KitPloit - PenTest Tools!
Nmap-API - Uses Python3.10, Debian, python-Nmap, And Flask Framework To Create A Nmap API That Can Do Scans With A Good Speed Online And Is Easy To Deploy

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDXdh_qCTiy0ll3nFeDhL9QB5rA1KiewKTl6MUHhNWs6q7awlz7FqQhvWCxUiTBk2b4Z2nYdyxMaGiUlspAZVNCh7ce0RXwKIWw1Kg3hYnxH2ty-6EwdQY_2v4sww2EfboVEvy1E8btqjo-3qvwMhZxpoZhf-ETAzPbKX_29kvGMgFoV_J2i4jrQiypg/w640-h424/nmap.png
Uses python3.10, Debian, python-Nmap, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy.

This is a implementation for our college PCL project which is still under development and constantly updating.
API Reference

Get all items

GET /api/p1/{username}:{password}/{target}
GET /api/p2/{username}:{password}/{target}
GET /api/p3/{username}:{password}/{target}
GET /api/p4/{username}:{password}/{target}
GET /api/p5/{username}:{password}/{target}
Parameter Type Description usernamestringRequired. username of the current user passwordstringRequired. current user password targetstringRequired. The target Hostname and IP
Get item

GET /api/p1/
GET /api/p2/
GET /api/p3/
GET /api/p4/
GET /api/p5/
Parameter Return data Description Nmap Command p1jsonEffective Scan -Pn -sV -T4 -O -Fp2jsonSimple Scan -Pn -T4 -A -vp3jsonLow Power Scan -Pn -sS -sU -T4 -A -vp4jsonPartial Intense Scan -Pn -p- -T4 -A -vp5jsonComplete Intense Scan -Pn -sS -sU -T4 -A -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script=vuln
Auth and User management

POST /adduser/{admin-username}:{admin-passwd}/{id}/{username}/{passwd}
POST /deluser/{admin-username}:{admin-passwd}/{t-username}/{t-userpass}
POST /altusername/{admin-username}:{admin-passwd}/{t-user-id}/{new-t-username}
POST /altuserid/{admin-username}:{admin-passwd}/{new-t-user-id}/{t-username}
POST /altpassword/{admin-username}:{admin-passwd}/{t-username}/{new-t-userpass}

* make sure you use the ADMIN CREDS MENTIONED BELOW
Parameter Type Description admin-usernameStringAdmin username admin-passwdStringAdmin password idStringId for newly added user usernameStringUsername of the newly added user passwdStringPassword of the newly added user t-usernameStringTarget username t-user-idStringTarget userID t-userpassStringTarget users password new-t-usernameStringNew username for the target new-t-user-idStringNew userID for the target new-t-userpassStringNew password for the target
DEFAULT CREDENTIALS

ADMINISTRATOR : zAp6_oO~t428)@,
Download Nmap-API

https://a.thumbs.redditmedia.com/ZFdQpRjS8-HekjYZnzVDQn0W9xIOjEy5uguAPuqUbq8.jpg submitted by /u/Weetbix13
[link] [comments]

hacking: security in practice
Certifications

Hey guys so I currently still am a Mechanical Engineering student and have been studying Cybersecurity as a hobby, now I have decided to do it “professionally” and wanted to ask what Certification you would recommend? Already did some research and currently cannot decide between the CompTia Security+ or the CompTia Pentest+, both seem to be recommended for beginners, but I am on a rather tight budget so for now I could only do one, so which one would you recommend for a beginner?

submitted by /u/Tickle_a_Dicktip
[link] [comments]

hacking: security in practice
Password cracking

My understanding from working in a corporate environment is that we need longer passwords to prevent cracking. My question is why it’s necessary if the system locks you out after 3-5 incorrect attempts?

submitted by /u/Shatterstar23
[link] [comments]

[HTB] Session Security

DisclaimerContinue reading on Medium »
Read more...

From payload to 300$ bounty: A story of CRLF injection and responsible disclosure on HackerOne

As a bug bounty hunter, I’m always on the lookout for security vulnerabilities that I can report to companies and earn rewards.Continue reading on Medium »
Read more...

The Danger of Automatic Login: Bypassing MFA

A few years ago, during a security assessment, I found a vulnerability that allowed a user to bypass multi-factor authentication (MFA)…Continue reading on Medium »
Read more...

How do I get cross site scripting(“xss”) in “Nokia”

This is my first and last Bug Bounty Writeup this year. 😀Continue reading on Medium »
Read more...

Hacking on Medium
Chaocipher: The Revolutionary Encryption System | 2023

https://cdn-images-1.medium.com/max/878/0*edlm8IWNzfmw9nIm.png
A Comprehensive Guide to the History, Features, and Applications of Chaocipher | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Malware to Bypass Sandbox

https://cdn-images-1.medium.com/max/600/0*DWFi8Ay5_VKzvIyw.jpg
Introduction

Continue reading on Medium »

Hacking on Medium
My Article Crossed 21k Views, And I Do Not Know Why…

https://cdn-images-1.medium.com/max/892/1*FUvig3Vrei4siBBoMs4lHQ.png
A long time ago in a galaxy far, far away, when my blog was in its wee stages of development, I released an article titled: Uncle Jokes…

Continue reading on Medium »

Hacking on Medium
A Guide to Vulnerability Management for Beginners

https://cdn-images-1.medium.com/max/2600/0*i-OiY8LFklQ65TyQ
Using OpenVAS to Find the Weakest Links

Continue reading on Medium »

Rukovoditel 3.3.1 — Remote Code Execution (RCE)

Rukovoditel 3.3.1 — Remote Code Execution (RCE)Continue reading on Medium »
Read more...

hacking: security in practice
Open letter to the Russian Government from an American Hacker

https://external-preview.redd.it/H8T79FSDtM0Gobvtb6qA6BR2HGD4-iGrcaBBW7vusqQ.jpg?width=108&crop=smart&auto=webp&s=6cf63554f420a5d95be9aac14bfb623a3d1a27a7 submitted by /u/endless
[link] [comments]

Websites for subdomain enumeration

why do you need a website when you can use tools at some point in your life you do not have a good pc with good ram or when you need to do…Continue reading on Medium »
Read more...