API Recon with Kiterunner - Hacker Toolbox

[@MosnoAlMoseeki]

That was so excellent! Thank you so much. I've marked this video to watch again in the future, and I actually am using Kiterunner as I'm watching this video. I do wish you a speedy recovery, and congrats on the Bug Crowd position!

[@x7331x]

Great video and tutorial, thanks for doing that!

[@zerosum535]

Thank you, using it first time tonight

[@dhruvkandpal9909]

Thank you for explaining each aspect of the tool clearly. It was really helpful! :)

[@ihebhamad1477]

Thank you @kati would you do some web application testing, how do you approach a real target.

[@wardellcastles]

Thanks for the video! I am already using it!

[@hanko1]

you deserve 10000000000000000 likes Katie

[@Unknown-zf9yg]

i’m one of them 🤪

[@innerjoy6361]

Love from india .great content thanks

[@RR-hl6zi]

It seems that the kiterunner project has been abandoned. Do you know if it has been forked or if there are any similar (but more recently updated) tools? If not, I really need to learn golang and patch the tool up myself. And figure out how to keep the api definitions up to date...

[@InsiderPhD]

Yeah :( this is an older video, you can download the larger wordlists, but I’ve not seen anything similar, the most I’ve seen is some work looking at swagger files and extracting a wordlist from thousands of them

[@alph4byt3]

This is why they say it's good to get familiar with Linux, not a must per say but very much a great thing to have....Linux familiarity

[@axelvirtus2514]

FTL failed to read from stdin error="failed to open file: open routes.json: no such file or directory" Downloaded and extracted this files same problem

[@hossamshady1383]

wow so great

[@sql7002]

Our Queen 👸👸😍

[@ismailramzan8927]

Thank You so much :)

[@chizzlemo3094]

thank you !

[@arbazfarooqi5050]

thank you

[@mikekihoro6372]

Hi Katie, thanks for the informative video, do you have a step by step installation of the tool on linux, I am kind of a beginner and really struggling to get it up and running.

[@nigelcarruthers335]

Katie, you MUST learn VIM. I promise it's worth it.

[@cristianmorillas2247]

So nice!

[@cybersecurity3523]

Very good Dr

[@cloufish7790]

A great idea with marking when doing presentation, but I really recommend you buying a cheap graphics tablet. I'm sure It'll be easier to underline and draw arrows : P

[@InsiderPhD]

I knowwwww I use my iPad but it doesn’t play nice with the two screens I use. I might have to check out alternatives

[@karimsz2009]

Amazing video indeed..

[@bharathpatel1757]

Hi dhidhi ! There is a thing people mostly discussing now a days . Do really AI replace cyber security ? For security Enthusiast like me we always look for future do this field goes green ?

[@InsiderPhD]

No! Don’t worry about AI! I did a talk at bugcrowd level up it’s in my playlist of talks on AI and why you don’t need to worry!

[@DEADCODE_]

@@InsiderPhD this why I love dude

[@morrismbogo1798]

is this vlog still valid? It seems like Kiterunner support was discontinued

[@narsi_2.0]

thank u

[@cihan-3439]

Thanks for the great content !

[@kumaran88thiru]

Lot of love for u

[@bharathpatel1757]

Hi dhidhi ! Is it necessary to shift from burpsuite community to professional version? Cant we find bugs with community version .

[@Imhamzaazam]

Hey katie, I am unable to print any output out on the terminal. It keeps running and outputs no results found.

[@bluey8302]

It does not work on windows, I type in the command in cmd but returns errors.

[@NotToBeTooTakenSeriously]

what command do you usally use?

[@drmikeyg]

Good job InsiderPhD, Since you're from England, do you know The Beatles?

[@InsiderPhD]

Of course :D

[@juanjoivars3254]

Can anybody explain the difference between scan and brute mode?, please

[@InsiderPhD]

Scan uses some guessing to get likely endpoints it produces less noise

[@quangvo4563]

Can it do parameters fuzzing like fluff ?. Where we can place POST body data like password=FUZZ&username=FUZZ ?

[@InsiderPhD]

Yup! You can use FUZZ anywhere in a request

[@quangvo4563]

@@InsiderPhD i cannot find that option in their docs :-(, i must’ve missed something ...

[@limonhasan6723]

love ur accent 😍 please make an English learning channel also.😂

[@forranach]

I love your accent. Where is it from ?

[@InsiderPhD]

I’m from a place near London :)

[@mrankit2889]

All of the content on 1 side nd another side your channel name insider phd??? What does it actually mean??🤨🤨Can i get the answer???

[@InsiderPhD]

I have a PhD and my PhD was in Insider Threats so InsiderPhD.

[@josephgosling9593]

First

[@InsiderPhD]

👏👏👏

[@daddy.69.]