Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
GIF
KitPloit - PenTest Tools!
Link - A Command And Control Framework Written In Rust

https://1.bp.blogspot.com/-nhBoU5qJ94Y/YL1h5RN_gDI/AAAAAAAAZ8M/OnWHtixTJ5I98NyErRZAZjIumqHZV7KLQCNcBGAsYHQ/s320/link_1.gif
link is a command and control framework written in rust. Currently in beta.

Introduction

link provides MacOS, Linux and Windows implants which may lack the necessary evasive tradecraft provided by other more mature command and control frameworks.

Tested on Linux only.
Features

Hopefully this list expands for humans to actually want to use this:

* HTTPS communication
* Process injection
* In-memory .NET assembly execution
* SharpCollection tools
* sRDI implementation for shellcode generation
* Windows link reloads DLLs from disk into current process

Feedback

Feel free to file an issue.

Build Process

* Clone or download the repo
* cargo runif you are eager to run it right now
* cargo build --releaseto build the link server executable

For more information check out Installation and Usage.

Acknowledgments

A non-exhaustive list of those who have in some way inspired this project by means of writing code, snippets, ideas or inspiration:

@rust
@moloch--
@djhohnstein
@lesnuages
@Flangvik
@monoxgas
@b4rtik
Download Link

___________________________
@hacking_Attack
@Hacking_Video
Formation Beta Testing is now live!

We’re launching Formation beta testing tomorrow! ( 9th of June 0:00 (UTC+0))Continue reading on NAOS Finance — Official Publications »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
RockYou2021: largest password compilation of all time leaked online – 8.4 billion entries

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg RockYou2021: largest password compilation of all time leaked online – 8.4 billion entriesPost Views: 147
Reading Time: 1 Minute
What seems to be the largest password collection of all time has been leaked on a popular hacker forum. A forum user posted a massive 100GB TXT file that contains 8.4 billion entries of passwords, which have presumably been combined from previous data leaks and breaches.
According to the post author, all passwords included in the leak are 6-20 characters long, with non-ASCII characters and white spaces removed. The same user also claims that the compilation contains 82 billion passwords. However, after running our own tests, the actual number turned out to be nearly ten times lower – at 8,459,060,239 unique entries:
https://cybernews.com/wp-content/uploads/2021/06/rockyou2021-number-of-entries.png
The compilation itself has been dubbed ‘RockYou2021’ by the forum user, presumably in reference to the infamous RockYou data breach that occurred in 2009, when threat actors hacked their way into the social app website’s servers and got their hands on more than 32 million user passwords stored in plain text.

An example of leaked passwords included in the RockYou2021 compilation:

https://cybernews.com/wp-content/uploads/2021/06/password-screenshot-2.png
With a collection that exceeds its 12-year-old namesake by more than 262 times, this leak is comparable to the Compilation of Many Breaches (COMB), the largest data breach compilation ever. Its 3.2 billion leaked passwords, along with passwords from multiple other leaked databases, are included in the RockYou2021 compilation that has been amassed by the person behind this collection over several years.
See Also: Windows Container Malware Targets Kubernetes Clusters Considering the fact that only about 4.7 billion people are online, numbers-wise the RockYou2021 compilation potentially includes the passwords of the entire global online population almost two times over. For that reason, users are recommended to immediately check if their passwords were included in the leak.

To check whether your password is part of this gigantic leak, head over to the CyberNews personal data leak checker or our leaked password checker, where we are currently uploading the password entries from the RockYou2021 compilation.

If you can’t find your password in our leak databases at the moment, make sure to check back tomorrow, which is when the compilation is expected to be transferred in its entirety. Potential impactBy combining 8.4 billion unique password variations with other breach compilations that include usernames and email addresses, threat actors can use the RockYou2021 collection to mount password dictionary and password spraying attacks against untold numbers of online accounts.

Since most people reuse their passwords across multiple apps and websites, the number of accounts affected by credential stuffing and password spraying attacks in the wake of this leak can potentially reach millions, if not billions.
See Also: Offensive Security Tool: Pacu – The Amazon Web Services Exploitation Framework What to do if your password was leaked?If you suspect that one or more of your passwords may have been included in the RockYou2021 collection, we recommend taking the following steps in order to secure your data and avoid potential harm from threat actors:

* Use our personal data leak checker and leaked password checker to see if you[...]