KitPloit - PenTest Tools!
Invoke-SocksProxy - Socks Proxy, And Reverse Socks Server Using Powershell

https://1.bp.blogspot.com/-RhxNuVf5iGY/YE6JbQoBRYI/AAAAAAAAVnQ/B3RbMCLzpF8CNOd139Rg5tUxTt9MwBdrwCNcBGAsYHQ/w640-h318/proxy.png
Creates a local or "reverse" Socks proxy using powershell.

The local proxy is a simple Socks 4/5 proxy.

The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through the system's proxy. The tunnel can then be used as a socks proxy on the remote host to pivot into the local host's network.
Examples

Local

Create a Socks 4/5 proxy on port 1080:
Import-Module .\Invoke-SocksProxy.psm1
Invoke-SocksProxy -bindPort 1080

Increase the maximum number of threads from 200 to 400
Import-Module .\Invoke-SocksProxy.psm1
Invoke-SocksProxy -threads 400

Reverse

Create a "reverse" Socks 4/5 proxy on port 1080 of a remote host:
# On the remote host:
# Generate a private key and self signed cert
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout private.key -out cert.pem

# Get the certificate fingerprint to verify it:
openssl x509 -in cert.pem -noout -sha1 -fingerprint | cut -d "=" -f 2 | tr -d ":"

# Start the handler
python ReverseSocksProxyHandler.py 443 1080 ./cert.pem ./private.key

# On the local host:
Import-Module .\Invoke-SocksProxy.psm1
Invoke-ReverseSocksProxy -remotePort 443 -remoteHost 192.168.49.130

# Go through the system proxy:
Invoke-ReverseSocksProxy -remotePort 443 -remoteHost 192.168.49.130 -useSystemProxy

# Validate certificate
Invoke-ReverseSocksProxy -remotePort 443 -remoteHost 192.168.49.130 -certFingerprint '93061FDB30D69A435ACF96430744C5CC5473D44E'

# Give up after a number of fail ed connections to the handler:
Invoke-ReverseSocksProxy -remotePort 443 -remoteHost 192.168.49.130 -maxRetries 10


Credit for the System Proxy trick: https://github.com/Arno0x/PowerShellScripts/blob/master/proxyTunnel.ps1

Limitations

* This is only a subset of the Socks 4 and 5 protocols: It does not support authentication, It does not support UDP or bind requests.
* When the Socks Proxy runs out of available threads, new connections cannot be established until a thread is freed.
* New features will be implemented in the future. PR are welcome.

Disclaimer

This project is intended for security researchers and penetration testers and should only be used with the approval of system owners.
Download Invoke-SocksProxy

hacking: security in practice
How to farm views on sermon audio

I want to screw with my pastor and make it look like our live stream has 100+ viewers. I have no idea how to do it, though I’d imagine you can make a server run multiple views at a time. Does anyone know how to do this?

submitted by /u/Icy_aidsmaster
[link] [comments]

hacking: security in practice
Something good to show your friends that are still skeptical, get them thinking. Nothing youre unlikely to not understand already

https://b.thumbs.redditmedia.com/VkgbNrMRdFPizRaVe0Xh1Ykk8rz-SkJO6oyY0q5e7Cc.jpg submitted by /u/Whatevernameisnt
[link] [comments]

hacking: security in practice
Worth noting. Lots of good points

https://b.thumbs.redditmedia.com/7VUksI6SbAoPAxCVBBK5_0H2hipE3soAbacu0I2iD2Q.jpg submitted by /u/Whatevernameisnt
[link] [comments]

hacking: security in practice
Forgot password IG hack not working

So there’s a weird account that dms me and has no followers or anything. It only follows me. I usually attempt to login by typing their username and clicking on forgot password just to get some info on the email address they are using. It works with every account even international ones but for this specific account when I click on “next” nothing happens. It just refreshes and no messenge pops us telling me of an error or of an email was sent. Why do you think that is?

As I’m writing this I am thinking that maybe it’s because they don’t have an email attached but used their phone number. Lol idk

submitted by /u/RevolutionaryDot6205
[link] [comments]

Deep Web
Dr. Matthew Falder a Geophysics Professor That Was Also a Notorious Pedophile on the Deep Web

https://a.thumbs.redditmedia.com/bqONHMK9ONj8oc_PP7DpPp3wEdlyi8LuG1iflStz3e0.jpg submitted by /u/CockandBallTorturexO
[link] [comments]

hacking: security in practice
How is NK is able to hack into western corporations like sony being a isolated country?

This is a very high level question.

They are isolated from the rest of the world, if their intention is to only harm other countries why isn't their fiber optic cables are cut.

Is their network tied to China which might explain they are un-touchable almost?

submitted by /u/throttlemaster77
[link] [comments]

hacking: security in practice
Reaver WPS- is this old news? Alternatives to it?

is it still relevant to this day? Is there anything better that runs on kali linux? Reaver appears to be a dead horse since pretty much all router firmwares seem to lock it out after 1 or 2 tries with it. Is there anything that works with routers of this era? I keep getting the 60 second error or the recieve timeout occured error nonstop with nearly everything, even when I have confirmed my card is in monitor mode. Is there anything better application for this?

Also, just for the mod's sake, I am using my own equipment for this. Nothing evil. I am simply asking for a more relevant program to do this task. Don't cut my head off.

submitted by /u/National-Scale
[link] [comments]

Kali Linux Tutorials
Strafer : A Tool To Detect Potential Infections In Elasticsearch Instances

Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named “STRAFER” to detect potential infections in the Elasticsearch instances. The tool allows security researchers, penetration testers, and threat intelligence experts to detect compromised […]

The post Strafer : A Tool To Detect Potential Infections In Elasticsearch Instances appeared first on Kali Linux Tutorials.
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Web archive.

https://cdn-images-1.medium.com/max/1264/1*mhXsEMG0JaMli74UWqkkew.png
Have you ever wondered that what happens to your deleted posts on social media? Well, deletion of data is a big topic for itself. Some…

Continue reading on Medium »

Hacking on Medium
Hacking your way into the local ‘product’ design scene — A cheatsheet

https://cdn-images-1.medium.com/max/2600/0*tz7b7WHn_MeJ1P2W
Over the past couple of quarters, it’s been great to see tech and the startup scene in Pakistan pick up pace. Even with a mutating virus…

Continue reading on UX Planet »

Hacking on Medium
Terminal Escape injection

A terminal escape sequence is a special sequence of characters that is printed (like any other text). But, if the terminal understands the…

Continue reading on Medium »