KitPloit - PenTest Tools!
Lucifer - A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration And More...

https://1.bp.blogspot.com/-GcwnhsyjfLk/YJCxDjdQizI/AAAAAAAAWGQ/e0vwJkvskV4Q5JSrwoCxUU2o-mXx-rT_wCNcBGAsYHQ/w640-h346/Lucifer_16_one.png A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life Setupgit clone https://github.com/Skiller9090/Lucifer.git
cd Lucifer
pip install -r requirements.txt
python main.py --helpIf you want the cutting edge changes add -b devto the end of git clone https://github.com/Skiller9090/Lucifer.gitCommandsCommand Description help Displays This Menu name Shows name of current shell id Displays current shell's id show Shows options or modules based on input, EX: show Command Use* No-Arg Commands* help- to display help menu

* name- shows name of current shell

* id- shows current shell id

* options- shows a table of set options/vars

* set_vars- automatically sets vars needed for the loaded module (default defined in a module)

* description- show description of current loaded module

* auto_vars- displays current setting of auto_vars (auto_vars if true will automatically run set_vars on module load)

* run- runs the module with the current options, exploitworks the same

* spawn_shell- spawns a new Shell instance

* show_shells- shows all open shells ids and names

* clear- clears the terminal/console screen

* close- kills the input to current shell

* reset- resets everything (not implemented)

* exit- quits the program
* Arg Commands* show - displays a list of set options or modules depending on argument.

* set - sets a variable/option

* change_auto_vars :

* - can be true or false (t or f) (-t or -f)

* :

* -g= global - sets for all shells spawned

* -n= new - sets this option for future shell spawns

* -i= inclusive - no matter what, set current shell to use :

* - path to module

* :

* -R- Override cache (reload dynamically)
* open_shell - opens a shell by its id

* set_name - set the name of the current shell

* set_name_id - set the name of the shell specified by Using JavaLucifer allows for Python and Java code to w[...]

___________________________
@hacking_Attack
@Hacking_Video

ork side by side through the use of LMI.Java extension. For this to work you will need to install jpype1, to do this run the following command in your python environment: pip install jpype1>From here you are free to interact with LMI.Java.compiler and LMI.Java.luciferJVM which allows you to call java functions and instantiate java classes through python, more documentation of this will be created later on, on the lucifer wiki. ExamplesSettings Variableshttps://1.bp.blogspot.com/-949i_eaRhQs/YJCxRRZ6VMI/AAAAAAAAWGU/-M9tMsJmBcMBiRE7IpJ5nK9SQdK4Qh4rgCNcBGAsYHQ/w640-h346/Lucifer_15_two.png Running Modulehttps://1.bp.blogspot.com/-ZbrDANSMAMw/YJCxU_66dJI/AAAAAAAAWGc/eBxnJuSQxgkTIJisJRu42-jefZpeu0z8wCNcBGAsYHQ/w640-h346/Lucifer_16_one.png Settingshttps://1.bp.blogspot.com/-8cVPka_MTLs/YJCxYbbDQdI/AAAAAAAAWGg/Fwb-xjAuolIbRt2dJplJbVOn-ee8tsExwCNcBGAsYHQ/w640-h264/Lucifer_17_three.png VersioningThe standard of versioning on this project is: MAJOR.MINOR.PATCH.STAGE.BUILDMajor:* incremented when either there has been a significant amount of new features since the start of the major or if there is a change which is so big that is can cause compatibility issues (Major of 0 if very unstable
* Could cause incompatibility issues Minor:* incremented when a new feature or feature-set is added to the project
* should not cause incompatibility errors due to only additions made Patch:* incremented on bugfixes or if feature is so small that it is worth incrementing minor
* very low risk of incompatibility error Stage:* The stage of current MAJOR.MINOR.PATCH BUILD, either alpha, beta, release candidate or release
* Indicates how far through development the new MAJOR.MINOR.PATCH is
* Stage number to name translation:
* 0 => beta (b)
* 1 => alpha (a)
* 2 => release candidate (rc)
* 3 => release (r) Build:* this should be incremented on every change made to the code, even on a one character change

This version structure can be stored and displayed in a few ways:

* The best way to store the data within code is via a tuple such as:
* (Major, Minor, Patch, Stage, Build)
* Example is: (1, 4, 1, 2, 331)
* The long display would be:
* {stage} {major}.{minor}.{patch} Build {build}* Example is: Alpha 1.4.1 Build 331
* The short display would be:
* {major}.{minor}.{patch}{stage}{build}* Example is: 1.4.1a331 Download Lucifer

___________________________
@hacking_Attack
@Hacking_Video

Stored XSS to Organisation Takeover

TL;DR: This is a writeup about how I did an Organisation takeover on one of the leading VoIP companies by bypassing their XSS filter and…Continue reading on Medium »
Read more...

Stored XSS to Organisation Takeover
https://zaidozaid.medium.com/stored-xss-to-organisation-takeover-6eaaa2fdcd5b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR: This is a writeup about how I did an Organisation takeover on one of the leading VoIP companies by bypassing their XSS filter and…Continue reading on Medium » (https://zaidozaid.medium.com/stored-xss-to-organisation-takeover-6eaaa2fdcd5b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

any vulnerable OS to train pentesting?
https://www.reddit.com/r/Pentesting/comments/n8qvvi/any_vulnerable_os_to_train_pentesting/

i'm looking for a specific OS full of "bugs" to train pentesting... any specific OS for this purpose? submitted by /u/o_Formiga (https://www.reddit.com/user/o_Formiga)
[link] (https://www.reddit.com/r/Pentesting/comments/n8qvvi/any_vulnerable_os_to_train_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/n8qvvi/any_vulnerable_os_to_train_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GNU Radio block released to decode smart meter data

https://external-preview.redd.it/oM0IbkE00vRBczGZntsNWYmDifkLXom_HQ-HxwJPv-M.jpg?width=640&crop=smart&auto=webp&s=3848684cc6136ce1f72dfa829a52c3b7dc55d2f1 submitted by /u/BitBangingBytes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can .lockbit ransomware spread through a mouse?

My personal Logitech MX Master 3 is connected via bluetooth to my work computer, which was targeted with ransomware last week. Is the mouse safe to connect to my personal computer?

submitted by /u/moneybagsukulele
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Git Good: A Web CTF dealing with broken git commits.

https://cdn-images-1.medium.com/max/600/1*-vqIbRFnxHqO6kywzvQCIg.png
Me and my friends decided to play the SDCTF 2021. In the CTF we came across a challenge called Git Good. Here was the background we were…

Continue reading on Medium »

Hacking on Medium
Hackers Shut Down a Major Pipeline

It was only a matter of time.

Continue reading on Medium »

How I find my first bug!
https://vpugazhenthi98.medium.com/how-i-find-my-first-bug-9f130d66281c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Email Template HTML injection attack
https://vpugazhenthi98.medium.com/email-template-html-injection-attack-81617170427b?source=rss------bug_bounty-5

I hope you all are well. I am Pugazhenthi V. I am an Ethical Hacker and bug bounty Hunter. Thank you so much for reading this post.Continue reading on Medium » (https://vpugazhenthi98.medium.com/email-template-html-injection-attack-81617170427b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ransomware cyberattack shuts down major US pipeline, company says

https://external-preview.redd.it/c2p2K8_dJ73I53a8ziT3l25FfqHF-5f9Ucly4ZxuOUk.jpg?width=640&crop=smart&auto=webp&s=ed49652c17eb0c77f9a4b6f5086dbc68b7d6187c submitted by /u/boppinmule
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My dad passed away a couple of weeks ago and he left behind a letter to me in a locked .dmg file…

... and forgot the password and was too high on pain meds in the end to communicate the content to me. The letters are of sentimental value (no map to buried treasure unfortunately). Is it possible to crack the password? Can you suggest software or could I send it to one of you hacking legends to retrieve the letters? It would mean the world to me to read his letter.

submitted by /u/madm4x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Email Template HTML injection attack

I hope you all are well. I am Pugazhenthi V. I am an Ethical Hacker and bug bounty Hunter. Thank you so much for reading this post.Continue reading on Medium »
Read more...