Hacking on Medium
Going Beyond Dark Mode: Two Clicks that Make Firefox Beautifully Black

https://cdn-images-1.medium.com/max/1621/1*6b5aEN91uXJExDrFbaK4pA.png
Dark mode plugins are rife with the possibility of browser hijacking attacks. As browsers become more and more valuable, end-users are…

Continue reading on Medium »

Hacking on Medium
4 Little-Known Facts about Hackathons

https://cdn-images-1.medium.com/max/1920/1*0_y7LLTk8Ye0SljCV4EptA.jpeg
A little journey into the Hidden Realms of Hackathons

Continue reading on Medium »

Hacking on Medium
TryHackMe Pickle Rick CTF Çözümü

https://cdn-images-1.medium.com/max/1920/1*oI-mrJuUN00omQnhK7eWNw.png
“Pickle Rick” odası, popüler televizyon dizisi “Rick and Morty”den esinlenilerek oluşturulmuş bir TryHackMe odasıdır. Bu odada, diziye…

Continue reading on Medium »

Hacking on Medium
Infiltrating LAN: Smuggling Traffic Past the DMZ | How to Hack Series

https://cdn-images-1.medium.com/max/1336/1*lckQuliBoYRXHs2KpwObZQ.png
Hello security professionals! Today’s article brings to light an easy way that attackers use to smuggle traffic via SSH tunnels — that…

Continue reading on Medium »

Hacking on Medium
Learn Ethical Hacking: From Zero to Hero with 10 Essential Learning Sites

https://cdn-images-1.medium.com/max/2600/0*Z5JNe9c-yue5ESZR
Security isn’t something you buy, it’s something you do, and it takes talented people to do it right.

Continue reading on Medium »

Afrog explained for bug bounty hunters
https://medium.com/@gpiechnik/afrog-explained-for-bug-hunters-ed1497d5aaf5?source=rss------bug_bounty-5

When working as a pentester or bug hunter it is normal to want to automate some of our work.Continue reading on Medium » (https://medium.com/@gpiechnik/afrog-explained-for-bug-hunters-ed1497d5aaf5?source=rss------bug_bounty-5)

hacking: security in practice
Hashcat

Hi,

I have been trying to crack the following the hashes:

Administrator:500:

aad3b435b51404eeaad3b435b51404ee:47f13e356535b8d4b0ece26332adef1c:::

anakin_skywalker:

1011:aad3b435b51404eeaad3b435b51404ee:c706f83a7b17a0230e55cde2f3de94fa:::

artoo_detoo:

1007:aad3b435b51404eeaad3b435b51404ee:fac6aada8b7afc418b3afea63b7577b4:::

I tried to identify the type of the hash using hash-identifier and the results were MD5, NTLM, md5($salt.$pass).

I tried the following commands on Linux terminal:
hashcat a -0 -m -0 hash.txt /usr/share/wordlists/rockyou.txt

hashcat a -0 -m -20 hash.txt /usr/share/wordlists/rockyou.txt

hashcat a -0 -m -1000 hash.txt /usr/share/wordlists/rockyou.txt

​

Please notice I got the hashes after exposing Eternalblue vulnerability on Windows server 2012. Please direct me on how I can solve this because every time I run the commands the recovery is zero.

submitted by /u/Keepitupdoc
[link] [comments]

hacking: security in practice
security measures for the deep web

It seemed to me that it is the most appropriate group to make this query, but it is not. I wanted to know the VPN specifications to buy the right one and the recommendations you can give me to repel any virus and be 100% incognito. I would like to be able to enter the deep web and the dead web, I am a programmer and I was always curious to enter

submitted by /u/sergiCrack9
[link] [comments]

Dark Reading: Attacks/Breaches
'Volt Typhoon' Breaks Fresh Ground for China-Backed Cyber Campaigns

This is the first incident where a threat actor from the country appears to be laying the groundwork for disruptive attacks in the future, researchers say.

Dark Reading: Attacks/Breaches
Red Hat Tackles Software Supply Chain Security

The new Red Hat Trusted Software Supply Chain services help developers take a secure-by-design approach to build, deploy, and monitor software.

Dark Reading: Attacks/Breaches
CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

Russian code that could tamper with industrial machines and toggle RTUs on and off was floating around VirusTotal for years before being noticed. It raises new questions about the state of OT security.

Dark Reading: Attacks/Breaches
Lazarus Group Striking Vulnerable Windows IIS Web Servers

The infamous North Korean APT group is using Log4Shell, the 3CX supply chain attack, and other known vectors to breach Microsoft Web servers.

Dark Reading: Attacks/Breaches
Netflix's Password-Sharing Ban Offers Security Upsides

The streaming giant is looking to bolster flagging subscription growth and profits, but security researchers say the move offers a perfect opportunity to encourage better password hygiene and account safety.