Dark Reading: Attacks/Breaches
Why Some Cloud Services Vulnerabilities Are So Hard to Fix

Five months after AWS customers were alerted about three vulnerabilities, nearly none had plugged the holes. The reasons why underline a need for change.

Darkdump2 - Search The Deep Web Straight From Your Terminal
http://www.kitploit.com/2023/02/darkdump2-search-deep-web-straight-from.html

About Darkdump (https://www.kitploit.com/search/label/Darkdump) (Recent Notice - 12/27/22) Darkdump is a simple script written in Python3.11 in which it allows users to enter a search term (query) in the command line (https://www.kitploit.com/search/label/Command%20Line) and darkdump will pull all the deep web sites relating to that query. Darkdump2.0 is here, enjoy! Installation git clone https://github.com/josh0xA/darkdump
cd darkdump
python3 -m pip install -r requirements.txt
python3 darkdump.py --help
Usage Example 1: python3 darkdump.py --query programming
Example 2: python3 darkdump.py --query="chat rooms"
Example 3: python3 darkdump.py --query hackers (https://www.kitploit.com/search/label/Hackers) --amount 12
Note: The 'amount' argument filters the number of results outputted
Usage With Increased Anonymity Darkdump Proxy: python3 darkdump.py --query bitcoin (https://www.kitploit.com/search/label/Bitcoin) -p
Menu
____ _ _
| \ ___ ___| |_ _| |_ _ _____ ___
| | | .'| _| '_| . | | | | . |
|____/|__,|_| |_,_|___|___|_|_|_| _|
|_|

Developed By: Josh Schiavone
https://github.com/josh0xA
joshschiavone.com
Version 2.0

usage: darkdump.py [-h] [-v] [-q QUERY] [-a AMOUNT] [-p]

options:
-h, --help show this help message and exit
-v, --version returns darkdump's version
-q QUERY, --query QUERY
the keyword or string you want to search on the deepweb
-a AMOUNT, --amount AMOUNT
the amount of results you want to retrieve (default: 10)
-p, --proxy use darkdump proxy to increase anonymity

Visual

Ethical Notice The developer of this program, Josh Schiavone, is not resposible for misuse of this data gathering (https://www.kitploit.com/search/label/Gathering) tool. Do not use darkdump to navigate websites that take part in any activity that is identified as illegal under the laws and regulations of your government. May God bless you all. License MIT License
Copyright (c) Josh Schiavone

Download Darkdump (https://github.com/josh0xA/darkdump)

Reflected XSS on Target with tough WAF ( WAF Bypass )
https://jowin922.medium.com/reflected-xss-on-target-with-tough-waf-waf-bypass-3b7efd1ef2bc?source=rss------bug_bounty-5

I was doing web pentesting on a private program. The program had a very tough WAF even typing alert as a payload would block be blocked by…Continue reading on Medium » (https://jowin922.medium.com/reflected-xss-on-target-with-tough-waf-waf-bypass-3b7efd1ef2bc?source=rss------bug_bounty-5)

hacking: security in practice
Finding owner of IP address?

If I was able to obtain someone’s IP address, is there a way for me to find out the owner (without subpoenas)?

We have some major small town corruption going on and I’m looking to see which city council member, or maybe even the mayor or police admin, is behind fake profiles.

submitted by /u/CubbiesFan95
[link] [comments]

Hacking on Medium
The Gnome vs The Black Kn

https://cdn-images-1.medium.com/max/1920/1*oy5NF4Vwd_l8FeWwh5Dzdw.jpeg
Gnome vs. Black Knight

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
C# Keyloggers using Windows API

Hey, in this article I’d like to share with you some things I’ve learned about keyloggers. I am currently learning WinAPI in C# and since…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Hacking XML — XML Injection

https://cdn-images-1.medium.com/max/1024/0*BpFF1qKOdV43hyVN.jpg
Introduction

Continue reading on Martian Defense Cybersecurity »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
The Dark Net: Inside the Digital Underworld

https://cdn-images-1.medium.com/max/600/1*xpJrULa4EbOIn1YjATX5Uw.png
The Internet is sizable, with millions of web pages, databases, and servers all running 24 hours a day. But the so-called “visible”…

Continue reading on Spider »
➖ Sent by @TheFeedReaderBot ➖