RandIP – Network Mapper To Find Servers
RandIP is a nim-based network mapper application that generates random IP addresses and uses sockets to test whether the connection is valid or not with additional tests for Telnet and SSH.
RandIP – Network Mapper Features
- HTTP and HTTPS enumeration
- Python enumeration exploits
- SSH enumeration exploits
- Logger and error-code handler
- SSH and Telnet Timeouts to prevent blocking
- SSH Enumerations work in tandem
You can download RandIP here:
Or read more here.
Topic: Networking Hacking
Nipe – Make Tor Default Gateway For Network
Nipe is a Perl script to make Tor default gateway for network, this script enables you to directly route all your traffic from your computer to the Tor network through which you can surf the internet anonymously without having to worry about being tracked or traced back.
Tor enables users to surf the internet, chat and send instant messages anonymously, and is used by a wide variety of people for both licit and illicit purposes. Tor has, for example, been used by criminal enterprises, hacktivism groups, and law enforcement agencies at cross purposes, sometimes simultaneously.
Using Nipe to Make Tor Default Gateway
|
1 2 3 4 5 6 |
COMMAND FUNCTION install Install dependencies start Start routing stop Stop routing restart Restart the Nipe process status See status |
Examples:
|
1 2 3 4 5 |
perl nipe.pl install perl nipe.pl start perl nipe.pl stop perl nipe.pl restart perl nipe.pl status |
Installing Nipe to Make Tor Default Gateway
|
1 2 3 4 |
$ git clone https://github.com/GouveaHeitor/nipe $ cd nipe $ cpan install Switch JSON LWP::UserAgent $ perl nipe.pl install |
You can download Nipe here:
Or read more here.
Topic: Privacy
Mosca – Manual Static Analysis Tool To Find Bugs
Mosca is a manual static analysis tool written in C designed to find bugs in the code before it is compiled, much like a grep unix command.
There are various ‘egg’ modules which contain patterns to scan for, it can scan through files recursively limited by file extension and logs results to an XML text file.
It’s also fairly easy to extend and add your own modules/eggs/languages.
Manual Static Analysis Tool Language Support
Languages it can scan for vulnerabilities are:
- ASP
- C
- C#
- Java
- JavaScript
- PHP
- Ruby
- Swift
You can download Mosca here:
Or read more here.
Topic: Countermeasures
Slurp – Amazon AWS S3 Bucket Enumerator
Slurp is a blackbox/whitebox S3 bucket enumerator written in Go that can use a permutations list to scan from an external perspective or an AWS API to scan internally.
There are two modes that this tool operates at; blackbox and whitebox mode. Whitebox mode (or internal) is significantly faster than blackbox (external) mode.
Blackbox (external)
In this mode, you are using the permutations list to conduct scans. It will return false positives and there is NO WAY to link the buckets to an actual AWS account.
Whitebox (internal)
In this mode, you are using the AWS API with credentials on a specific account that you own to see what is open. This method pulls all S3 buckets and checks Policy/ACL permissions. Your credentials should be in ~/.aws/credentials.
Slurp – Amazon AWS S3 Bucket Enumerator Features
The main features of Slurp are:
- Scan via domain(s); you can target a single domain or a list of domains
- Scan via keyword(s); you can target a single keyword or a list of keywords
- Scan via AWS credentials; you can target your own AWS account to see which buckets have been exposed
- Colorized output for visual grep
- Currently generates over 28,000 permutations per domain and keyword
- Punycode support for internationalized domains
Usage of Slurp S3 Bucket Enumerator
Will enumerate the S3 domains for a specific target:
|
1 |
slurp domain <-t|--target> example.com |
Will enumerate S3 buckets based on those 3 key words (linux, golang & python):
|
1 |
slurp keyword <-t|--target> linux,golang,python |
Will perform an internal scan using the AWS API:
|
1 |
slurp internal |
You can download Slurp here:
Or you can read more here.
Topic: Hacking Tools
US Government Cyber Security Still Inadequate
Surprise, surprise, surprise – an internal audit of the US Government cyber security situation has uncovered widespread weaknesses, legacy systems and poor adoption of cyber controls and tooling. US Government security has often been called into question but we’d hope in 2019 it would have gotten better and at least everyone would have adopted the […]
Topic: Hacking News
BloodHound – Hacking Active Directory Trust Relationships
BloodHound is for hacking active directory trust relationships and it uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. Attackers can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use it to identify and eliminate those same […]
Topic: Hacking Tools