending: Exploit XSS Injections in a one-line powerful Technique DisclaimerThis tool is not meant to be used for hacking. Use it only for legitimate purposes like detecting secrets on the infrastructure you own, not on others’ infrastructure. DEEPFENCE shall not be liable for loss of profit, loss of business, other financial loss, or any other loss or damage which may be caused, directly or indirectly, by the inadequacy of SecretScanner for any purpose or use thereof or by any defect or deficiency therein.
Clone the repo from here: GitHub Link
Trending: Article: Using VPS for Bug Bounty, comparing VPS providers https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethi[...]

___________________________
@hacking_Attack
@Hacking_Video

calhacking.com/wp-content/uploads/2022/11/Mangle-300x150.png Offensive Security Tool: MangleNovember 11, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/WinPwnage-300x150.jpg Offensive Security Tool: WinPwnageNovember 4, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/lazypariah-300x150.png Offensive Security Tool: LAZYPARIAHOctober 28, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Parth-300x150.png Recon Tool: ParthOctober 27, 2022
Reading Time: 2 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Recon Tool: SecretScanner first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
nuvola - Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services

https://blogger.googleusercontent.com/img/a/AVvXsEgzmURPzSN2TgWknr8VkU8lZFi3OmYW__FqXcXK7E9EggsniyF5TvTVmMkKbOIKnap0o2Y1DI6g4cLEOzbHGR0qrBmOjamJvS2h2TdFbUwECaXkQxQzYiAZus36OWa753eMRyLrSlm0mKYO5tC58u_46q3tBSefqEQX4QwN7BrEixhuXt0TQqQOXgUQ3Q=s320 nuvola (with the lowercase n) is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax.

The general idea behind this project is to create an abstracted digital twin of a cloud platform. For a more concrete example: nuvola reflects the BloodHound traits used for Active Directory analysis but on cloud environments (at the moment only AWS).

The usage of a graph database also increases the possibility of finding different and innovative attack paths and can be used as an offline, centralised and lightweight digital twin. Quick StartRequirements* docker-composeinstalled
* an AWS account configured to be used with awscliwith full access to the cloud resources, better if in ReadOnly mode (the policy arn:aws:iam::aws:policy/ReadOnlyAccessis fine) Setup1. Clone the repository git clone --depth=1 https://github.com/primait/nuvola.git; cd nuvola1. Create and edit, if required, the .envfile to set your DB username/password/URL cp .env_example .env;1. Start the Neo4j docker instance make start1. Build the tool make buildUsage1. Firstly you need to dump all the supported AWS services configurations and load the data into the Neo4j database: ./nuvola dump -profile default_RO -outputdir ~/DumpDumpFolder -format zip1. To import a previously executed dump operation into the Neo4j database: ./nuvola assess -import ~/DumpDumpFolder/nuvola-default_RO_20220901.zip1. To only perform static assessments on the data loaded into the Neo4j database using the predefined ruleset: ./nuvola assess1. Or use Neo4j Browser to manually explore the digital twin. https://blogger.googleusercontent.com/img/a/AVvXsEjQbhoTT8iOZvEXyq-5kXJNngssFxDFe-QmxWTq817OKgNJNDzsJu7KH4bcwagoqFcbOzC2BRsx4ME8h1U0Xijgd-f_OAD2sx9nFIL_JzpvzmhGcUNxbIdN-yOLC8qzUzTDMsNVOz6OiVv3LyTyaljP3kYmEOiGiGw9XebHCthRKNnWXhMfB6Jd2FWCGQ=w640-h276 About nuvolaTo get started with nuvola and its database schema, check out the nuvola Wiki.

No data is sent or shared with Prima Assicurazioni. How to contribute* reporting bugs and issues
* reporting new improvements
* reviewing issues and pull requests
* fixing bugs and issues
* creating new rules
* improving the overall quality Presentations* RomHack 2022
* Slides
* Demos Licensenuvola uses graph theory to reveal possible attack paths and security misconfigurations on cloud environments.

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this repository and program. If not, see http://www.gnu.org/licenses/. Download Nuvola

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Gitea Git Fetch Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
AutoSSRF : Smart Context-Based SSRF Vulnerabiltiy Scanner

AutoSSRF is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features :

* Smart fuzzing on relevant SSRF GET parameters When fuzzing, autoSSRF only focuses on the common parameters related to SSRF (?url=, ?uri=, ..) and doesn’t interfere with everything else. This ensures that the original URL is still correctly understood by the tested web-application, something that might doesn’t happen with a tool which is blindly spraying query parameters.
* Context-based dynamic payloads generation For the given URL : https://host.com/?fileURL=https://authorizedhost.com, autoSSRF would recognize authorizedhost.com as a potentially white-listed host for the web-application, and generate payloads dynamically based on that, attempting to bypass the white-listing validation. It would result to interesting payloads such as : http://authorizedhost.attacker.com, http://authorizedhost%252F@attacker.com, etc.

Furthermore, this tool guarantees almost no false-positives. The detection relies on the great ProjectDiscovery’s interactsh, allowing autoSSRF to confidently identify out-of-band DNS/HTTP interactions.

Usage
python3 autossrf.py -h
This displays help for the tool.
usage: autossrf.py [-h] [--file FILE] [--url URL] [--output] [--verbose]

options:
-h, --help show this help message and exit
--file FILE, -f FILE file of all URLs to be tested against SSRF
--url URL, -u URL url to be tested against SSRF
--output, -o output file path
--verbose, -v activate verbose mode
Single URL target:
python3 autossrf.py -u https://www.host.com/?param1=X¶m2=Y¶m2=Z
Multiple URLs target with verbose:
python3 autossrf.py -f urls.txt -v
Installation

1 – Clone
git clone https://github.com/Th0h0/autossrf.git
2 – Install requirements

Python libraries :
cd autossrf
pip install -r requirements.txt
Interactsh-Client :
go install -v github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
RFID cloner

I want to custom make a pcb around the size of a credit card with an onboard computer that can simply be toggle from read to write at the push of a button. It should be capable of interacting with RFID devices. I want it to be slim and able to fit in a wallet, any suggestions on what kind of chips I need ?

submitted by /u/TheRebel2187
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it a good idea to Use cloud providers as a UAT env?

Hi Everyone,

I'm a pentester and I want to understand. Suppose my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy the application for the Web application Pentest? Like (UAT cloud or something).

Thank you so much for your attention and participation. :)

Shazeb

submitted by /u/Shazeb02
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any hacks for Moodle?

I am a Moodle Site Admin and am looking to learn the ways it can be hacked so I can test it and improve security, particularly in Moodle Workplace if possible, and involving regular users getting access to Site Admin areas or permissions.

submitted by /u/anathemastudio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is it a good idea to Use cloud providers as a UAT Environment?
https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/

Hi Everyone, I'm a pentester and I want to understand. Suppose my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy the application for the Web application Pentest? Like (UAT cloud or something). Thank you so much for your attention and participation. :) Shazeb submitted by /u/Shazeb02 (https://www.reddit.com/user/Shazeb02)
[link] (https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/) [comments] (https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Saiyan Hacker is Back

I have not posted in some time and I want to tell you why. First big event is announcing I am ISC2 certified. I received my passing on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacking WordPress Database

https://cdn-images-1.medium.com/max/968/1*R8eE4LcRp3-kkrJf1C9Dng.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WHAT IS IOT? HOW IS IOT PENETRATION TESTING CARRIED OUT?

https://cdn-images-1.medium.com/max/600/1*zAUJIsxR_Mz7GSBLzmiELQ.png
Internet of things (IoT) is a network of physical objects that are embedded with sensors, smart software, and artificial intelligence…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Let’s make Spy Pdf to spy on anyone as Hackers do

https://cdn-images-1.medium.com/max/2600/0*SFaxCBabPU1OBweK
Welcome back, my novice hackers fellows!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video