Converting between file formats
Kiterunner will also let you convert between the schema JSON, a kite file and a standard txt wordlist. Usage The format is decided by the filetype extension supplied by the and fields. We support txt, json and kite kr kb convert wordlist.txt wordlist.kite
kr kb convert wordlist.kite wordlist.json
kr kb convert wordlist.kite wordlist.txt ❯ go run ./cmd/kiterunner kb convert -qh
convert an input file format into the specified output file format

this will determine the conversion based on the extensions of the input and the output
we support the following filetypes: txt, json, kite
You can convert any of the following into the corresponding types

-d Debug mode will attempt to convert the schema with error handling
-v=debug Debug verbosity will print out the errors for the schema

Usage:
kite kb convert [flags]

Flags:
-d, --debug debug the parsing
-h, --help help for convert

Global Flags:
--config string config file (default is $HOME/.kiterunner.yaml)
-o, --output string output format. can be json,text,pretty (default "pretty")
-q, --quiet quiet mode. will mute unecessarry pretty text
-v, --verbose string level of logging verbosity. can be error,info,debug,trace ( default "info")``bigquery

Replaying requests
When you receive a bunch of output from kiterunner, it may be difficult to immediately understand why a request is causing a specific response code/length. Kiterunner offers a method of rebuilding the request from the wordlists used including all the header and body parameters. You can replay a request by copy pasting the full response output into the kb replay command. You can specify a --proxy to forward your requests through, so you can modify/repeat/intercept the request using 3rd party tools if you wish The golang net/http client will perform a few additional changes to your request due to how the default golang spec implementation (unfortunately). ❯ go run ./cmd/kiterunner kb replay -q --proxy=http://localhost:8080 -w routes.kite "POST 403 [ 287, 10, 1] https://target.com/dedalo/lib/dedalo/publication/server_api/v1/json/thesaurus_parents 0cc39f76702ea287ec3e93f4b4710db9c8a86251"
11:25AM INF Raw reconstructed request
POST /dedalo/lib/dedalo/publication/server_api/v1/json/thesaurus_parents?ar_fields=48637466&code=66132381&db_name=08791392&lang=lg-eng&recursive=false&term_id=72336471 HTTP/1.1
Content-Type: any


11:25AM INF Outbound request
POST /dedalo/lib/dedalo/publication/server_api/v1/json/thesaurus_parents?ar_fields=48637466&code=66132381&db_name=08791392&lang=lg-eng&recursive=false&term_id=72336471 HTTP/1.1
Host: target.com
User-Agent: Go-http-client/1.1
Content-Length: 0
Content-Type: any
Accept-Encoding: gzip


11:25AM INF Response After Redirects
HTTP/1.1 403 Forbidden
Connection: close
Content-Length: 45
Content-Type: application/json
Date: Wed, 07 Apr 2021 01:25:28 GMT
X-Amzn-Requestid: 7e6b2ea1-c662-4671-9eaa-e8cd31b463f2

User is not authorized to perform this action
Technical Implementation

Intermediate Data Type (PRoutes)
We use an intermediate representation (https://www.kitploit.com/search/label/Intermediate%20Representation) of wordlists and kitebuilder json schemas in kiterunner. This is to allow us to dynamically generate the fields in the wordlist and reconstruct request bodies/headers and query parameters from a given spec. The PRoute type is composed of Headers, Body, Query and Cookie parameters that are encoded in pkg/proute.Crumb. The Crumb type is an interface that is implemented on types such as UUIDs, Floats, Ints, Random Strings, etc. When performing conversions to and from txt, json and kite files, all the conversions are first done to the proute.API intermediate type. Then the corresponding encoding is written out
Kite File Format

___________________________
@hacking_Attack
@Hacking_Video

We use a super secret kite file format for storing the json schemas from kitebuilder. These are simply protobuf encoded pkg/proute.APIS written to a file. The compilation is used to allow us to quickly deserialize the already parsed wordlist. This file format is not stable, and should only be interacted with using the inbuilt conversion tools for kiterunner. When a new version of the kite file format is released, you may need to recompile your kite files

Download Kiterunner (https://github.com/assetnote/kiterunner)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can anyone tell me how to learn social engineering??

I love hacking and i am a beginner and i want to learn social engineering so plz suggest me some books or ways to learn it.

submitted by /u/DowntownSong2949
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a God-level developer like Linus Torvalds also do hacking like most of this subreddit is about or does it take different skills?

I am just a junior web developer working with javascript and not with hard-core languages like C so asking you guys because I'm confused if it takes some different skills than the ability to create a system as complex as linux to break or exploit the said system? Apologies if it's a stupid question but I just couldn't think of why can't linus hack if he understands memory leaks/buffer overflows, security and OSes at such a low level.

submitted by /u/sabsebadakangaal
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
There is no better, simpler, organisational work tool than this

https://cdn-images-1.medium.com/max/600/1*abUor8um_uEC1iQ7_wPHyw.jpeg
How to run a business single-handed and never forget anything again.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Juice Jacking Hakkında Bilmeniz Gerekenler

https://cdn-images-1.medium.com/max/600/1*9OF9h-KB6c_qbdTqIERAcA.jpeg
Juice Jacking Hakkında Bilmeniz Gerekenler — Şarj istasyonlarını kullandığınızda bir siber saldırının kurbanı olabileceğinizi hiç…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kiterunner - Contextual Content Discovery Tool

___________________________
@hacking_Attack
@Hacking_Video

Insecure Deserialization: It’s super hard! Or is it?
https://thexssrat.medium.com/insecure-deserialization-its-super-hard-or-is-it-94d89e2847?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

An often misunderstood vulnerability finally unravelledContinue reading on Medium » (https://thexssrat.medium.com/insecure-deserialization-its-super-hard-or-is-it-94d89e2847?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Insecure Deserialization: It’s super hard! Or is it?

An often misunderstood vulnerability finally unravelledContinue reading on Medium »
Read more...

hacking: security in practice
Acessing Wifi i'm not supposed to

I don't really know if this is the place to ask, but my school has incredibly overpriced wifi and I can't pay 7 euros for one gigabyte I use. Is there a way to still acess the wifi without them having to give me the daily password and me having to pay that much?

submitted by /u/Bakanos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What can i see with the frittbox data capturing and wiresharc?

When i capture the data with a fritzbox7590 what can i extract? Can i only the what kind of data was send or can i extract whole images which were send via WhatsApp or snapchat?

submitted by /u/Kyojin1211
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Idk if this is allowed - i want to get into someone’s phone “for ethical reasons” and “in an ethical way like telling them”

Its an iphone; how do i do it. if i send a message i’ll get them to open it. I want access without having to physically take their phone and install some program i.e. remote via infected link or what have you. Prz.

submitted by /u/oneandtwozeros
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Insecure Deserialization: It’s super hard! Or is it?

https://cdn-images-1.medium.com/max/600/1*nHqA2bLN2ejzu1Jo_kWlpg.png
An often misunderstood vulnerability finally unravelled

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video