How i got a Widget-Dev access of site because of improper authorization

Hi everyoneContinue reading on Medium »
Read more...

hacking: security in practice
Is there a way to automatically take surveys

How can I automatically complete surveys is there any software's that would allow me to complete this task of mine?

submitted by /u/little2n
[link] [comments]

hacking: security in practice
Is there a way to automatically make emails

How can I automatically make emails is there any software's that would allow me to complete this task of mine?

submitted by /u/little2n
[link] [comments]

Install httpx on Ubuntu

httpx : fast and multi-purpose HTTP toolkit.Continue reading on Medium »
Read more...

Kali Linux Tutorials
Gundog : Guided Hunting In Microsoft 365 Defender

gundog – PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially (if not only) for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID (you might received via Email notification) and gundog will then hunt for as much as possible associated data. […]

The post Gundog : Guided Hunting In Microsoft 365 Defender appeared first on Kali Linux Tutorials.

Hacking on Medium
Encrypted format with No private key and public key availability.

https://cdn-images-1.medium.com/max/1920/1*fIvz6ZtIpNlmjKlZZk5zfg.jpeg
Data Encryption is done end to end, without any availability of public keys and private keys in Database, server and internal storage of…

Continue reading on Medium »

How to find out about vulnerabilities in web applications before attackers
https://hackfreaks.medium.com/how-to-find-out-about-vulnerabilities-in-web-applications-before-attackers-5a171eade39d?source=rss------bug_bounty-5

Haven’t seen you for a long time, right?Continue reading on Medium » (https://hackfreaks.medium.com/how-to-find-out-about-vulnerabilities-in-web-applications-before-attackers-5a171eade39d?source=rss------bug_bounty-5)

hacking: security in practice
USB flash memory code execution vulnerability?

Hi,

I was looking in exploit-db for such a vulnerability but I wasn't even sure how it is called: The way it should work is that I put specifically crafted data on my USB so that when it is connected to a PC, the PC runs a certain payload I choose without users knowledge.

How is this class of vulnerabilities called? Do you have an example for such a vulnerability? (No matter how old, preferably from exploit-db)

Thanks!

submitted by /u/ctm-8400
[link] [comments]

hacking: security in practice
Why hack pornhub

Ok so my pornhub has been recieving logins from russia, Thailand etc., dw i changed my password now.

But why bother hacking an account on a free site?

submitted by /u/Paralizex
[link] [comments]

hacking: security in practice
How to make a Cactus WHID/Rubber Ducky

So I want to make my own catus/Rubber ducky USB that works almost exactly like the originals, I mean like being able to do the scripts and all(I have a converter). I am new here and to hacking and I won't use this for any wrong, just wondering how to do it.

Thanks

submitted by /u/Redditcameforme
[link] [comments]

HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners

HoneyCreds network credential injection to detect responder and other network poisoners. Requirements Requires Python 3.6+ (tested on Python 3.9)smbprotocolcffisplunk-sdk Installation git clone https://github.com/Ben0xA/HoneyCreds.gitcd HoneyCredspip3 install -r requirements.txt Running python3 honeycreds.py Settings It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password. Change these in honeycreds.conf Choose a legit looking username def_username = 'honeycreds' This can match your current Short Domain def_domain = 'XQQX' Make this whatever you want. Note: HTTP requests will send this in plaintext def_password = 'This is a honey cred account.' The FQDN. Leave .local at the end. def_fqdn = 'xqqx.local' The hostname that DOES NOT EXIST but looks legit. def_hostname = 'HNECRD01' The log file and location def_logfile = 'honeycreds.log' Ability to turn SMB or HTTP on or off. Set to "OFF" to turn off. SMB = 'ON'HTTP = 'ON' The time to pause in seconds between requests. SMB_SLEEP = 5HTTP_SLEEP = 12 Download HoneyCreds
Read more...

HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners
http://www.kitploit.com/2021/06/honeycreds-network-credential-injection.html

HoneyCreds network credential injection (https://www.kitploit.com/search/label/Injection) to detect responder (https://www.kitploit.com/search/label/Responder) and other network poisoners. 
Requirements
Requires Python 3.6+ (tested on Python 3.9)
smbprotocol
cffi
splunk-sdk

Installation
git clone https://github.com/Ben0xA/HoneyCreds.git
cd HoneyCreds
pip3 install -r requirements.txt

Running
python3 honeycreds.py

Settings
It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password. Change these in honeycreds.conf Choose a legit looking username def_username = 'honeycreds' This can match your current Short Domain def_domain = 'XQQX' Make this whatever you want. Note: HTTP requests will send this in plaintext def_password = 'This is a honey cred account.' The FQDN. Leave .local at the end. def_fqdn = 'xqqx.local' The hostname that DOES NOT EXIST (https://www.kitploit.com/search/label/EXIST) but looks legit. def_hostname = 'HNECRD01' The log file and location def_logfile = 'honeycreds.log' Ability to turn SMB (https://www.kitploit.com/search/label/SMB) or HTTP on or off. Set to "OFF" to turn off. SMB = 'ON'
HTTP = 'ON' The time to pause in seconds between requests. SMB_SLEEP = 5
HTTP_SLEEP = 12

Download HoneyCreds (https://github.com/Ben0xA/HoneyCreds)

Kali Linux Tutorials
Volatility GUI : GUI For Volatility Forensics Tool

This is a GUI for Volatility forensics tool written in PyQT5. Prerequisites 1- Installed version of Volatility. 2- Install PyQT5. sudo apt-get install python3-pyqt5 3- Download Volatility GUI Configuration From the downloaded Volatility GUI, edit config.py file to specify 1- Python 2 bainary name or python 2 absolute path in python_bin. 2- Volatility binary absolute path in volatility_bin_loc. Then […]

The post Volatility GUI : GUI For Volatility Forensics Tool appeared first on Kali Linux Tutorials.