How did I choose cybersecurity as a career and how am I working on it?
https://bhairutribrid.medium.com/how-did-i-choose-cybersecurity-as-a-career-and-how-am-i-working-on-it-bad82118e8dc?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://bhairutribrid.medium.com/how-did-i-choose-cybersecurity-as-a-career-and-how-am-i-working-on-it-bad82118e8dc?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
How did I choose cybersecurity as a career and how am I working on it?
A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.
A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.Continue reading on Medium » (https://bhairutribrid.medium.com/how-did-i-choose-cybersecurity-as-a-career-and-how-am-i-working-on-it-bad82118e8dc?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
How did I choose cybersecurity as a career and how am I working on it?
A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.
hacking: security in practice
Someone i know claims a damning text they sent me was done so by a hacker. Is this case possible?
I need some advise from people who are more familiar with hacking phones and text messages.
Someone sent me a text message earlier this week which is potentially relationship ending. I assume it was sent by mistake, but they are claiming someone else maliciously sent this text to me by hacking their phone somehow. Before completely dismissing this as a possibility, I wanted to verify if this was actually possible or not.
Initially, I sent them a text message, and then received the text in question a couple of minutes later. The text was in response to what I sent them, so the hacker would have needed to be able to monitor our conversation in real time. I'm not too familiar with SMS spoofing apps and tools, but this doesn't sound like something that is possible with typical consumer applications. I might be wrong but from what I can tell SMS spoofers aren't able to see saved conversations and incoming texts. They are just able to send text messages on behalf of another person. Additionally, this text was sent in the same conversation as all of their other legitimate texts. I'm not sure if SMS differentiates spoofed texts from legitimate numbers.
Please let me know if this sounds like something that could realistically occur. I'm kind of in the dark as to what actually happened here, so I'm not even sure if this was a case of SMS spoofing. It could have been done by some other method I'm not aware of. Or it could have just been a mistake or someone else physically sending it from their phone. Any thoughts on this would be appreciated.
submitted by /u/GeeksOasis
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Someone i know claims a damning text they sent me was done so by a hacker. Is this case possible?
I need some advise from people who are more familiar with hacking phones and text messages.
Someone sent me a text message earlier this week which is potentially relationship ending. I assume it was sent by mistake, but they are claiming someone else maliciously sent this text to me by hacking their phone somehow. Before completely dismissing this as a possibility, I wanted to verify if this was actually possible or not.
Initially, I sent them a text message, and then received the text in question a couple of minutes later. The text was in response to what I sent them, so the hacker would have needed to be able to monitor our conversation in real time. I'm not too familiar with SMS spoofing apps and tools, but this doesn't sound like something that is possible with typical consumer applications. I might be wrong but from what I can tell SMS spoofers aren't able to see saved conversations and incoming texts. They are just able to send text messages on behalf of another person. Additionally, this text was sent in the same conversation as all of their other legitimate texts. I'm not sure if SMS differentiates spoofed texts from legitimate numbers.
Please let me know if this sounds like something that could realistically occur. I'm kind of in the dark as to what actually happened here, so I'm not even sure if this was a case of SMS spoofing. It could have been done by some other method I'm not aware of. Or it could have just been a mistake or someone else physically sending it from their phone. Any thoughts on this would be appreciated.
submitted by /u/GeeksOasis
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Someone i know claims a damning text they sent me was done so by a...
I need some advise from people who are more familiar with hacking phones and text messages. Someone sent me a text message earlier this week...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Enabling Oracle SSL/TLS Authentication
https://external-preview.redd.it/dPYksMEB_xjuvnrp_tbpBC81XL--LqGOyRvKHb8BSTU.jpg?width=320&crop=smart&auto=webp&s=fc685f593531685af0519840d1391eae640293f0 submitted by /u/damienbrookss
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Enabling Oracle SSL/TLS Authentication
https://external-preview.redd.it/dPYksMEB_xjuvnrp_tbpBC81XL--LqGOyRvKHb8BSTU.jpg?width=320&crop=smart&auto=webp&s=fc685f593531685af0519840d1391eae640293f0 submitted by /u/damienbrookss
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Enabling Oracle SSL/TLS Authentication
Posted in r/hacking by u/damienbrookss • 1 point and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Metasploit
https://cdn-images-1.medium.com/max/600/0*Bi1efg7W5uTbriX0.png
Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.
Continue reading on hack WINDOWS »
___________________________
@hacking_Attack
@Hacking_Video
Metasploit
https://cdn-images-1.medium.com/max/600/0*Bi1efg7W5uTbriX0.png
Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.
Continue reading on hack WINDOWS »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Metasploit
Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe | Vulnet-Internal
A room on TryHackMe created by TheCyb3rW0lf featuring various services to exploit.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe | Vulnet-Internal
A room on TryHackMe created by TheCyb3rW0lf featuring various services to exploit.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe | Vulnet-Internal
A room on TryHackMe created by TheCyb3rW0lf featuring various services to exploit.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Cyber Security?
https://cdn-images-1.medium.com/max/2600/0*P244BjD3SwJTN0AN
Info safety and security defends the stability and also personal privacy of information, both in storing as well as en route.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What is Cyber Security?
https://cdn-images-1.medium.com/max/2600/0*P244BjD3SwJTN0AN
Info safety and security defends the stability and also personal privacy of information, both in storing as well as en route.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is Cyber Security?
Info safety and security defends the stability and also personal privacy of information, both in storing as well as en route.
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads
http://www.kitploit.com/2021/05/httpx-fast-and-multi-purpose-http.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/05/httpx-fast-and-multi-purpose-http.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain…
From Github
▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -version
Usage
httpx -h This will display help for the tool. Here are all the switches it supports. Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline (https://www.kitploit.com/search/label/Pipeline) probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket (https://www.kitploit.com/search/label/WebSocket) is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX
___________________________
@hacking_Attack
@Hacking_Video
▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -version
Usage
httpx -h This will display help for the tool. Here are all the switches it supports. Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline (https://www.kitploit.com/search/label/Pipeline) probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket (https://www.kitploit.com/search/label/WebSocket) is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - projectdiscovery/httpx: httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp…
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. - projectdiscovery/httpx
Running httpx with stdin
This will run the tool against all the hosts and subdomains (https://www.kitploit.com/search/label/Subdomains) in hosts.txt and returns URLs running HTTP webserver. ▶ cat hosts.txt | httpx
__ __ __ _ __
/ /_ / /_/ /_____ | |/ /
/ __ \/ __/ __/ __ \| /
/ / / / /_/ /_/ /_/ / |
/_/ /_/\__/\__/ .___/_/|_| v1.0
/_/
projectdiscovery.io
[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
https://mta-sts.managed.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://docs.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with file input
This will run the tool against all the hosts and subdomains in hosts.txt and returns URLs running HTTP webserver. ▶ httpx -l hosts.txt -silent
https://docs.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.managed.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with CIDR input
▶ echo 173.0.84.0/24 | httpx -silent
https://173.0.84.29
https://173.0.84.43
https://173.0.84.31
https://173.0.84.44
https://173.0.84.12
https://173.0.84.4
https://173.0.84.36
https://173.0.84.45
https://173.0.84.14
https://173.0.84.25
https://173.0.84.46
https://173.0.84.24
https://173.0.84.32
https://173.0.84.9
https://173.0.84.13
https://173.0.84.6
https://173.0.84.16
https://173.0.84.34
Running httpx with subfinder
▶ subfinder (https://www.kitploit.com/search/label/Subfinder) -d hackerone.com -silent | httpx -title -content-length -status-code -silent
https://mta-sts.forwarding.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.managed.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://docs.hackerone.com [200] [65444] [HackerOne Platform Documentation]
https://www.hackerone.com [200] [54166] [Bug Bounty - Hacker Powered Security Testing | HackerOne]
https://support.hackerone.com [301] [489] []
https://api.hackerone.com [200] [7791] [HackerOne API]
https://hackerone.com [301] [92] []
https://resources.hackerone.com [301] [0] []
Notes As default, httpx checks for HTTPS probe and fall-back to HTTP only if HTTPS is not reachable. For printing both HTTP/HTTPS results, no-fallback flag can be used. Custom scheme for ports can be defined, for example -ports http:443,http:80,https:8443 vhost, http2, pipeline, ports, csp-probe, tls-probe and path are unique flag with different probes. Unique flags should be used for specific use cases instead of running them as default with other flags. When using json flag, all the information (default probes) included in the JSON output.
Thanks
httpx is made by the projectdiscovery (https://projectdiscovery.io/) team. Community contributions have made the project what it is. See the Thanks.md (https://github.com/projectdiscovery/httpx/blob/master/THANKS.md) file for more details. Do also check out these similar awesome projects that may fit in your workflow:Probing feature is inspired by @tomnomnom/httprobe (https://github.com/tomnomnom/httprobe) work
Download Httpx (https://github.com/projectdiscovery/httpx)
___________________________
@hacking_Attack
@Hacking_Video
This will run the tool against all the hosts and subdomains (https://www.kitploit.com/search/label/Subdomains) in hosts.txt and returns URLs running HTTP webserver. ▶ cat hosts.txt | httpx
__ __ __ _ __
/ /_ / /_/ /_____ | |/ /
/ __ \/ __/ __/ __ \| /
/ / / / /_/ /_/ /_/ / |
/_/ /_/\__/\__/ .___/_/|_| v1.0
/_/
projectdiscovery.io
[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
https://mta-sts.managed.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://docs.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with file input
This will run the tool against all the hosts and subdomains in hosts.txt and returns URLs running HTTP webserver. ▶ httpx -l hosts.txt -silent
https://docs.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.managed.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with CIDR input
▶ echo 173.0.84.0/24 | httpx -silent
https://173.0.84.29
https://173.0.84.43
https://173.0.84.31
https://173.0.84.44
https://173.0.84.12
https://173.0.84.4
https://173.0.84.36
https://173.0.84.45
https://173.0.84.14
https://173.0.84.25
https://173.0.84.46
https://173.0.84.24
https://173.0.84.32
https://173.0.84.9
https://173.0.84.13
https://173.0.84.6
https://173.0.84.16
https://173.0.84.34
Running httpx with subfinder
▶ subfinder (https://www.kitploit.com/search/label/Subfinder) -d hackerone.com -silent | httpx -title -content-length -status-code -silent
https://mta-sts.forwarding.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.managed.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://docs.hackerone.com [200] [65444] [HackerOne Platform Documentation]
https://www.hackerone.com [200] [54166] [Bug Bounty - Hacker Powered Security Testing | HackerOne]
https://support.hackerone.com [301] [489] []
https://api.hackerone.com [200] [7791] [HackerOne API]
https://hackerone.com [301] [92] []
https://resources.hackerone.com [301] [0] []
Notes As default, httpx checks for HTTPS probe and fall-back to HTTP only if HTTPS is not reachable. For printing both HTTP/HTTPS results, no-fallback flag can be used. Custom scheme for ports can be defined, for example -ports http:443,http:80,https:8443 vhost, http2, pipeline, ports, csp-probe, tls-probe and path are unique flag with different probes. Unique flags should be used for specific use cases instead of running them as default with other flags. When using json flag, all the information (default probes) included in the JSON output.
Thanks
httpx is made by the projectdiscovery (https://projectdiscovery.io/) team. Community contributions have made the project what it is. See the Thanks.md (https://github.com/projectdiscovery/httpx/blob/master/THANKS.md) file for more details. Do also check out these similar awesome projects that may fit in your workflow:Probing feature is inspired by @tomnomnom/httprobe (https://github.com/tomnomnom/httprobe) work
Download Httpx (https://github.com/projectdiscovery/httpx)
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads
https://1.bp.blogspot.com/-VyWNgcfKwnY/YJhTjh0quKI/AAAAAAAAWJs/J8JtGGPdNjkNF1I703RFBZC06ONtETDSACNcBGAsYHQ/w640-h382/httpx_9_httpx-run.png httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features* Simple and modular code base making it easy to contribute.
* Fast And fully configurable flags to probe mutiple elements.
* Supports multiple HTTP based probings.
* Smart auto fallback from https to http as default.
* Supports hosts, URLs and CIDR as input.
* Handles edge cases doing retries, backoffs etc for handling WAFs. Supported probes:-Probes Default check Probes Default check URL true IP true Title true CNAME true Status Code true Raw HTTP false Content Length true HTTP2 false TLS Certificate true HTTP 1.1 Pipeline false CSP Header true Virtual host false Location Header true CDN false Web Server true Path false Web Socket true Ports false Response Time true Request method false Installation InstructionsFrom BinaryThe installation is easy. You can download the pre-built binaries for your platform from the Releases page. Extract them using tar, move it to your
Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP [...]
___________________________
@hacking_Attack
@Hacking_Video
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads
https://1.bp.blogspot.com/-VyWNgcfKwnY/YJhTjh0quKI/AAAAAAAAWJs/J8JtGGPdNjkNF1I703RFBZC06ONtETDSACNcBGAsYHQ/w640-h382/httpx_9_httpx-run.png httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features* Simple and modular code base making it easy to contribute.
* Fast And fully configurable flags to probe mutiple elements.
* Supports multiple HTTP based probings.
* Smart auto fallback from https to http as default.
* Supports hosts, URLs and CIDR as input.
* Handles edge cases doing retries, backoffs etc for handling WAFs. Supported probes:-Probes Default check Probes Default check URL true IP true Title true CNAME true Status Code true Raw HTTP false Content Length true HTTP2 false TLS Certificate true HTTP 1.1 Pipeline false CSP Header true Virtual host false Location Header true CDN false Web Server true Path false Web Socket true Ports false Response Time true Request method false Installation InstructionsFrom BinaryThe installation is easy. You can download the pre-built binaries for your platform from the Releases page. Extract them using tar, move it to your
$PATHand you're ready to go. Download latest binary from https://github.com/projectdiscovery/httpx/releases
▶ tar -xvf httpx-linux-amd64.tar
▶ mv httpx-linux-amd64 /usr/local/bin/httpx
▶ httpx -hFrom Sourcehttpx requires go1.14+ to install successfully. Run the following command to get the repo - ▶ GO111MODULE=on go get -v github.com/projectdiscovery/httpx/cmd/httpxFrom Github▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -versionUsagehttpx -hThis will display help for the tool. Here are all the switches it supports.Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP [...]
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain…
Hacking Articles Tips Tricks Videos Tutorials
KitPloit - PenTest Tools! Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads https://1.bp.blogspot.com/-VyWNgcfKwnY/YJhTjh0quK…
probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX Running httpx with stdinThis will run the tool against all the hosts and subdomains in
___________________________
@hacking_Attack
@Hacking_Video
hosts.txtand returns URLs running HTTP webserver. ▶ cat hosts.txt | httpx
__ __ __ _ __
/ /_ / /_/ /_____ | |/ /
/ __ \/ __/ __/ __ \| /
/ / / / /_/ /_/ /_/ / |
/_/ /_/\__/\__/ .___/_/|_| v1.0
/_/
projectdiscovery.io
[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
https://mta-sts.managed.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://docs.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.comRunning httpx with file inputThis will run the tool against all the hosts and subdomains in hosts.txtand returns URLs running HTTP webserver. ▶ httpx -l hosts.txt -silent
https://docs.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.managed.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.comRunning httpx with CIDR input▶ echo 173.0.84.0/24 | httpx -silent
https://173.0.84.29
https://173.0.84.43
https://173.0.84.31
https://173.0.84.44
https://173.0.84.12
https://173.0.84.4
https://173.0.84.36
https://173.0.84.45
https://173.0.84.14
https://173.0.84.25
https://173.0.84.46
https://173.0.84.24
https://173.0.84.32
https://173.0.84.9
https://173.0.84.13
https://173.0.84.6
https://173.0.84.16
https://173.0.84.34Running httpx with subfinder▶ subfinder -d hackerone.com -silent | httpx -title -content-length -status-code -silent
https://mta-sts.forwarding.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.managed.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://docs.hackerone.com [200] [65444] [HackerOne Platform Documentation]
https://www.hackerone.com [200] [54166] [Bug Bounty - Hacker Powered Security Testing | HackerOne]
https://support.hackerone.com [301] [489] []
https://api.hackerone.com [200] [7791] [HackerOne API]
https://hackerone.com [301] [92] []
https://resources.hackerone.com [301] [0] []Notes* As defa[...]___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw…
ult, httpx checks for
* For printing both HTTP/HTTPS results,
* Custom scheme for ports can be defined, for example
* Unique flags should be used for specific use cases instead of running them as default with other flags.
* When using
Probing feature is inspired by @tomnomnom/httprobe work Download Httpx
___________________________
@hacking_Attack
@Hacking_Video
HTTPSprobe and fall-back to HTTPonly if HTTPSis not reachable.* For printing both HTTP/HTTPS results,
no-fallbackflag can be used.* Custom scheme for ports can be defined, for example
-ports http:443,http:80,https:8443* vhost, http2, pipeline, ports, csp-probe, tls-probeand pathare unique flag with different probes.* Unique flags should be used for specific use cases instead of running them as default with other flags.
* When using
jsonflag, all the information (default probes) included in the JSON output. Thankshttpx is made by the projectdiscovery team. Community contributions have made the project what it is. See the Thanks.md file for more details. Do also check out these similar awesome projects that may fit in your workflow:Probing feature is inspired by @tomnomnom/httprobe work Download Httpx
___________________________
@hacking_Attack
@Hacking_Video
SEGURANÇA DA INFORMAÇÃO E HACKING
Análise de caso real dos programas de bug bountyContinue reading on Medium »
Read more...
Análise de caso real dos programas de bug bountyContinue reading on Medium »
Read more...