Langsung ke konten utama

Archives Cyber

Cari Blog Ini

Awagai idege

pada tanggal Maret 25, 2018

Dapatkan link
Facebook
X
Pinterest
Email
Aplikasi Lainnya

Postingan Populer

GyoiThon: Next Generation Penetration Testing Tool Using Machine Learning

GyoiThon is a Growing Penetration Testing Tool Using Machine Learning. GyoiThon identifies the software installed on web server (OS, Middleware, Framework, CMS, etc...) based on the learning data. After that, it executes valid exploits for the identified software using Metasploit. Finally, it generates reports of scan results. GyoiThon executes the above processing automatically. Processing steps GyoiThon executes the above "Step1" - "Step4" fully automatically. User's only operation is to input the top URL of the target web server in GyoiThon. It is very easy! You can identify vulnerabilities of the web servers without taking time and effort. Processing flow Step 1. Gather HTTP responses. GyoiThon gathers several HTTP responses of target website while crawling. The following are example of HTTP responses gathered by GyoiThon. Example 1 HTTP/1.1 200 OK Date: Tue, 06 Mar 2018 03:01:57 GMT Connection: close Content-Type: text/html; charset=UTF-8 Etag: "409e...

Script Dasar Google HACK

Silahkan lihat coding script di bawah ini Code: allinurl: â€œproxylist.txtâ€ allinurl: â€œproxy.txtâ€ â€œindex of/rootâ€ â€œauth_user_file.txtâ€ â€œindex of/rootâ€ â€œIndex of /adminâ€ â€œIndex of /passwordâ€ â€œIndex of /mailâ€ â€œIndex of /â€ +passwd â€œIndex of /â€ +password.txt â€œIndex of /â€ +.htaccess index of ftp +.mdb allinurl:/cgi-bin/ +mailto administrators.pwd.index authors.pwd.index service.pwd.index filetype:config web gobal.asax index allintitle: â€œindex of/adminâ€ allintitle: â€œindex of/rootâ€ allintitle: sensitive filetype oc allintitle: restricted filetype :mail allintitle: restricted filetype oc site:gov for IIS server exlpoit allinurl: winnt/system32/ and uâ€™ll get many IIS server exploitsÃº intitle:r57shell intitle:â€Index ofâ€ .sh_history intitle:â€Index ofâ€ .bash_history intitle:â€index ofâ€ passwd intitle:â€index ofâ€ people.lst intitle:â€index ofâ€ pwd.db intitle:â€index ofâ€ etc/shadow intitle:â€index ofâ€ spwd in...

RetireJS: A Scanner Detecting The Use of JavaScript Libraries With Known Vulnerabilities

RetireJS: A Scanner Detecting The Use of JavaScript Libraries With Known Vulnerabilities What you require you must also retire? There is a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development,but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 list of security risks and insecure libraries can pose a huge risk to your Web app. The goal of Retire.js is to help you detect the use of JS-library versions with known vulnerabilities. Retire.js can be used in many ways: As command line scanner As a grunt plugin As a gulp task As a Chrome extension As a Firefox extension As a Burp and OWASP Zap plugin Command line scanner Scan a web app or node app for use of vulnerable JavaScript libraries and/or Node.JS modules. In the source code folder of the application folder run: $ npm install -g retire $ retire Grunt plugin A Grunt task for running Ret...

Diberdayakan oleh Blogger