KitPloit - PenTest Tools!
MANSPIDER - Spider Entire Networks For Juicy Files Sitting On SMB Shares. Search Filenames Or File Content - Regex Supported!

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberTalent — Exploiting Shellshock (CVE-2014–6271) on a Remote Server(Inside Lab)

https://cdn-images-1.medium.com/max/1200/1*gruWm7TwnL-qT3Psk7HtPg.png
Inside is a machine on Cyber talent that is rated as a medium machine. It presents a shellshock vulnerability that allows remote code…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I’m putting a WiFi router into a wall charger (Part 2)

https://cdn-images-1.medium.com/max/729/1*u3yE6cNDZBADh--L5eUThQ.png
This is the third part of a blog about putting a WiFi router into a phone charger; (see part zero here, see part one here) and feel free…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
find phone owner from picture

Is there a way to find a unique ID (sim or phone) from a picture's metadata? The picture in question is from an iPhone and in .jpg format. Thanks !

submitted by /u/dmc1oh1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I think my pc is part of a botnet. Can I remove myself?

Please help

submitted by /u/Dropex-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using MitmProxy for passwords

I have MitmProxy configured successfully. Where in the HTTPS traffic can I find a client’s credentials. For example, their Facebook login

submitted by /u/Thanstor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Generate an Evil QR Code with Excel Sheets

https://cdn-images-1.medium.com/max/1600/0*LZukYgzn-TyCvWSX
Hello and welcome to my first article.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tunneling my traffic through a TCP connection (or other solutions)

Hello, some time ago I got through an issue with my ISP where all websites would be very slow, throttled by the ISP, but when I run a Speedtest, it shows that I have a speed of 70Mbps, which in no way can be real when I can't even play YouTube videos.

So, I knew they were throttling every website that is not Speedtest, so I thought of an idea, I set up an OpenVPN server and set the http-proxy Host(SNI) to www.speedtest.net, so that all websites would be treated as Speedtest, and this actually worked. I got my full speed on the other websites that were being throttled.

Later, they seem to have patched that, it no longer gives me full speed on all websites, except that Speedtest still has the full speed working. I am not sure how it is being whitelisted right now, but using Fiddler I was able to tell that the Speedtest's test are downloading from a Speedtest host on port 8080. So, I opened a TCP connection using netcat, to that host on the specified port, and sent the DOWNLOADcommand, and this connection was unthrottled too! I was able to download through that TCP connection with my full speed.

But the thing is, through this TCP connection, I could only download random/temp data for the Speedtest, nothing that I want (aka: not browsing), which is useless.

I was wondering if there was some way that I could tunnel my traffic through a TCP connection started through netcat (or any other tool that can do this thing), so that I am browsing through an unthrottled connection = full speed to all websites.

Or if there was any other thing I could do to trick them into thinking I'm running a speedtest/connecting to their Speedtest servers so that I can get my full speed.

Thank you so much in advance.

submitted by /u/HakounaMatataGuy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Working with magstripes

I recently got a magstripe reader, I’m trying to understand how the data is processed, when the card is swiped. When reading the output of the raw data (which is hex)I’m seeing characters (after converting to ascii) such as: Thorn, Shift-out, or even exponents. I’m a little stumped on where to go from here just need a push in the right direction.

submitted by /u/R3aPer_21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Two Union ministers, Rahul Gandhi, Prashant Kishor on Pegasus list: Report

https://cdn-images-1.medium.com/max/2000/1*VeIMDiFdxKTYPt_Vy0q47Q.jpeg
Congress member Rahul Gandhu, former election commissioner Ashok Lavasa, recently-appointed railways, communications and IT minister…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting XSS with Cool Tricks

https://cdn-images-1.medium.com/max/1640/1*HhIS633kvMxP0-WOGelSRQ.png
Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…

Continue reading on InfoSec Write-ups »

Exploiting XSS with Cool Tricks

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…
Read more...

Exploiting XSS with Cool Tricks

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…Continue reading on InfoSec Write-ups »
Read more...

Exploiting XSS with Cool Tricks
https://infosecwriteups.com/exploiting-xss-with-cool-tricks-75a605a0115b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video