Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
debugHunter - Discover Hidden Debugging Parameters And Uncover Web Application Secrets

https://blogger.googleusercontent.com/img/a/AVvXsEgVnGpWrbOTrqKWZCsroVbHHwbK9MWQAeOxc-pHvfi6obsFvZm0S4trIIiL7eQF_tXRsPR5WPvg1nyzrefOywrLT8uGXL1rumGNFOz38YIomc_ySuxg27mVyNTOE-5rV3CbLjpiZkG2RjevWh_TvfUwacOnHAnBoCcUwT5QsPydl8y1ciYfBUEJzJG4gw=w640-h164
Discover hidden debugging parameters and uncover web application secrets with debugHunter. This Chrome extension scans websites for debugging parameters and notifies you when it finds a URL with modified responses. The extension utilizes a binary search algorithm to efficiently determine the parameter responsible for the change in the response.
Features

* Perform a binary search on a list of predefined query parameters.
* Compare responses with and without query parameters to identify changes.
* Track and display the number of modified URLs in the browser action badge.
* Allow the user to view and clear the list of modified URLs.

Installation

Option 1: Clone the repository

1. Download or clone this repository to your local machine.
2. Open Google Chrome, and go to chrome://extensions/.
3. Enable "Developer mode" in the top right corner if it's not already enabled.
4. Click the "Load unpacked" button on the top left corner.
5. Navigate to the directory where you downloaded or cloned the repository, and select the folder.
6. The debugHunter extension should now be installed and ready to use.

Option 2: Download the release (.zip)

1. Download the latest release .zipfile from the "Releases" section of this repository.
2. Extract the contents of the .zipfile to a folder on your local machine.
3. Open Google Chrome, and go to chrome://extensions/.
4. Enable "Developer mode" in the top right corner if it's not already enabled.
5. Click the "Load unpacked" button on the top left corner.
6. Navigate to the directory where you extracted the .zipfile, and select the folder.
7. The debugHunter extension should now be installed and ready to use.

Usage

It is recommended to pin the extension to the toolbar to check if a new modified URL by debug parameter is found.

1. Navigate to any website.
2. Click on the debugHunter extension icon in the Chrome toolbar.
3. If the extension detects any URLs with modified responses due to debugging parameters, they will be listed in the popup.
4. Click on any URL in the list to open it in a new tab.
5. To clear the list, click on the trash can icon in the top right corner of the popup.

Contributing

We welcome contributions! Please feel free to submit pull requests or open issues to improve debugHunter.
Download debugHunter

8 views13:07

7 views13:23

Hacking Articles Tips Tricks Videos Tutorials

8 views13:23

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking Tool

Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking ToolPost Views: 59 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
A new tool called ‘Legion’ has emerged in the world of cybercrime, offering a range of modules for credential harvesting and SMTP hijacking. Cybercriminals operating under the “Forza Tools” name sell this Python-based tool on Telegram, attracting over a thousand members on their channel.

https://www.bleepstatic.com/images/news/u/1220909/2023/Malware/25/youtube.jpg Forza Tools tutorials on YouTube (Cado) Harvesting credentialsLegion is modular malware likely based on AndroxGhOst, allowing cybercriminals to perform SMTP server enumeration, exploit vulnerable Apache versions, brute-force cPanel and WebHost Manager accounts, interact with Shodan’s API, and abuse AWS services. This tool targets many online services, including Twilio, Nexmo, Stripe/Paypal, AWS console credentials, AWS SNS, S3 and SES specific, Mailgun, and database/CMS platforms. Additionally, Legion can create administrator users, implant webshells, and send out spam SMS to customers of U.S. carriers.

https://www.bleepstatic.com/images/news/u/1220909/2023/Malware/25/services.jpg
All services targeted by Legion (Cado)

Legion mainly targets unsecured web servers running content management systems and PHP-based frameworks like Laravel, using RegEx patterns to search for files commonly known to hold secrets, authentication tokens, and API keys. Cybercriminals use an array of methods to retrieve credentials, such as targeting environment variable files (.env) and configuration files containing SMTP, AWS console, Mailgun, Twilio, and Nexmo credentials.

https://www.bleepstatic.com/images/news/u/1220909/2023/Malware/25/paths.jpg Paths parsed by Legion for stored secrets (Cado)
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses How Legion Extracts Credentials and Performs Spam and Phishing AttacksFurthermore, Legion includes brute-forcing systems for AWS and SendGrid credentials, although Cado indicates that the former’s system is unlikely to generate usable credentials in its current state. Once Legion captures valid AWS credentials, it attempts to create an IAM user named ‘ses_legion’ with administrator rights, granting full access to all AWS services and resources.

https://www.bleepstatic.com/images/news/u/1220909/2023/Malware/25/aws-brute.jpg Code to brute-force AWS credentials (Cado)

In addition to stealing credentials, Legion can send out spam or phishing emails by gaining access to email services. It can also send SMS spam by leveraging stolen SMTP credentials after generating a list of phone numbers with area codes retrieved from online services. The carriers supported by the malware include AT&T, Sprint, US Cellular, T-Mobile, Cricket, Verizon, Virgin, SunCom, Alltel, Cingular, and VoiceStream.

Lastly, Legion can exploit known PHP vulnerabilities to register a webshell on the targeted endpoint or perform remote code execution to give the attacker full access to the server.
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Mythic AWS users – signs of compromiseAs an all-purpose credential harvester and hacking tool, Legion increases the risk for poorly managed and misconfigured web servers. AWS users should look for signs of compromise, such as changing the IAM user registration code to include an “Owner” tag with the value “ms.boharas.” The emergence of[...]

11 views13:23

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Offensive Security Tool: dontgo403

Offensive Security Tool: dontgo403Post Views: 33 Premium ContentSubscribe to Patreon to watch this episode. https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Patreon.png Reading Time: 2 Minutes DescriptionDontGo403 by devploit is a tool designed to help Pentesters and Red Teams identify vulnerabilities in web servers that could be exploited to gain unauthorized access to resources. The tool does this by bypassing HTTP error code 403 responses, which are typically used to indicate that a user is not authorized to access a particular resource or webpage.

DontGo403, can send multiple requests to a web server, each with a different User-Agent string, to identify a User-Agent string that is not being blocked by the server. By doing so, they can bypass the 403 error code and potentially gain access to restricted resources.
See Also: So you want to be a hacker? Offensive Security Courses InstallationGrab the latest release for your OS from RELEASES

Or compile by your own: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go buildTrending: Offensive Security Tool: Mythic
Trending: Offensive Security Tool: SSTImap CustomizationIf you want to edit or add new bypasses, you can add it directly to the specific file in payloads folder and the tool will use it. Options./dontgo403 -h

Command line application that automates different ways to bypass 40X codes.

Usage:
dontgo403 [flags]

Flags:
-b, --bypassIp string Try bypass tests with a specific IP address (or hostname). i.e.: 'X-Forwarded-For: 192.168.0.1' instead of 'X-Forwarded-For: 127.0.0.1'
-d, --delay int Set a delay (in ms) between each request. Default: 0ms
-f, --folder string Define payloads folder (if it's not in the same path as binary) -H, --header strings Add a custom header to the requests (can be specified multiple times) -h, --help help for dontgo403 --http Set HTTP schema for request-file requests (default HTTPS) -t, --httpMethod string HTTP method to use (default 'GET') -m, --max_goroutines int Set the max number of goroutines working at same time. Default: 50 (default 50) -p, --proxy string Proxy URL. For example: http://127.0.0.1:8080 -r, --request-file string Path to request file to load flags from -u, --uri string Target URL -a, --useragent string Set the User-Agent string (default 'dontgo403') -v, --verbose Set verbose mode ON (default OFF)
See Also: Write up: How to Exploit “improper error handling” in Web Applications Example of usageClone the repo from here: GitHub Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Mythic-300x150.png Offensive Security Tool: MythicApril 7, 2023
Mythic is a cross-platform, post-exploit, red teaming framework built with …

* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Bad-Secrets-300x150.png Recon Tool: Bad SecretsMarch 31, 2023
Bad Secrets its a pure python library for identifying the …

* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Nginxpwner-300x150.png Offensive Security Tool: NginxpwnerMarch 24, 2023
Nginxpwner is a tool to look for common Nginx misconfigurations …

* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/OpenRediWrecked-300x150.png Offensive Security Tool: OpenRediWreckedMarch 23, 2023
OpenRediWrecked is a powerful and sophisticated tool for detecting and … https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Offensive Security Tool: dontgo403 first appeared on Black Hat Ethical Hacking.

7 views13:23

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking Tool Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking ToolPost Views: 59 Premium Contenthttps://www.blackhatethicalhacking.com/wp…

Legion underscores the importance of strengthening online security measures to prevent cyberattacks.

https://www.bleepstatic.com/images/news/u/1220909/2023/Malware/25/policy.jpg IAM policy creation (Cado)
Trending: 10-Year-Old Windows vulnerability still being exploited in the 3CX attacks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-15-300x150.png New generation of botnets builds high-performance VPS-based DDoS attacksApril 13, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-14-300x150.png Microsoft Patches Windows Zero-Day Exploited to Spread RansomwareApril 12, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-13-300x150.png Over One Million WordPress Websites Infected with Balada Injector Malware CampaignApril 11, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/04/Images-for-the-News-posts-12-300x150.png Apple releases emergency security updates to address zero-day vulnerabilities on iPhones, Macs, and iPadsApril 10, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security SolutionsFind out how Pentesting Services can help you.
The post Meet ‘Legion’: The New Python-Based Credential Harvester and SMTP Hijacking Tool first appeared on Black Hat Ethical Hacking.

7 views13:23

Hacking Articles Tips Tricks Videos Tutorials

33 views13:43

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
How to Use Metasploit in Kali Linux: A Step-By-Step Tutorial

https://external-preview.redd.it/ChESifX-da-mKIlBrJIOMwRuzgqPAengbiN_7XRQYUc.jpg?width=640&crop=smart&auto=webp&s=f75cc0033cd47d62e4858c2cda9a9527b68971dc submitted by /u/nikola28
[link] [comments]

35 views13:43

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
What the Recent Collapse of SVB Means for Privacy

Businesses must be diligent in their actions, cultivate awareness with employees, and implement strict standards around external communications in the wake of Silicon Valley Bank's collapse.

6 views14:28

Source

Hacking Articles Tips Tricks Videos Tutorials

XSS em uma IA.

Essa vulnerabilidade ocorreu em uma IA bem conheçida que tem recursos para texto.Continue reading on Medium »
Read more...

31 views14:54

About

Blog

Apps

Platform