Exploit Collector
Gitea Git Fetch Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
AutoSSRF : Smart Context-Based SSRF Vulnerabiltiy Scanner

AutoSSRF is your best ally for identifying SSRF vulnerabilities at scale. Different from other ssrf automation tools, this one comes with the two following original features :

* Smart fuzzing on relevant SSRF GET parameters When fuzzing, autoSSRF only focuses on the common parameters related to SSRF (?url=, ?uri=, ..) and doesn’t interfere with everything else. This ensures that the original URL is still correctly understood by the tested web-application, something that might doesn’t happen with a tool which is blindly spraying query parameters.
* Context-based dynamic payloads generation For the given URL : https://host.com/?fileURL=https://authorizedhost.com, autoSSRF would recognize authorizedhost.com as a potentially white-listed host for the web-application, and generate payloads dynamically based on that, attempting to bypass the white-listing validation. It would result to interesting payloads such as : http://authorizedhost.attacker.com, http://authorizedhost%252F@attacker.com, etc.

Furthermore, this tool guarantees almost no false-positives. The detection relies on the great ProjectDiscovery’s interactsh, allowing autoSSRF to confidently identify out-of-band DNS/HTTP interactions.

Usage
python3 autossrf.py -h
This displays help for the tool.
usage: autossrf.py [-h] [--file FILE] [--url URL] [--output] [--verbose]

options:
-h, --help show this help message and exit
--file FILE, -f FILE file of all URLs to be tested against SSRF
--url URL, -u URL url to be tested against SSRF
--output, -o output file path
--verbose, -v activate verbose mode
Single URL target:
python3 autossrf.py -u https://www.host.com/?param1=X¶m2=Y¶m2=Z
Multiple URLs target with verbose:
python3 autossrf.py -f urls.txt -v
Installation

1 – Clone
git clone https://github.com/Th0h0/autossrf.git
2 – Install requirements

Python libraries :
cd autossrf
pip install -r requirements.txt
Interactsh-Client :
go install -v github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
RFID cloner

I want to custom make a pcb around the size of a credit card with an onboard computer that can simply be toggle from read to write at the push of a button. It should be capable of interacting with RFID devices. I want it to be slim and able to fit in a wallet, any suggestions on what kind of chips I need ?

submitted by /u/TheRebel2187
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it a good idea to Use cloud providers as a UAT env?

Hi Everyone,

I'm a pentester and I want to understand. Suppose my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy the application for the Web application Pentest? Like (UAT cloud or something).

Thank you so much for your attention and participation. :)

Shazeb

submitted by /u/Shazeb02
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any hacks for Moodle?

I am a Moodle Site Admin and am looking to learn the ways it can be hacked so I can test it and improve security, particularly in Moodle Workplace if possible, and involving regular users getting access to Site Admin areas or permissions.

submitted by /u/anathemastudio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is it a good idea to Use cloud providers as a UAT Environment?
https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/

Hi Everyone, I'm a pentester and I want to understand. Suppose my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy the application for the Web application Pentest? Like (UAT cloud or something). Thank you so much for your attention and participation. :) Shazeb submitted by /u/Shazeb02 (https://www.reddit.com/user/Shazeb02)
[link] (https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/) [comments] (https://www.reddit.com/r/Pentesting/comments/yxuhxv/is_it_a_good_idea_to_use_cloud_providers_as_a_uat/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Saiyan Hacker is Back

I have not posted in some time and I want to tell you why. First big event is announcing I am ISC2 certified. I received my passing on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacking WordPress Database

https://cdn-images-1.medium.com/max/968/1*R8eE4LcRp3-kkrJf1C9Dng.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WHAT IS IOT? HOW IS IOT PENETRATION TESTING CARRIED OUT?

https://cdn-images-1.medium.com/max/600/1*zAUJIsxR_Mz7GSBLzmiELQ.png
Internet of things (IoT) is a network of physical objects that are embedded with sensors, smart software, and artificial intelligence…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Let’s make Spy Pdf to spy on anyone as Hackers do

https://cdn-images-1.medium.com/max/2600/0*SFaxCBabPU1OBweK
Welcome back, my novice hackers fellows!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Tips to Improve Security Online

https://cdn-images-1.medium.com/max/2600/0*m2nflX6236WYqgXm
In the wake of the recent Equifax data breach, it’s more important than ever to take steps to improve your online security.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Only 1 Month Left For Infosec Writeups Virtual Cybersecurity Conference

https://cdn-images-1.medium.com/max/1080/1*7ZVc_80gp9UKjZ8_4V_Tjg.png
Booked your tickets for IWCON2022 yet?

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
China looting US data

https://cdn-images-1.medium.com/max/2600/1*mWWO1DKExrKQGv6y8AmKnQ.png
Those interested in what’s happening with #China will NOT be surprised to know that China has ‘stolen more’ US data than all countries.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video