Skip to content
#

pentest

Here are 511 public repositories matching this topic...

jhertz
jhertz commented Apr 17, 2020

Hi All,

So I'm trying to use hydra to bruteforce a login on a system that uses custom http headers to receive the username and password. Hydra does not seem to be doing substitution of ^USER^ and ^PASS^ when used as HTTP headers. If I issue issuing a call to hydra like this:

hydra "http-post://0.0.0.0:8000/:H=username\:^USER^:H=password\:^PASS^" -l admin -p admin

I see the following r

objection
Techbrunch
Techbrunch commented Apr 19, 2020

According to the documentation in the wiki:

Frida scripts loaded with the import command are also run as jobs automatically

Describe the bug

When loading a script with the import command, the script is successfully loaded but no jobs is created.

To Reproduce

  1. import test.js
  2. jobs list

Expected behavior

The job should be listed when running jobs list

**E

大型内网渗透扫描器&Cobalt Strike,Ladon6.6内置74个模块,包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列,密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem,Poc/Exploit,支持Cobalt Strike 3.X-4.0

  • Updated Jul 1, 2020
  • C#
Ashrith-Shetty
Ashrith-Shetty commented Apr 23, 2020

On running python setup.py develop a ModuleNotFoundError is thrown.
We have to manually install the following Modules Tornado, PyYAML, Six.
This issue is present in both manual and docker installation process

Expected Behavior

python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。

  • Updated Jan 2, 2020
  • Python

Improve this page

Add a description, image, and links to the pentest topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the pentest topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.