Hacking on Medium
HackTheBox — TheNotebook

https://cdn-images-1.medium.com/max/1200/1*7552Qv80tLsb5iWjqF7ZCw.jpeg
Reconnaissance

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/93q56qdcmke71.jpg?width=320&crop=smart&auto=webp&s=dc4d5be30f8ff1dd3236d7e7114936c674f61597 submitted by /u/seotrainee347
[link] [comments]

hacking: security in practice
How can SOC analysts stop ransomware from spreading with Network File Sharing?

So to make things clear, I heard a real story from a Network Engineer who was facing ransomware in their Network File Sharing system, and I came up with a question. What tools can SOC analysts use in addition to SIEM/SOAR to see through the logs or predict the attack? If the ransomware already passed the firewall and no threat was registered.

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Security Enthusiast — #Part1
https://medium.com/@andri120701/security-enthusiast-part1-26c3131ac282?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

السَّلاَمُ عَلَيْكُمْ وَرَحْمَةُ اللهِ وَبَرَكَاتُهُ.
Assalamu’alaikum Warahmatullahi Wabarakaatuh.Continue reading on Medium » (https://medium.com/@andri120701/security-enthusiast-part1-26c3131ac282?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Powering the Lamest: Self-XSS FTW!
https://securitygoat.medium.com/powering-the-lamest-self-xss-9e5febdf7b38?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let’s see how you can leverage self-XSS! We will see how to leverage reflected and stored self-xss and I will leave some ideas in your…Continue reading on Medium » (https://securitygoat.medium.com/powering-the-lamest-self-xss-9e5febdf7b38?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding and Securing Kubernetes

https://cdn-images-1.medium.com/max/643/1*ZrLijNugm1AJWM0SclRmug.png
What is Kubernetes?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pandas Hacks That I Wish I Had When I Started Out

https://cdn-images-1.medium.com/max/2600/1*ikm52RUB1DVANz5s-FDvnQ.png
I still remember the angst associated with learning Pandas and Python; hacks I wish I had earlier in my learning journey

Continue reading on Towards Data Science »

___________________________
@hacking_Attack
@Hacking_Video

Security Enthusiast — #Part1

السَّلاَمُ عَلَيْكُمْ وَرَحْمَةُ اللهِ وَبَرَكَاتُهُ. Assalamu’alaikum Warahmatullahi Wabarakaatuh.Continue reading on Medium »
Read more...

Powering the Lamest: Self-XSS FTW!

Let’s see how you can leverage self-XSS! We will see how to leverage reflected and stored self-xss and I will leave some ideas in your…Continue reading on Medium »
Read more...

Deep Web
Can you tell me your experience?

Hello Guys, I want to create an account at a forum. I don‘t want to give any information about my person. Can you tell me how and if it is possible? They want an email, phone number.

I would really appreciate if someone can help!

submitted by /u/simply____chris
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cerbrutus - Network Brute Force Tool, Written In Python

Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributingInstallation: cd /optgit clone https://github.com/Cerbrutus-BruteForcer/cerbrutus Usage: python3 /opt/cerbrutus/cerbrutus.py --helpusage: cerbrutus.py -h -U USERS -P PASSWORDS -p PORT -t THREADS -q [QUIET [QUIET ...]] Host ServicePython based network brute forcing tool!positional arguments: Host The host to connect to - in IP or VHOST/Domain Name form Service The service to brute force (currently implemented 'SSH')optional arguments: -h, --help show this help message and exit -U USERS, --users USERS Either a single user, or the path to the file of users you wish to use -P PASSWORDS, --passwords PASSWORDS Either a single password, or the path to the password list you wish to use -p PORT, --port PORT The port you wish to target (only required if running on a non standard port) -t THREADS, --threads THREADS Number of threads to use -q QUIET [QUIET ...], --quiet QUIET [QUIET ...] Do not print banner /opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U "username" -P /opt/wordlists/fasttrack.txt -t 10 ================================================================ / ] / ]| \ | \ | \| | || || | |/ / / / / _ | D )| o )| D ) | || || | ( \\_ / / | \_| / | || /| | ||_| |_|| | |\_ | / \_ | \_ | \ | O || \| : | | | | : |/ \ | \ || || . \| || . \ | | | | |\ | \\_||\_||\_|\\_||\_||\_|\\_|\\_,\_| |\_| \\_,\_| \\_| Network Brute Force Tool https://github.com/Cerbrutus-BruteForcer/cerbrutus ================================================================ < br/>[\* - Initialising password list...Read in 224 words from /opt/wordlists/fasttrack.txt+ - Running with 10 threads...\* - Starting attack against username@10.10.10.10\* - Trying: 65/224 Test Run: # The password is in line number 12600 in rockyou 64 threads -> 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - https://github.com/paramiko/paramiko/ Download Cerbrutus
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Cerbrutus - Network Brute Force Tool, Written In Python
http://www.kitploit.com/2021/07/cerbrutus-network-brute-force-tool.html

___________________________
@hacking_Attack
@Hacking_Video

Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTP(s) POST, HTTP(s) GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing (https://www.kitploit.com/search/label/Testing) and contributing
Installation:
cd /opt
git clone https://github.com/Cerbrutus-BruteForcer/cerbrutus
Usage:
python3 /opt/cerbrutus/cerbrutus.py --help
usage: cerbrutus.py [-h] -U USERS -P PASSWORDS [-p PORT] [-t THREADS] [-q [QUIET [QUIET ...]]] Host Service

Python based network brute forcing tool!

positional arguments:
Host The host to connect to - in IP or VHOST/Domain Name form
Service The service to brute force (currently implemented 'SSH')

optional arguments:
-h, --help show this help message and exit
-U USERS, --users USERS
Either a single user, or the path to the file of users you wish to use
-P PASSWORDS, --passwords PASSWORDS
Either a single password, or the path to the password list you wish to use
-p PORT, --port PORT The port you wish to target (only required if running on a non standard port)
-t THREADS, --threads THREADS
Number of threads to use
-q [QUIET [QUIET ...]], --quiet [QUIET [QUIET ...]]
Do not print banner /opt/cerbrutus/cerbrutus.py 10.10.10.10 SSH -U "username" -P /opt/wordlists/fasttrack.txt -t 10

================================================================
__ ___ ____ ____ ____ __ __ ______ __ __ _____
/ ] / _]| \ | \ | \| | || || | |/ ___/
/ / / [_ | D )| o )| D ) | || || | ( \_
/ / | _]| / | || /| | ||_| |_|| | |\__ |
/ \_ | [_ | \ | O || \| : | | | | : |/ \ |
\ || || . \| || . \ | | | | |\ |
\____||_____||__|\_||_____||__|\_|\__,_| |__| \__,_| \___|

Network Brute (https://www.kitploit.com/search/label/Brute) Force Tool
https://github.com/Cerbrutus-BruteForcer/cerbrutus
================================================================
< br/>[*] - Initialising password list...
Read in 224 words from /opt/wordlists/fasttrack.txt
[+] - Running with 10 threads...
[*] - Starting attack against username@10.10.10.10
[*] - Trying: 65/224
Test Run:
1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps "># The password is in line number 12600 in rockyou 64 threads -> 1400 seconds ~ 7 minutes (hydra took 30 minutes) 1000 threads -> 464 seconds -> 27 requests per second 100 threads took 1000 seconds -> 12 requests per second # the password is in line 460 100 threads took 32 seconds -> 14 requests per second 1000 threads took 16 seconds -> 28 requests per second 64 threads took 51 seconds -> 9 requests per second (hydra took the same time) # word number 20k in rockyou 1100 threads took 637 seconds which means 31 rps 110 threads took 1457 seconds so that's 13.7 rps Uses a custom implementation of paramiko to overcome a few minor issues with implementing it for ssh brute forcing. - https://github.com/paramiko/paramiko/

Download Cerbrutus (https://github.com/Cerbrutus-BruteForcer/cerbrutus)

___________________________
@hacking_Attack
@Hacking_Video