hacking: security in practice
Exploit a binary with SigReturn Oriented Programming (SROP)

submitted by /u/R4lphWiggum
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anybody dealt with captive portals?

I'm trying to circumvent a captive portal and I know spoofing the Mac is a way to go but that's difficult to do on a phone. I've tried Expressvpn but they do not allow port forwarding on devices other than routers. Since most captive portals use UDP over port 53 would configuring the DNS settings on the phone get around it? Given the resources I have it's becoming difficult to find a way around it without using a low end VPN that sells your data at every corner.

submitted by /u/Mouthybard25364
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to be as stealthy as possible?

So i would really love to exploit this weakness in my school. They have a wifi network that is strictly monitored for unauthorized logins and whatnot. I would actually say my school is very computer literate.

But here is the exploit, they have lent all the students laptops to use and take home throughout the year. So far the only thing I did was that I accidentally removed the bios password with the bios back door exploit that i found online. I thought this would only give you access to the bios without removing it completely...man did i not think that through.

But here is what i would like to do: since the bios is now unlocked, i would boot into a clean install from a separate drive that i have, use that clean install to create a clone of the laptop's ssd, and install that clone onto my personal laptop. That way, I could modify that build on my personal laptop to gain admin access. But here is my question, although the clone and all the files would be the same, would the mac address for when my personal laptop signs onto the network be the same as the school laptop? That is my first question.

And with admin access, all i would do would be to just set up a personal hotspot using the windows feature.

My second question is do you think that IT/administration will get me in trouble for removing the bios password (assuming I dont do anything else to the laptop)?

and are there any other stealthier ways to do this? I was thinking that in case IT finds out and calls me down to confiscate my belongings, I could quickly delete the vhd and get rid of the evidence.

Lastly, I would say that this would classify as grey hat hacking because I do not have malicious intent. Altho it may seem like im trying to bypass their network protections, i really wanna just see for myself what my knowledge can get me with computing. I am a "soy boy" lol so i would really hate to get in trouble...i also have a good reputation at school, is this risking too much? Thanks to anyone who read this essay post of mine.

submitted by /u/man_wif-waluigi-hed
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
permanent website changes

So, say if I wanted to permanently change how a website that I don't own looked, for example: to just remove everything from the site. how would I go about doing this? and i mean permanently, so if I were to do this on one PC and then log in on a different PC it would still be the same. I would never use this to be malicious by the way I've set up a couple of my own test websites to do this with

submitted by /u/Captainzedog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Purpose of a DoS/DDoS attack?

I apologize if this isn’t the right place for this but I am studying cyber security and have a basic question I can’t seem to find the answer to.

I know what a DoS/DDoS is and how they work, but I can’t seem to find an explanation of the purpose behind one. As in what benefit would the attacker gain from doing one? Would it be monetary gains (like asking for money to end an attack)? Or would it be more to harm a company/organization by limiting their ability to operate on some level? Or is there something deeper I am missing?

submitted by /u/bzboarder
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A completely-free (as in free beer) hacking school

Hello everybody! I want to introduce a project a few people and I have been working in lately, its name is AnonWorld and it is meant to be a completely free (as in free beer, that is, free of charge) hacking and programming virtual school that is mainly maintained by hacktivists from the anonymous collective. It is pretty new - we have been working on this for less than one month - and it barely has content, there are two courses and there are going to be a lot of stuff other than just hacking, for example:

* Programming: from a beginner level to an advanced level - teaching low-level stuff such as operating system development.
* Hacking: learn hacking from real hackers, from people that are used to hack, this involves a lot of techniques, such as social engineering, anonymity, privacy, and so on.
* Computer science: learn how computers work, learn stuff like operating system and compilers design and - probably - a little course of implementation.
* Languages: yeah, why not, we are all from different parts of the world, we can teach the languages we all speak natively.

There's also a forum, so you can also learn from the other users of the platform, you can ask your questions there, you can start discussions and so much more.

If you want to check it, you can visit it with the following link: https://anonworld.eu

If you can support that would be so amazing, you can donate, you can be a teacher (you have to contact us and introduce yourself). Thank you for everything

submitted by /u/iSaraaah
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Not proud of this but it worked.

So me, being a homeless desperate sweaty bastard, decided to try something I saw on TV.

I walked into a 4 star hotel from the back door, dressed like I was headed to the gym, went to the front desk and attempted to get service, claiming I had forgotten my key.

When they asked for my ID, I was like "i mean come on man, Who takes their id to the gym?"

I was shocked to find that this worked. I managed to get a shower, a snack from the fridge, and the fuck outta there before getting noticed.

I knew social engineering could be a useful tool, but damn.. if I had not seen leverage, I would not have tried it.

submitted by /u/Captain-Crunch1989
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Ransomware Group Claiming Connection to REvil Gang Surfaces

'Prometheus' is the latest example of how the ransomware-as-a-service model is letting new gangs scale up operations quickly.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box — Toolbox Writeup

https://cdn-images-1.medium.com/max/600/1*_lbrZk9n6g9-WWo_M_y_EQ.png
Toolbox is an Easy machine listed on Hack The Box. It was designed on March 12th, 2021 by MinatoTW. I was able to gain a foothold into…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

My Second Bounty OF $$$$ From Facebook

SummaryContinue reading on Medium »
Read more...

My Second Bounty OF $$$$ From Facebook
https://imajk.medium.com/my-second-bounty-of-from-facebook-fb213daa717b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Medium » (https://imajk.medium.com/my-second-bounty-of-from-facebook-fb213daa717b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
AMSITrigger : The Hunt For Malicious Strings

AMSITrigger will identify all of the malicious strings in a powershell file, by repeatedly making calls to AMSI using AMSIScanBuffer . Hunting For Malicious Strings Usage -i, –inputfile=VALUE Powershell filename-u, –url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1-f, –format=VALUE Output Format:1 – Only show Triggers2 – Show Triggers with Line numbers3 – Show Triggers inline with code4 – Show […]

The post AMSITrigger : The Hunt For Malicious Strings appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
I need some tech support!!

So I really need some assistance, my laptop apparently refuses to run whonix with virtual box. I dont know if the issue s with my whonix install or with the virtual box install but none theless I have reinstalled about 100 times of both already to no avail with pc restarts and all. Is there any way I can use the deepweb as easily without these two?

submitted by /u/Lucas7001
[link] [comments]

How I could have accessed all your private videos/photos saved inside your device without even…

…
Read more...

hacking: security in practice
Is this even possible... ?

Hi guys, I'm a begginer in all of this but I was thinking about something regarding bluetooth. I have more than one bluetooth speaker and I would like to be able to synch them both, but they are not from the same brand and I havent foundpftware that allows this. I was wondering if it was possible to use a raspberry pi as a relay, that way I would send data from my phone only to the raspberry pi who would then send it to the other devices. From the bit of research I did the limitations are set by the manufacturer that allows some devices (like phones) to be connacted only to 1 device at a time via bluetooth.

So what do you guys think? Is this a feasible project or is it simply impossible due to how the bluetooth protocol works?

Thanks in advance!

submitted by /u/Crypto_Boi_420
[link] [comments]