🟢⚔️Man in the Middle: Network Attacks

🔹SSLStripping
🔹BGP Hijacking
🔹Rogue Devices
🔹Packet Sniffing
🔹ARP Spoofing & Poisoning
🔹Wi-Fi Eaves Dropping
🔹Evil Twin Attacks
🔹Session Hijacking
🔹DNS Spoofing & Poisoning
🔹Malware & Trojans

Join🟢@hacker_habesha🇪🇹

🟢Web Applications Proxies 🔰


🔹 Burpsuite - Burpsuite is a graphical tool for testing Web application security.
🔗https://portswigger.net/

🔹ZAP One of the world’s most popular free security tools.
🔗https://github.com/zaproxy/zaproxy

🔹Mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
🔗https://github.com/mitmproxy/mitmproxy

🔹Broxy - An HTTP/HTTPS intercept proxy written in Go.
🔗https://github.com/rhaidiz/broxy

🔹Hetty - An HTTP toolkit for security research.
🔗https://github.com/dstotijn/hetty

🔹Proxify - Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.
🔗https://github.com/projectdiscovery/proxify

Join:🟢@hacker_habesha🇪🇹

👨‍💻How to Spot a Pentester

🧬Hashing Vs Encryption vs Encoding: A Brief Comparison

📜Hashing:
This is primarily used for data integrity verification and password storage.
It involves applying the Hash function to data, this generates a fixed-size structure of characters (hash value) that is unique to the input data.

🔒Encryption:
This is used to protect the confidentiality of data during transmission or storage.
It uses algorithms and a key to transform plaintext into cipher text , making it unreadable without the corresponding decryption key.

🛡️Encoding:
Encoding is a method of converting data to a different format for safe and efficient data transmission.
Encoding is typically reversible, meaning the original data can be obtained by reversing the process.
Unlike Hashing and Encryption, Encoding is not designed to keep data secret.

Join:🟢@hacker_habesha🇪🇹

🟢Network and Communication Security Cheat sheet

🔹OSI Reference Model
🔹Common TCP Protocols
🔹Attack in OSI Layers
🔹Hardware Devices
🔹IP Addresses
🔹Network Types
🔹Networking Methods & Standards

Join:🟢@hacker_habesha🇪🇹

🟢⚔️Application Structure and the Attacks at each Layer

🔹Client-Side Attacks
🔹Web Application Attacks
🔹DDoS Attacks

Join:🟢@hacker_habesha🇪🇹

🔥Hacking Tools Collection

1. DDoS
2. Forensics
3. Programming
4. Exploitation
5. Phone Hacking
6. Server Hacking
7. Client Hacking
8. Website Hacking
9. Network Hacking
10. Wireless Hacking
11. Reverse Engeenering
12. Information Gathering

#DDoS
1. MDK3
2. LOIC
3. HULK
4. DDOSIM
5. Ufonet
6. Hping3
7. Xerxes
8. Hammer
9. Slowloris
10. Websploit
11. GoldenEye
12. Metasploit
13. Aireplay-ng
14. Slowhttptest

#Forensics
1. COFEE
2. Volafox
3. Autopsy
4. Foremost
5. Hashdeep
6. Binwalk

#Programming
1. Notepad++
2. Visual Studio
3. Text Editor

#Exploitation
1. Metasploit
2. Sqlmap
3. Core Imact
4. W3af
5. BeEF
6. Dradis

#Phone_Hacking
1. Metasploit
2. Apktool
3. Droidjack
4. AndroRAT
5. Spynote

#Server_Hacking
1. SQLmap
2. Jsql
3. Havij
4. Hydra
5. Metasploit
6. Armitage
7. Brupsuite
8. Owasp-ZAP
9. Invicti
10. Acunetix
11. OpenVAS

#Client_Hacking
1. Darkcomet
2. FatRat
3. Veil-Evasion
4. Shallter
5. Unicorn
6. Setoolkit
7. Armitage
8. BeEF-Framework
9. EmPyre
10. FakeImageExploiter
11. Pupy
12. DFU-Programmer
13. Cobalt Strike
14. Exploitpack
15. Gcat
16. Crowbar

#Website_Hacking
1. Sn1per
2. Owasp-ZAP
3. Brupsuite
4. Invicti
5. Acunetix
6. SQLmap
7. Xsser
8. WPScan
9. Joomrra
10. Joomscan
11. WPSeku
12. XSStrike
13. Kadimus
14. jexboss
15. CMSmap
16. brut3k1t
17. 0d1n
18. CloudFail
19. Arachni
20. Nikto
21. Webscarab
22. Nmap
23. Vbscan
24. Sentry MBA

#Network_Hacking
1. MITMf
2. Bettercap
3. Ettercap
4. Tcpdump
5. Wireshark
6. Driftnet
7. SSLstrip
8. Armitage
9. Metasploit
10. Xerosploit
11. Sparta
12. Hydra

#Wireless_Hacking
1. Wifite
2. Airodump-ng
3. Aireplay-ng
4. Wash
5. WiFi Pumpkin
6. Wifiphisher
7. Fluxion
8. Infernal Twin
9. WPSpin

#Reverse_Engeenering
1. OWASP-ZSC
2. OllyDBG
3. Apktool

#OSINT
1. OSINT Framework
2. CheckUserNames
3. HaveIbeenPwned
4. SecurityTrails API
5. Censys
6. Wappalyzer
7. Google Dorks
8. Maltego
9. Recon-Ng
10. theHarvester
11. Shodan
12. Jigsaw
13. SpiderFoot
14. Creepy
15. Nmap
16. WebShag
17. OpenVAS
18. Fierce
19. Unicornscan
20. Foca
21. ZoomEye
22. OWASP Amass
23. IVRE
24. Metagoofil
25. Exiftool


Join:🟢@hacker_habesha🇪🇹

Credential Dump & Password Attack Tools 🔐

🛡️CyberSecurity Ecosystem

🔹People
🔹Hardware
🔹Software
🔹Network
🔹Data Risk & Compliance

Join:🟢@hacker_habesha🇪🇹

🛡️7 Subfields of CyberSecurity

🔹Digital Forensic & Incident Response
🔹Cyber Defence
🔹Osint
🔹Purple Team
🔹ICS/OT Security
🔹Cloud
🔹Offensive Security

Join:🟢@hacker_habesha🇪🇹

🌐Hacker Search Engines: Phone Numbers

🔹NumLookup - Free reverse phone lookup
🔗https://www.numlookup.com/

🔹 SpyDialer - Free Reverse Lookup Search
🔗https://spydialer.com/

🔹 WhitePages - Find people, contact info & background checks
🔗https://www.whitepages.com/

🔹 National Cellular Directory - Begin your comprehensive people search now
🔗https://www.nationalcellulardirectory.com/

🔹 Phone Validator - Is it a cell phone or is it a landline or is it a fake?
🔗https://www.phonevalidator.com/

🔹 Free Carrier Lookup - Enter a phone number and we'll return the carrier name
🔗https://freecarrierlookup.com/

🔹 RocketReach - Your first-degree connection to any professional
🔗https://rocketreach.co/

🔹 sync.me - Find out who called
🔗https://sync.me/

🔹 EmobileTracker - Track Mobile Owner Name, Location and Mobile Service Provider
🔗https://www.emobiletracker.com/

🔹 Reverse Phone Lookup - Find Out The Owner Of A Phone Number
🔗https://www.reversephonelookup.com/

🔹 ThatsThem - Reverse phone lookup
🔗https://thatsthem.com/reverse-phone-lookup

🔹 thisnumber.com - International Phone Directories
🔗https://www.thisnumber.com/

🔹 usphonebook.com - Free Reverse Phone Number Lookup
🔗https://www.usphonebook.com/

🔹 truepeoplesearch.com - Get current address, cell phone number, email address, relatives, friends and a lot more
🔗https://www.truepeoplesearch.com/#

🔹 Tellows - Who is calling? The phone number reverse search
🔗https://www.tellows.com/

🔹 SynapsInt - The unified OSINT research tool
🔗https://synapsint.com/

🔹 C99.nl - Over 57 quality API's and growing
🔗https://api.c99.nl/

🔹 ValidNumber.com - Free reverse phone lookup service to let you identify a caller associated with any 10-digit phone number from the US and Canada
🔗https://validnumber.com/

🔹 CellIdFinder - Nonprofit project wich helps you to find GSM BTS by MCC, MNC, LAC and CellID
🔗https://cellidfinder.com/

🔹 OldPhoneBook - Intantly search a large selection from the past 20 years of USA phone listings
🔗http://www.oldphonebook.com/

🔹 Spokeo - Search by name, phone, address, or email to confidentially lookup information about people you know
🔗https://www.spokeo.com/

🔹 Intelius Phone Lookup - Look up a phone number to find owner information, carrier details, and more
🔗https://www.intelius.com/reverse-phone-lookup/

🔹 ZabaSearch Phone Lookup - Reverse Phone Lookup Tool Can Uncover Personal Information, Social Media Data, Online Activity, Photos, and More
🔗https://www.zabasearch.com/reverse-phone-lookup/

🔹 AnyWho Phone Lookup - Find out information associated with a phone number
🔗https://www.anywho.com/reverse-phone-lookup/

🔹 Radaris Phone Lookup - Look up any phone number to see its owner and identify who's calling or texting you
🔗https://radaris.com/#findPhoneH

Join:🟢@hacker_habesha🇪🇹

🦶Foot Printing

🔹Domain Name
🔹IP Adress
🔹Phone Numbers
🔹Email Address
🔹Employees Information
🔹Namespaces

Join:🟢@hacker_habesha🇪🇹

Awesome Github Scripts & Tools | Part #1

Article : https://lnkd.in/d-JK8MMn

Join:🟢@hacker_habesha🇪🇹

🛡Cyber security Acronyms

Join:🟢@hacker_habesha🇪🇹

🟢⚔️Common Types of Password Attacks

🔹Brute Force Attack
🔹Dictionary Attack
🔹Rainbow Table Attack
🔹Social Engineering Attacks
🔹Credential Stuffing Attack

Join:🟢@hacker_habesha🇪🇹

🟢Common Types Of Wireless Attacks

🔹Packet Sniffing
🔹Rogue Access Point
🔹Jamming
🔹Evil Twin
🔹War Driving
🔹Bluejacking
🔹Bluesnarfing
🔹War Chalking
🔹WPS Attack

Join:🟢@hacker_habesha🇪🇹

🟢Types of Cyber Attacks

Join:🟢@hacker_habesha🇪🇹

🧬The DNS System Hierarchy

1️⃣Client
2️⃣DNS Cache
3️⃣DNS Resolver
4️⃣Root Server
5️⃣TLD Server
6️⃣Authoratative Server

Join:🟢@hacker_habesha🇪🇹

🎭Create a fake Access Point

📝Think twice before connecting to a free public wireless hotspot at a coffee shop, airport or hotel. Ever wondered if the public Wi-Fi you just connected to is safe or if it could be an Evil Twin hotspot?

🔗https://en.iguru.gr/dimiourgiste-ena-pseftiko-access-point/

Join:🟢@hacker_habesha🇪🇹