hacking: security in practice
Connect to security camera server to view remote camera feeds
My parents are going on vacation and installed security cameras around the house, solely for the purpose of making sure i don't have my girlfriend over (I'm 20 going to school, working full time, am straight edge as can be, wtf?). I'm basically trying to see what the camera feeds are looking at, to make sure i don't have one chilling in my room or somewhere inside the house.
* The server is connected to our router via ethernet and has a single IP address, and the cameras are all connected to that server. Normally, it seems like I'd be able to log in to the server using the server's local IP (expected) but since I don't have the login I'm a bit restricted. Is there a way I can ssh into this server or something (i've tried using ssh to the local IP but it refuses connection)?
* I don't think any kind of brute force attack is possible because the login ip-blocks after 6 attempts (unless I spoof a new address every 6 attempts). Additionally, the server has the option to reset the password using a 'GUID' file, which I'm guessing is a file containing some string that is unique to the server, but this is risking leaving a trail.
* Is there a backdoor on the login page? It looks like there's an angular JS file making several references to userID and password from a scope, and if I can somehow access $scope I can return the values of the username and password which are accessible through the scope.
I'm not terribly versed in this stuff but I am versed in Python and know a bit of linux. I don't want to leave a trail by cutting wires or something. Correct me if I'm wrong, but this is 100% ethical. I'm dealing with abusive parents who I cannot simply talk to about this stuff. Help is greatly appreciated.
submitted by /u/seekingstars
[link] [comments]
Connect to security camera server to view remote camera feeds
My parents are going on vacation and installed security cameras around the house, solely for the purpose of making sure i don't have my girlfriend over (I'm 20 going to school, working full time, am straight edge as can be, wtf?). I'm basically trying to see what the camera feeds are looking at, to make sure i don't have one chilling in my room or somewhere inside the house.
* The server is connected to our router via ethernet and has a single IP address, and the cameras are all connected to that server. Normally, it seems like I'd be able to log in to the server using the server's local IP (expected) but since I don't have the login I'm a bit restricted. Is there a way I can ssh into this server or something (i've tried using ssh to the local IP but it refuses connection)?
* I don't think any kind of brute force attack is possible because the login ip-blocks after 6 attempts (unless I spoof a new address every 6 attempts). Additionally, the server has the option to reset the password using a 'GUID' file, which I'm guessing is a file containing some string that is unique to the server, but this is risking leaving a trail.
* Is there a backdoor on the login page? It looks like there's an angular JS file making several references to userID and password from a scope, and if I can somehow access $scope I can return the values of the username and password which are accessible through the scope.
I'm not terribly versed in this stuff but I am versed in Python and know a bit of linux. I don't want to leave a trail by cutting wires or something. Correct me if I'm wrong, but this is 100% ethical. I'm dealing with abusive parents who I cannot simply talk to about this stuff. Help is greatly appreciated.
submitted by /u/seekingstars
[link] [comments]
Reddit
Connect to security camera server to view remote camera feeds : r/hacking
2.9M subscribers in the hacking community. A subreddit dedicated to hacking and hackers.
Constructive collaboration and learning about exploits, industry standards, grey and white hat hacking, new hardware and software hacking technology, sharing ideas and…
Constructive collaboration and learning about exploits, industry standards, grey and white hat hacking, new hardware and software hacking technology, sharing ideas and…
Reflected XSS Through Insecure Dynamic Loading
Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...
Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts
MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts. MacHound collects information about logged-in users, and administrative group members on Mac machines and ingest the information into the Bloodhound database. In addition to using the HasSession and AdminTo edges, MacHound adds three new edges […]
The post MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts
MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts. MacHound collects information about logged-in users, and administrative group members on Mac machines and ingest the information into the Bloodhound database. In addition to using the HasSession and AdminTo edges, MacHound adds three new edges […]
The post MacHound : An extension to audit Bloodhound collecting and ingesting of Active Directory relationships on MacOS hosts appeared first on Kali Linux Tutorials.
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
MacHound : An extension to audit Bloodhound collecting and ingesting
MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts.
Reflected XSS Through Insecure Dynamic Loading
https://infosecwriteups.com/reflected-xss-through-insecure-dynamic-loading-dbf4d33611e0?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://infosecwriteups.com/reflected-xss-through-insecure-dynamic-loading-dbf4d33611e0?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Reflected XSS Through Insecure Dynamic Loading
Finding A Unique and Complex Payload To Load Remote Scripts
Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/reflected-xss-through-insecure-dynamic-loading-dbf4d33611e0?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Reflected XSS Through Insecure Dynamic Loading
Finding A Unique and Complex Payload To Load Remote Scripts
Reflected XSS Through Insecure Dynamic Loading
Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...
Finding A Unique and Complex Payload To Load Remote ScriptsContinue reading on InfoSec Write-ups »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Reflected XSS Through Insecure Dynamic Loading
https://cdn-images-1.medium.com/max/921/1*SZxEvYsp2L1OyT9yx_pJqQ.png
Finding A Unique and Complex Payload To Load Remote Scripts
Continue reading on InfoSec Write-ups »
Reflected XSS Through Insecure Dynamic Loading
https://cdn-images-1.medium.com/max/921/1*SZxEvYsp2L1OyT9yx_pJqQ.png
Finding A Unique and Complex Payload To Load Remote Scripts
Continue reading on InfoSec Write-ups »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Dark Web : How to surf it :)
https://cdn-images-1.medium.com/max/1378/1*l2ECNVF49WWNroFlbfRmoA.jpeg
Hey guys, hope you all doing good. check out my previous article.
Continue reading on Medium »
Dark Web : How to surf it :)
https://cdn-images-1.medium.com/max/1378/1*l2ECNVF49WWNroFlbfRmoA.jpeg
Hey guys, hope you all doing good. check out my previous article.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Rust Utilities for Developers
https://cdn-images-1.medium.com/max/1920/1*0sc79mZlqr8FU3hxTFrS0w.png
Open Source Rust utilities for developers.
Continue reading on Medium »
Rust Utilities for Developers
https://cdn-images-1.medium.com/max/1920/1*0sc79mZlqr8FU3hxTFrS0w.png
Open Source Rust utilities for developers.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Pwnable.kr — bof : Basic buffer overflow
https://cdn-images-1.medium.com/max/600/1*HidceHDw4ymAEv9GQpU2zg.png
This is my writeup of the bof challenge from pwnable.kr . In this writeup, we will not rely on debuggers and we will not read the source…
Continue reading on Medium »
Pwnable.kr — bof : Basic buffer overflow
https://cdn-images-1.medium.com/max/600/1*HidceHDw4ymAEv9GQpU2zg.png
This is my writeup of the bof challenge from pwnable.kr . In this writeup, we will not rely on debuggers and we will not read the source…
Continue reading on Medium »
Deep Web
WHM Bullshit
WHM page decides when it wants to work and when it wants to waste my time with a glitched out verification, then when I get there the page won’t fully load and nothing works. Can’t even open the fuckin PGP pages. Anyone have issues with this before ?
submitted by /u/Gonnagetbannedddd
[link] [comments]
WHM Bullshit
WHM page decides when it wants to work and when it wants to waste my time with a glitched out verification, then when I get there the page won’t fully load and nothing works. Can’t even open the fuckin PGP pages. Anyone have issues with this before ?
submitted by /u/Gonnagetbannedddd
[link] [comments]
reddit
WHM Bullshit
WHM page decides when it wants to work and when it wants to waste my time with a glitched out verification, then when I get there the page won’t...
Deep Web
Help a newbie
So I want to make a purchase on a website using Tor, and I have to send Bitcoin to an address. Is there any service besides Tor I should be using? How would I go about sending Bitcoin to this address?
submitted by /u/SpecifyingSubs
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Help a newbie
So I want to make a purchase on a website using Tor, and I have to send Bitcoin to an address. Is there any service besides Tor I should be using? How would I go about sending Bitcoin to this address?
submitted by /u/SpecifyingSubs
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Help a newbie
So I want to make a purchase on a website using Tor, and I have to send Bitcoin to an address. Is there any service besides Tor I should be using?...
Critical Bug Bounty Reports: Part 1
https://infosecwriteups.com/critical-bug-bounty-reports-part-1-6fd9aef4b486?source=rss------bug_bounty-5
https://infosecwriteups.com/critical-bug-bounty-reports-part-1-6fd9aef4b486?source=rss------bug_bounty-5
Short Write-Ups On P1/Critical Bugs I’ve Submitted to Bounty ProgramsContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/critical-bug-bounty-reports-part-1-6fd9aef4b486?source=rss------bug_bounty-5)