Hacking on Medium
The Case Against Hacking!

Why I Believe Hacking Is An Unhealthy Practice Both Mentally & Emotionally.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
$2k for whoever kills me good luck

submitted by /u/HappyMadison007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
$2000 whoever finds me and kills me

submitted by /u/HappyMadison007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/6kI_9MPhlisLMZTinLj5g29lF_8o2pXVQsEZITQBkdc.jpg So basically this guy is cloning credit cards and made a tiktok video about it but then I saw this usb hub with tons of internet flashdrives connected to it:

16 internet usb sticks plugged into an usb hub

this is the full video

What is it supposed to do? I tought it would work like an tor network or some sniffer but I'm not sure. Has anyone seen anything like that?

Also every envelope has a sim card on it with the victims email and credit card password which makes me a way more curious

submitted by /u/r0ut66
[link] [comments]

hacking: security in practice
Snap 👻 Bug

Hey y’all, recently SC had a bug. Now I got a issue with some of the info. But if y’all feel me and could do something about it. Hml.

submitted by /u/tysbonus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to know if one is dealing with a hacker for a good cause, or a nefarious?

I want to do good, and I need help, but how would I know who to trust?

submitted by /u/Clinton-Elliot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
TokenTactics : Azure JWT Token Manipulation Toolset

TokenTactics is a Azure JSON Web Token (“JWT”) Manipulation Toolset. Azure access tokens allow you to authenticate to certain endpoints as a user who signs in with a device code. Even if they used multi-factor authentication. Once you have a user’s access token, it may be possible to access certain apps such as Outlook, SharePoint, […]

The post TokenTactics : Azure JWT Token Manipulation Toolset appeared first on Kali Linux Tutorials.

Kali Linux Tutorials
Reconmap : VAPT (Vulnerability Assessment And Penetration Testing) Automation And Reporting Platform

Reconmap is a vulnerability assessment and penetration testing (VAPT) platform. It helps software engineers and infosec pros collaborate on security projects, from planning, to implementation and documentation. The tool’s aim is to go from recon to report in the least possible time. Requirements Docker Docker compose Documentation Go to https://reconmap.org to find the user, admin and developer […]

The post Reconmap : VAPT (Vulnerability Assessment And Penetration Testing) Automation And Reporting Platform appeared first on Kali Linux Tutorials.

Hacking on Medium
Ethical Hacking

https://cdn-images-1.medium.com/max/1170/1*OCVNtsDskViRoyQtogH4Pg.jpeg
Hello Dear Readers,

Continue reading on Medium »

Hacking on Medium
Your phone might not be hacked While it's of, but that doean't mean it's totally safe.

1.If it was Jailbroken:

Continue reading on Medium »

Hacking on Medium
HYBRID HACKER SUMMER CAMP 2021 GUIDE — Part One: Surviving Physical + Virtual Vegas

https://cdn-images-1.medium.com/max/1814/1*GiZNtOCjOrUkzNfaZlQu0w.jpeg
Welcome to the DCG 201 guide to Hybrid Hacker Summer Camp! This is part of a series where we are going to cover all the various hacker…

Continue reading on Medium »

Attack AI systems in Machine Learning Evasion Competition | Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/ouh05g/attack_ai_systems_in_machine_learning_evasion/

submitted by /u/AdmiralDoughnot (https://www.reddit.com/user/AdmiralDoughnot)
[link] (https://www.microsoft.com/security/blog/2021/07/29/attack-ai-systems-in-machine-learning-evasion-competition/) [comments] (https://www.reddit.com/r/redteamsec/comments/ouh05g/attack_ai_systems_in_machine_learning_evasion/)

Deep Web
What is Multisig?

I'm a noob lol. I've got to add a bitcoin public key to my account to make an order. What is a bitcoin public key? And additional information is greatly appreciated lol

submitted by /u/Phragram
[link] [comments]

Black Hat Ethical Hacking
Hackers used never-before-seen wiper in recent attack on Iranian train system

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hackers used never-before-seen wiper in recent attack on Iranian train systemPost Views: 90
Reading Time: 2 Minutes
Researchers with cybersecurity company SentinelOne reconstructed the recent cyberattack on Iran’s train system in a new report, uncovering a new threat actor — which they named ‘MeteorExpress’ — and a never-before-seen wiper.
On July 9, local news outlets began reporting on a cyberattack targeting the Iranian train system, with hackers defacing display screens in train stations by asking passengers to call ‘64411’, the phone number of Iranian Supreme Leader Khamenei’s office.

Train services were disrupted and just one day later, hackers took down the website of Iran’s transport ministry. According to Reuters, the ministry’s portal and sub-portal sites went down after the attack targeted computers at the Ministry of Roads and Urban Development.

In his examination, SentinelOne principal threat analyst Juan Andres Guerrero-Saade explained that the people behind the attack called the never-before-seen wiper ‘Meteor’ and developed it in the last three years.
“At this time, we have not been able to tie this activity to a previously identified threat group nor to additional attacks,” Guerrero-Saade said, adding that they were able to reconstruct the attack thanks to security researcher Anton Cherepanov and an Iranian antivirus company.

“Despite a lack of specific indicators of compromise, we were able to recover most of the attack components described in the post along with additional components they had missed. Behind this outlandish tale of stopped trains and glib trolls, we found the fingerprints of an unfamiliar attacker.”

Guerrero-Saade said the early analysis of Padvish security researchers was key to SentinelOne’s reconstruction alongside “a recovered attacker artifact that included a longer list of component names.”
See Also: Microsoft: New Unpatched Bug in Windows Print Spooler
“The attackers abused Group Policy to distribute a cab file to conduct their attack. The overall toolkit consists of a combination of batch files orchestrating different components dropped from RAR archives,” Guerrero-Saade explained.

“The archives decompressed with an attacker-supplied copy of Rar.exe coupled with the password ‘hackemall’. The wiper components are split by functionality: Meteor encrypts the filesystem based on an encrypted configuration, nti.exe corrupts the MBR, and mssetup.exe locks the system.”

SentinelOne found that the majority of the attack was “orchestrated via a set of batch files nested alongside their respective components and chained together in successive execution.”

The batch file copies the initial components via a CAB file in a network share within the Iranian railways network, according to the report. From there, the batch file uses its own copy of WinRAR to decompress additional components from three additional archives that use a Pokemon-themed password, “hackemall” which was also referenced elsewhere during the attack.

“At this point, the execution begins to bifurcate into other scripts. The first one is ‘cache.bat’, which focuses on clearing obstacles and preparing the ground for subsequent elements with the use of Powershell,” Guerrero-Saade said.

“‘cache.bat’ performs three main functions. First, it will disconnect the infected device from the network. Then it checks to see if Kaspersky antivirus is installed on the machine, in which case it’ll exit. Finally, ‘cache.bat’ will[...]