Search results

Let's take a look at 25 very common tasks you can accomplish with Windows PowerShell. Common entries (just to get started) 1. Navigate the Windows Registry like the file system: cd hkcu: 2. Search recursively for a certain string within files: dir –r | select string "searchforthis" 3. Find...

HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that...

Vulnx is a cms and vulnerabilites detection, an intelligent auto shell injector, fast cms detection of target and fast scanner and informations gathering like subdomains, ipaddresses, country, org, timezone, region, ans and more... Instead of injecting shell and checking it works like all the...

In this tutorial we will be using a Nmap script to scan a target host for SMB vulnerabilities. SMB stands for Server Message Block and does not have a great reputation when it comes the security and vulnerabilities. SMB1 was used in Windows 2000 and Windows XP which allowed null sessions which...

Dozens of customers of a popular smart doorbell are suing the Amazon-owned manufacturer after their devices were hijacked, according to a new class action lawsuit. The new legal case joins together complaints filed by over 30 users in 15 families who say that their devices were hacked and used...

Tech firm Cloudhouse Technologies has announced the acquisition of UpGuard Core, an infrastructure monitoring platform previously owned by UpGuard Inc. Cloudhouse said the move will help enable its customers to find, manage and resolve configuration and compliance issues throughout their IT...

Cyber-attacks are becoming easier to conduct while conversely security is getting increasingly difficult, according to Kevin Curran, senior IEEE member and professor of cybersecurity, Ulster University, during a virtual media roundtable. “Any company you can think of has had a data breach,” he...

Norwegian police have blamed Russian advanced persistent threat (APT) group Fancy Bear for the summer cyber-attack on Norway's single-chamber parliament, the Storting. In what was described as "a significant attack" by the parliament's director, Marianne Andreassen, unauthorized individuals...

Using 0xsp mongoose you will be able to scan a targeted operating system for any possible way for privilege escalation attacks, starting from collecting information stage until reporting information through 0xsp Web Application API. user will be able to scan different Linux os system at the same...

Konan is an advanced open source tool designed to brute force directories and files names on web/application servers. Installation Download Konan by cloning the Git repository: Install requirements with pip Run Konan Support Platforms Linux Windows MacOSX

Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the scan results or...

WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over...

Burning BIN/CUE Images with Nero Burning Rom BIN/CUE image format is quite common on the Internet. It might seem that finding an appropriate software for burning these images is quite hard. Luckily, it's not. In addition to Golden Hawk CDRWin, the original software for BIN/CUE format, you can...

Vulners Scanner is developed by Vulners Team, the founders and maintainers of one of the world largest security databases. It implements technology of passive vulnerability scanning based on software version fingerprint. The application does not perform any malicious requests, fuzzing or any...

A static code analysis for WordPress Plugins/Themes (and PHP) Installation Simply clone the repository, install requirements and run the script Usage Available options: Creating modules Creating a module is flexible and allows for override of the BaseClass methods for each module as well as...

A fuzzer for any GET entries. Features Multi-threading on demand Fuzzing, bruteforcing GET params Find admin panels Colored output Hide results by return code, word numbers Proxy support Big wordlist Colored Usages Install

Kubolt is a simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers. Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containersusing getrun function from kubelet: How? Okay...

ANSI Bombs II: Tips and Techniques By The Raging Golem I. Introduction After writing the last file, a lot of people let me know about the mistakes I had made. I guess this file is to clear up those miscon ceptions and to let people know about some of the little tricks behind ANSI bombing...

An unprotected database with more than 62 million records was found in the public domain. The lack of protection of the database of the Digital Point Webmaster Forum has led to data breaches of 800,000 users. The California-based Digital Point Forum describes itself as "the largest...

As reported, an unknown person planted the Rapid (VI) Trojan program in the IT systems of four German companies, and encrypted all important documents and data with it. Having contacted employees of these companies by e-mail, he offered to restore the data. He asked to pay for the restoration...