Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Did the Pandemic mess up the world’s Cybersecurity?
https://cdn-images-1.medium.com/max/1600/0*BegYklag5Vk3iOCy
Everything was at a standstill in the wake of the pandemic.
Continue reading on rootissh »
Did the Pandemic mess up the world’s Cybersecurity?
https://cdn-images-1.medium.com/max/1600/0*BegYklag5Vk3iOCy
Everything was at a standstill in the wake of the pandemic.
Continue reading on rootissh »
hacking: security in practice
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press don’t allow before the notification disappeared from the screen.
I’m a little confused and worried this has never happened before. Any advice?
submitted by /u/Username18392993
[link] [comments]
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press don’t allow before the notification disappeared from the screen.
I’m a little confused and worried this has never happened before. Any advice?
submitted by /u/Username18392993
[link] [comments]
reddit
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press...
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
#whoamiContinue reading on Medium » (https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium »
Read more...
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium »
Read more...
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoamiContinue reading on Medium »
Read more...
#whoamiContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics
https://1.bp.blogspot.com/-7vYDB2fkbAk/YP8x-wfbGhI/AAAAAAAAozA/4VrZlJb9OAom4UpZSnKa9fOFQDNQdRV6gCNcBGAsYHQ/w640-h258/Disk%2BForensics.jpg
A PowerShell script to collect memory and (triage) disk forensics for incident response investigations.
The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection.
Permission requirements for said directory will be dependent on the nuances of the environment and what credentials are used for the script execution (interactive vs. automation)
In the demonstration code, a network location of \Synology\Collections can be seen. This should be changed to reflect the specifics of your environment.
Collections folder needs to include:
* subdirectory KAPE; copy the directory from existing install
* subdirectory MEMORY; 7za.exe command line version of 7zip and winpmem.exe
CSIRT-Collect
* Maps to existing network drive -
*
* Subdir 1: “Memory” – Winpmem and 7zip executables
*
* Subdir 2: ”KAPE” – directory (copied from local install)
* Creates a local directory on asset
* Copies the Memory exe files to local directory
* Captures memory with Winpmem
* When complete, ZIPs the memory image
* Renames the zip file based on hostname
* Documents the OS Build Info (no need to determine profile for Volatility)
* Compressed image is copied to network directory and deleted from host after transfer complete
* New temp Directory on asset for KAPE output
* KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx]
* VHDX transfers to network
* Removes the local KAPE directory after completion
* Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB:
* CSIRT-Collect_USB.ps1
* folder (empty to start) titled 'Collections'
* folders for KAPE and Memory - same as above
Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect
CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics
https://1.bp.blogspot.com/-7vYDB2fkbAk/YP8x-wfbGhI/AAAAAAAAozA/4VrZlJb9OAom4UpZSnKa9fOFQDNQdRV6gCNcBGAsYHQ/w640-h258/Disk%2BForensics.jpg
A PowerShell script to collect memory and (triage) disk forensics for incident response investigations.
The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection.
Permission requirements for said directory will be dependent on the nuances of the environment and what credentials are used for the script execution (interactive vs. automation)
In the demonstration code, a network location of \Synology\Collections can be seen. This should be changed to reflect the specifics of your environment.
Collections folder needs to include:
* subdirectory KAPE; copy the directory from existing install
* subdirectory MEMORY; 7za.exe command line version of 7zip and winpmem.exe
CSIRT-Collect
* Maps to existing network drive -
*
* Subdir 1: “Memory” – Winpmem and 7zip executables
*
* Subdir 2: ”KAPE” – directory (copied from local install)
* Creates a local directory on asset
* Copies the Memory exe files to local directory
* Captures memory with Winpmem
* When complete, ZIPs the memory image
* Renames the zip file based on hostname
* Documents the OS Build Info (no need to determine profile for Volatility)
* Compressed image is copied to network directory and deleted from host after transfer complete
* New temp Directory on asset for KAPE output
* KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx]
* VHDX transfers to network
* Removes the local KAPE directory after completion
* Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB:
* CSIRT-Collect_USB.ps1
* folder (empty to start) titled 'Collections'
* folders for KAPE and Memory - same as above
Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HACKTHEBOX — CAP Write up
https://cdn-images-1.medium.com/max/616/1*sjH_ah6TO_gfKzSmaDBhTw.png
how to root cap machine as beginner
Continue reading on Medium »
HACKTHEBOX — CAP Write up
https://cdn-images-1.medium.com/max/616/1*sjH_ah6TO_gfKzSmaDBhTw.png
how to root cap machine as beginner
Continue reading on Medium »
Hacking the Tenda AC10-1200 Router Part 1: CVE-2018–16334
Hi. This would be another series of writeup where we will try to hack the tenda ac10 1200 and try to get a cve. Lets get startedContinue reading on Medium »
Read more...
Hi. This would be another series of writeup where we will try to hack the tenda ac10 1200 and try to get a cve. Lets get startedContinue reading on Medium »
Read more...
Deep Web
Is ableonion going to be fine?
Haven't been active in ableonion for a few weeks and there was 100 or so users chatting but now some people are spamming the chat and making it unusable. Will it ever be back to normal?
submitted by /u/RealisticTroglodytae
[link] [comments]
Is ableonion going to be fine?
Haven't been active in ableonion for a few weeks and there was 100 or so users chatting but now some people are spamming the chat and making it unusable. Will it ever be back to normal?
submitted by /u/RealisticTroglodytae
[link] [comments]
reddit
Is ableonion going to be fine?
Haven't been active in ableonion for a few weeks and there was 100 or so users chatting but now some people are spamming the chat and making it...
CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics
http://www.kitploit.com/2021/08/csirt-collect-powershell-script-to.html
http://www.kitploit.com/2021/08/csirt-collect-powershell-script-to.html
A PowerShell script to collect memory and (triage) disk forensics for incident response (https://www.kitploit.com/search/label/Incident%20Response) investigations. The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection. Permission requirements (https://www.kitploit.com/search/label/Requirements) for said directory will be dependent on the nuances of the environment and what credentials (https://www.kitploit.com/search/label/Credentials) are used for the script execution (interactive vs. automation) In the demonstration code, a network location of \Synology\Collections can be seen. This should be changed to reflect the specifics of your environment. Collections folder needs to include: subdirectory KAPE; copy the directory from existing install subdirectory MEMORY; 7za.exe command line (https://www.kitploit.com/search/label/Command%20Line) version of 7zip and winpmem.exe
CSIRT-Collect
Maps to existing network drive - Subdir 1: “Memory” – Winpmem and 7zip executables Subdir 2: ”KAPE” – directory (copied from local install) Creates a local directory on asset Copies the Memory exe files to local directory Captures memory with Winpmem When complete, ZIPs the memory image Renames the zip file based on hostname Documents the OS Build Info (no need to determine profile for Volatility) Compressed image is copied to network directory and deleted from host after transfer complete New temp Directory on asset for KAPE output KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx] VHDX transfers to network Removes the local KAPE directory after completion Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations (https://www.kitploit.com/search/label/Operations) on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB: CSIRT-Collect_USB.ps1 folder (empty to start) titled 'Collections' folders for KAPE and Memory - same as above Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect (https://github.com/dwmetz/CSIRT-Collect)
CSIRT-Collect
Maps to existing network drive - Subdir 1: “Memory” – Winpmem and 7zip executables Subdir 2: ”KAPE” – directory (copied from local install) Creates a local directory on asset Copies the Memory exe files to local directory Captures memory with Winpmem When complete, ZIPs the memory image Renames the zip file based on hostname Documents the OS Build Info (no need to determine profile for Volatility) Compressed image is copied to network directory and deleted from host after transfer complete New temp Directory on asset for KAPE output KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx] VHDX transfers to network Removes the local KAPE directory after completion Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations (https://www.kitploit.com/search/label/Operations) on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB: CSIRT-Collect_USB.ps1 folder (empty to start) titled 'Collections' folders for KAPE and Memory - same as above Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect (https://github.com/dwmetz/CSIRT-Collect)
Hacking the Tenda AC10-1200 Router Part 1: CVE-2018–16334
https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-part-1-cve-2018-16334-fe9401e48471?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-part-1-cve-2018-16334-fe9401e48471?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking the Tenda AC10-1200 Router Part 1: CVE-2018–16334
Hi. This would be another series of writeup where we will try to hack the tenda ac10 1200 and try to get a cve. Lets get started