Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Search and Extraction Methods
All of these methods can be used either separately or in any combination: Embedded Files: search for files embedded (https://www.kitploit.com/search/label/Embedded) inside data using binwalk. File Headers / Magic Bytes: search using headers + magic bytes via levaraging the Linux util file (default method). ASCII String Dump: search for ASCII strings inside data. Entropy-Based Search: use Shannon's Entropy as a measure tool to search for natural language text (e.g. UTF-8 Unicode), encrypted/compressed files or anything the user seems viable with user-supplied entropy limits. IMPORTANT: The order showed here is used under-the-hood for discarding searches with other methods (e.g. if file is found via embedded files then it won't attempt to search using file headers, ascii string dump nor entropy) as it's not likely to find anything meaningful if previous methods were already successful.
Misc
Accepts UNIX timestamps (instead of block IDs) that get resolved into the closest block IDs commited at those times. Save all data from visited transactions into file for later reviewing. Store CLI-displayed logs into file for later extracted-file analysis. Ignore user-supplied file formats (case-insensitive) for extraction and accepts substrings of the complete file format for blacklisting. Print general progress metrics (e.g. how many blocks / transactions have been parsed, how many blocks are left) every minute and also display some interesting metrics at the end of the current run. More useful features found on the manual (-h)!
Usage

Common use cases
Standard search (search inside transactions via file headers) on MainNet with API key on default location (.api-key) and between these two block IDs (inclusive): $ etherblob 4081599 4081600 More "in-through" search (search for embedded files (https://www.kitploit.com/search/label/Embedded%20Files) + regular search method) on goerli network with key inside arbitrary file: $ etherblob -K api.key 3134050 3145570 -M -H --network goerli Search over block headers and transactions at the same time and save extracted files to 'extracted': $ etherblob 4081599 4081600 --blocks --transactions -D extracted/ Search only inside 'to' addresses in range from blocks commited between Jan 25 2021 19:00:00 and Jan 26 2021 19:00:00: $ etherblob -t 1611601200 1611687600 --addresses Search strings only on contracts' storage and for the first 4 storage array positions (128 bytes worth of data): $ etherblob 3911697 3912697 -S --contracts -C 4 Search only inside transactions for encrypted/compressed data (ignoring any other file format): $ etherblob 4081599 4081600 --encrypted Search inside transactions for custom entropy files while saving transactions into file: $ etherblob 3911697 3912697 -E 4.0 5.0 -s Only dump ASCII strings over blocks and transactions made on Christmas Eve (between the 24th and 25th): $ etherblob -t 1608836400 1608922800 --blocks --transactions --strings Full-blown search (slow, expect many false-positives): $ etherblob 4081599 4081600 -U -S -M -H --blocks --transactions --addresses --contracts
Advanced Use Cases
There are more explanations for advanced usage cases and the things found with them on the wiki (https://github.com/litneet64/etherblob-explorer/wiki)!
Manual
usage: etherblob [-h] [--transactions] [--blocks] [--addresses] [--contracts]
[--network {main,goerli,kovan,rinkeby,ropsten}] [-H] [-M] [-U] [-E CUSTOM_ENTROPY CUSTOM_ENTROPY]
[--encrypted] [-S] [-C CONTRACT_POSITION] [-t] [-K API_KEY_PATH] [-k API_KEY] [-D OUTPUT_DIR]
[-o OUT_LOG] [-s] [-i [IGNORED_FMT [IGNORED_FMT ...]]] [--version]
start_block end_block

Tool to search and extract blob files on the Ethereum Network.

positional arguments:
start_block Start of block id range.

___________________________
@hacking_Attack
@Hacking_Video
end_block End of block id range.

optional arguments:
-h, --help show this help message and exit
--transactions Search for blob files on transaction inputs. Default search mode.
--blocks Search for blob files on block inputs. If enabled then transaction input check is disabled unless
explicitly enabled.
--addresses Search for blob files on 'to' transaction addresses, as on Ethereum anyone can make transactions
to an arbitrary address even if it has no related owner (still not very common). If enabled then
transaction's input check is disabled unless explicitly enabled.
--contracts Search for blob files on contract's storage. If enabled then transaction input check is disabled
unless explicitly enabled.
--network {main,goerli,kovan,rinkeby,ropsten}, -N {main,goerli,kovan,rinkeby,ropsten}
Choose blockchain network to search in. Available choices are Main, Goerli (Görli), Kovan, Rinkeby
and Ropsten. MainNet is the default network. Case-insensitive.
-H, --file-header If enabled, search for file formats via magic bytes/file headers on data (from blocks,
transactions or addresses). Enabled by default unless another method is enabled too.
-M, --embedded If enabled, search for embedded files on data (from blocks, transactions or addresses) via
binwalk. Disabled by default as parsing now takes longer.
-U, --unicode If enabled, attempt to search and dump files (https://www.kitploit.com/search/label/Dump%20Files) containing UTF-8 text from harvested data (blocks,
transactions, addresses) using Shannon's Entropy (between 3.5 and 5.0) if no other discernible
file is found first on that data. Yields many false positives.
-E CUSTOM_ENTROPY CUSTOM_ENTROPY, --custom-entropy CUSTOM_ENTROPY CUSTOM_ENTROPY
Define your own entropy limits (min and max) to search for files/data on harvested data.
--encrypted If enabled, attempt to sear ch and dump encrypted/compressed data found via different search
methods (blocks, transactions, addresses) using Shannon's Entropy (between 7.0 and 8.0) if no
other discernible file is found first on that data.
-S, --strings If enabled, attempt to search and dump ASCII strings into files found inside harvested data
(blocks, transactions, addresses) if no other discernible file is found first on that data.
-C CONTRACT_POSITION, --contract-position CONTRACT_POSITION
Search inside contract's data until reaching the (N-1)th position on its storage array. Positions
contain 32 bytes worth of data. Count starts at 0 and default pos is the 15th pos (16 indexes in
total) if no custom position is given.
-t, --timestamps If enabled, then start and end block IDs are interpreted as UNIX timestamps th at are then resolved
to the closest commited blocks for those specific times.
-K API_KEY_PATH, --api-key-path API_KEY_PATH
Path to file with Etherscan API key for queries. Default search location is '.api-key'.
-k API_KEY, --api-key API_KEY
Etherscan API key as parameter. If given then '--api-key-path' is ignored.
-D OUTPUT_DIR, --output-dir OUTPUT_DIR
Out-dir for extracted files. Default is 'ext_{start block}-{end block}'.
-o OUT_LOG, --out-log OUT_LOG
Out-file for logs. Default is 'etherblob_{start block}-{end block}.log'.
-s, --save-transactions

___________________________
@hacking_Attack
@Hacking_Video
If enabled, all transactions and their info are stored at file 'transactions_{start-block}-{end-
block}.txt'
-i [IGNORED_FMT [IGNORED_FMT ...]], --ignored-fmt [IGNORED_FMT [IGNORED_FMT ...]]
Ignored file formats for extraction. Default ignored/common file formats are 'ISO-8859 text' and
'Non-ISO extended-ASCII text'. The 'data' file format is always ignored. Accepts file format
substrings and makes case-insensitive matches. '*' is a wildcard to ignore all file formats.
--version show program's version number and exit

Official GitHub repo 'https://github.com/litneet64/etherblob-explorer'


Download Etherblob-Explorer (https://github.com/litneet64/etherblob-explorer)

___________________________
@hacking_Attack
@Hacking_Video
Forwarded from Torrent Leaks
Free Course Site
The Complete Android Kotlin Developer Course

https://freecoursesite.com/wp-content/uploads/2018/02/1_BoIy_E144wyFS7Oj639l2w.jpeg
Learn how to make online games, and apps for Android O, like Pokémon , twitter,Tic Tac Toe, and notepad using Kotlin What Will I Learn? Build Your First Mobile App with Kotlin Apply to jr. Android development jobs Build real-world Android apps like Twitter,Facebook, My Notes, Find my phone, media-player, Calculator, find my age, find […]

The post The Complete Android Kotlin Developer Course appeared first on Free Course Site.
Forwarded from Torrent Leaks
FreeCourseSite – Download Udemy Paid Courses For Free
Ultimate Google Cloud Certifications: All in one Bundle (4)

Ultimate Google Cloud Certifications: All in one Bundle (4)275,000+ GCP Students, 500+ Questions – Associate Cloud Engineer, Cloud Architect, Cloud Developer, Network EngineerWhat you’ll learnUltimate Google Cloud Certifications: All in one Bundle (4)
*

From Beginners to advanced – I would say from Zero to Hero Google Cloud Platform
*

Become Master in Google Cloud Platform
*

Prepare for Google Cloud Certifications – Cloud Engineer, Cloud Architect, Cloud Developer, Data Engineer, Cloud Network Engineer – TBD.
*

Save time in preparing for Multiple Google Cloud Certification exams. Requirements*

Students should be computer science knowledge will help to understand and prepare for certification. DescriptionHi Cloud Professionals
We have 405,000+ Students & 280,000 Unique students for Google Cloud Platform Certifications makes us “No 1 Trainer for Google Cloud Platform on Udemy”

25200+ Students informed us that they got certifications with our courses.

Did you know 85% of global IT professionals hold at least one certification, of which over half were earned in the past 12 months? Another 66% plan to attain a new certification this year. These findings are published in the Global Knowledge 2019 IT Skills and Salary Report.

Please check lecture 2 for Google cloud platform certification future promotions subscriptions! You always have a Free $300 Credit for Google Cloud PlatformBecoming Google Certified choice of your certification – Professional Cloud Architect, Associate Cloud Engineer, Professional Cloud Developer,  Professional Cloud Network Engineer (Beta), Upcoming -> Cloud Data Engineer, Cloud DevOps Engineer, Cloud Security Engineer.

This course is not for Lazy learners – The course has comprehensive coverage of Google Cloud Platform and students need very long focus/attention to complete.

The course does not assume you have knowledge of Google Cloud Platform or any cloud Platform. We cover almost everything on GCP to become “Hero” from whatever your current GCP understanding (it may be Zero or Beginning or Intermediate)

Advance Students – Joining this course only for certification -> Please at least run through the foundation section once for you to understand the certification syllabus.

Why waste time learning the same foundation concepts again and again for each certification around the same technology. This course divided into the section where you learn all concepts in one course and then focus individually on each certification – Incrementally.
Why Pay for Every Certifications course and some times you don’t even appear for certification. This course will help you to pay only once and plan for any certification on the Google Cloud Platform. Single Course FULLY Prepares you for all FOUR certifications below ->1. Associate Cloud Engineer,
2. Professional Cloud Architect
3. Professional Cloud Developer
4. The Professional Cloud Data Engineer  – Expected in Dec 2020
5. Professional DevOps Engineer – Expected in Jun 2021

Bonus: Other Certifications are upcoming ->

1. Professional Cloud Network Engineer – in Beta expected to be completed in Nov 2020.
2. Professional Security Engineer – Upcoming.   Tentative Mar/Apr 2021.

Each Certification

> 100 % Coverage for Certification.

> Section by Section mapping syllabus (after foundation) so that you don’t have to hunt for any other options for syllabus coverage

> One Practice Question set for each Certification – Besides Google Readiness Test

> Labs will help you understand each service in detail.

Our Target at the end of Dec to have 2 Questions Sets for each certification.

Time is Money nowadays – We all want to optimize ou[...]
Forwarded from Torrent Leaks
r time to learn new things and add them to our profile in a smart way. This course will take out duplicate learning work which you may need to do if you are planning for more than 1 certification on the Google Cloud Platform.

Each Certification gives an additional dimension about Google Cloud Platform and this Course committed to giving you will give you a 360 view of the Google Cloud platform so – you don’t have to refer to any other course.

Thank You for your time and stay connected!

Happy Learning !!

Google Cloud Gurus

Seattle, WA USA Who this course is for:* Who wants to learn Google Cloud Platform.
* Students preparing for Google Cloud Certification
* Students who want to become masters in Google Cloud Platform.
*
Last updated 3/2021
Content From: https://www.udemy.com/course/google-certified-architect-developer-engineer-data-devops/ Download Now Microservices with Spring Boot and Spring Cloud
The post Ultimate Google Cloud Certifications: All in one Bundle (4) appeared first on FreeCourseSite - Download Udemy Paid Courses For Free.
Victim’s Anti CSRF Token could be exposed to Third-party Applications installed on user’s Device…

Complete Details === During my investigation, I found that a user’s DTSG token can be exposed to a third-party application because of a…Continue reading on Medium »
Read more...
Writeups: Facebook Whitehat program(2021): Instagram Live setting bug

About me:
Read more...