pen testing Archives - Good Shepherd News - Fastest Growing Religious, Free Speech & Political Content https://goodshepherdmedia.net/tag/pen-testing/ Christian, Political, ‎‏‏‎Social & Legal Free Speech News | Ⓒ2024 Good News Media LLC | Shepherd for the Herd! God 1st Programming Mon, 23 Jun 2025 05:27:27 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.1 https://goodshepherdmedia.net/wp-content/uploads/2023/08/Good-Shepherd-News-Logo-150x150.png pen testing Archives - Good Shepherd News - Fastest Growing Religious, Free Speech & Political Content https://goodshepherdmedia.net/tag/pen-testing/ 32 32 ESP32 Marauder Puts a Bluetooth and Wi-Fi Pen Testing Toolkit In Your Pocket https://goodshepherdmedia.net/esp32-marauder-puts-a-bluetooth-and-wi-fi-pen-testing-toolkit-in-your-pocket/ Mon, 23 Jun 2025 17:45:57 +0000 https://goodshepherdmedia.net/?p=20940

UPDATE: justcallmekoko has launched a new iteration of the Marauder (v6) for $60, which includes a sleeker look, options for external antennas, and the ability to update its firmware over Wi-Fi and/or SD card.

The original article continues below.

Penetration testers and security analysts looking for an easily-pocketable tool for Bluetooth and Wi-Fi testing purposes have another option, in the form of the ESP32 Marauder from security tester justcallmekoko.

“The Marauder is a portable penetration testing tool created for Wi-Fi and Bluetooth analysis,” the pseudonymous justcallmekoko explains. “It comes installed with a suite of offensive and defensive tools all running on an ESP32. I was inspired to create this tool by Spacehuhn’s deauther project. I wanted to bring similar functionality to the ESP32 and introduce new Bluetooth capabilities to the tool.”

“The tool itself serves as a portable device used to test and analyze Wi-Fi and Bluetooth devices. Use this tool and its firmware with caution as the use of some of its capabilities without explicit consent from the target owner is unlawful in most countries.”

The firmware justcallmekoko has created is compatible with any ESP32-based development board, and designed to provide feedback via a 2.8″ ILI9341-based TFT touchscreen display. The pre-assembled versions take the firmware and install it onto a custom PCB with Espressif ESP32-WROOM chip at its heart and an integrated lithium-polymer charging circuit for power on the go.

The custom PCB is powered by an ESP32-WROOM. (📷: justcallmekoko)

The entire unit is then enclosed in a 3D-printed chassis, which in the case of the pre-assembled version comes in a selection of colors: black, “Galaxy Black,” neon green, and silver. Justcallmekoko warns, however, that “most of the work so far has been put into designing the hardware,” meaning that the current release has “limited firmware capabilities” — but that development is ongoing to add new features and functionality.

More details on the project can be found on GitHub, where the firmware, hardware, and 3D print files can be downloaded; the pre-assembled ESP32 Marauder, meanwhile, can be purchased from Tindie. source

 

ESP32 Marauder Kit Assembly and Programming Guide

Thank you for purchasing the ESP32 Marauder Kit! Let’s get started with assembling and programming your device.

Things You’ll Need

  • A computer with Google Chrome
  • A 3 mm Allen Wrench
  • An ESP32 Marauder Kit

Programming the Device

    1. First lets program the device as the buttons are not accessible while assembled. Go to :
      Marauder Online Flasher (https://flasher.biscuitshop.us)
    2. Hold the BOOT button (bottom one) on the back of the Marauder while plugging it into your computer. The screen should stay black if done correctly.
    3. Click the connect button on the website and select the COM port associated with your device. If you have multiple COM ports, unplug the device, see which port disappears, then repeat step two and connect to the correct port.

Connect the Device

    1. Click the dropdown menu and select CYD2USB w/o GPS. Do not choose the one shown in the pic (Unless you purchased from me early on and your device does not have USB-C), I have started using the new models for all orders going forward.

    1. Click the latest version 2.8 inch – (1.0.0) and click the program button. Allow it to finish without switching windows.

  1. Once programming is complete, the display will stay black. Power cycle the device, and it should boot into the Marauder firmware.

This same process can be used to update your device as new releases come out. As of July 15, 2024, Version 1.0.0 has just been released.

Assembling the Device

Switch to Battery-Powered Instructions
  1. Take the bottom part of the case and place the ESP32 Marauder PCB into it.
  2. Install the top cover and use the 4 provided screws to fasten it to the bottom half.

source

]]> Hacker Search Engines https://goodshepherdmedia.net/hacker-search-engines/ Wed, 02 Feb 2022 12:35:37 +0000 https://goodshepherdmedia.net/?p=7930 Top Search Engines for Hackers

Hacker Search Engines

Posted by  source and BY  source

List of Best Hacker – Friendly Search Engines

General Search Engines

Servers

  • Shodan – Search Engine for the Internet of Everything.Shodan is popular for the identification of IoT infrastructure across the globe. If you are a security analyst and performing pentest on the IoT infrastructure, Shodan is a must tool in your arsenal. This tool provides a basic search for free, but if you want to use it further, you need to pay a minimal amount to get the subscription.
  • Censys Search – Search Engine for every server on the Internet to reduce exposure and improve security. Censys is basically used to identify subdomains of the IT infrastructure. As Censys list out all the available subdomains for the attacker. Attackers collect those IPs and start fresh recon to identify vulnerabilities.
  • Onyphe.io – Cyber Defense Search Engine for open-source and cyber threat intelligence data.The web-based search engine tool is used to collect geo-information, active scans, lookups of threat lists, etc.
  • ZoomEye – Global cyberspace mapping
  • GreyNoise – The source for understanding internet noise
  • Natlas – Scaling Network Scanning
  • Netlas.io – Discover, Research and Monitor any Assets Available Online
  • FOFA – Cyberspace mapping
  • Hunter Hunter is helpful when a security analyst wanted to extract an official email id related to the company.
  • IVRE IVRE is an open-source network recon framework that includes the famous port scanner tool Nmap. This tool helps in parsing output from the results of tools such as Argus, Zeek, etc. You can either use the CLI tools, the Python API or the Web interface to browse the scanning results.
  • Binaryedge Binaryedge is a search engine for acquiring, analyzing, and classifying a company’s data available on the internet. This tool provides a basic search for free, but if you want to use it further, you need to pay a minimal amount. This tool is available in the Free, Starter, Business, and Enterprise editions.
  • Google Google is the ultimate source of knowledge to gain information about anything available in the universe. If you are looking for existing or new vulnerabilities, a lot of google dorks are available to identify problems with the application.
  • Spyse is a web-based tool to provide information about the target. Information collected in the previous step is usually used for penetration testing and cyber investigations. This tool is paid tool and is available based on a time limit subscription.

Vulnerabilities

  • NIST NVD – National Vulnerability Database
  • MITRE CVE – Identify, define, and catalog publicly disclosed cybersecurity vulnerabilities
  • GitHub Advisory Database – Security vulnerability database inclusive of CVEs and GitHub-originated security advisories
  • cloudvulndb.org – The Open Cloud Vulnerability & Security Issue Database
  • osv.dev – Open Source Vulnerabilities
  • Vulners.com – Your Search Engine for Security Intelligence
  • opencve.io – Easiest way to track CVE updates and be alerted about new vulnerabilities
  • security.snyk.io – Open Source Vulnerability Database
  • Mend Vulnerability Database – The largest open-source vulnerability DB
  • Rapid7 – DB – Vulnerability & Exploit Database
  • CVEDetails – The ultimate security vulnerability data source
  • VulnIQ – Vulnerability intelligence and management solution
  • SynapsInt – The unified OSINT research tool
  • Aqua Vulnerability Database – Vulnerabilities and weaknesses in open source applications and cloud-native infrastructure
  • Vulmon – Vulnerability and exploit search engine
  • VulDB – Number one vulnerability database
  • ScanFactory – Realtime Security Monitoring
  • Trend Micro Zero Day Initiative – Publicly disclosed vulnerabilities discovered by Zero Day Initiative researchers
  • Google Project Zero – Vulnerabilities including Zero Days

Exploits

  • Exploit-DB – Exploit Database
  • Sploitus – Convenient central place for identifying the newest exploits
  • Rapid7 – DB – Vulnerability & Exploit Database
  • Vulmon – Vulnerability and exploit search engine
  • packetstormsecurity.com – Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
  • 0day.today – Ultimate database of exploits and vulnerabilities
  • LOLBAS – Living Off The Land Binaries, Scripts and Libraries
  • GTFOBins – Curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
  • Payloads All The Things – A list of useful payloads and bypasses for Web Application Security
  • XSS Payloads – The wonderland of JavaScript unexpected usages, and more
  • exploitalert.com – Database of Exploits

Attack Surface

Code Search Engines

  • GitHub Code Search – Search globally across all of GitHub, or scope your search to a particular repository or organization
  • grep.app – Search across a half million git repos
  • publicwww.com – Find any alphanumeric snippet, signature or keyword in the web page’s HTML, JS and CSS code
  • SearchCode – Search 75 billion lines of code from 40 million projects
  • NerdyData – Find companies based on their website’s tech stack or code
  • RepoSearch – Source code search engine that helps you find implementation details, example usages or just analyze code
  • SourceGraph – Understand and search across your entire codebase
  • HotExamples – Search code examples from over 1 million projects
  • WP Directory – Lightning-fast regex searching of code in the WordPress Plugin and Theme Directories

Mail Addresses

Domains

URLs

DNS

  • DNSDumpster – DNS recon & research, find & lookup DNS records
  • Chaos – Enhance research and analyse changes around DNS for better insights
  • RapidDNS – dns query tool which makes querying subdomains or sites of the same ip easy
  • DNSdb – Passive DNS historical database
  • Omnisint – Reverse DNS lookup
  • HackerTarget – Collect information about IP Addresses, Networks, Web Pages and DNS records
  • passivedns.mnemonic.no – Web interface for querying passive DNS data collected in our malware lab
  • ptrarchive.com – Over 230 billion reverse DNS entries from 2008 to the present
  • dnshistory.org – Domain Name System Historical Record Archive
  • DNSTwister – The anti-phishing domain name search engine and DNS monitoring service
  • DNSviz – Tool for visualizing the status of a DNS zone
  • C99.nl – Over 57 quality APIs and growing
  • PassiveTotal – Security intelligence that scales security operations and response
  • wannabe1337.xyz – Online Tools

Certificates

WiFi Networks

  • Wigle.net – Maps and database of 802.11 wireless networks with statistics
  • wifimap.io – Connect to all Free WiFi Hotspots using WiFi Map App all over the World!
  • wificafespots.com – Free WiFi Cafe Spots
  • wifispc.com – Free map of Wi-Fi passwords anywhere you go!
  • openwifimap.net – HTML5 map with OpenWiFiMap data
  • mylnikov.org – Public API implementation of Wi-Fi Geo-Location database

Device Information

Credentials

Hidden Services

Social Networks

These can be useful for osint and social engineering.

Phone Numbers

Threat Intelligence

  • MITRE ATT&CK – Globally-accessible knowledge base of adversary tactics and techniques
  • PulseDive – Threat intelligence made easy
  • ThreatCrowd – A Search Engine for Threats
  • ThreatMiner – Data Mining for Threat Intelligence
  • VirusTotal – Analyze suspicious files, domains, IPs and URLs to detect malware and other breaches
  • vx-underground.org – Malware library
  • bazaar.abuse.ch – Malware sample database
  • feodotracker.abuse.ch – List of botnet Command&Control servers
  • sslbl.abuse.ch – All malicious SSL certificates
  • urlhaus.abuse.ch – Propose new malware urls
  • threatfox.abuse.ch – Indicator Of Compromise (IOC) database
  • yaraify.abuse.ch – Scan suspicious files such as malware samples or process dumps against a large repository of YARA rules
  • Rescure – Curated cyber threat intelligence for everyone
  • otx.alienvault – The World’s First Truly Open Threat Intelligence Community
  • urlquery.net – Service for detecting and analyzing web-based malware
  • socradar.io – Extension to your SOC team
  • VirusShare – System currently contains 48 million malware samples
  • WikiLeaks – News leaks and classified media provided by anonymous sources
  • PassiveTotal – Security intelligence that scales security operations and response
  • malapi.io – Windows APIs used for malicious purposes
  • filesec.io – Latest file extensions being used by attackers
  • leakix.net – Search engine indexing public information and an open reporting platform linked to the results
  • tria.ge – Fully automated solution for high-volume malware analysis using advanced sandboxing technology
  • Polyswarm – Launchpad for new technologies and innovative threat detection methods
  • Cisco Talos – The threat intelligence organization at the center of the Cisco Security portfolio
  • scamsearch.io – Find your scammer online & report them
  • CyberCampaigns – Threat Actor information and Write-Ups

Web History

  • Web Archive – Explore more than 702 billion web pages saved over time
  • Archive.ph – Create a copy of a webpage that will always be up even if the original link is down
  • CachedPages – Get the cached page of any URL
  • stored.website – View cached web pages/website
  • CommonCrawl – Open repository of web crawl data
  • UK Web Archive – Collects millions of websites each year, preserving them for future generations

Unclassified

  • NetoGraph – Captures and indexes detailed, low-level snapshots of website behaviour
  • DorkSearch – Speed up your Dorking
  • usersearch.org – Find someone by username or email on Social Networks, Dating Sites, Forums, Crypto
]]>