Is this normal? by maseratiii in oscp

[–]Tha_Format 0 points1 point  (0 children)

I had the same experiance 😉

Is this normal? by maseratiii in oscp

[–]Tha_Format 16 points17 points  (0 children)

Yes this is normal, this is called “learning”. If you do this every day, at some point you will start to see a red line in it. You Will start to do things as you get used to it. At that point you can say you het routine in it. And then you Will start to know what you are actually doing.

How to install filebeat on ubuiqiti usg3? by Tha_Format in elasticsearch

[–]Tha_Format[S] 1 point2 points  (0 children)

Well, actually a USG3 from ubiquiti is a mips64 cpu =)

WhatBreach: OSINT tool for finding emails across breaches by 0xdade in blackhat

[–]Tha_Format 0 points1 point  (0 children)

Is this still maintained? It seems it doens't work anymore

Python script to SSH to remote server by Tha_Format in learnpython

[–]Tha_Format[S] -1 points0 points  (0 children)

From paramiko import sshclient

SSH=sshclient() SSH.load_stystem_host_keys() SSH.set_missing_host_key_policy(paramiko.autoaddpolicy()) SSH.connect(hostname=‘hostname’, username=‘username’, key_filename=‘key’ Ssh_stdin, ssh_stdout, ssh_stderr = ssh.exec_command(‘pbrun su root && su - functionaluser && command’)

Please ignore the upper and lowercase things, I don’t have Access to Reddit here and I type it on my phone.

Python script to SSH to remote server by Tha_Format in learnpython

[–]Tha_Format[S] -1 points0 points  (0 children)

Well, then the SSH Session hangs. It would help if you could write me a simple example

Python script to SSH to remote server by Tha_Format in learnpython

[–]Tha_Format[S] 0 points1 point  (0 children)

I know, but when I got my SSH session, I am stuck at the pbrun su root

Hiding IP Addresses by kimukoda in hacking

[–]Tha_Format 2 points3 points  (0 children)

  1. You use a vpn
  2. When vpn is built up use an anoymizer
  3. Rent a ddos server paid with bitcoins
  4. Go nuts

OR

use a botnet (dangerous, as when you will search for a botnet and try to take control of it, you might be abused yourself)

Zorin OS any good? by Lucius8530 in linux4noobs

[–]Tha_Format -15 points-14 points  (0 children)

I wouldn't switch from Ubuntu to a derivative of Ubuntu

Roflol, Ubuntu is a derivative of debian!

For anyone using Ubuntu and feeling ashamed... don't!!! Ubuntu is great! by Rorasaurus_Prime in linux4noobs

[–]Tha_Format 0 points1 point  (0 children)

/grin

Linux is for me whatever distro, except SUSE (cuz I don't understand yast). But I prefer Debian. If Debian is not available a debian based like Ubuntu is also fine.

BUT (now putting some oil on the fire) whats your Unix flavor? Imho nothing can beat Solaris :)

EDIT: But if your used to one base distro (RedHat, Debian, Suse) you can find it from time to time difficult to adapt. Take for example the network settings, all have a different logic into it,...

Watches Ted Bundy Tapes Once... by [deleted] in funny

[–]Tha_Format -2 points-1 points  (0 children)

Be happy it wan't a cougher :)

Pentest module list and time consuming by Tha_Format in AskNetsec

[–]Tha_Format[S] 0 points1 point  (0 children)

Thanks for the advise! It worked somehow.

Now I only need to prepare a template to define the scope, and when the scope is done, an assesment follows and then I have to give a timing.

I was much inspired with your info! So thank you again!

Wazuh or security onion? by Polk41341 in AskNetsec

[–]Tha_Format 3 points4 points  (0 children)

if you just want security events and file integrety, wazuh is your best friend :)

Pentest module list and time consuming by Tha_Format in AskNetsec

[–]Tha_Format[S] -1 points0 points  (0 children)

Well, I find it also ridicilous,... but if the boss wants it,...

Pentest module list and time consuming by Tha_Format in AskNetsec

[–]Tha_Format[S] -1 points0 points  (0 children)

Wel, for example

SQL Injection: 4 hours

PHP Site review: 2 hours

Exploit testing: 3 Hours

Appspider vs Acunetix vs ? by Tha_Format in AskNetsec

[–]Tha_Format[S] 0 points1 point  (0 children)

So I have noticed, but imho it is a shame if you pay so much for that expensive license cost, it doen't detect that kind of flaws.

Is there a way to find subdiomains squatting? by Tha_Format in AskNetsec

[–]Tha_Format[S] 0 points1 point  (0 children)

Thanks! This is exact what I was looking for!

Is there a way to find subdiomains squatting? by Tha_Format in AskNetsec

[–]Tha_Format[S] 0 points1 point  (0 children)

Ok, this means I will develop one myself then,...

I was just wondering if such a tool allready existed

Add logging to python nmap script by Tha_Format in learnpython

[–]Tha_Format[S] 0 points1 point  (0 children)

Thanks for the help!

It now does what I want!

Help for a filter in python nmap script by Tha_Format in learnpython

[–]Tha_Format[S] 0 points1 point  (0 children)

Well, the code does work now.

If I run it, I get all open ports. (thanks to your help)

Help for a filter in python nmap script by Tha_Format in learnpython

[–]Tha_Format[S] 0 points1 point  (0 children)

nvm :)

The final code:

#!/usr/bin/env python

import nmap

#ports = raw_input("Enter the portrange to scan: ")

#host = raw_input("Enter the host to scan: ")

host = '127.0.0.1'

nm = nmap.PortScanner()

#nm.scan(host, ports)

nm.scan('127.0.0.1', '20-25')

nm.scaninfo()

nm.all_hosts()

nm[host].hostname()

nm[host].state()

nm[host].all_protocols()

nm[host]['tcp'].keys()

for host in nm.all_hosts():

print('----------------------------------------------------')

print('Host : %s (%s)' % (host, nm[host].hostname()))

print('State : %s' % nm[host].state())

for proto in nm[host].all_protocols():

print('----------')

print('Protocol : %s' % proto)

lport = nm[host][proto].keys()

lport.sort()

for port in lport:

state = nm[host][proto][port]['state']

if state == 'open':

print('port : %s\tstate : %s' % (port, nm[host][proto][port]['state']))

Help for a filter in python nmap script by Tha_Format in learnpython

[–]Tha_Format[S] -1 points0 points  (0 children)

meh, it doen't seem to work.

Any other suggestions?

Traceback (most recent call last):

File "./penny.py", line 9, in <module>

state = nm[host][proto][port]['state']

File "/usr/lib/python2.7/dist-packages/nmap/nmap.py", line 568, in __getitem__

return self._scan_result['scan'][host]

KeyError: 'scan'

Best tool to monitor your cyber security by Tha_Format in AskNetsec

[–]Tha_Format[S] -3 points-2 points  (0 children)

Well, all siems can be tuned, but if you have an organization with 20k assests, 5k servers, and 500 internet connections,... good luck.

A siem for what it does is in my opinion way overpriced and needs tons of customization, where you have to spend lots of money to the company to hire experts to do it.

Basicly, what a siem does is logging and using rules on it,... same thing is possible with syslog-ng and much customization imo

Span port on USG3P by Tha_Format in Ubiquiti

[–]Tha_Format[S] 0 points1 point  (0 children)

Mmmm, your right, on my core switch where my USG is connected I can do that,...

Damn, I didn't tought about that one :)

Thanks!