Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
How I got my first bounty

The journey from duplicates, P5, NA, Out of scopes to a valid P4 bug was really challenging. I did a lot of mistakes, corrected them…Continue reading on Medium »
Read more...
The journey from duplicates, P5, NA, Out of scopes to a valid P4 bug was really challenging. I did a lot of mistakes, corrected them…Continue reading on Medium » (https://anishkashukla.medium.com/how-i-got-my-first-bounty-897dba1bcff8?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
WinPmem : The Multi-Platform Memory Acquisition Tool

WinPmem has been the default open source memory acquisition driver for windows for a long time. It used to live in the Rekall project, but has recently been separated into its own repository. Description WinPmem is a physical memory acquisition tool with the following features: Open source Support for WinXP – Win 10, x86 + […]

The post WinPmem : The Multi-Platform Memory Acquisition Tool appeared first on Kali Linux Tutorials.
Proxy IP rotator: Rotates your IP address for every specific request. Proxy checker: Check your proxy IP which is still alive. All HTTP/S methods are supported. HTTP & SOCKSv5 proxy protocols (https://www.kitploit.com/search/label/Protocols) apply. All parameters & URIs are passed. Easy to use: You can just run it against your proxy file, and choose the action you want! Cross-platform: whether you are Windows, Linux, Mac, or even Raspberry Pi, you can run it very well.
Why mubeng?
It's fairly simple, there is no need for additional configuration. mubeng has 2 core functionality:
1. Run proxy server as proxy IP rotation
This is useful to avoid different kinds of IP ban, i.e. bruteforce (https://www.kitploit.com/search/label/Bruteforce) protection, API rate-limiting or WAF blocking based on IP. We also leave it entirely up to user to use proxy pool resources from anywhere.
2. Perform proxy checks
So, you don't need any extra proxy checking tools out there if you want to check your proxy pool.
Installation

Binary
Simply, download a pre-built binary from releases page (https://github.com/kitabisa/mubeng/releases) and run!
Docker
Pull the Docker (https://docs.docker.com/get-docker/) image by running: docker pull kitabisa/mubeng
Source
Using Go (v1.15+) compiler: GO111MODULE=on go get -u ktbs.dev/mubeng/cmd/mubeng NOTE: The same command above also works for updating.
— or
Manual building executable from source code: git clone https://github.com/kitabisa/mubeng
cd mubeng
make build
(sudo) mv ./bin/mubeng /usr/local/bin
make clean
Usage
For usage, it's always required to provide your proxy list, whether it is used to check or as a proxy pool for your proxy IP rotation.
Basic
mubeng [-c|-a :8080] -f file.txt [options...]
Options
Here are all the options it supports. mubeng -h Flag Description -f, --file Proxy file. -a, --address : Run proxy server. -d, --daemon Daemonize proxy server. -c, --check To perform proxy live check. -t, --timeout Max. time allowed for proxy server/check (default: 30s). -r, --rotate Rotate proxy IP for every AFTER request (default: 1). -v, --verbose Dump HTTP request/responses or show died proxy on check. -o, --output Log output from proxy server or live check. -u, --update Update mubeng to the latest stable version. -V, --version Show current mubeng version.
NOTES:
Rotations are counted for all requests, even if the request fails. Rotation means random, NOT choosing a proxy after/increment from proxy pool. We do not set up conditions if a proxy has been used. So, there is no guarantee if your request reaches the N value (-r/--rotate) your IP proxy will rotate. Daemon mode (-d/--daemon) will install mubeng as a service on the (Linux/OSX) system/setting up callback (Windows). Hence you can control service with journalctl, service or net (for Windows) command to start/stop proxy server. Whenever you activate the daemon mode, it works by forcibly stop and uninstalling the existing mubeng service, then re-install and starting it up in daemon. Verbose mode (-v/--verbose) and timeout (-t/--timeout) apply to both proxy check and proxy IP rotation actions. HTTP traffic requests and responses is displayed when verbose mode (-v/--verbose) is enabled, but We DO NOT explicitly display the request/response body, and All cookie values in headers will be redacted automatically. If you use output option (-o/--output) to run proxy IP rotator, request/response headers are NOT written to the log file. A timeout option (-t/--timeout) value is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as "5s", "300ms", "-1.5h" or "2h45m". Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", and "h".
Examples
For example, you've proxy pool (proxies.txt) as: http://127.0.0.1:8080
https://127.0.0.1:3128
socks5://127.0.0.1:2121
...
... Because we use auto-switch transport, mubeng can accept multiple proxy protocol schemes at once.
Please refer to documentation (https://pkg.go.dev/ktbs.dev/mubeng/pkg/mubeng#Transport) for this package.
Proxy checker
Pass --check flag in command to perform proxy checks: mubeng -f proxies.txt --check --output live.txt The above case also uses --output flag to save a live proxy into file (live.txt) from checking result.
(Figure: Checking proxies mubeng with max. 5s timeout)
Proxy IP rotator
Furthermore, if you wish to do proxy IP rotator from proxies that are still alive earlier from the results of checking (live.txt) (or if you have your own list), you must use -a (--address) flag instead to run proxy server: mubeng -a localhost:8089 -f live.txt -r 10 The -r (--rotate) flag works to rotate your IP for every N request value you provide (10).
(Figure: Running mubeng as proxy IP rotator with verbose mode)
Burp Suite (https://portswigger.net/burp/documentation/desktop/getting-started/installing-burp) Upstream Proxy
In case you want to use mubeng (proxy IP rotator) as an upstream proxy in Burp Suite, acting in-between Burp Suite (https://www.kitploit.com/search/label/Burp%20Suite) and mubeng to the internet, so you don't need any additional extensions in Burp Suite for that. To demonstrate this: