Hacking on Medium
Is spyware more dangerous than government surveillance?

https://cdn-images-1.medium.com/max/2600/0*Ji0cUAAo648XZlTU
The Pegasus spyware capable of spying on your text messages, emails, contact list, microphone, and camera.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Story OF MY 3RD Bounty From Facebook

Hi , I am Aashish Jung Kunwar from Dhangadhi , Nepal . Today I am back with a new writeup . The writeup is about how I got my 3rd bounty…Continue reading on Medium »
Read more...

TeamsUserEnum - User Enumeration With Microsoft Teams API

Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blogUsage Microsoft Teams with the search features. This tool validates an email address or a list of email addresses. If these emails exist the presence of the user is retrieved as well as the device used to connect Usage: UserEnumTeams userenum flags Flags: -e, --email string Email address -f, --file string File containing the email address -h, --help help for userenum -t, --token string Bearer token (only the base64 part: eyJ0...) Global Flags: -v, --verbose Verbose ">> .\UserEnumTeams userenum --helpUsers can be enumerated on Microsoft Teams with the search features.This tool validates an email address or a list of email addresses.If these emails exist the presence of the user is retrieved as well as the device used to connectUsage: UserEnumTeams userenum flagsFlags: -e, --email string Email address -f, --file string File containing the email address -h, --help help for userenum -t, --token string Bearer token (only the base64 part: eyJ0...)Global Flags: -v, --verbose Verbose .\UserEnumTeams userenum -u emails.txt -t eyJ0eXAiOiJKV1QiLCJub25jZSI6IlpNc3FVTnJDeUJaYTBJZ3RXSmFsNUZWVjRU……vKiXYtCir3GJ9rMPAhPXiXSzSMeOPiSaM7SDoCg .\UserEnumTeams userenum -u emails.txt -t eyJ0eXAiOiJKV1QiLCJub25jZSI6IlpNc3FVTnJDeUJaYTBJZ3RXSmFsNUZWVjRU……vKiXYtCir3GJ9rMPAhPXiXSzSMeOPiSaM7SDoCg -v Download TeamsUserEnum
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Hey wanting to know about a browser that's been offline since a while

Candle has been offline for a pretty long time now. Is there any reason which Im not aware of ?

submitted by /u/Paarth_r
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

TeamsUserEnum - User Enumeration With Microsoft Teams API
http://www.kitploit.com/2021/07/teamsuserenum-user-enumeration-with.html

___________________________
@hacking_Attack
@Hacking_Video

Sometimes user enumeration (https://www.kitploit.com/search/label/User%20Enumeration) could be sometimes useful during the reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog (https://www.immunit.ch/blog/2021/07/05/microsoft-teams-user-enumeration/)
Usage
.\UserEnumTeams userenum --help Users can be enumerated on Microsoft Teams with the search features. This tool validates an email address or a list of email addresses. If these emails (https://www.kitploit.com/search/label/Emails) exist the presence of the user is retrieved as well as the device used to connect Usage: UserEnumTeams userenum [flags] Flags: -e, --email string Email address -f, --file string File containing the email address -h, --help help for userenum -t, --token string Bearer token (only the base64 part: eyJ0...) Global Flags: -v, --verbose Verbose ">> .\UserEnumTeams userenum --help
Users can be enumerated on Microsoft Teams with the search features.
This tool validates an email address or a list of email addresses.
If these emails exist the presence of the user is retrieved as well as the device used to connect

Usage:
UserEnumTeams userenum [flags]

Flags:
-e, --email string Email address
-f, --file string File containing the email address
-h, --help help for userenum
-t, --token string Bearer token (only the base64 part: eyJ0...)

Global Flags:
-v, --verbose Verbose
.\UserEnumTeams userenum -u emails.txt -t eyJ0eXAiOiJKV1QiLCJub25jZSI6IlpNc3FVTnJDeUJaYTBJZ3RXSmFsNUZWVjRU……vKiXYtCir3GJ9rMPAhPXiXSzSMeOPiSaM7SDoCg

___________________________
@hacking_Attack
@Hacking_Video

.\UserEnumTeams userenum -u emails.txt -t eyJ0eXAiOiJKV1QiLCJub25jZSI6IlpNc3FVTnJDeUJaYTBJZ3RXSmFsNUZWVjRU……vKiXYtCir3GJ9rMPAhPXiXSzSMeOPiSaM7SDoCg -v

___________________________
@hacking_Attack
@Hacking_Video

Download TeamsUserEnum (https://github.com/immunIT/TeamsUserEnum)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: VoIPmonitor Sniffer

___________________________
@hacking_Attack
@Hacking_Video

Windows Command-Line Obfuscation
https://www.reddit.com/r/redteamsec/comments/oq2vt9/windows_commandline_obfuscation/

submitted by /u/Wietze- (https://www.reddit.com/user/Wietze-)
[link] (https://wietze.github.io/blog/windows-command-line-obfuscation) [comments] (https://www.reddit.com/r/redteamsec/comments/oq2vt9/windows_commandline_obfuscation/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IKS to keep your identity secure even when your connection drops

For those who wish to keep themselves protected when you're up to something not so good, a slight internet disconnection and this will halt all your internet activities until your connection is back so that your IP doesn't gets leaked.

submitted by /u/nancypjones
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Finding the website root directory on a Windows IIS web server using LFI exploit

I am currently doing a CTF and everything here is part of it.

I have found an LFI vulnerability in a website that allows me to download files on both the C drive and D drive. The D drive contains content relevant to the website however no jsp (the site uses jsp) scripts that I can download which could contain useful information.

I found a way to read the D drive using the exploit and have gathered several config files. I attempted to access what I believed to be the website root directory at C:/inetpub/wwwroot and it contains an iisstart.htm file however there is nothing related to the actual site.

Is there a config, log or any kind of file on the system which may give me more information as to where the website root is? Maybe I'm missing a config file or it could be located in a log? I have even downloaded and checked files such as lnk files to see if it contains useful paths.

submitted by /u/_chun_chun_maru
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is Stopping Cryptocurrency from Being Broken by a Large Botnet?

I will admit that my understanding of cryptocurrency is limited, but it seems to be vulnerable to a botnet attack, wherein malware silently infects devices that validates/stores transactions, and manipulates their ledgers simultaneously. Is my theory bunk, or is it a real threat? If you could manipulate enough ledgers at enough nodes, wouldn't this be feasible? Do we think something like this might be underway?

submitted by /u/Derangedteddy
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Proxy on twitter

Hi, I would like to keep my actual location anonymous, will a proxy setting on my Twitter application help? Please guide me As I already using VPN service as well.

submitted by /u/eik_bunjara
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Story OF MY 3RD Bounty From Facebook
https://imajk.medium.com/story-of-my-3rd-bounty-from-facebook-fef352853d1b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi , I am Aashish Jung Kunwar from Dhangadhi , Nepal . Today I am back with a new writeup . The writeup is about how I got my 3rd bounty…Continue reading on Medium » (https://imajk.medium.com/story-of-my-3rd-bounty-from-facebook-fef352853d1b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video