hacking: security in practice
Tunneling my traffic through a TCP connection (or other solutions)

Hello, some time ago I got through an issue with my ISP where all websites would be very slow, throttled by the ISP, but when I run a Speedtest, it shows that I have a speed of 70Mbps, which in no way can be real when I can't even play YouTube videos.

So, I knew they were throttling every website that is not Speedtest, so I thought of an idea, I set up an OpenVPN server and set the http-proxy Host(SNI) to www.speedtest.net, so that all websites would be treated as Speedtest, and this actually worked. I got my full speed on the other websites that were being throttled.

Later, they seem to have patched that, it no longer gives me full speed on all websites, except that Speedtest still has the full speed working. I am not sure how it is being whitelisted right now, but using Fiddler I was able to tell that the Speedtest's test are downloading from a Speedtest host on port 8080. So, I opened a TCP connection using netcat, to that host on the specified port, and sent the DOWNLOADcommand, and this connection was unthrottled too! I was able to download through that TCP connection with my full speed.

But the thing is, through this TCP connection, I could only download random/temp data for the Speedtest, nothing that I want (aka: not browsing), which is useless.

I was wondering if there was some way that I could tunnel my traffic through a TCP connection started through netcat (or any other tool that can do this thing), so that I am browsing through an unthrottled connection = full speed to all websites.

Or if there was any other thing I could do to trick them into thinking I'm running a speedtest/connecting to their Speedtest servers so that I can get my full speed.

Thank you so much in advance.

submitted by /u/HakounaMatataGuy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Working with magstripes

I recently got a magstripe reader, I’m trying to understand how the data is processed, when the card is swiped. When reading the output of the raw data (which is hex)I’m seeing characters (after converting to ascii) such as: Thorn, Shift-out, or even exponents. I’m a little stumped on where to go from here just need a push in the right direction.

submitted by /u/R3aPer_21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Two Union ministers, Rahul Gandhi, Prashant Kishor on Pegasus list: Report

https://cdn-images-1.medium.com/max/2000/1*VeIMDiFdxKTYPt_Vy0q47Q.jpeg
Congress member Rahul Gandhu, former election commissioner Ashok Lavasa, recently-appointed railways, communications and IT minister…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting XSS with Cool Tricks

https://cdn-images-1.medium.com/max/1640/1*HhIS633kvMxP0-WOGelSRQ.png
Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…

Continue reading on InfoSec Write-ups »

Exploiting XSS with Cool Tricks

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…
Read more...

Exploiting XSS with Cool Tricks

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…Continue reading on InfoSec Write-ups »
Read more...

Exploiting XSS with Cool Tricks
https://infosecwriteups.com/exploiting-xss-with-cool-tricks-75a605a0115b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. If you are…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-xss-with-cool-tricks-75a605a0115b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Beaconator: A beacon generator using Cobalt Strike and PEzor.
https://www.reddit.com/r/redteamsec/comments/onyeov/beaconator_a_beacon_generator_using_cobalt_strike/

submitted by /u/CaptMeelo (https://www.reddit.com/user/CaptMeelo)
[link] (https://github.com/capt-meelo/Beaconator) [comments] (https://www.reddit.com/r/redteamsec/comments/onyeov/beaconator_a_beacon_generator_using_cobalt_strike/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking into snap?

Trying to hack into someone’s snap. Any help would be greatly appreciated 🙋🏻‍♂️

submitted by /u/flrs7
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the steps you take when cracking a hash?

I found a hash in a response header online, which I am positive is a MD5 hash. It’s labeled « X-MD5-Hash » on the website, hash-identifier and hashid see it as MD5, everyone sees it as MD5. My problem is that I ran it against an 84 billion dictionary without success - now it’s possible the password is something else entirely, but I doubt it very deeply considering the huge list I used.

Regardless of my beliefs, what do you guys usually do when cracking hashes you can’t find? What should be the next step for me?

submitted by /u/BioFrosted
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is the Comptia Security+ Certification useful if you want to get into pentesting?
https://www.reddit.com/r/Pentesting/comments/onyakk/is_the_comptia_security_certification_useful_if/

submitted by /u/aqestfrgyjkltech (https://www.reddit.com/user/aqestfrgyjkltech)
[link] (https://www.reddit.com/r/Pentesting/comments/onyakk/is_the_comptia_security_certification_useful_if/) [comments] (https://www.reddit.com/r/Pentesting/comments/onyakk/is_the_comptia_security_certification_useful_if/)

___________________________
@hacking_Attack
@Hacking_Video

All your files belongs to Me (An IDOR Story)

This is small story about IDOR bug in private bug bounty program, I do bug bounties as a hobby in my free time and this lead to an…Continue reading on Medium »
Read more...

All your files belongs to Me (An IDOR Story)
https://medium.com/@prayas.kulshresth/all-your-files-belongs-to-me-an-idor-story-2b2b130daf1c?source=rss------bug_bounty-5

This is small story about IDOR bug in private bug bounty program, I do bug bounties as a hobby in my free time and this lead to an…Continue reading on Medium » (https://medium.com/@prayas.kulshresth/all-your-files-belongs-to-me-an-idor-story-2b2b130daf1c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video