Hacking on Medium
Hackers Share Their Stories on The Hacker Factory Podcast

I have had the honor of podcasting for ITSPMagazine since February 2020.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Wormable DarkRadiation Ransomware se dirige a instancias de Linux y Docker

https://cdn-images-1.medium.com/max/905/0*es7kgy-douaZTdH4
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Sean Parker went from teenage hacker to billionaire

https://cdn-images-1.medium.com/max/1200/0*rKD3slJzhNceeHpF
Sean Parker got his start as a teenage hacker before cofounding Napster in 1999.

Continue reading on Business Insider »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Retro — Walkthrough

https://cdn-images-1.medium.com/max/804/0*Pckc-0thi0_buu7u
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
HashCheck - Tool To Assist In The Search For Leaked Passwords

https://1.bp.blogspot.com/-rLuvEmIHDNI/YNDoAHqxRpI/AAAAAAAAcxQ/6D5578eD7CIdbOQR_m_UDv8zoxmkSzeCwCNcBGAsYHQ/w640-h394/passwords.jpg This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method.

To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the first 5 characters. PrerequisitesThe project needs some libraries in order to work, to install it use the next command: pip install -r requirementsRemember that Python 3 is required. Usagepassme.py [FUNC] [ELEMENT] -engine [ENGINE] -api_key [API_KEY]hashes or password separeted by a new line. ENGINE: The leaks engine that you want to be used, by default it uses HIBP (Have I been PWN). API_KEY: The API_KEY necessary for some functions of some engines. ">FUNC: The kind of element tha you want to check, it can be -h/--hash or -p/--password
or -f/--file or -l/--list or --help.

ELEMENT: The "Hash", "Password" or the name of the file that contains a list of
hashes or password separeted by a new line.

ENGINE: The leaks engine that you want to be used, by default it uses HIBP (Have I been PWN).

API_KEY: The API_KEY necessary for some functions of some engines. FunctionsPASSME_HASHThe main project function receives the hashed password, the engine to be used and the API key.

Depending on the engine that is received, both the API key and the hashed password will be sent to one function or another.

If you want to add your own engine or an engine that is not already implemented, simply add one more option here. passme_hash(hashed_password, engine="HIBP", api_key="0")PASSME_PASSWORDThis function hashes the password it receives using SHA-1 and sends the hash to the passme_hash() function. passme_password(password, engine="HIBP", api_key="0")PASSME_FILEThis function reads one by one the lines of the received file to check each password, giving information about the received password and whether it has been filtered or not. passme_file(filename, engine="HIBP", api_key="0")PASSME_LISTThis function reads one by one the lines of the received file to check each hash, giving information about the received hash and whether it has been filtered or not. passme_list(filename, engine="HIBP", api_key="0")PASSME_LISTThe function that deals with the HIBP (Have i been pwned) API, sends the first five characters of the hash, then compares it with the full hash to see if the password/hash has been leaked. engine_HIBP(hashed_password, engine, api_key)TestThis project has a series of tests to check the correct operation of all its functions, for this purpose the "pytest" library has been used. To run the tests, install pytest with the following command: pip install pytestOnce installed, simply run the "pytest" command to have the tests run automatically, any errors encountered will be returned by the terminal.

The results of the test in the lab are the following:
Python Version Function Hash Function List Function Password RANDOM Hash RANDOM Password Comment 3.9
✅

✅

✅

✅

✅
3.8
✅

✅

✅

✅

✅
3.7
✅

✅

✅

✅

✅
3.6
✅

✅

✅

✅

✅
3.5
✅

✅

✅

❌

❌
Random.choice is not available in Python 3.5 // Deprecated Python Version ContactTHE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT [...]

___________________________
@hacking_Attack
@Hacking_Video

HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

This software doesn't have a QA Process. This software is a Proof of Concept.

If you have any problems, you can contact: ideaslocas@telefonica.com - Ideas Locas CDCO - Telefónica DisclaimerIn many places it can be a crime to install software on a computer that does not belong to you, without the owner's consent. We do not approve the use of PoC for any illegal purpose. To download or use our software in any way, you must acknowledge and approve the following:

1 - You declare that this PoC will be used exclusively in a legal manner. If you are in doubt as to the legality, consult a licensed attorney in the jurisdiction where you will be using this PoC.

2 - You acknowledge that the computer on which the software is to be installed is yours or you have the owner's consent to manage and install the software on it. Download HashCheck

___________________________
@hacking_Attack
@Hacking_Video

Interview with Legendary Bug Bounty Hunter Alexander Schlindwein
https://medium.com/immunefi/interview-with-legendary-bug-bounty-hunter-alexander-schlindwein-cced9c73c02a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Alexander Schlindwein has quickly become one of the top players in DeFi security after claiming some of the biggest bounties in the world…Continue reading on Immunefi » (https://medium.com/immunefi/interview-with-legendary-bug-bounty-hunter-alexander-schlindwein-cced9c73c02a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Opinions on radare2 as a forensics, reverse engineering, debugging, and binary exploitation tool

I've been working on several reverse engineering and binary exploitation challenges and was wondering if I could get some opinions on radare2 as a tool in this regard. Ideally, I'd like to spend my time really learning a single tool really well rather than knowing how to use many tools to a lesser extent. Since radare2 is a command line tool that is easy to get running on a Linux machine, it is my main focus as opposed to tools like IDA or Immunity. Opinions and suggestions from those experienced in this area would be greatly appreciated.

submitted by /u/mohgandhi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Robo de contraseñas 103 — Automatizando el proceso

https://cdn-images-1.medium.com/max/600/1*WeyXnn0f1j2I0JSK-vkYgA.jpeg
Ahora ya sabemos cómo se roba una contraseña en Windows, por lo que conocemos los pasos que debemos dar.

Continue reading on Medium »

Hacking on Medium
Kali Linux en Raspberry Pi parte 1: instalando Kali Linux en la Raspberry Pi

https://cdn-images-1.medium.com/max/603/1*oNuMIsERt-xD1fjvmJZXDQ.png
Introducción

Continue reading on Medium »

Hacking on Medium
Note-Taking and Hacking with Git

https://cdn-images-1.medium.com/max/2600/0*XJ-oNQXYKOoI4bgq
In the past, I’ve used applications like Evernote and still continue to use Notion for daily notes, to-do lists, and important snippets…

Continue reading on Medium »

How i was able to get Appreciation from the organization of a website just by changing a sign..!!!

Hi there, This write-up is for the beginners who are into the bug-bounties, and are searching for new-way of finding vulnerabilities. This…Continue reading on Medium »
Read more...