Hacking on Medium
Intigriti — XSS Challenge 0621

https://cdn-images-1.medium.com/max/1882/0*hCbetEHw_bqy2kO1
XSS via WebAssembly

Continue reading on InfoSec Write-ups »

KitPloit - PenTest Tools!
Mythic - A Collaborative, Multi-Platform, Red Teaming Framework

https://1.bp.blogspot.com/-LcwRUkBapWw/YNElCTkO91I/AAAAAAAAdao/nIz-NwPsaS40RXUAvRBSNtX_nm2hh0GZwCNcBGAsYHQ/w640-h502/Mythic.png
A cross-platform, post-exploit, red teaming framework built with python3, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming.
Details

*
Check out a series of YouTube videos showing how Mythic looks/works and highlighting a few key features

*
Check out the blog post on the rebranding.

*
BSides Seattle 2019 Slides: Ready Player 2: Multiplayer Red Teaming against macOS

*
BSides Seattle 2019 Demo Videos: Available on my Youtube

*
Objective By the Sea 2019 talk on JXA: https://objectivebythesea.com/v2/talks/OBTS_v2_Thomas.pdf

*
Objective By the sea 2019 Video: https://www.youtube.com/watch?v=E-QEsGsq3uI&list=PLliknDIoYszvTDaWyTh6SYiTccmwOsws8&index=17

*
Current Version: 2.1.18
Documentation

All documentation for the Mythic project is being maintained on the docs.mythic-c2.net website.

Contributions

A bunch of people have suffered through bug reports, changes, and fixes to help make this project better. Thank you!

The following people have contributed a lot to the project. As you see their handles throughout the project on Payload Types and C2 Profiles, be sure to reach out to them for help and contributions:

* @djhohnstein
* @xorrior
* @Airzero24

Liability

This is an open source project meant to be used with authorization to assess the security posture and for research purposes.
Download Mythic

How to solve a challenge from Intigrity in under 60 minutes

Writeup to Intigriti’s 0621 XSS challengeContinue reading on Medium »
Read more...

Fingerprinting a webserver + finding new web applications

Tools, methodology and thoughtsContinue reading on Medium »
Read more...

Intigriti — XSS Challenge 0621

XSS via WebAssemblyContinue reading on InfoSec Write-ups »
Read more...

Deep Web
*** Scam Site? ***

i darkwebofficial.com legit, or a scam trying to troll clearnet ppl? Thnx.

submitted by /u/Gestan
[link] [comments]

hacking: security in practice
What is this?

I found it in my google drive, it says I downloaded it lastnight but I didn't....

https://drive.google.com/file/d/1wadspFWwhnarbPCv5LTEir5FaCowj4__/view?usp=sharing

submitted by /u/leadonornot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mac System Report

Hi, this is more general advice as I possibly might have become victim to a security hack on my MacBook. I have the before hack system report and a fresh install of a clean system report. Are there any specific programs or files I should be looking at in the “possibly affected” Mac system report? What would be some of the weird file names etc. (as a point I remember opening the Mac terminal and seeing a weird username). I have done a quick scan through it to compare the old and new and can’t really see anything obvious. Thanks.

submitted by /u/megaboobz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
INTERNET EXTORTION: Why is ‘ransomware’ on the rise?

https://cdn-images-1.medium.com/max/1920/1*NCc53EKYMd-gai19BgxSIQ.png
I’m sure you’ve heard of ransomware…

Continue reading on Medium »

hacking: security in practice
Log into router settings without redirecting to Mediacom control panel.

Anyone know how to do this on a hitron router/modem combo?

I don’t have physical access to the modem. It’s my stepdads and my family is on vacation.

submitted by /u/1NightWolf
[link] [comments]

hacking: security in practice
Podcast/Webseries

Hello everyone, I have never been on the deepweb, and I don't plan on it... I am starting a podcast, or web-story thing, with my friend All about the deep web, hacking, true scary stories, etc Preferably with pictures or videos. If anyone would like to share with me, please DM me, don't comment on the thread, as I would like to have a private conversation with people.

Thanks :)

submitted by /u/GOD_OF_THUNDER1726
[link] [comments]

hacking: security in practice
Suspicious log in attempt from place I bought airplane tickets to..

This is so weird

I recently bought airplane tickets to Kyiv, Ukraine on my current email address. Then someone logged into my old instagram account on my old email account that is not anyway associated with my current email. The IP associated with that log in is Kyiv, Ukraine...

How would that be possible? I don't get how the IP log in was in Kyiv , the same place I am heading to.

submitted by /u/Tom1l1
[link] [comments]

Kali Linux Tutorials
PPLdump : Dump The Memory Of A PPL With A Userland Exploit

PPLdump implements a userland exploit that was initially discussed by James Forshaw (a.k.a. @tiraniddo) – in this blog post – for dumping the memory of any PPL as an administrator. I wrote two blog posts about this tool. The first part is about Protected Processes concepts while the second one dicusses the bypass technique itself. Blog post part #1: Do You Really Know […]

The post PPLdump : Dump The Memory Of A PPL With A Userland Exploit appeared first on Kali Linux Tutorials.

hacking: security in practice
RPC Enumeration | Active Directory | Only for educational purposes!

NOTE: Only for educational purposes!

Hello Everyone!

Hope you all are doing great, In this video, I will show you how you can enumerate RPC to gain useful and important information about the target domain controller such as users, groups and so on! Hope you enjoy the video! Stay safe! Take care!

https://www.youtube.com/watch?v=FULONmrl3jo

submitted by /u/Vedant-Bhalgama
[link] [comments]

hacking: security in practice
How to change your public ip address without contacting isp?

I noticed that all of my devices connected to the same wifi network have the same ip when I look for “whats my ip” on google. I went into my router setting and I noticed that I can change my LAN ip (192.168.x.x)

But when I go to WAN settings I see the same ip address that I see on google on all my devices. I tried to change it from my router setting but it seems to be set in stone. All of this was done from my web browser on windows but I can use tools on kali as well I just dont know which ones.

submitted by /u/Matrix10011
[link] [comments]

About socat, a tool for listening to and connecting to shells on a remote machine after exploitation
https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/

<!-- SC_OFF -->I am currently studying syntax of socat tool. Here's a command :- socat TCP-L:(port) - (This is what we type on attacking machine for establishing a listener on it while using a reverse shell) I am confused with -L option here after tcp, i looked it up in man pages of socat and it say its a flag for lockfile.. And i am confused as to what file locking really is..and how is it related to socat in its syntax? <!-- SC_ON --> submitted by /u/Global_Negotiation_3 (https://www.reddit.com/user/Global_Negotiation_3)
[link] (https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/o9gk3j/about_socat_a_tool_for_listening_to_and/)