Internet facing Vulnerability Scanning & Attack Surface Discovery. Open Source Security tools and intelligence for testing, analysis and defending.
Australia
Joined October 2009
- Tweets393
- Following420
- Followers2.3K
- Likes104
hackertarget.com retweeted
Announcing the JA4+ Database!
ja4db.com
Under *very* active development but ready for use. Expect orders of magnitude more data and JA4+ combinations over the next few months. I recommend downloading the DB and loading up in your data explorer of choice for now.
Everyone has a different use-case for JA4+ so we're trying to make it easy to find what you're looking for. Below are some examples you can do in a data explorer like Elastic.
JA4 to JA4H
JA4 to User-Agent String
JA4 to Application
JA4 to Library
JA4T to Device
JA4X to Device
JA4X to Application
JA4X to Issuers
JA4X to JA4T
etc. etc. etc.
There are so many combinations and use cases for each.
Please send me any feedback, improvement suggestions.
hackertarget.com retweeted
! ALERT ! A vulnerability has been found in multiple versions of Fortinet Fortigate devices when SSL-VPN enabled. ACSC recommends organisations apply the available patches immediately, and investigate for signs of compromise. For more details visit cyber.gov.au/about-us/view-a…
hackertarget.com retweeted
If you're investigating an organization's internet footprint, you need to check these data sources out!
- @shodanhq
- @censysio
- @binaryedgeio
- @securitytrails
- @hackertarget
- @host
- @viewdns
hackertarget.com retweeted
.. that I was able to help people uncover threats, prevent further damage, determine the extent of the compromise, kick out the bad guys & ruin their day
Our industry has significant demand for detection engineers that support DFIR & SOC teams
Learn YARA, Suricata, Sigma, Zeek!
hackertarget.com retweeted
What people seem to miss:
The #Log4Shell vulnerability isn't just a RCE 0day.
It's a vulnerability that causes hundreds and thousands of 0days in all kinds of software products.
It's a 0day cluster bomb.
hackertarget.com retweeted
More modules! Just merged two new modules from @thetechr0mancer - Sublist3r and DNSDumpster (from the great @hackertarget team).
Stopped counting how many modules we have now, but it's over 200. Reply with any we are missing!
On master: github.com/smicallef/spiderf…
#OSINT
hackertarget.com retweeted
Everyone's heard of #CobaltStrike. But do you know how it works? Don't worry. @ramen0x3f has you covered.
Read the blog post 👉 mndt.info/3Duxg9Q
hackertarget.com retweeted
New Vulnerable SMTP Report is out, currently focusing on Exim servers vulnerable to 21nails. This includes unauthenticated RCEs. Port 25 banner scan finds around 318K IPs Exim versions likely vulnerable to 21nails, mostly in US, Russia, Netherlands.
shadowserver.org/news/21nail…
hackertarget.com retweeted
"We'll just move RDP to a non-default port. That'll be safer..."
If that's your strategy, better re-think it.
Over the past 5 days, I've seen RDP brute force attacks aimed at 14,000+ non-default ports.
hackertarget.com retweeted
21 of the best free security tools. Included on the list:
💠 @MaltegoHQ
💠 @OWASP Zed Attack Proxy (ZAP)
💠 @shodanhq
💠 @kalilinux
💠 DNS Dumpster (@hackertarget)
➡️ See the others on the list: trib.al/cqmd0Gk
#PenTesting #OSINT #IoTsecurity #Tor
hackertarget.com retweeted
I forget @hackertarget exists until they let me know that there was a change in one of the open ports on one of our servers, then I'm thankful again.
hackertarget.com retweeted
Google Chrome has been blocking Nmap downloads all day because their broken "Safe Browsing" system suddenly labeled a 10-year-old version of our Ncat software as a threat. We will get this resolved with Google, but wanted to let you know that your Nmap downloads are still safe!
hackertarget.com retweeted
Clearly there are dozens & dozens of choices for DNS Information.
In terminal just type:
curl api.hackertarget.com/dnslook…
OR use- hackertarget.com/dns-lookup/
or use- dnsdumpster.com (my personal favorite)
Thanks @hackertarget :) Lots of good info and tools
hackertarget.com retweeted
The SANS team is excited to announce that @C_C_Krebs will be this year’s SANS Cyber Threat Intelligence summit keynote. Thanks Chris! This year’s summit is free and virtual. Jan 21-22nd. Sign up today: sans.org/event/cyber-threat-… @SANSInstitute @sansforensics #DFIR #CTI
hackertarget.com retweeted
We just released Nmap 7.90 with Npcap 1.00 and 70+ other new features and fixes. Enjoy! seclists.org/nmap-announce/2…
hackertarget.com retweeted
It has been a pretty long frustrating day, however some progress was made!
I found this useful blog from @hackertarget and I I now have a better handle on the basics of SSH tunneling ^_^ and yet, as always in infosec...I've but scratched the surface!
hackertarget.com/ssh-example…
hackertarget.com retweeted
1997: Nmap was first released as a simple port scanner via an article in issue 51 of Phrack magazine which included the source code.
That's right - 23 years of Nmap.
phrack.org/issues/51/11.html
