Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hunting PrismX: Techniques for Network Discovery

hunt.io | blog | #pentesting | #detection | #red-team-tools | #http-fingerprinting | #prismx

Summary

Hunt demonstrates how to fingerprint live PrismX deployments of the cross-platform penetration toolkit — its login page defaults to port 443 — by studying HTTP responses after installing it in a lab.
Published
Collected

original ↗

Related coverage

blog · hunt.io
Into the Viper’s Nest: Observations from Hunt’s Scanning
Hunt tracks 400+ exposed Viper login pages for the Chinese red-team platform, over half on Tencent servers at default port 60000, and shares detection guidance for tools like Sliver.
blog · hunt.io
Phish No More: A Hunt.io Guide to Gophish Detection
A Hunt.io guide to detecting Gophish, the open-source phishing framework: why phishing still thrives, how red teams run campaigns with it, and how to spot Gophish servers in the wild.
blog · bishopfox.com
The Stolen FireEye Red Team Tools Are Mostly Open Source
Bishop Fox's take on the stolen FireEye red team tools: most capabilities match well-known open-source projects like Rubeus, SafetyKatz, and SharpZeroLogon; YARA detection rules were released.
blog · xbow.com
Grok 4.7 Is Different. So Is the Best Way to Use It.
XBOW tested Grok 4.7 on exploit crafting and agentic pentests: inside xAI's Build it improved substantially over 4.6, outside Build it slipped slightly—orchestration now matters as much as prompts.
blog · yeswehack.com
Recon series recap: The ultimate guide to Bug Bounty reconnaissance and footprinting
Recap of a six-part recon series covering hidden endpoints, subdomain enumeration, HTTP fingerprinting, hidden parameters and Google dorking, with tools like Nmap, Shodan and the Wayback Machine.
blog · yeswehack.com
Recon series #3: HTTP fingerprinting – sleuthing for a web application’s hidden vulnerabilities
Recon series #3 on HTTP fingerprinting: analysing response headers, banner grabbing, malformed requests, default file structures and cookie parameters to map technologies and hidden weaknesses.
back