154
votes
Accepted
How to find out what programming language a website is built in?
There's no way to be 100% sure if you don't have access to the server, so it's about guessing. Here are some clues:
File extensions: login.php is most likely a PHP script.
HTTP headers: they may leak ...
- 13.9k
39
votes
Accepted
VeraCrypt/TruCrypt - I can't understand why you'd want to create a "hidden" volume...?
Your first question is really a legal one, and you seem to be assuming two things:
The attacker is a government of some sort.
That government actually respects citizen privacy and requires some sort ...
- 10.2k
35
votes
Accepted
Open-source penetration-test automation
The Metasploit Framework is my go-to tool for pentest automation still to this day, however, I do like what I've seen of CORE INSIGHT and Immunity Security SWARM. There are a few tools such as Loki (...
- 18.9k
26
votes
Best way to administer all my passwords
The easiest way would be using several databases. Tools like KeePass allow you to store passwords in different files. You could for instance opt to store your passwords in seperate databases based on ...
- 54.1k
22
votes
Accepted
How should source code security be checked?
There are automated and manual approaches.
For automated, you could start with lgtm - a free static code analyser for open source projects and then move to more complex SAST solutions.
For manual - ...
- 692
20
votes
How should source code security be checked?
You either do it yourself or trust someone else
As with most things in life, you must either do it yourself or trust someone else with it. Here trusting covers both having no malicious intent and ...
- 17.3k
19
votes
VeraCrypt/TruCrypt - I can't understand why you'd want to create a "hidden" volume...?
You're wrong in your assumptions. There are many legal jurisdictions where you can be required to produce passwords for encrypted data on suspicion, rather than proof, that the data may be relevant to ...
- 10.1k
19
votes
How to find out what programming language a website is built in?
For guessing the programming language, you can follow the three steps approach detailed below:
STEP 1 - Search evidences on the site itself
Manually...
Search on a site page at the bottom for ...
- 375
19
votes
Accepted
Reduce Noise when Penetration Testing
You want to increase signal and reduce noise during a pen test?
Great! Here are some things to ponder on:
For answers to the questions you have -- are they already answered somewhere else? For ...
- 18.9k
17
votes
How to find out what programming language a website is built in?
It's simple. Add Wapplyzer extension available for Chrome as well as Firefox.
It tells about programming language, server, analytics tool or about CMS & Frameworks on which website is built.
...
- 297
14
votes
How can I detect the remote operating system?
Using nmap:
sudo nmap -O <target>
Or if they block your ping probes you can do:
sudo nmap -O <target> -Pn
Sometimes you still get fake results and you should try doing an aggressive ...
- 1,812
13
votes
Reduce Noise when Penetration Testing
You have to make a choice: are you going for stealth, or for broad coverage and efficiency? Essentially all scanning tools, including nmap -sS, are easily detected by a competent SOC if run at a ...
- 15.8k
12
votes
Accepted
Best way to administer all my passwords
For your exact use case, I personally use Lastpass. The killer features of Lastpass include the ability to compartmentalize and separate each client's passwords from each other and from my own. They ...
- 3,708
9
votes
Accepted
Human vs. Vulnerability Scanners
Most access control / authorization flaws would never be found by a (generic) tool, because it does not have the understanding of what is supposed to be accessible and what not. (Having said that, ...
- 1,163
8
votes
How to find out what programming language a website is built in?
Besides the Wappalizer browser extension, there are several sites that detect what technologies power a given website:
http://builtwith.com/
http://onlinewebtool.com/cmsdetector.php - for CMS ...
- 1,945
7
votes
Accepted
Fingerprinting the webpage content
This looks like a classical Canary Trap. Basicly I would suggest to hide encrypted information about the user in different ways:
obvious QR-Code (as suggested by slugster)
different colors (as ...
- 186
7
votes
Why use tools such as BurpSuite, nmap or SQLmap?
Several reasons:
reduce testing time
automation
clear methodology
consistency of testing and results
repeatability of testing
Tools are never needed to break something. But you are providing a ...
- 123k
5
votes
VeraCrypt/TruCrypt - I can't understand why you'd want to create a "hidden" volume...?
Your assumptions in 1 are just false in many places. In the US, you cannot be forced to hand over encryption keys. That is not generally the case; in the UK, the Regulation of Investigatory Powers Act ...
- 7,183
5
votes
Accepted
Is it noticeable when you take a copy of a website?
Is it noticeable? Very much so: hundreds or thousands of rapid-fire requests from a single address will stick out in the logs, and may trigger anti-DoS or anti-crawler measures.
Is it bad? Depends ...
- 34.4k
5
votes
How can I detect the remote operating system?
You could use use the -T4 option together with the -A. No sudo is required (Tested on Ubuntu).
$ nmap -T4 -A 192.168.0.0/24
Would return for instance:
Nmap scan report for 192.168.0.95
Host is ...
- 161
5
votes
Accepted
Tools to produce an MD5 collision?
This is not a collision attack, but a preimage attack
With a collision attack, the attacker has control over both inputs to the hash function, say x and y, and they want to find x and y such that x ≠ ...
- 15.4k
5
votes
Accepted
How to check if USB device isn't malicious?
Watching your system and kernel log seem appropriate.
On linux:
tail -f /var/log/kern.log /var/log/syslog
before inserting device, then look output when inserting USB device... Care to stay ...
- 4,597
5
votes
Accepted
Where to find complete Kali image for docker with all the tools?
Use Kali Linux Metapackages after setting up a Kali Linux Docker Image. In 2019.3 there was a Major Metapackage Makeover, changing the names. To combine this information:
apt-get update && apt-...
- 15.9k
4
votes
What CVE identifier will follow after CVE-2012-9999?
There was no need for anything beyond CVE-2012-9999 to be issued, as the last CVE ID issued for 2012 was CVE-2012-6700.
Since then, MITRE has determined that a situation such as you propose would be ...
- 27k
4
votes
Browsing exploits with Metasploit console
To search for an exploit, use search.
search name:[name of exploit, e.g smb/rpc/http] type:[exploit/payload/auxillary] platform:[windows/linux etc.]
For example:
msf> search name:smb type:...
- 39
4
votes
Accepted
Restricting access to "hacking" sites and tools
The main issue is that these tools induce suspicious behaviors (suspicious network activity, suspicious files, suspicious process behavior, etc.). From a network monitoring perspective, how would you ...
- 19k
4
votes
Accepted
How to deal with administration tools such as ipscanners and PSTools?
If you're worried about malicious actors using standard user internal utilities (psexec, pskill) after gaining access to a system, you're worrying about a scenario where no matter what actions are ...
- 226
4
votes
Accepted
Is there a tool to test whether a server supports any cipher suite?
Testssl.sh can detect bad ciphers and a lot of other things regarding SSL security.
Edit:
Even testssl.sh depends on OpenSSL for the ciphers it tests. It ships with its own OpenSSL libary that has ...
- 28.6k
4
votes
Is there any tools out there to attack an unloaded system (on disk)
There's quite a bit on this out of there - there's a general principle that physical access equates to full access on a system. There are methods that are designed to limit this - starting with full ...
- 6,281
4
votes
Creating portable bash terminal & cmd to USB
The idea is fundamentally flawed, and cannot be salvaged.
To start with the first problem: plugging in an USB "stick" (mass storage device) in a computer will cause that computer to configure its USB ...
- 2,699
Only top scored, non community-wiki answers of a minimum length are eligible