Search the Community

uncover is a go wrapper using APIs of well-known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools. Currently, it supports shodan, censys, and fofa search engine. Simple and Handy utility to query multiple search engine Multiple Search engine support (Shodan, Censys, Fofa) Automatic key/credential randomization stdin / stdout support for input and output Changelog v0.0.9 Added virtual hosts in censys search by @ehsandeep in #82 Added integration tests for sources by @LuitelSamikshya in #80 Fixed not writing the result to output file by @LuitelSamikshya in #87 Fixed uncover panic on string port by @Ice3man543 in #91 [hide][Hidden Content]]

uncover is a go wrapper using APIs of well-known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools. Currently, it supports shodan, censys, and fofa search engine. Simple and Handy utility to query multiple search engine Multiple Search engine support (Shodan, Censys, Fofa) Automatic key/credential randomization stdin / stdout support for input and output [hide][Hidden Content]]

SecretFinder SecretFinder is a python script based on LinkFinder, written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using a jsbeautifier for python in combination with a fairly large regular expression. The regular expressions consist of four small regular expressions. These are responsible for finding and search anything on js files. The output is given in HTML or plaintext. [HIDE][Hidden Content]]

BurpSuite-Secret_Finder: discover apikeys/accesstokens and sensitive data from HTTP response A Burp Suite extension to help pentesters to discover an apikeys, access tokens and more sensitive data using regular expressions. SecretFinder processes any HTTP response (support javascript file) and supports Passive and Active scan. This extension has been developed by M’hamed Outaadi (@m4ll0k). Add RegEx Download SecretFinder and open it with any editor Now add your regex and save the file [HIDE][Hidden Content]]

If you are tired of queuing at security checkpoints at airports, stations or museums you are in luck. A team of researchers has found the definitive method to snoop on your bags without even having to touch you. It is cheap, accurate and works on wifi. The method is so good that it has already been awarded the first prize at the recent IEEE Conference on Telecommunications and Network Security held this year in Beijing. In fact it is so simple that it is hard to believe that it has not occurred to anyone before. The signal of WiFi networks bounces off objects of a certain density, but crosses the finest and lightest cleanly. Researchers have discovered that the waves of WiFi networks penetrate perfectly in bags, suitcases and backpacks. Analyzing the way they bounce off the objects inside these containers, the authors of the study have been able to determine if the backpack has metal objects or liquids. The tests have been made with 15 different objects in six different types of bags, suitcases and backpacks. In plastic bags, the accuracy with which suspicious objects are detected as electronic or explosive devices is 99%. Metal objects are identified by 98%, and liquids by 95%. This effectiveness is reduced to 90% in suitcases or if the object is wrapped in several layers of materials that hinder the passage of waves. All in all, it remains a more than applicable precision in a real environment. The authors of the study explain that their technique does not completely replace safety records, but minimizes them because it allows them to direct people carrying suspicious objects to the safety line and let the rest pass with the assurance that they do not carry anything dangerous . The technique only involves installing three additional WiFi antennas and works on any existing network. It is cheap and can detect explosives, weapons, bulky metal objects and even acids or drugs. The next step is to adjust the system to determine the exact shape of the object and the amount of liquid.