Browsing tag
Search For Documents In A Domain Through Google. The Objective Is To Extract Metadata. Installing dependencies: > git clone https://github.com/Josue87/MetaFinder.git > cd MetaFinder > pip3 install -r requirements.txt Usage python3 metafinder.py -t domain.com -l 20 [-v] Parameters: t: Specifies the target domain. l: Specify the maximum number of results to be searched. v: Optional. […]
Introduction Dr. ROBOT is a tool for Domain Reconnaissance and Enumeration. By utilizing containers to reduce the overhead of dealing with dependencies, inconsistency across operating sytems, and different languages, Dr. ROBOT is built to be highly portable and configurable. Use Case: Gather as many public facing servers that a target organization possesses. Querying DNS resources […]
POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs in on Exchange Web Services to subscribe to push notifications. […]
Pentester always uses various tools to gather information of the target. And it is most crucial part before creating any further scenarios. Earlier we have shown various tools which are used in information gathering or reconnaissance. But most of the tools run in linux. These tools sometimes takes lot of time to gather some basic […]
FIERCE DNS SCANNER:- Fierce is a another domain scanner. It is written by Robert Hansen aka RSnake. It helps to locate non-contiguous IP space and hostname against target. This tool helps to uncover additional hosts that brute force may not have found, as stated by ethical hacking researcher in International Institute of Cyber Security. For launching this […]
Attackers bypass HTTPS encryption protection by registering new TLS certificate. A Dutch security firm recently fell victim to a well-executed attack that allowed hackers to take control of its servers and intercept clients’ login credentials and confidential data. The security firm, Fox-IT, said in a blog post published last week that the so-called “man-in-the-middle attack” lasted for […]
From the following steps SubDomain-Analyzer gets data from a domain: Get the zone transfer file Gathers all the information from DNS records Analyzing DNS records Tests sub domains by dictionary attack sudo apt-get install python-dev python-pip sudo pip install -r requirements.txt easy_install prettytable Install Xcode Command Line Tool (From AppStore) sudo easy_install pip, prettytable sudo […]
A Turkish hacker going with the handle of Misafir has hacked and defaced official Google Bolivia domain on 30th Oct 2013 along with 7 other Google domains such as Google Translator, Maps, SMS, News, ID, Labs and Google Images domain. Misafir left a deface page along with a message on all defaced Google domains, expressed […]