hacking: security in practice
Position myself as mitm without the option of ARP Spoofing

Long story short Im researching a bit on intercepting packets from the connection of a Yeelight (Smartbulb) to a WLAN.

So the way you set up the smartbulb to a WLAN is via an open WiFi network that the bulb itself opens. Then the phone connects to such WiFi hotspot via the app to send the information of the WLAN to the bulb for it to connect to. I have sniffed the packets via monitor mode and I have a pretty good idea on how the phone commands the smartbulb to connect. Now I would like to inject packets during such connection.The only problem is that when I connect to the bulb's network (before it is connected to the WLAN) with my laptop I can not ping let alone ARP Spoof the phone, so I could potentially intercept the packets and connect the bulb to another network while the app thinks that is being connected to the real network. Is there any other way I could potentially reach such mitm situation without ARP Spoofing

submitted by /u/Wangalaang
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SQL SHELL what do to?

(SORRY FOR MY ENGLISH)

Im doing a htb box and i have enter in the database using the sqlmap. I dump all the databases and data from these databases but nothing interest. I spawn a SQL shell using the --sql-shell in the sqlmap

but I don't know how to breach into the machine doing this.

Someone have an idea?

submitted by /u/mousse312
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's the "best" coding language to know/learn?

I'm still not sure how to even begin learning because as of now I quality as a nothing more than a script kiddie which makes me mad. I know introductory Java and have an understanding of networking but I don't know how to apply it or if it's even a good language for hacking. I'm just tired of not knowing how to actually hack and if someone could give me a recommendation as to where I could just start would be great. I want to know how things work but the problem is that I don't know what I don't know, if that makes sense.

submitted by /u/Mouthybard25364
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
what is the word that is the oposite of soft hacks

what is the word that is the oposite of soft hacks like _____ hacks

submitted by /u/CharlieDude123
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pen Testing Career Question
https://www.reddit.com/r/Pentesting/comments/o0sf5h/pen_testing_career_question/

Figured I'd ask here too considering this a career oriented page. Do you need to have coding experience to be in pen testing? submitted by /u/Bugskee (https://www.reddit.com/user/Bugskee)
[link] (https://www.reddit.com/r/Pentesting/comments/o0sf5h/pen_testing_career_question/) [comments] (https://www.reddit.com/r/Pentesting/comments/o0sf5h/pen_testing_career_question/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
We recover lost funds in your bitcoin wallet, recover hacked/stolen accounts, the amazing dust…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Time I Wrote a Friendly Little Persistent Trojan

Reconnaissance
Years back when Windows had all sorts of fun vulnerabilities that could be exploited via USB I was approached by a vendor…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Neighbor gave me a really weird URL for his "contact" from a QR code on his business card

Idk if I'm just paranoid, or if this person really just tried to tap into my information.

First off, he was downstairs (where I am) because he was working on the fuse box (we share a duplex house) and after he finished, he saw me playing on my PC, and he started by asking me about my PC setup, and all my specs in it.

Then he proceeded to tell me about his PC and how he has a "CaliLinux"? I'm not sure if I said that right, and I misheard him or whatever, but I asked what that was, and he told me it was for penetration testing and how he knows how to read Javascript.

After some talk, he said he has a business going on for housing stuff, but he made me scan his QR code with my phone on his business card for his "contact info" even though my fiancé and I already have his phone number from previous chats about the house we're in.

It opened a link to this very odd, and unfinished looking website for his business that had a very strange URL, something I've never seen before, even with amateur programmers making new websites, it just looked way too funky, especially for what he was trying to make the website for, it didn't even seem professional like it should be.

He immediately scrolled down and clicked this button that said "Save" which started downloading his contact info, but even the download file ended in something like ".xlf" or something along those lines, I don't remember necessarily, because I deleted it right away when he walked away, because this just seems way too weird.

If anyone is able to help me test this URL and make sure it's not a virus, I'd be very appreciative, I want to know if I need to start doing something with my phone or not, like if there's any viruses I need start working on, or if I should get a new phone.

Please do not click on this link if you don't know how to test it, I do not want anyone else to be effected if this is a virus

https://link.v1ce.co.uk/aaat1n/964349

submitted by /u/MisterMafiaMan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reported Google Search Brute Force Sequence, Google Responded Infeasible (Won't Fix)

simple brute force sequence I discovered example of many: g[]saty[s[y]tsd. absolutely destroys it

submitted by /u/TrickorTreatTrick
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CyberSecurity Practice Labs

Continue reading on Medium »
Read more...

CyberSecurity Practice Labs
https://hacksheets.medium.com/cybersecurity-practice-labs-73ee77aa1245?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Continue reading on Medium » (https://hacksheets.medium.com/cybersecurity-practice-labs-73ee77aa1245?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How To Setup Advance Nessus Network Scan?
https://justm0rph3u5.medium.com/how-to-setup-advance-nessus-network-scan-c7fcf89e417b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is an unofficial Nessus blog which deals with advance scans for better results and compliance. There will be section for…Continue reading on Medium » (https://justm0rph3u5.medium.com/how-to-setup-advance-nessus-network-scan-c7fcf89e417b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video