Browsing tag
A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into a botnet. “GoBruteforcer chose a Classless Inter-Domain Routing (CIDR) block for scanning the network during the attack, and it targeted all IP addresses within that CIDR range,” Palo Alto Networks Unit 42 […]
Scanless is a command-line utility for using websites that can perform port scans on your behalf. Useful for early stages of a penetration test or if you’d like to run a port scan on a host and have it not come from your IP address. Supported Online Port Scanners yougetsignal viewdns hackertarget ipfingerprints pingeu spiderip […]
Quasar is a fast and light-weight remote administration tool coded in C#. Providing high stability and an easy-to-use user interface, Quasar is the perfect remote administration solution for you. Features TCP network stream (IPv4 & IPv6 support) Fast network serialization (NetSerializer) Compressed (QuickLZ) & Encrypted (AES-128) communication Multi-Threaded UPnP Support No-Ip.com Support Visit Website (hidden […]
About Getting default credentials added to commercial scanners is often difficult and slow. changeme is designed to be simple to add new credentials without having to write any code or modules. changeme keeps credential data separate from code. All credentials are stored in yaml files so they can be both easily read by humans and […]
It seems like Google is making some serious changes in its products, especially Chrome browser to provide users a smooth experience and better security. Last week, the tech and search engine giant announced that Chrome 63 browser update will come with a security feature that will alert users of ‘man in the middle’ attacks (MitM) while Chrome 64 will automatically block annoying […]
Very few have write access enabled, though. A recent brute-force scan of FTP servers available online via an IPv4 address revealed that 796,578 boxes can be accessed without the need for any credentials. The perpetrator of this scan is a security researcher that goes by the name of Minxomat, owner of a cyber-security firm that […]
GhostShell, the Romanian hacker who recently revealed his true identity in a very candid exposé, has returned to the world of hacking with a new leak as part of his new campaign called Light Hacktivism. His first leak after a few months of silence involves a list of 32 websites from where the hacker has […]
Supporting OS (operating system) FreeBSD Mac OS X Linux (CentOS, Debain, Ubuntu) Download Command: bash || sh export SENTRY_URL=https://raw.githubusercontent.com/msimerson/sentry/master/sentry.pl curl -O $SENTRY_URL || wget $SENTRY_URL || fetch –no-verify-peer $SENTRY_URL perl sentry.pl –update Running sentry.pl –update will: create the sentry database (if needed) install the perl script (if needed) prompt you to edit /etc/hosts.allow (if needed) […]
An InfoSec company TrustWave has reported that unknown hackers have stolen usernames and passwords of two million accounts at Google, Facebook, Twitter, Yahoo and others high profile companies. The company revealed that hack was a result of a keylogging software installed maliciously on unknown but thousands of personal computers around the globe. The installed malware took screenshots […]