PIRATESSHIELD

What is Ngrok?  Ngrok is multiplatform tunnelling, reverse proxy software that establishes secure tunnels from a public endpoint such as the internet to a locally running network service while capturing all traffic for detailed inspection and replay. Why Ngrok ? Before using ngrok, when we needed to expose a localhost application to web (internet) all we were doing is deploying the application in a server running a DMZ or we used to relocate the host to DMZ and configure NATing in the firewall. We also used to make DNS configuration in External DNS where the domain is hosted. In general, DMZ (De-Militarized Zone) is a computer host or small network inserted as a “neutral zone” between a company’s private network and the outside public network. It prevents outside users from getting direct access to a server that has company data. The following are the issues that we were facing before Ngrok deployment : Unable to expose localhost application directly to the internet without DMZ ...

Dear Information Security Hero's, I planned to share some tools which really help you while implementing WAF. Sometime after completing the installation customer will ask "I did not see any attacks, is your WAF working fine ?? " So, to avoid this kind of question, Use the below tool that enables you to evaluate the security efficacy of your web application security solution Unlike other application scanners, which only check for vulnerabilities, it generates both legitimate traffic and attacks traffic to determine if your security solution stops attacks without blocking valid requests. Here only providing top tools only... LightBulb Framework The framework consists of two main algorithms: GOFA: An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query model. Active learning algorithms permit the analysis of filter and sanitizer programs remotely, i.e. given only the ability to query the targeted p  Microsoft...

What is security automation and orchestration?   Gartner defines SOAR solutions as "technologies that enable organizations to collect security threats data and alerts from different sources, where incident analysis and triage can be performed leveraging a combination of human and machine power to help define, prioritize and drive standardized incident response activities according to a standard workflow." It adds, "SOAR tools allow an organization to define incident analysis and response procedures (aka plays in a security operations playbook) in a digital workflow format, such that a range of machine-driven activities can be automated . " Security automation – the use of information technology in place of manual processes for cyber incident response and security event management.  Security orchestration – the integration of security and information technology tools designed to streamline processes and drive security automation. Measuring automation success   The ...

To create a Simple Chat-Bot coding knowledge not required. Follow the below steps to create your personal chatBot for your business . 1) Goto https://hubtype.com and register your free account and do login. 2) Click the "Bot icon" from the left side menu bar. 3) Chose the dedicated Bot template from HubType by clicking the right side down menu. 4)  Now a pop will appear in your screen, there create your new Bot name and chose your template.   for testing purpose, I have chosen the  "Hello World" template. then click "Create" 5) Bot script editor and emulator page will load into your browser automatically. there you can customize the Bot script.  Then click the "PUBLISH" button which located in bottom of the editor. INTEGRATE CHAT-BOT WITH FB MESSENGER    6) Now click the "INTEGRATIONS" button from the top menu bar. Then you can able to see FB, Telegram, Whatsapp icons.   Click messenger icon and login  into your Facebook account ( yo...

In this article, we going to share the KB about How to kill the issues when you managing Fortigate Firewall from our real-time experience. Troubleshooting based on firmware version FortiOS 5.4 + INTERNET NOT WORKING     1) Check the routing table in Fortigate ISP route is updated or not.      In GUI   goto Monitor > Routing Table > and check WAN's static-route is available or not.                       If it is available, check IPv4 policy available for  LAN to WAN flow with NAT enabled. If the static route is not available mean cross verify your routes written under  NETWORK > STATIC ROUTE.  if route also correct do source ping from WAN interface IP.( run the below-mentioned command as per the example) Ex: WAN Interface IP: 122.122.122.121 | ISP Gateway IP 122.122.122.122  # execute ping-option source 122.122.122.121              ...

DNS is a naming system for computers that converts human readable domain names e.g. (infosecinstitute.com) into computer readable IP-addresses. However some security vulnerabilities exist due to misconfigured DNS nameservers that can lead to information disclosure about the domain. This forms an important step of the Information Gathering stage during a Penetration test or Vulnerability assessment. On internet there are multiple DNS exploitation and Information gathering tools available to use in that we showing three tools from our experience. DNSENUM  Multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous IP blocks. Operations Get the host’s addresse (A record). Get the namservers (threaded). Get the MX record (threaded). Perform axfr queries on nameservers and get BIND VERSION (threaded). Get extra names and subdomains via google scraping (google query = “allinurl: -www site:domain”). Brute force subdomains from file, can also perform r...

caution : This tutorial only to educate and spread the cyber security knowledge not for illegal activities.  SocialFish is a phishing attack tool. From my experience is working very good and able to Phish  an y users who available on Internet. The tool written in python2.7. The tool Working with NGROK (a reverse proxy solution) to expose your phishing sever to outside of the world without leaking of the server's Original IP GIT LINK :   https://github.com/An0nUD4Y/SocialFish INSTALL git clone https :// github . com / UndeadSec / SocialFish . git cd SocialFish sudo pip install -r requirements.txt python SocialFish.py HOW TO USE : Once you executed the tool by this command  python SocialFish.py Just follow the tool menu and choice the site which going to use for fishing (FB, Instagram ,Twitter, WordPress, Stack Overflow  etc). Now SocialFish will generate the phishing link . Share the link with your target and wait until fish catch hook. If once victim accessed a...