-
Updated
Jun 14, 2020 - Python
pentesting
Here are 1,216 public repositories matching this topic...
I used to launch pupy using the script ./start-compose.sh
(like mentioned in your documentation). But it looks like this file no longer exists.
Did you remove this functionality ? If so can you plz remove it from the documentation ! If not, can you tell me please how I can launch pupy
now with docker-compose ?
PS : pupy rocks, really thank you for the author and contributors.
-
Updated
Jun 16, 2020
-
Updated
May 7, 2020 - Python
Hi All,
So I'm trying to use hydra to bruteforce a login on a system that uses custom http headers to receive the username and password. Hydra does not seem to be doing substitution of ^USER^ and ^PASS^ when used as HTTP headers. If I issue issuing a call to hydra like this:
hydra "http-post://0.0.0.0:8000/:H=username\:^USER^:H=password\:^PASS^" -l admin -p admin
I see the following r
-
Updated
May 25, 2020
The database schema is a work in progress and changes rapidly as new features get implemented or removed. Should add a check to make sure the current db file has the right schema to avoid issues like #146 .
-
Updated
Jun 11, 2020 - Shell
Maybe forging an event emission for a challenge that does not really exist but make the client pick it up nonetheless?
Want to back this issue? Post a bounty on it! We accept bounties via [Bount
Status codes
Currently we check for the following status codes for a positive response:
200,204,301,302,307,401,403
https://developer.mozilla.org/en-US/docs/Web/HTTP/Status
We could add every status code from this list except 404 as they would all be valid content.
What do you say @OJ ? Would this be worth it?
-
Updated
Jun 15, 2020
-
Updated
Jan 29, 2020 - Python
-
Updated
Jun 15, 2020 - Shell
Multiples wiki issues.
Typos
- https://github.com/infobyte/faraday/wiki/Executive-Report#using-markdown-on-a-report: -lenguage +language
Bad links
- https://github.com/infobyte/faraday/wiki/Executive-Report#requirements: https://github.com/infobyte/faraday/wiki/first-steps, the nedpoint
first-steps
doesn't exist anymore.
Images
-
Updated
Jun 9, 2020 - Ruby
-
Updated
Jun 12, 2020
-
Updated
Jun 16, 2020 - Python
The --maxtime
CLI flag should control the total execution time. However, the timer is reset for each new job added to the list by recursion detection that gets enabled by --recursion
.
Additionally, add a new CLI flag --maxtime-job
that counts towards the maximum execution time for each job, and if it hits, cancel the job and move forward to the next one.
This was reported OOB by @damia
-
Updated
May 8, 2020
-
Updated
Mar 24, 2020
-
Updated
May 9, 2020 - Python
Many users of Cameradar are not english-speakers but Chinese and Russian speakers. I saw already that @wxylssy started translating the README to Simplified Chinese on his fork.
It would be nice to have official translations to help new users that are not english-speakers understand the project, so @wxylssy if you'd like to contribute you are more than wel
-
Updated
Mar 19, 2020 - Shell
I assume you can do "run something" in the drozer console
# from example module @ https://github.com/mwrlabs/drozer/wiki/Writing-a-Module
module repository enable /path/to/your/repository # I got this working
module install ex.random
# failed attempts
run ex.random.GetInteger
run drozer.modules.Module.ex.random.GetInteger
dz> help drozer.modules.Module
*** No help on drozer.
-
Updated
Mar 5, 2020 - Python
so if the password is correct it accepts it .... and if it's wrong it says the entered password is wrong .. and asks for the password again .. just like what the real sites do :)
-
Updated
May 21, 2020
-
Updated
May 10, 2020 - Python
-
Updated
Mar 28, 2019 - Python
Improve this page
Add a description, image, and links to the pentesting topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the pentesting topic, visit your repo's landing page and select "manage topics."
Describe the issue
Needle doesn't seem to be maintained anymore. The last update was > 1 year and no issues have been answered this year. It also doesnt' seem to work on iOS JB devices with Chimera. FSecureLABS/needle#273
We should review where we use Needle and if other tools are a better alternative (e.g. objection, passionfruit).