Dorking & Pentesting with Tacyt

•

8 gefällt mir•10,681 views

Talk delivered by Chema Alonso at RootedCON Satellite (Saturday 12th of September 2015) about how to do hacking & pentesting using dorks over Tacyt, a Big Data of Android Apps

Technologie

Dorking & Pentesting!
with Tacyt
Chema Alonso
@chemaalonso

4.- Bugs to get into
•  SQL.asp/php/aspx/…
•  Query
•  ldapsearch
•  exec
•  sql
•  command
•  …

Questions?
•  Chema Alonso
–  http://twitter.com/chemaalonso
–  chema@11paths.com
–  http://www.elladodelmal.com
•  Disclaimer: Tacyt Service has been
developed by Eleven Paths. All
things working well are because of
their hard work. All things *may*
went bad on this talk were my fault.

Empfohlen

Cazando Cibercriminales con: OSINT + Cloud Computing + Big DataChema Alonso

CyberCamp 2015: Low Hanging FruitChema Alonso

Security for Human Beingszekivazquez

Practical iOS App SecurityTotem_Training

Liran tal Stranger Danger Security vulnerabilities - Negev Web Developers mee...Liran Tal

Berkarir di Cyber SecuritySatria Ady Pradana

Deception in Cyber Security (League of Women in Cyber Security)Phillip Maddux

All Your Base Still Belong To Us Physical Penetration Testing Tales From The ...EC-Council

Empfohlen

Cazando Cibercriminales con: OSINT + Cloud Computing + Big DataChema Alonso

CyberCamp 2015: Low Hanging FruitChema Alonso

Security for Human Beingszekivazquez

Practical iOS App SecurityTotem_Training

Liran tal Stranger Danger Security vulnerabilities - Negev Web Developers mee...Liran Tal

Berkarir di Cyber SecuritySatria Ady Pradana

Deception in Cyber Security (League of Women in Cyber Security)Phillip Maddux

All Your Base Still Belong To Us Physical Penetration Testing Tales From The ...EC-Council

Keeping you and your library safe and secureLYRASIS

Securing Underprotected APIs - Deja vu SecurityDeja vu Security

Mobile phone Data HackingMd Abu Syeem Dipu

WiFi Data Leakage by Solomon SonyaEC-Council

How to Learn Ethical Hacking from Scratch?Intellipaat

How to Get into ICS Security byChris SistrunkEC-Council

SL_Long Beach_Creative Artists_12_04_2015Jon Papp

October 1 Cleared Job Fair, Security Clearance Briefings, Resume ReviewClearedJobs.Net

Security is simTim Krabec

Monitorama 2017 - Who Watches the Watchers?brantstrand

CSA Raleigh application security and deception in the cloudPhillip Maddux

Datasploit - An Open Source Intelligence ToolShubham Mittal

Ha(Attackers) ExposedEugene Tawiah

Jim Wojno: Incident Response - No Pain, No Gain!centralohioissa

Information technology Vs Information securityS Periyakaruppan CISM,ISO31000,C-EH,ITILF

iOS and Android security: Differences you need to knowNowSecure

How To Prevent Cyber Attacks | Types of Cyber Attack | What is Cyber Attack |...Intellipaat

Fun with Application SecurityBruce Abernethy

Security and ethical hacking initiative first sessionSithira Pathirana

Hacking Roman Codes with Mobile PhonesDavid Rogers

Recuperar dispositivos de sonido en Windows Vista y Windows 7Chema Alonso

It's a Kind of MagicChema Alonso

Weitere ähnliche Inhalte

Was ist angesagt?

Keeping you and your library safe and secureLYRASIS

Securing Underprotected APIs - Deja vu SecurityDeja vu Security

Mobile phone Data HackingMd Abu Syeem Dipu

WiFi Data Leakage by Solomon SonyaEC-Council

How to Learn Ethical Hacking from Scratch?Intellipaat

How to Get into ICS Security byChris SistrunkEC-Council

SL_Long Beach_Creative Artists_12_04_2015Jon Papp

October 1 Cleared Job Fair, Security Clearance Briefings, Resume ReviewClearedJobs.Net

Security is simTim Krabec

Monitorama 2017 - Who Watches the Watchers?brantstrand

CSA Raleigh application security and deception in the cloudPhillip Maddux

Datasploit - An Open Source Intelligence ToolShubham Mittal

Ha(Attackers) ExposedEugene Tawiah

Jim Wojno: Incident Response - No Pain, No Gain!centralohioissa

Information technology Vs Information securityS Periyakaruppan CISM,ISO31000,C-EH,ITILF

iOS and Android security: Differences you need to knowNowSecure

How To Prevent Cyber Attacks | Types of Cyber Attack | What is Cyber Attack |...Intellipaat

Fun with Application SecurityBruce Abernethy

Security and ethical hacking initiative first sessionSithira Pathirana

Hacking Roman Codes with Mobile PhonesDavid Rogers

Was ist angesagt? (20)

Keeping you and your library safe and secure

Securing Underprotected APIs - Deja vu Security

Mobile phone Data Hacking

WiFi Data Leakage by Solomon Sonya

How to Learn Ethical Hacking from Scratch?

How to Get into ICS Security byChris Sistrunk

SL_Long Beach_Creative Artists_12_04_2015

October 1 Cleared Job Fair, Security Clearance Briefings, Resume Review

Security is sim

Monitorama 2017 - Who Watches the Watchers?

CSA Raleigh application security and deception in the cloud

Datasploit - An Open Source Intelligence Tool

Ha(Attackers) Exposed

Jim Wojno: Incident Response - No Pain, No Gain!

Information technology Vs Information security

iOS and Android security: Differences you need to know

How To Prevent Cyber Attacks | Types of Cyber Attack | What is Cyber Attack |...

Fun with Application Security

Security and ethical hacking initiative first session

Hacking Roman Codes with Mobile Phones

Andere mochten auch

Recuperar dispositivos de sonido en Windows Vista y Windows 7Chema Alonso

It's a Kind of MagicChema Alonso

Ingenieros y hackersChema Alonso

El juego es el mismoChema Alonso

Shuabang BotnetChema Alonso

Tu iPhone es tan (in)seguro como tu WindowsChema Alonso

Codemotion ES 2014: Love Always Takes Care & HumilityChema Alonso

XSS Google PersistentesChema Alonso

No me indexes que me cacheoChema Alonso

RootedCON 2014: Playing and Hacking with Digital LatchesChema Alonso

X Fórum AUSAPE 2014: Un Decálogo de Seguridad MálignaChema Alonso

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...Chema Alonso

Configurar y utilizar Latch en MagentoChema Alonso

WebBrowsing Fingerprinting y Privacidad en entornos de Big DataChema Alonso

Latch Security ScenariosChema Alonso

Índice Pentesting con Kali 2.0Chema Alonso

Digital latches for your digital LifeChema Alonso

Ataques XSS Google PersistentesChema Alonso

ShmooCON 2009 : Re-playing with (Blind) SQL InjectionChema Alonso

CritoReto 4: Buscando una aguja en un pajarChema Alonso

Andere mochten auch (20)

Recuperar dispositivos de sonido en Windows Vista y Windows 7

It's a Kind of Magic

Ingenieros y hackers

El juego es el mismo

Shuabang Botnet

Tu iPhone es tan (in)seguro como tu Windows

Codemotion ES 2014: Love Always Takes Care & Humility

XSS Google Persistentes

No me indexes que me cacheo

RootedCON 2014: Playing and Hacking with Digital Latches

X Fórum AUSAPE 2014: Un Decálogo de Seguridad Máligna

New Paradigms of Digital Identity: Authentication & Authorization as a Servic...

Configurar y utilizar Latch en Magento

WebBrowsing Fingerprinting y Privacidad en entornos de Big Data

Latch Security Scenarios

Índice Pentesting con Kali 2.0

Digital latches for your digital Life

Ataques XSS Google Persistentes

ShmooCON 2009 : Re-playing with (Blind) SQL Injection

CritoReto 4: Buscando una aguja en un pajar

Ähnlich wie Dorking & Pentesting with Tacyt

Our path to apache sparkppetr82

API 101 - Understanding APIs3scale

API 101 - Understanding APIs.Kirsten Hunter

API 101 Workshop from APIStrat ConferenceKirsten Hunter

Lares from LOW to PWNEDChris Gates

API101 Workshop - APIStrat Amsterdam 20143scale

Dev days. windows phone developmentVolha Banadyseva

Enterprise Data Governance and Compliance at Scale with Sri Eshasubbiah and S...Databricks

Building a Lightweight Discovery Interface for China's Patents@NYC Solr/Lucen...OpenSource Connections

B-sides Las Vegas - social network securityDamon Cortesi

Our Brave Modular FutureOrchestrate

Beyond Automated Testing - RVAsec 2016Andrew McNicol

BSidesDC 2016 Beyond Automated TestingAndrew McNicol

Intro to Coding and APIs by Women Who Code Co-Founder NYCProduct School

Andrew and Zac RVA-Beyond-Automated-Testing-2016.pptBUSHRASHAIKH804312

REST API Pentester's perspectiveSecuRing

Modern Web Technologies — Jerusalem Web Professionals, January 2011Reuven Lerner

Introduction to Security TestingvodQA

Mindspark 21' - Sparrow platform Jay Lohokare

Rental Cars and Industrialized Learning to Rank with Sean DownesDatabricks

Ähnlich wie Dorking & Pentesting with Tacyt (20)

Our path to apache spark

API 101 - Understanding APIs

API 101 - Understanding APIs.

API 101 Workshop from APIStrat Conference

Lares from LOW to PWNED

API101 Workshop - APIStrat Amsterdam 2014

Dev days. windows phone development

Enterprise Data Governance and Compliance at Scale with Sri Eshasubbiah and S...

Building a Lightweight Discovery Interface for China's Patents@NYC Solr/Lucen...

B-sides Las Vegas - social network security

Our Brave Modular Future

Beyond Automated Testing - RVAsec 2016

BSidesDC 2016 Beyond Automated Testing

Intro to Coding and APIs by Women Who Code Co-Founder NYC

Andrew and Zac RVA-Beyond-Automated-Testing-2016.ppt

REST API Pentester's perspective

Modern Web Technologies — Jerusalem Web Professionals, January 2011

Introduction to Security Testing

Mindspark 21' - Sparrow platform

Rental Cars and Industrialized Learning to Rank with Sean Downes

Mehr von Chema Alonso

Pentesting con PowerShell: Libro de 0xWordChema Alonso

Foca API v0.1Chema Alonso

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...Chema Alonso

Auditoría de TrueCrypt: Informe final fase IIChema Alonso

El Hardware en Apple ¿Es tan bueno?Chema Alonso

Latch en Linux (Ubuntu): El cerrojo digitalChema Alonso

Hacking con PythonChema Alonso

Analizando la efectividad de ataques de correlación pasivos en la red de ano...Chema Alonso

Guía de uso de Latch en la UNIRChema Alonso

Curso Online de Especialización en Seguridad Informática para la CiberdefensaChema Alonso

Modelado de amenazas en el contexto de la indexación de páginas y propuesta d...Chema Alonso

LDAP Injection TechniquesChema Alonso

X Forum AUSAPE 2014Chema Alonso

Código para Latch físico: Touch_calibrate.pyChema Alonso

Mehr von Chema Alonso (14)

Pentesting con PowerShell: Libro de 0xWord

Foca API v0.1

Cuarta Edición del Curso Online de Especialización en Seguridad Informática p...

Auditoría de TrueCrypt: Informe final fase II

El Hardware en Apple ¿Es tan bueno?

Latch en Linux (Ubuntu): El cerrojo digital

Hacking con Python

Analizando la efectividad de ataques de correlación pasivos en la red de ano...

Guía de uso de Latch en la UNIR

Curso Online de Especialización en Seguridad Informática para la Ciberdefensa

Modelado de amenazas en el contexto de la indexación de páginas y propuesta d...

LDAP Injection Techniques

X Forum AUSAPE 2014

Código para Latch físico: Touch_calibrate.py

Kürzlich hochgeladen

Are Multi-Cloud and Serverless Good or Bad?Mattias Andersson

Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays

"Federated learning: out of reach no matter how close",Oleksandr LapshynFwdays

E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxnull - The Open Security Community

Story boards and shot lists for my a level piececharlottematthew16

DevEX - reference for building teams, processes, and platformsSergiu Bodiu

Vertex AI Gemini Prompt Engineering TipsMiki Katsuragi

"ML in Production",Oleksandr BaganFwdays

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...Patryk Bandurski

Powerpoint exploring the locations used in television show Time Clashcharlottematthew16

Training state-of-the-art general text embeddingZilliz

Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity

Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge

Advanced Test Driven-Development @ php[tek] 2024Scott Keck-Warren

Beyond Boundaries: Leveraging No-Code Solutions for Industry InnovationSafe Software

Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada

Artificial intelligence in cctv survelliance.pptxhariprasad279825

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Wonjun Hwang

Install Stable Diffusion in windows machinePadma Pradeep

Kürzlich hochgeladen (20)

Are Multi-Cloud and Serverless Good or Bad?

Human Factors of XR: Using Human Factors to Design XR Systems

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...

"Federated learning: out of reach no matter how close",Oleksandr Lapshyn

E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx

Story boards and shot lists for my a level piece

DevEX - reference for building teams, processes, and platforms

Vertex AI Gemini Prompt Engineering Tips

"ML in Production",Oleksandr Bagan

Integration and Automation in Practice: CI/CD in Mule Integration and Automat...

Powerpoint exploring the locations used in television show Time Clash

Training state-of-the-art general text embedding

Dev Dives: Streamline document processing with UiPath Studio Web

Designing IA for AI - Information Architecture Conference 2024

Advanced Test Driven-Development @ php[tek] 2024

Beyond Boundaries: Leveraging No-Code Solutions for Industry Innovation

Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024

Artificial intelligence in cctv survelliance.pptx

Bun (KitWorks Team Study 노별마루 발표 2024.4.22)

Install Stable Diffusion in windows machine

Dorking & Pentesting with Tacyt

1. Dorking & Pentesting! with Tacyt Chema Alonso @chemaalonso

2. Dorking

3. The target is the! “What” not the “Who”

4. The Target is the Code

5. What is “Tacyt”?

6. Dorking with apps:! code & metadata

7. 1.- Infrastructure

8. Infrastructure Surface

9. Well-Known Ports

10. Cpanel & Plesk

11. 2.- P@ssw0rdS

12. Password.txt

13. UserLists

14. Userlist.app

15. Databases

16. WebServices

17. 3.- Third Party Credentials

18. PathFinder

19. Social Networks

20. API Keys & Tokens

21. 4.- Bugs to get into •  SQL.asp/php/aspx/… •  Query •  ldapsearch •  exec •  sql •  command •  …

22. (Blind) SQL Injection

23. (Blind) SQL Injection 101

24. LDAP Search

25. (Blind) LDAP Injection 101

26. Surprise me, baby!

27. Questions? •  Chema Alonso –  http://twitter.com/chemaalonso –  chema@11paths.com –  http://www.elladodelmal.com •  Disclaimer: Tacyt Service has been developed by Eleven Paths. All things working well are because of their hard work. All things *may* went bad on this talk were my fault.