🔺Joomscan – Open Source Joomla Vulnerability Scanner🔺
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments for Joomla based sites. Based in perl, this tool can enumerate the version, vulnerabilities, components, firewalls and more, all in one friendly to use interface.
Installing Joomscan
First, let’s clone the repository to our machine.
git clone https://github.com/rezasp/joomscan.git
Joomscan is a scanner by OWASP, which aims to automate the task for vulnerability assessments for Joomla based sites. Based in perl, this tool can enumerate the version, vulnerabilities, components, firewalls and more, all in one friendly to use interface.
Installing Joomscan
First, let’s clone the repository to our machine.
git clone https://github.com/rezasp/joomscan.git
GitHub
GitHub - OWASP/joomscan: OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/ - OWASP/joomscan
🍁Synthetic Fingerprints Make Biometric/Fingerprint Recognition Systems Vulnerable🍁
From smartphone lock systems to identity verification, people consider fingerprint scans a viable method of security. However, scientists have figured out ways to ditch fingerprint recognition and biometric systems via synthetic fingerprints. It means all systems and devices relying on fingerprints could be vulnerable to spoofing.
A team of researchers from the New York University Tandon School of Engineering has shared its study regarding synthetic fingerprints. As demonstrated, using neural networks, synthesizing human fingerprints artificially has now become possible. The researchers even succeeded in developing a fake fingerprint that could potentially spoof any fingerprint recognition system. They have published their findings as a research paper.
From smartphone lock systems to identity verification, people consider fingerprint scans a viable method of security. However, scientists have figured out ways to ditch fingerprint recognition and biometric systems via synthetic fingerprints. It means all systems and devices relying on fingerprints could be vulnerable to spoofing.
A team of researchers from the New York University Tandon School of Engineering has shared its study regarding synthetic fingerprints. As demonstrated, using neural networks, synthesizing human fingerprints artificially has now become possible. The researchers even succeeded in developing a fake fingerprint that could potentially spoof any fingerprint recognition system. They have published their findings as a research paper.
REVERSE BRUTEFORCE ATTACK
Reverse-brute-force attacks are of an entirely different kind. Here, the attacker has the entire list of valid usernames (which the bank happily gives away by employing some stupid security measures, as described in the following section) and one most commonly used password is tried against these complete set of usernames. This type of attack does not render the username blocked, as the attacker tries only one password against each username and the same password against all the usernames. Moreover if the Bank does not enforce a strong password policy, it makes it very easier for the attacker to get working combinations of username and password within a few hours, which he can later use for malicious purposes.
@deephackervendors
Reverse-brute-force attacks are of an entirely different kind. Here, the attacker has the entire list of valid usernames (which the bank happily gives away by employing some stupid security measures, as described in the following section) and one most commonly used password is tried against these complete set of usernames. This type of attack does not render the username blocked, as the attacker tries only one password against each username and the same password against all the usernames. Moreover if the Bank does not enforce a strong password policy, it makes it very easier for the attacker to get working combinations of username and password within a few hours, which he can later use for malicious purposes.
@deephackervendors
How Cloud Computing Works?💁🏻♂️💁🏻♂️
Information and data is stored on physical or virtual servers, which are maintained and controlled by a cloud computing provider, such as Amazon and their AWS product. As a personal or business cloud computing user, you access your stored information on the ‘cloud’, via an Internet connection.🀄️@deephackervendors🎴
The big cloud maintenance servers today are held by Microsoft, Google, Amazon, Alibaba etc.
DIRECTORY TRAVERSAL
🔰🔰Directory traversal is primarily a type of attack performed by a hacker or a cracker that induces the server to traverse to the parent directory or to expose server-specific controls. Directory traversal generally happens as a result of a lack of or insufficient validation within the code of the application hosted/executed on the Web server.
In a directory traversal, the hacker/cracker typically sends in an HTTP request with a series of ../, in order to traverse or climb to a parent directory. The application/server is unable to validate the input data from the Web browser and grants access to the internal and restricted directories and the data they contain. Once the cracker/hacker gains access to the parent directory, he or she can view, edit and delete files, or even execute specific commands.🔰🔰
Credits : @Deephackervendors
🔰🔰Directory traversal is primarily a type of attack performed by a hacker or a cracker that induces the server to traverse to the parent directory or to expose server-specific controls. Directory traversal generally happens as a result of a lack of or insufficient validation within the code of the application hosted/executed on the Web server.
In a directory traversal, the hacker/cracker typically sends in an HTTP request with a series of ../, in order to traverse or climb to a parent directory. The application/server is unable to validate the input data from the Web browser and grants access to the internal and restricted directories and the data they contain. Once the cracker/hacker gains access to the parent directory, he or she can view, edit and delete files, or even execute specific commands.🔰🔰
Credits : @Deephackervendors
🔰🔰Miscellaneous Hackers
Apart from few well known class hackers , we have following categories of hackers based on what they hack and how they do it-
🔴RED HAT HACKERS: Red hat hackers are blend of both black hat and white hat hackers . They are usually on the level of Hacking government agencies , top secret information hubs and generally anything that falls under the category of sensitive information.
🔵Blue hat hackers: A blue hat hacker is someone outside computer security consulting firms who bug tests a system prior to its launch, looking for exploits so they can be closed. Blue Hat Hacker also refers to the security professional invited by Microsoft to find vulnerabilities in Windows.
🔴Elite Hackers: Elite hacker is the name utilized by the community with the aim of identifying those individuals who are deemed to be as experts in their line of work. These people are actually on the “cutting edge” of both the computer and network industry.
🔴Script Kiddie : script kiddie or skiddie is an unskilled individual who uses scripts or programs developed by others to attack computer systems and networks and deface websites.
🔴Neophyte: Someone who is new to Hacking or phreaking and has almost no knowledge or experience of the workings of technology and Hacking.
🔴Hactivist : A hacker who utilizes technology to announce a social , ideological , religious or political message . In general , most hactivism involves website defacement or denial-of-service attacks. 🔰🔰
Credits: #Dady
Channel : @DeepHackervendors
Apart from few well known class hackers , we have following categories of hackers based on what they hack and how they do it-
🔴RED HAT HACKERS: Red hat hackers are blend of both black hat and white hat hackers . They are usually on the level of Hacking government agencies , top secret information hubs and generally anything that falls under the category of sensitive information.
🔵Blue hat hackers: A blue hat hacker is someone outside computer security consulting firms who bug tests a system prior to its launch, looking for exploits so they can be closed. Blue Hat Hacker also refers to the security professional invited by Microsoft to find vulnerabilities in Windows.
🔴Elite Hackers: Elite hacker is the name utilized by the community with the aim of identifying those individuals who are deemed to be as experts in their line of work. These people are actually on the “cutting edge” of both the computer and network industry.
🔴Script Kiddie : script kiddie or skiddie is an unskilled individual who uses scripts or programs developed by others to attack computer systems and networks and deface websites.
🔴Neophyte: Someone who is new to Hacking or phreaking and has almost no knowledge or experience of the workings of technology and Hacking.
🔴Hactivist : A hacker who utilizes technology to announce a social , ideological , religious or political message . In general , most hactivism involves website defacement or denial-of-service attacks. 🔰🔰
Credits: #Dady
Channel : @DeepHackervendors
🔰🔰How To Skip/Solve reCAPTCHA.🔰🔰
By::: @Leave89
@DeepHackerVendors
1: Add The Tempermonkey Extention.4: Enjoy.
Chrome. ==> https://clk.icu/IPEUNxf9
Firefox. ==> https://clk.icu/A565Yy
2: Click Add Scripts.
3: Go To The Captcha Website . The Captcha Will Be Autometically Solved.
By::: @Leave89
@DeepHackerVendors
DOXING
🗝Doxing is a term that describes the process of obtaining or deducing information about a person based on a limited set of initial information. Or in layman’s terms, doxing is the act of searching around on the Internet for someone’s personal details. Another way to view doxing is to see it as taking a piece of information (e.g., email address) and identifying someone based on that.
The term “doxing” derives from “document tracing” which means to gather documents on a particular person or company to learn more about them.
🗝Doxing is a term that describes the process of obtaining or deducing information about a person based on a limited set of initial information. Or in layman’s terms, doxing is the act of searching around on the Internet for someone’s personal details. Another way to view doxing is to see it as taking a piece of information (e.g., email address) and identifying someone based on that.
The term “doxing” derives from “document tracing” which means to gather documents on a particular person or company to learn more about them.
😱😱 #Tech Facts 7 😱😱
🔥 ONLY 8% MONEY IS PHYSICAL 💵 😱
92 per cent of the world's currency is digital!
This means that most of the money you earn, transact with, use to buy goods/services and so on exists only on computers and hard drives. Only an estimated 8 per cent of currency globally is physical money.
All the black money piles come from within this 8 per cent. This is a fair estimate that economists seem to agree on though, not an exact figure. This low percentage seems absurd but when you stop to think, it makes sense considering that most large transactions are done electronically anyway.
Banks store electronically too and the 92 per cent includes all kinds of transactions done using credit/debit cards and wire transfers. Might be a good idea to revisit all those hacker movies where a nerdy computer hacker manages to siphon billions off in just a few minutes ❗️
🔥 ONLY 8% MONEY IS PHYSICAL 💵 😱
92 per cent of the world's currency is digital!
This means that most of the money you earn, transact with, use to buy goods/services and so on exists only on computers and hard drives. Only an estimated 8 per cent of currency globally is physical money.
All the black money piles come from within this 8 per cent. This is a fair estimate that economists seem to agree on though, not an exact figure. This low percentage seems absurd but when you stop to think, it makes sense considering that most large transactions are done electronically anyway.
Banks store electronically too and the 92 per cent includes all kinds of transactions done using credit/debit cards and wire transfers. Might be a good idea to revisit all those hacker movies where a nerdy computer hacker manages to siphon billions off in just a few minutes ❗️
😱😱 #TECH FACTS 5 😱😱
BIGGEST HACK IN TERMS OF COST BY IRANIAN ATTACKER GROUP🇮🇷 😨
ON AUGUST 15 , The most valuable company in the world Saudi Aramco is crippled by a cyber warfare attack for months by malware called Shamoon. Considered the biggest hack in history in terms of cost and destructiveness . Carried out by an Iranian attacker group called Cutting Sword of Justice . Iranian hackers retaliated against Stuxnet by releasing Shamoon. The malware destroyed over 35,000 Saudi Aramco computers, affecting business operations for months. ‼️
BIGGEST HACK IN TERMS OF COST BY IRANIAN ATTACKER GROUP🇮🇷 😨
ON AUGUST 15 , The most valuable company in the world Saudi Aramco is crippled by a cyber warfare attack for months by malware called Shamoon. Considered the biggest hack in history in terms of cost and destructiveness . Carried out by an Iranian attacker group called Cutting Sword of Justice . Iranian hackers retaliated against Stuxnet by releasing Shamoon. The malware destroyed over 35,000 Saudi Aramco computers, affecting business operations for months. ‼️