Untitled

GitHub user email addresses: how to find them

In this post, we will show you how to find the email address for most GitHub profiles (even if they don’t publicly share their email). For the sake of this guide, We will use FlamptX‘s profile to demonstrate how to find a user’s email address. Linus is a well-known software developer and at the time of writing this blog post, his GitHub profile does not include his email. However, we can still…

A curated list of Capture The Flag (CTF) frameworks, libraries, resources, software and tutorials. This list aims to help starters as well as seasoned CTF players to find everything related to CTFs in one place. It takes time to build up a collection of tools used in CTF and remember them all. This repo helps to keep all these scattered tools in one place. Create Tools used for creating CTF…

CRLF – Carriage Return Line Feed When a browser sends a request to a web server, the web server answers back with a response containing both the HTTP response headers and the actual website content, i.e. the response body. The HTTP headers and the HTML response (the website content) are separated by a specific combination of special characters, namely a carriage return and a line feed. For short…

Argument Injection – Vulnerabilities

Argument injection is a type of attack based on tampering with the input parameters of a page. This can enable attackers to see data which they normally cannot see or modify data which they normally cannot modify, via the user interface. Argument injection is similar to command injection as tainted data is passed to a command executed in a shell without proper sanitization/escaping. It can happen…

Account takeover attacks are on the rise, with an estimated 25% of adults in the world falling victim to this type of fraud. It is essential now more than ever not just for private individuals but also businesses to put in place defences against online fraud. Account Takeover (ATO) is an attack whereby cybercriminals take ownership of online accounts using stolen passwords and usernames.…

The WebSocket API is an advanced technology that makes it possible to open a two-way interactive communication session between the user’s browser and a server. With this API, you can send messages to a server and receive event-driven responses without having to poll the server for a reply. Tools ws-harness.py Exploit Using ws-harness.py Start ws-harness to listen on a web socket, and specify a…

Know if your emails has been opened or not !!

You do not know if your recipient has seen or opened your email. Once you send an email to someone, you have no idea if they actually opened it and read it, until they actually reply to you. So in this post, we’ll see if we can actually know when someone opens your email on their end. We’ll make use of the HTML rendering feature of Gmail to embed an image in the mail and monitor the requests for…

Read free without subscription

Bypass any paywall from website like medium.com and read free. (Paywall Removed) Works with your favorite websites EXAMPLE: this is paid article link from medium.com View at Medium.com To remove paywall  https://12ft.io/<URL&gt; https://12ft.io/https://medium.com/in-fitness-and-in-health/i-did-10-squats-and-push-ups-daily-for-365-days-196140670bbb Copy and paste whole thing in browser it will…

Proxychains is a UNIX program that allows us to mask our IP address by redirecting network traffic. It routes our TCP traffic through a variety of proxies, including TOR, SOCKS, and HTTP. TCP reconnaissance tools such as Nmap are compatible. Allows any TCP connection to be forwarded to the internet via a series of configurable proxies. The Tor network is used by default. Within a list, it’s…

Install required packages automatically for a python script

it is a hard to install all the libraries one by one. Each time you have to find out the name of the library and install it one by one. But if we know libraries like pipreqs which automatically installs all the required libraries to run the program What is Pipreqs? It is a python library that Generates pip requirements.txt file based on imports of any project and then you can install all of them…

Beef-XSS – Cloning websites

if you don’t already have Kali Linux you can download it here. If you are using an alternative Linux distribution you will need to install Beef-XSS. Join Our Discord Hacking Server: https://discord.gg/ZChEmMwE8d h Invite Our Cybersec Bot: https://dsc.gg/spyo Step 1: Open up a new terminal in Kali Linux, enter command mkdir /usr/share/beef-xss/extensions/demos/html/websites/ Next we need to…

Reverse shell over TOR network using hidden services – Poiana

Features -> Create a hidden service -> Generate non-staged payload (python/meterpreter_reverse_http) -> Convert url using Tor2Web: a final extension .ws will be added, so url becomes available outside tor network -> Generate batch .rc file for msfconsole Usage $ git clone https://github.com/CalfCrusher/Poiana/ $ cd Poiana && pip3 install -r requirements.txt $ python3 poiana.py Join Our Discord…

Recover an Overwritten File on Mac

#Recover overwritten files on Mac with an iCloud backup You can configure your Mac to backup files to iCloud, providing another option for recovering overwritten files. Use the following steps to restore overwritten files from an iCloud backup. Log in to iCloud.com with your account credentials. Click on the Settings option. Under the Advanced tab located on the bottom-left, click Restore…

Making Sure Your Cloud Solution Is Right for Your Business

Running a business can be very rewarding, but there are also lots of challenges that you have to overcome if you want your business to be a success. One of the many things that you have to do as the owner or manager of a business is to invest in the necessary tools, services, and solutions to aid efficient operations. This includes digital services such as cloud solutions, which are used by all…

Kali Linux: Reset Password

Let’s see how to reset the root password in Kali Linux. Join Our Discord Hacking Server: https://discord.gg/ZChEmMwE8d h Invite Our Cybersec Bot: https://dsc.gg/spyo Step 1: Reboot Kali While booting Kali Linux, just Press e to edit the GRUB menu. Step 2 :Edit GRUB menu Use navigational arrows to scroll down to the end of the menu -> Look for the keyword ‘Linux’ on the left side of the menu ->…

Use Kali linux On Android without root

Easiest way to install kali-linux on android using termux. you don’t need rooted phone. you can also use sudo (run command as a super user) Join Our Discord Hacking Server: https://discord.gg/ZChEmMwE8d h Invite Our Cybersec Bot: https://dsc.gg/spyo Follow these given steps: Download Termux from play store first: https://play.google.com/store/apps/details?id=com.termux open termux Type:…

H1deM3 – hide messages in messages

A way of hiding messages in messages, Use Zero-Width Characters to Hide Secret Messages in Text Website: https://thisisshubhamkumar.github.io/hidemessage/ Zero-width characters are non-printing characters that are not displayed by most applications, which leads to the name “zero-width.” They are Unicode characters, typically used to mark possible line break or join/separate characters in writing…