Haven’t seen you for a long time, right?Continue reading on Medium » (https://hackfreaks.medium.com/how-to-find-out-about-vulnerabilities-in-web-applications-before-attackers-5a171eade39d?source=rss------bug_bounty-5)

hacking: security in practice
USB flash memory code execution vulnerability?

Hi,

I was looking in exploit-db for such a vulnerability but I wasn't even sure how it is called: The way it should work is that I put specifically crafted data on my USB so that when it is connected to a PC, the PC runs a certain payload I choose without users knowledge.

How is this class of vulnerabilities called? Do you have an example for such a vulnerability? (No matter how old, preferably from exploit-db)

Thanks!

submitted by /u/ctm-8400
[link] [comments]

hacking: security in practice
Why hack pornhub

Ok so my pornhub has been recieving logins from russia, Thailand etc., dw i changed my password now.

But why bother hacking an account on a free site?

submitted by /u/Paralizex
[link] [comments]

hacking: security in practice
How to make a Cactus WHID/Rubber Ducky

So I want to make my own catus/Rubber ducky USB that works almost exactly like the originals, I mean like being able to do the scripts and all(I have a converter). I am new here and to hacking and I won't use this for any wrong, just wondering how to do it.

Thanks

submitted by /u/Redditcameforme
[link] [comments]

HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners

HoneyCreds network credential injection to detect responder and other network poisoners. Requirements Requires Python 3.6+ (tested on Python 3.9)smbprotocolcffisplunk-sdk Installation git clone https://github.com/Ben0xA/HoneyCreds.gitcd HoneyCredspip3 install -r requirements.txt Running python3 honeycreds.py Settings It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password. Change these in honeycreds.conf Choose a legit looking username def_username = 'honeycreds' This can match your current Short Domain def_domain = 'XQQX' Make this whatever you want. Note: HTTP requests will send this in plaintext def_password = 'This is a honey cred account.' The FQDN. Leave .local at the end. def_fqdn = 'xqqx.local' The hostname that DOES NOT EXIST but looks legit. def_hostname = 'HNECRD01' The log file and location def_logfile = 'honeycreds.log' Ability to turn SMB or HTTP on or off. Set to "OFF" to turn off. SMB = 'ON'HTTP = 'ON' The time to pause in seconds between requests. SMB_SLEEP = 5HTTP_SLEEP = 12 Download HoneyCreds
Read more...

HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners
http://www.kitploit.com/2021/06/honeycreds-network-credential-injection.html

HoneyCreds network credential injection (https://www.kitploit.com/search/label/Injection) to detect responder (https://www.kitploit.com/search/label/Responder) and other network poisoners. 
Requirements
Requires Python 3.6+ (tested on Python 3.9)
smbprotocol
cffi
splunk-sdk

Installation
git clone https://github.com/Ben0xA/HoneyCreds.git
cd HoneyCreds
pip3 install -r requirements.txt

Running
python3 honeycreds.py

Settings
It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password. Change these in honeycreds.conf Choose a legit looking username def_username = 'honeycreds' This can match your current Short Domain def_domain = 'XQQX' Make this whatever you want. Note: HTTP requests will send this in plaintext def_password = 'This is a honey cred account.' The FQDN. Leave .local at the end. def_fqdn = 'xqqx.local' The hostname that DOES NOT EXIST (https://www.kitploit.com/search/label/EXIST) but looks legit. def_hostname = 'HNECRD01' The log file and location def_logfile = 'honeycreds.log' Ability to turn SMB (https://www.kitploit.com/search/label/SMB) or HTTP on or off. Set to "OFF" to turn off. SMB = 'ON'
HTTP = 'ON' The time to pause in seconds between requests. SMB_SLEEP = 5
HTTP_SLEEP = 12

Download HoneyCreds (https://github.com/Ben0xA/HoneyCreds)

Kali Linux Tutorials
Volatility GUI : GUI For Volatility Forensics Tool

This is a GUI for Volatility forensics tool written in PyQT5. Prerequisites 1- Installed version of Volatility. 2- Install PyQT5. sudo apt-get install python3-pyqt5 3- Download Volatility GUI Configuration From the downloaded Volatility GUI, edit config.py file to specify 1- Python 2 bainary name or python 2 absolute path in python_bin. 2- Volatility binary absolute path in volatility_bin_loc. Then […]

The post Volatility GUI : GUI For Volatility Forensics Tool appeared first on Kali Linux Tutorials.

Hacking on Medium
Best Hacking Gadgets For Ethical Hackers

https://cdn-images-1.medium.com/max/2000/0*4pPS_DRqKJ9oj7Ci.jpg
Checkout some amazing gadgets for ethical hackers.

Continue reading on TheCyberGrabs »

Hacking on Medium
TAMUctf 2021 — Rust App LFI to Memory

TamuCTF

Continue reading on Medium »

KitPloit - PenTest Tools!
HoneyCreds - Network Credential Injection To Detect Responder And Other Network Poisoners

http://4.bp.blogspot.com/-BJlVYH49uKs/YNEgVQkPoaI/AAAAAAAAdSc/DhcgJDPJ6-AM0XlSFVMyEnfpKv2EVeAEwCK4BGAYYCw/w640-h404/HoneyCreds_1_honeycreds_screenshot-728277.png

HoneyCreds network credential injection to detect responder and other network poisoners.
Requirements

Requires Python 3.6+ (tested on Python 3.9)
smbprotocol
cffi
splunk-sdk


Installation

git clone https://github.com/Ben0xA/HoneyCreds.git
cd HoneyCreds
pip3 install -r requirements.txt


Running

python3 honeycreds.py


Settings

It is advised that you change these settings to best suit your environment. Note: You can use an existing account, just change the password.

Change these in honeycreds.conf

Choose a legit looking username

def_username = 'honeycreds'

This can match your current Short Domain

def_domain = 'XQQX'

Make this whatever you want. Note: HTTP requests will send this in plaintext

def_password = 'This is a honey cred account.'

The FQDN. Leave .local at the end.

def_fqdn = 'xqqx.local'

The hostname that DOES NOT EXIST but looks legit.

def_hostname = 'HNECRD01'

The log file and location

def_logfile = 'honeycreds.log'

Ability to turn SMB or HTTP on or off. Set to "OFF" to turn off.

SMB = 'ON'
HTTP = 'ON'

The time to pause in seconds between requests.

SMB_SLEEP = 5
HTTP_SLEEP = 12
Download HoneyCreds

Install Burp Suite [v2021.5.2] Pro on Windows
https://medium.com/@sherlock297/install-burp-suite-v2021-5-2-pro-on-windows-eaa2bcd4894f?source=rss------bug_bounty-5

Steps to Install Latest Burp Suite Pro v2021.5.2 on Windows.Continue reading on Medium » (https://medium.com/@sherlock297/install-burp-suite-v2021-5-2-pro-on-windows-eaa2bcd4894f?source=rss------bug_bounty-5)

How to find out about vulnerabilities in web applications before attackers

Haven’t seen you for a long time, right?Continue reading on Medium »
Read more...

Install Burp Suite [v2021.5.2] Pro on Windows

Steps to Install Latest Burp Suite Pro v2021.5.2 on Windows.Continue reading on Medium »
Read more...

Deep Web
suicide video - suicide? real?

https://external-preview.redd.it/dP_bKLDluS8rN9KWBTuAnrmgUsMaUSAPFzBhhZwIKqc.jpg?width=320&crop=smart&auto=webp&s=16dfc6d8c149f34401089b7a2ffa3d4974d09c3e submitted by /u/cat-fraud
[link] [comments]