UPDATE: FOCA v3.4.6.0

PenTestIT RSS Feed My last post about this Fingerprinting & Organisation with Collected Archives was almost two year ago. I also mentioned that this tool was open sourced. Now, FOCA v3.4.6.0 has been released! I missed a lot of the older updates to this tool. What is FOCA? FOCA stands for...

URLextractor - Information Gathering and Website Reconnaissance

Informationgathering & website reconnaissance Usage: ./extractor http://www.hackthissite.org/ Tips: Colorex: put colors to the ouput pip install colorex and use it like ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextract: is used by dnsenumeration function pip insta...

China Blocks Microsoft's Bing Search Engine, Despite Offering Censored Results

Update: Microsoft's search engine Bing has been restored in China after being inaccessible in the country for almost two days. According to sources familiar with the matter, Bing was blocked due to an accidental technical error and not due to an attempt at censorship. China has blocked...

China Blocks Microsoft's Bing Search Engine, Despite Offering Censored Results

Update: Microsoft's search engine Bing has been restored in China after being inaccessible in the country for almost two days. According to sources familiar with the matter, Bing was blocked due to an accidental technical error and not due to an attempt at censorship. China has blocked...

Bing Warns VLC Media Player Site is ‘Suspicious’ in Likely False-Positive Gaff

Microsoft’s Bing search engine warned its users the official VLC media player website was “suspicious” and dissuaded users from visiting the popular destination, suggesting the site contained “malicious software.” The site is no longer listed as unsafe. In a red warning message presented to users...

Microsoft BingPlaces - TrackEmailOpen (url) Open Redirect Vulnerability

Bing Places for Business is a Bing portal for local business owners to add a listing for their business on Bing. An open redirect vulnerability exists in Microsoft BingPlaces - TrackEmailOpen url. Allows a remote attacker to redirect a client request to a malicious source such as external...

A week in security (October 22 – 28)

Last week on Malwarebytes Labs, we took a look at some new Mac malware, gave you a roundup of 2018 exploit kits, and dispensed some advice on sextortion scams. We also looked at the Cathay Pacific breach, groaned at the revival of an old browser trick, and explained how voting machines and...

SubScraper - External Pentest Tool That Performs Subdomain Enumeration Through Various Techniques

SubScraper uses DNS brute force, Google & Bing scraping, and Virus Total to enumerate subdomains without an API. Written in Python3, SubScraper performs HTTPS requests and DNS "A" record lookups during the enumeration process to validate discovered subdomains. This provides further information to...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

Cross site scripting

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

CVE-2018-17061 affects BullGuard Safe Browsing prior to version 18.1.355.9. The vulnerability is a cross-site scripting (XSS) issue that can be triggered on Google, Bing, and Yahoo! pages through domains indexed in search results. The connected CNVD/NVD entries confirm the vulnerable component an...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

Bing Autosuggest API - Moderately critical - Cross Site Scripting - SA-CONTRIB-2018-058

This module enables you to use the Bing Autosuggest API. The module doesn't sufficiently sanitize a value used to populate an API request...

M0B-tool - Auto Detect CMS And Exploit

Tool to auto detect CMS and exploit. Features: Bing dork scanner by domain Dork by country BRUTE FORCE WordPress auto scrap name - Joomla - Drupal - Opencart - Magento Shell finder Ip scanner and brute force Auto detect cms and exploit Run perl MENU.pl Install git clone...

Pymeta - Search The Web For Files On A Domain To Download And Extract Metadata

Pymeta is a Python3 rewrite of the tool PowerMeta, created by dafthack in PowerShell. It uses specially crafted search queries to identify and download the following file types pdf, xls, xlsx, doc, docx, ppt, pptx from a given domain using Google and Bing. Once downloaded, metadata is extracted...

GasMask - Information Gathering Tool (OSINT)

All in one Information gathering tool - OSINT Written by: maldevel twitter Dependencies Python 2.x validators python-whois dnspython requests Information Gathering ask bing crt dns dogpile github google googleplus instagram linkedin netcraft pgp reddit reverse dns twitter vhosts virustotal whois...

Web Reconnaissance Framework: Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...

N4xD0rk - Listing Subdomains About A Main Domain

Listing subdomains about the main domain using the technique called Hacking with search engines. Usage usage: n4xd0rk.py -h -d DOMAIN -i IP -o OPTION -n SEARCH -e EXPORT -l LANGUAGE This script searchs the subdomains about a domain using the results indexed of Bing search. optional arguments: -h,...

fses - Python Library To Scrap Url'S From Search Engines

Fucking Search Engines Scraper - python library to scrap url's from search engines Search Engines we scrap Ask Bing DuckDuck GO UOL Yahoo Install git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Usage Simple search using Ask from searchEngines.ask import...