From Github
▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -version
Usage
httpx -h This will display help for the tool. Here are all the switches it supports. Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline (https://www.kitploit.com/search/label/Pipeline) probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket (https://www.kitploit.com/search/label/WebSocket) is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX

___________________________
@hacking_Attack
@Hacking_Video

Running httpx with stdin
This will run the tool against all the hosts and subdomains (https://www.kitploit.com/search/label/Subdomains) in hosts.txt and returns URLs running HTTP webserver. ▶ cat hosts.txt | httpx

__ __ __ _ __
/ /_ / /_/ /_____ | |/ /
/ __ \/ __/ __/ __ \| /
/ / / / /_/ /_/ /_/ / |
/_/ /_/\__/\__/ .___/_/|_| v1.0
/_/

projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.

https://mta-sts.managed.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://docs.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with file input
This will run the tool against all the hosts and subdomains in hosts.txt and returns URLs running HTTP webserver. ▶ httpx -l hosts.txt -silent

https://docs.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.managed.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.com
Running httpx with CIDR input
▶ echo 173.0.84.0/24 | httpx -silent

https://173.0.84.29
https://173.0.84.43
https://173.0.84.31
https://173.0.84.44
https://173.0.84.12
https://173.0.84.4
https://173.0.84.36
https://173.0.84.45
https://173.0.84.14
https://173.0.84.25
https://173.0.84.46
https://173.0.84.24
https://173.0.84.32
https://173.0.84.9
https://173.0.84.13
https://173.0.84.6
https://173.0.84.16
https://173.0.84.34
Running httpx with subfinder
▶ subfinder (https://www.kitploit.com/search/label/Subfinder) -d hackerone.com -silent | httpx -title -content-length -status-code -silent

https://mta-sts.forwarding.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.managed.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://docs.hackerone.com [200] [65444] [HackerOne Platform Documentation]
https://www.hackerone.com [200] [54166] [Bug Bounty - Hacker Powered Security Testing | HackerOne]
https://support.hackerone.com [301] [489] []
https://api.hackerone.com [200] [7791] [HackerOne API]
https://hackerone.com [301] [92] []
https://resources.hackerone.com [301] [0] []
Notes As default, httpx checks for HTTPS probe and fall-back to HTTP only if HTTPS is not reachable. For printing both HTTP/HTTPS results, no-fallback flag can be used. Custom scheme for ports can be defined, for example -ports http:443,http:80,https:8443 vhost, http2, pipeline, ports, csp-probe, tls-probe and path are unique flag with different probes. Unique flags should be used for specific use cases instead of running them as default with other flags. When using json flag, all the information (default probes) included in the JSON output.
Thanks
httpx is made by the projectdiscovery (https://projectdiscovery.io/) team. Community contributions have made the project what it is. See the Thanks.md (https://github.com/projectdiscovery/httpx/blob/master/THANKS.md) file for more details. Do also check out these similar awesome projects that may fit in your workflow:Probing feature is inspired by @tomnomnom/httprobe (https://github.com/tomnomnom/httprobe) work

Download Httpx (https://github.com/projectdiscovery/httpx)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads

https://1.bp.blogspot.com/-VyWNgcfKwnY/YJhTjh0quKI/AAAAAAAAWJs/J8JtGGPdNjkNF1I703RFBZC06ONtETDSACNcBGAsYHQ/w640-h382/httpx_9_httpx-run.png httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features* Simple and modular code base making it easy to contribute.
* Fast And fully configurable flags to probe mutiple elements.
* Supports multiple HTTP based probings.
* Smart auto fallback from https to http as default.
* Supports hosts, URLs and CIDR as input.
* Handles edge cases doing retries, backoffs etc for handling WAFs. Supported probes:-Probes Default check Probes Default check URL true IP true Title true CNAME true Status Code true Raw HTTP false Content Length true HTTP2 false TLS Certificate true HTTP 1.1 Pipeline false CSP Header true Virtual host false Location Header true CDN false Web Server true Path false Web Socket true Ports false Response Time true Request method false Installation InstructionsFrom BinaryThe installation is easy. You can download the pre-built binaries for your platform from the Releases page. Extract them using tar, move it to your $PATHand you're ready to go. Download latest binary from https://github.com/projectdiscovery/httpx/releases

▶ tar -xvf httpx-linux-amd64.tar
▶ mv httpx-linux-amd64 /usr/local/bin/httpx
▶ httpx -hFrom Sourcehttpx requires go1.14+ to install successfully. Run the following command to get the repo - ▶ GO111MODULE=on go get -v github.com/projectdiscovery/httpx/cmd/httpxFrom Github▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -versionUsagehttpx -hThis will display help for the tool. Here are all the switches it supports.
Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP [...]

___________________________
@hacking_Attack
@Hacking_Video

probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX Running httpx with stdinThis will run the tool against all the hosts and subdomains in hosts.txtand returns URLs running HTTP webserver. ▶ cat hosts.txt | httpx

__ __ __ _ __
/ /_ / /_/ /_____ | |/ /
/ __ \/ __/ __/ __ \| /
/ / / / /_/ /_/ /_/ / |
/_/ /_/\__/\__/ .___/_/|_| v1.0
/_/

projectdiscovery.io

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.

https://mta-sts.managed.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://docs.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.comRunning httpx with file inputThis will run the tool against all the hosts and subdomains in hosts.txtand returns URLs running HTTP webserver. ▶ httpx -l hosts.txt -silent

https://docs.hackerone.com
https://mta-sts.hackerone.com
https://mta-sts.managed.hackerone.com
https://mta-sts.forwarding.hackerone.com
https://www.hackerone.com
https://resources.hackerone.com
https://api.hackerone.com
https://support.hackerone.comRunning httpx with CIDR input▶ echo 173.0.84.0/24 | httpx -silent

https://173.0.84.29
https://173.0.84.43
https://173.0.84.31
https://173.0.84.44
https://173.0.84.12
https://173.0.84.4
https://173.0.84.36
https://173.0.84.45
https://173.0.84.14
https://173.0.84.25
https://173.0.84.46
https://173.0.84.24
https://173.0.84.32
https://173.0.84.9
https://173.0.84.13
https://173.0.84.6
https://173.0.84.16
https://173.0.84.34Running httpx with subfinder▶ subfinder -d hackerone.com -silent | httpx -title -content-length -status-code -silent

https://mta-sts.forwarding.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://mta-sts.managed.hackerone.com [404] [9339] [Page not found · GitHub Pages]
https://docs.hackerone.com [200] [65444] [HackerOne Platform Documentation]
https://www.hackerone.com [200] [54166] [Bug Bounty - Hacker Powered Security Testing | HackerOne]
https://support.hackerone.com [301] [489] []
https://api.hackerone.com [200] [7791] [HackerOne API]
https://hackerone.com [301] [92] []
https://resources.hackerone.com [301] [0] []Notes* As defa[...]

___________________________
@hacking_Attack
@Hacking_Video

ult, httpx checks for HTTPSprobe and fall-back to HTTPonly if HTTPSis not reachable.
* For printing both HTTP/HTTPS results, no-fallbackflag can be used.
* Custom scheme for ports can be defined, for example -ports http:443,http:80,https:8443* vhost, http2, pipeline, ports, csp-probe, tls-probeand pathare unique flag with different probes.
* Unique flags should be used for specific use cases instead of running them as default with other flags.
* When using jsonflag, all the information (default probes) included in the JSON output. Thankshttpx is made by the projectdiscovery team. Community contributions have made the project what it is. See the Thanks.md file for more details. Do also check out these similar awesome projects that may fit in your workflow:

Probing feature is inspired by @tomnomnom/httprobe work Download Httpx

___________________________
@hacking_Attack
@Hacking_Video

SEGURANÇA DA INFORMAÇÃO E HACKING

Análise de caso real dos programas de bug bountyContinue reading on Medium »
Read more...

hacking: security in practice
Wanting to start bug bounty and which laptop should I buy, preferably cheap

I know the top thread says about hacking but what about specifically for big bounty. I have no experience in the bug bounty and would like to get into I have no knowledge in coding or anything else where do I start and advance

submitted by /u/RyanHassanRU
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any way to execute a brute force attack through your android keyboard?

I've started using an app that's used for a national news station in my country and found out that an "enter password" prompt pops up upon a good couple taps on the version number, nice thing is there is no limit on tries. So I think if I could execute a brute force attack using my android keyboard I could probably get in whatever this thing is (I'm guessing Dev options, but the curiosity is still there). Sorry for the long read, I also hope I didn't sound like too much of a noob.

submitted by /u/Holy_Hog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Im in love with hacking stuff, can i have some advice?

I'm not lucky enough because i dont get cyber sec bachelor course in university. Instead, i got interactive media bachelor. Will company offer me a job like cyber sec student will got? I'm planning to involve in physical and online course about hacking. TIA. :D

submitted by /u/BarracudaSad28
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

SEGURANÇA DA INFORMAÇÃO E HACKING
https://itanuromero.medium.com/seguran%C3%A7a-da-informa%C3%A7%C3%A3o-e-hacking-4592b685e19e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Análise de caso real dos programas de bug bountyContinue reading on Medium » (https://itanuromero.medium.com/seguran%C3%A7a-da-informa%C3%A7%C3%A3o-e-hacking-4592b685e19e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SUID Binaries

SUID stands for “Set User ID”, and it is a special type of permission that can be given to a file so the file is always run with the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video