Tuesday, April 19, 2011

More Recon Tools and A New Vulnerable Web App!

In our last post, we discussed the enormous potential of reconnaissance tools and their importance in the Recon phase of any penetration test. In my readings so far this week, I've come across two new (as in, new to me) tools that we should add to our toolkit.
The first tool is one that's fairly new and may be incredibly useful for internal teams, more than us, as an external pen tester. This tool, Pastenum, enumerates and searches pastebin and pastie.org for any sensitive information an organization might have out on those services. For a closer look at it and an in-depth run through, check out the link below.


Pastenum – Pastebin/pastie enumeration tool

The second tool we should add to our toolkit is rather similar to the WLAuthor script we talked about in our last post. It's a word list generator called L517. From taking a look at it, it's Windows-based, which may help some of our new testers stay in their comfort zone and it's quick.

Check out L517 - WORDLIST GENERATOR below (thanks to Rob Fuller, aka Mubix for the link):

And lastly, if you've gotten your feet wet on a couple of security evaluations or you've been reading some heavy-duty web application books and want to take a swing at your own web app hacking, then check out "BodgeIT Store" below. It's always a good idea for a pen tester to maintain a library of vulnerable applications, servers, vms, etc. (Just ask Chris, whom I continually plague with requests like "hey, do you still have that VM of Windows XP SP 0?") Here's a chance to get a fairly easy web application to evaluate on your own:


BodgeIt Store – Vulnerable Web Application For Penetration Testing

25 comments:

  1. INSTEAD OF GETTING A LOAN, CHECK OUT THE BLANK ATM CARD IN LESS THAN 24hours {blankatmhaker@gmail.com}

    Am Mark Oscar,I want to testify about Jack Robert blank ATM cards which can withdraw money from any ATM machines around the world. I was very poor before and have no hope then I saw so many testimony about how Jack Robert send them the ATM blank card and use it to collect money in any ATM machine and become rich. I also email him and he sent me the blank card. I have use it to get 70,000 dollars. withdraw the maximum of $5,000 daily. Jack Robert is giving out the card just to help the poor. Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode. email Him on how to get it now via: blankatmhaker@gmail.com or call/Text on +1(406) 350-4986

    ReplyDelete
    Replies
    1. Are you a victim to Scammers and you will love to recover your lost funds back. CONGRATULATIONS in advance as you contact M&D GROUP OF HACKER (A.K.A) SCAM HUNTER for positive result. For BINARY RECOVERY and to spy on your spouse or any of this ((University Grades. Loan. Wiping Criminal Records. Credit Cards Score. Blank ATM Card. iClouds Breaching. YouTube and Phone Hacking)) over the years we have stand as BackUp for individuals Organization to secure & to recover there lost Files/Password/Bitcoin and funds etc. to get your job done please Email any of our GURUS pointekhack@gmail.com cyberhackertap@gmail.com cyprusbinaryrecovery@gmail.com hyperhackerone@gmail.com REMEMBER YOUR HAPPINESS IS OUR PRIDE

      Delete
    2. FRESH&VALID SPAMMED USA DATABASE/FULLZ/LEADS

      ****Contact****
      *ICQ :748957107
      *Gmail :fullzvendor111@gmail.com
      *Telegram :@James307
      *Skype : Jamesvince$
      <><><><><><><>
      USA SSN FULLZ WITH ALL PERSONAL DATA+DL NUMBER
      -FULLZ FOR PUA & SBA
      -FULLZ FOR TAX REFUND
      $2 for each fullz/lead with DL num
      $1 for each SSN+DOB
      $5 for each with Premium info
      ID's Photos For any state (back & front)
      (Price can be negotiable if order in bulk)
      <><><><><><><><><><><>
      +High quality and connectivity
      +If you have any trust issue before any deal you may get few to test
      +Every leads are well checked and available 24 hours
      +Fully cooperate with clients
      +Any invalid info found will be replaced
      +Payment Method(BTC,USDT,ETH,LTC & PAYPAL)
      +Fullz available according to demand too i.e (format,specific state,specific zip code & specifc name etc..)
      <><><><><><><><><><>
      +US cc Fullz
      +(Dead Fullz)
      +(Email leads with Password)
      +(Dumps track 1 & 2 with pin and without pin)
      +Hacking & Carding Tutorials
      +Smtp Linux
      +Safe Sock
      +Server I.P's
      +HQ Emails with passwords
      <><><><><><><><>
      *Let's do a long term business with good profit
      *Contact for more details & deal

      ****Contact****
      *ICQ :748957107
      *Gmail :fullzvendor111@gmail.com
      *Telegram :@James307
      *Skype : Jamesvince$

      Delete
    3. SSN FULLZ AVAILABLE

      Fresh & valid spammed USA SSN+Dob Leads with DL available in bulk.

      >>1$ each SSN+DOB
      >>3$ each with SSN+DOB+DL
      >>5$ each for premium fullz (700+ credit score with replacement guarantee)

      Prices are negotiable in bulk order
      Serious buyer contact me no time wasters please
      Bulk order will be preferable

      CONTACT
      Telegram > @leadsupplier
      ICQ > 752822040
      Email > leads.sellers1212@gmail.com

      OTHER STUFF YOU CAN GET

      SSN+DOB Fullz
      CC's with CVV's (vbv & non-vbv)
      USA Photo ID'S (Front & back)

      All type of tutorials available
      (Carding, spamming, hacking, scam page, Cash outs, dumps cash outs)

      SQL Injector
      Premium Accounts (Netflix, Pornhub, etc)
      Paypal Logins
      Bitcoin Cracker
      SMTP Linux Root
      DUMPS with pins track 1 and 2
      WU & Bank transfers
      Socks, rdp's, vpn
      Php mailer
      Server I.P's
      HQ Emails with passwords
      All types of tools & tutorials.. & much more

      Looking for long term business
      For trust full vendor, feel free to contact

      CONTACT
      Telegram > @leadsupplier
      ICQ > 752822040
      Email > leads.sellers1212@gmail.com

      Delete
  2. If you need to boost your credit score permanently, hack your spouse or employees' cell remotely, I would suggest you visit the contact info below:

    Email: finessehackers1@gmail.com
    Website: finessehackers.com

    They were very helpful in boosting my score and this gave me access to a mortgage, they're highly recommendable.

    ReplyDelete
  3. OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    Hi. We are a group of hackers called Deep Secret and we offer hacking services for everyone. Some of our services are:

    - Cell phone hacking
    - Calls and messages hack
    - Get any password from any Email Address.
    - Get any password from any Facebook, Twitter or Instagram account.
    - Cell phone hacking (whatsapp, viber, line, wechat, etc)
    - Grades changes (institutes and universities)
    - Websites hacking, pentesting.
    - IP addresses and people tracking.
    - Hacking courses and classes.
    Our services are the best on the market and 100% secure and discreet guaranteed. We also offer proof before payment.
    Just write us and ask for your desired service:

    OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    Hi. We are a group of hackers called Deep Secret and we offer hacking services for everyone. Some of our services are:

    - Cell phone hacking
    - Calls and messages hack
    - Get any password from any Email Address.
    - Get any password from any Facebook, Twitter or Instagram account.
    - Cell phone hacking (whatsapp, viber, line, wechat, etc)
    - Grades changes (institutes and universities)
    - Websites hacking, pentesting.
    - IP addresses and people tracking.
    - Hacking courses and classes.
    Our services are the best on the market and 100% secure and discreet guaranteed. We also offer proof before payment.
    Just write us and ask for your desired service:

    OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    Hi. We are a group of hackers called Deep Secret and we offer hacking services for everyone. Some of our services are:

    - Cell phone hacking
    - Calls and messages hack
    - Get any password from any Email Address.
    - Get any password from any Facebook, Twitter or Instagram account.
    - Cell phone hacking (whatsapp, viber, line, wechat, etc)
    - Grades changes (institutes and universities)
    - Websites hacking, pentesting.
    - IP addresses and people tracking.
    - Hacking courses and classes.
    Our services are the best on the market and 100% secure and discreet guaranteed. We also offer proof before payment.
    Just write us and ask for your desired service:

    OUR WEBSITE: http://www.deepsecret.net
    OUR EMAIL ADDRESS: contact@deepsecret.net

    ReplyDelete

  4. I'm here to testify about Mr Harry Blank ATM Cards which can withdraw money from any ATM machines around the world.. firstly I thought it was scam until I saw so many testimony about how Mr John sent them the ATM blank card and how it was used to withdraw money in any ATM machine and become rich so I decided to risk the opportunity I contacted him also and I applied for the Blank Card to my greatest surprise I have used it to get 10,000 dollars. maximum withdrawal daily $1,000, Mr Harry is giving out the card just to help the poor. Hack and take money directly from any ATM Machine Vault,If your interested kindly contact him directly on his email (harrybrownn59@gmail.com)

    ReplyDelete
  5. Great post i must say and thanks for the information. Find out today ‘s Celebrity birthdays and discover who shares your birthday. We make it simple and entertaining to learn about celebrities.

    ReplyDelete
  6. Do you need to increase your credit score?
    Do you intend to upgrade your school grade?
    Do you want to hack your cheating spouse Email, whatsapp, Facebook, instagram or any social network?
    Do you need any information concerning any database.
    Do you need to retrieve deleted files?
    Do you need to clear your criminal records or DMV?
    Do you want to remove any site or link from any blog?
    you should contact this hacker, he is reliable and good at the hack jobs..
    contact : cybergoldenhacker at gmail dot com

    ReplyDelete
  7. Hey Guys !

    USA Fresh & Verified SSN Leads AVAILABLE with best connectivity
    All Leads have genuine & valid information

    **HEADERS IN LEADS**
    First Name | Last Name | SSN | Dob | DL Number |Address | State | City | Zip | Phone Number | Account Number | Bank Name

    *Price for SSN lead $2
    *You can ask for sample before any deal
    *If anyone buy in bulk, we can negotiate
    *Sampling is just for serious buyers

    ==>ACTIVE & FRESH CC FULLZ ALSO AVAILABLE<==
    ->$5 PER EACH

    ->Hope for the long term deal
    ->Interested buyers will be welcome

    **Contact 24/7**
    Whatsapp > +923172721122
    Email > leads.sellers1212@gmail.com
    Telegram > @leadsupplier
    ICQ > 752822040

    ReplyDelete
  8. Hello Everyone !

    USA SSN Leads/Fullz available, along with Driving License/ID Number with good connectivity.

    All SSN's are Tested & Verified.

    **DETAILS IN LEADS/FULLZ**

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER
    ->ADDRESS WITH ZIP
    ->PHONE NUMBER, EMAIL
    ->EMPLOYEE DETAILS

    *Price for SSN lead $2
    *You can ask for sample before any deal
    *If you buy in bulk, will give you discount
    *Sampling is just for serious buyers

    ->Hope for the long term business
    ->You can buy for your specific states too

    **Contact 24/7**

    Whatsapp > +923172721122

    Email > leads.sellers1212@gmail.com

    Telegram > @leadsupplier

    ICQ > 752822040

    ReplyDelete
  9. Accessing the Affordable Writing Services Online from the best and expert writers who also offers Best Research Writing Services gives you time to concentrate on other activities. The company also offers Online Essay Writing Services At affordable cost.

    ReplyDelete
  10. Hello everyone 2years back I had $64,000 in debt, including $22,340 in credit card debt. My credit score was nothing to write home about. I managed to get most of my debt removed in bankruptcy and I was left with $8,000 car loan and $35,000 in student loans. I determined not to repeat my mistakes again I was recommended by a credit agency to contact a credit film who would help fix my credit and clear my loans she then referred me to this credit company called Rapid Credit Repairs she has been working with years ago who specializes in fixing credit report. I contacted them through their mail RAPIDCREDITREPAIRS@GMAIL.COM text +1 (415) 754 7204 they got a little info from me and started from raising my credit score to 790 after which they cleared my outstanding pending bills. I bounced back quickly; I am currently on my feet and on my way to buy a house. Thanks so much RAPID CREDIT REPAIRS you guys are simply the best

    ReplyDelete
  11. Oftentimes, it could seem unfair when you are unable to afford the basic things. not being able to acquire a home, car or loan. Simply because your credit score is low. I had suffered terribly due to a low credit score caused by eviction, late payments and hard inquiries. I had to contact LANX CREDIT SOLUTION a credit repair company. They literally saved me from my traumatizing experience. They increased my score and removed the negative and derogatory Items on my credit report. This review is in order to encourage you to do something about your bad credit. It took just 12 days for things to change everything.
    PHONE: (310) 879 2541
    Email: LANXCREDITSOLUTION@GMAIL.COM

    ReplyDelete
  12. My name is Andrew Walker, I don’t have much to say but am here to thank TROVIAN CREDIT REPAIRS which i got their contact after visiting my sister and her family and told them my situation at hand how i was knocked out of my home because I was unable to renew rent and my credit profile was messed up in the past. They recommend Trovians to me how they are good in fixing credit, so i contacted them and told them if it’s possible to fix my credit report that has been messed up they gave me a positive answer and they went ahead with the job. In less than 5days my score was raised from a low 478 to 805 excellent and they cleared the eviction, collections late payment. Am happily living well in my new home. I will also recommend you out there to contact them now via email (TROVIANCREDITREPAIR@GMAIL.COM +1 505 926 3648) for your credit repairs services.

    ReplyDelete
  13. Hello there, I have been reading a lot about these credit repair companies and it reminded me of the great job Lanx Credit Solution did for me earlier this year, apparently my fico is still at 765 after 6 months of working with them. Before I contested them my score was as low as 530, had loads of negative items and credit card debts and a Judgement. They helped me tidy it up really good and added some trade lines in it. They are really good at it. Here is their contact just in case in require such service LANXCREDITSOLUTION@GMAIL.COM / +1 (310) 879 2541. Thanks and have a great day.

    ReplyDelete
  14. Do you want a quick, genuine and permanent credit repair? then contact LANX CREDIT SOLUTION via LANXCREDITSOLUTION@GMAIL.COM / call or text (310) 879 2541. I had couple of collections and late payments plus my son’s student loans and some charge offs. My credit score was at the low 560 and needed to get approved for mortgage loan but was denied several times. A colleague told me about this people and how they fixed her credit in 10 days. I was moved so I contacted them on the 2nd OCT 2020 and they fixed my credit before 2 weeks. My score was increased to 790s and the negatives cleared. They promised that the repair is permanent. Big Shout out to them.

    ReplyDelete
  15. Hello everyone, I’m here to announce the good works of HACKNET CREDIT SPECIALIST. For the first time in my life I have never meet such a humble and honest credit specialist like HACKNET. For the past 5years now have been dying with my credit scandal I lost everything including my house, my job, I was left with nothing the whole world seems to end due to my credit report then I meet a friend who referred me to HACKNET that he is the right person to save me from all my troubles after then I contacted him and explained my troubles and we move on with the job, I waited for the couple of days he told me I was surprise when he called asking me to check my credit karma that the deal is done I couldn’t believe what I saw on my report everything was cleaned up including my late payment all marked as paid I got approved for the loans I requested and I’m now on my new apartment. All thanks to HACKNET. You can reach him directly with those contacts
    Email: HACKNET567@GMAIL.COM
    Phone: +1 949 397 8437

    ReplyDelete
  16. Truthfully, taking the decision of contacting a credit repair company was not an easy one, I desperately needed a home, I couldn’t get one due to the evictions and Late payments on my credit, with a very low FICO, I was frustrated and had no choice but try one. Luckily for my I read some very good reviews on LANX CREDIT SOLUTION and decided to contact them. I have never been happier, my FICO was increased to 750 and the late payments and evictions were taken off my report. Superb service I must say!!! You can reach them on LANXCREDITSOLUTION@GMAIL.COM or (310) 879 2541. thanks

    ReplyDelete
  17. I Want to use this medium to appreciate an online ghost hacker, after being ripped off my money he helped me find my cheating lover and helped me hacked his WHATSAPP, GMAIL, kik and all his social media platforms and i got to know that he has being cheating on me and in less than 24 hours he helped me out with everything, hacking setting is trust worthy, contact him via: hackingsetting50@gmail.com

    ReplyDelete
  18. I Want to use this medium to appreciate an online ghost hacker, after being ripped off my money he helped me find my cheating lover and helped me hacked his WHATSAPP, GMAIL, kik and all his social media platforms and i got to know that he has being cheating on me and in less than 24 hours he helped me out with everything, hacking setting is trust worthy, contact him via: hackingsetting50@gmail.com

    ReplyDelete
  19. I and my husband were in need of fixing our credit. We were having eviction along with our daughter and almost 2 year old granddaughter. We were so tired of struggling and paying awful high rent because we couldn’t buy a house as a result of our bad credit. I went online and I read a lot of good reviews about HACKNET CREDIT SPECIALIST so I contacted him via his contacts; HACKNET567@GMAIL.COM (949) 397 8437. I issued out my credit situation to him and he promised to help me fix my credit within 5days. We got started and after 5days he got back to me with good news. He deleted all the nagging public/negative items and eventually raised my score to 803. We bought a new home and we are living happily ever after as a family. I strongly recommend HACKNET for your credit issues. Thank me later

    ReplyDelete
  20. Selling USA FRESH SPAMMED SSN Leads/Fullz, along with Driving License/ID Number with EXCELLENT connectivity.

    **PRICE**
    >>2$ FOR EACH LEAD/FULLZ/PROFILE
    >>5$ FOR EACH PREMIUM LEAD/FULLZ/PROFILE

    **DETAILS IN EACH LEAD/FULLZ**

    ->FULL NAME
    ->SSN
    ->DATE OF BIRTH
    ->DRIVING LICENSE NUMBER WITH EXPIRY DATE
    ->ADDRESS WITH ZIP
    ->PHONE NUMBER, EMAIL, I.P ADDRESS
    ->EMPLOYEE DETAILS
    ->REALTIONSHIP DETAILS
    ->MORTGAGE INFO
    ->BANK ACCOUNT DETAILS

    >All Leads are Tested & Verified.
    >Invalid info found, will be replaced.
    >Serious buyers will be welcome & I will give discounts for bulk orders.
    >Fresh spammed data of USA Credit Bureau
    >Good credit Scores, 700 minimum scores
    >Bulk order will be preferable
    >Minimum order 20 leads/fullz
    >Hope for the long term business
    >You can asked for samples, specific states & zips (if needed)
    >Payment mode BTC, PAYPAL & PERFECT MONEY

    Email > leads.sellers1212@gmail.com
    Telegram > @leadsupplier
    ICQ > 752822040

    ''OTHER GADGETS PROVIDING''

    >Dead Fullz
    >Carding Tutorials
    >Hacking Tutorials
    >SMTP Linux Root
    >DUMPS with pins track 1 and 2
    >Sock Tools
    >Server I.P's
    >USA emails with passwords (bulk order preferable)

    **Contact 24/7**

    Email > leads.sellers1212@gmail.com
    Telegram > @leadsupplier
    ICQ > 752822040

    ReplyDelete
  21. SSN FULLZ AVAILABLE

    Fresh & valid spammed USA SSN+Dob Leads with DL available in bulk.

    >>1$ each SSN+DOB
    >>3$ each with SSN+DOB+DL
    >>5$ each for premium fullz (700+ credit score with replacement guarantee)

    Prices are negotiable in bulk order
    Serious buyer contact me no time wasters please
    Bulk order will be preferable

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    OTHER STUFF YOU CAN GET

    SSN+DOB Fullz
    CC's with CVV's (vbv & non-vbv)
    USA Photo ID'S (Front & back)

    All type of tutorials available
    (Carding, spamming, hacking, scam page, Cash outs, dumps cash outs)

    SQL Injector
    Premium Accounts (Netflix, Pornhub, etc)
    Paypal Logins
    Bitcoin Cracker
    SMTP Linux Root
    DUMPS with pins track 1 and 2
    WU & Bank transfers
    Socks, rdp's, vpn
    Php mailer
    Server I.P's
    HQ Emails with passwords
    All types of tools & tutorials.. & much more

    Looking for long term business
    For trust full vendor, feel free to contact

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    ReplyDelete