Hacking on Medium
How Not to Get Hacked on Telegram

https://cdn-images-1.medium.com/max/2600/1*TJMlSskm4YqOhY2WDz5UkA.jpeg
The lightweight chat client Telegram is one of the most common methods of communication in crypto, and there’s a good reason for that. SIM…

Continue reading on Immunefi »

Hacking on Medium
47 Insanely Useful Websites You Probably Have Never Seen

https://cdn-images-1.medium.com/max/612/0*cnKxVcS5HG90eA-L
These websites will give you a jaw-dropping experience, and you will embrace the ~world wide~ web even more.

Continue reading on Medium »

How Not to Get Hacked on Telegram

The lightweight chat client Telegram is one of the most common methods of communication in crypto, and there’s a good reason for that. SIM…Continue reading on Immunefi »
Read more...

hacking: security in practice
Anyone have any troubleshooting tips for a rubber ducky??

So I've been messing around with my own laptops with a rubber ducky and have gotten to execute a script to download a payload from a server and have netcat listen for a connection. I have had it work wonderfully and on multiple occasions over the past week and now, all of a sudden, it won't work. I've noticed that the file is now downloaded maybe once every 3 times and the connection is never fully made to netcat. My target system is Windows 10 while my host system is running Kali Linux. It's a simple command to run a PowerShell script hidden to download and execute a ps1 file from a specific webserver. I've only been using it internally on my network.

submitted by /u/Caddburry00
[link] [comments]

Hacking on Medium
Healthcare VulnHub Writeup

https://cdn-images-1.medium.com/max/1649/1*lzBq07WHid4t3liTpxreiA.png
This was a fun box. Given that my main occupation is in healthcare, it seemed fitting that I should attempt it. It was a fun box, but very…

Continue reading on Medium »

Hacking on Medium
How to measure and compare flashlights.

https://cdn-images-1.medium.com/max/2600/1*apwjRi2P-tvmBuY9Mxge2w.jpeg
Flashlights are available in a huge variety of sizes and shapes and power. Since, we review flashlights in our publication, an independent…

Continue reading on Friends of the 2nd Amendment »

Hacking Articles|Raj Chandel's Blog
Metasploit for Pentester: Clipboard

In this series of articles, we will be focusing on the various mechanisms of the Metasploit Framework that can be used by Penetration Testers. Here, we will be discussing about the External API extension provided by the Metasploit.  Among other things it provides the ability to target the clipboard of the target. Table of Content· Introduction· Starting Clipboard Monitoring· Getting a File from Clipboard· Dumping Clipboard Data· Pausing the Clipboard Capture· Purging Clipboard Capture· Setting Clipboard Data· Stopping Clipboard Capture· ConclusionDuring the late 2014s the Metasploit got an update featuring a functionality similar to the OJ TheColonial Reeves Extended API (extapi). It is originally intended for the Windows targets only, but it was refined and developed over time. It included 3 functionalities:load extapi Starting Clipboard MonitoringThis module doesn’t not indefinitely capture the clipboard data as the clipboard gets overwritten time to time as soon as the target copies another data into the memory. This data can range from text to files. It is surprising the amount of data that can be obtained from the clipboard. To initialize the capture, we will use the clipboard_monitor_start command.clipboard_monitor_start Getting a File from ClipboardAfter starting the clipboard monitoring using the command in the previous section, we move to our target machine to stimulate the Copying of files. Here we can see that inside a directory we are copying a PowerShell script file named openssh. It is quite possible that [...]

___________________________
@hacking_Attack
@Hacking_Video

it might contain a key that can be used to connect via SSH service.clipboard_get_data Dumping Clipboard DataWe just grabbed a singular file from the target but what if we want to get multiple files that are copied on its clipboard. To stimulate this, we again get back to the target machine. Here, we see that the target has an image file, text file and an application file inside a directory by the name of data. As target user, we copied all the files inside the directory.clipboard_monitor_dump Pausing the Clipboard CaptureIt is possible to get a large capture that could result into a failure and the amount of data transfer can raise some flags. Hence, it is recommended to pause the capture when you are not actively gathering the clipboard data from the target machine. If you ever want to un pause the capture, use the resume command.clipboard_monitor_pause Purging Clipboard CaptureNext command to discover is another that can help while working with the clipboard data. The amount of data captured by the clipboard can be overwhelming or maybe you just want to remove the captured data altogether. In such scenarios, you can use the purge command. In the demonstration we tried to dump the capture after running the purge and we can see that there is no data in the capture.clipboard_monitor_purge Setting Clipboard DataWhile introducing the clipboard commands, we said that it is possible to set the clipboard of the target machine as well. We need to use the set text command for this task. We take the text that we want to be stored inside the clipboard of the target user and then use it as a parameter between the double quotes as demonstrated in the image below. clipboard_set_text “You have been hacked”https://1.bp.blogspot.com/-BtVGrfoozzw/YQDnWt2YIMI/AAAAAAAAx48/8Lb7KdYsG008QjIB8nqiMTqqASbpqPnYQCLcBGAsYHQ/s16000/10.png Stopping Clipboard CaptureSimilar to the Pausing of the Clipboard. [...]

___________________________
@hacking_Attack
@Hacking_Video

There is a command to stop the capture altogether. The difference between the both is that while Paused capture can be resumed but the stopped cannot be resumed and the data that is captured is not accessible after the fact. clipboard_monitor_stop ConclusionConcluding this article, we can say that this was one of the lesser-known mechanism of the Metasploit Framework that can be used by any Penetration Tester. We will be discussing about the External API extension provided by the Metasploit later.___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse Email Search available in Australia?

Anyone know where I can reverse search an email address within Australia? Free or pay-to-use options that won't cost an arm and a leg?

submitted by /u/lilyj-love
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Metasploit for Pentester: Clipboard

In this series of articles, we will be focusing on the various mechanisms of the Metasploit Framework that can be used by Penetration Testers. Here, we will be discussing the External API extension provided by Metasploit.  Among other things, it provides the ability to target the clipboard of the target.

The post Metasploit for Pentester: Clipboard appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

RESEARCH METHODOLOGIES FOR BUG BOUNTY HUNTERS
https://medium.com/@kamalsharma.k9/research-methodologies-for-bug-bounty-hunters-a5fd281d228c?source=rss------bug_bounty-5

Good morning everyone , its me Kamal Sharma from Nepal. Cyber security has been so important in today’s world. Social media has…Continue reading on Medium » (https://medium.com/@kamalsharma.k9/research-methodologies-for-bug-bounty-hunters-a5fd281d228c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Pathprober : Probe And Discover HTTP Pathname Using Brute-Force Methodology And Filtered By Specific Word Or 2 Words At Once

Pathprober is a Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration test, because it could validate the directories using specific-word […]

The post Pathprober : Probe And Discover HTTP Pathname Using Brute-Force Methodology And Filtered By Specific Word Or 2 Words At Once appeared first on Kali Linux Tutorials.

RESEARCH METHODOLOGIES FOR BUG BOUNTY HUNTERS

Good morning everyone , its me Kamal Sharma from Nepal. Cyber security has been so important in today’s world. Social media has…Continue reading on Medium »
Read more...

Hacking on Medium
Mobile Hack Hone Se Kaise Bachaye : Complete Guide 2021

https://cdn-images-1.medium.com/max/1024/0*N9pTHD4oLXYPPslV.jpg
भारत में साइबर अटैक बहुत बड़ा मुद्दा है इसमें बहुत सारे लोगो के मोबाइल हैक हो चुके है। कई बार बैंक से पैसे उड़ चुके है और इसके अलावा कई बार…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video