Hacking on Medium
Reduce Risk Of Hacking On Your Gmail Account.

https://cdn-images-1.medium.com/max/2600/0*Yb80yEfi_G3swcHC
Here we discussing about securing your very personal information and payments through google account.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to avoid monitoring?

I'm currently a targeted individual. A great sum of people in my city are able to view and monitor what I do on my devices. Soon they'll all be allowed to mess with my accounts as they'll know my passwords and logins. This includes my personal stuff. Anyone have any ideas on what I can do to prevent them from doing this?

submitted by /u/EzoraV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DCG 201 Hybrid Meet Up — August 2021 — Hybrid Circuit

https://cdn-images-1.medium.com/max/802/1*5DRc8qm_QHhlKq0vyC0ueg.png
Date: August 20th, Friday

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Really looking for a friendly hacker to recover my stolen crypto

Hey guys. Seems really weird for me to ask someone for help, but i woke up having a damn near heart attack- someone hacked my metamask account and stole everything i possessed in crypto. I am 22 and am in the middle of switching jobs, and was using my crypto earnings to keep by. I have all the etherscans of when this wallet recieved all my coins, and i just wanna know if there is any way i, or one of you, can take my money back from this a-hole. I had about 3000 in crypto stolen, and would love to pay anyone who can safely get it back !! Counting on one of you at this point. Cheers❤️ -parker

Fyi, ive never shared my seed phrase or password with anyone or anything. I run vpn and have done everything i could to keep my money safe

I really appreciate you guys taking the time to read!!! From the bottom of my heart

submitted by /u/starhunkk
[link] [comments]

hacking: security in practice
How to Bypass FRP in android?

submitted by /u/Dr_FUHRER
[link] [comments]

Hacking on Medium
Cyber Criminal Try Exploit ‘PrintNightmare’ Flaws in Ransomware to Top Companies

https://cdn-images-1.medium.com/max/1024/1*vEijaqsf54Nyx5UBbm9jXg.jpeg
Security investigators at Cisco Talos and CrowdStrike tracked down gangs trying to exploit bugs on Microsoft Windows called…

Continue reading on Medium »

Hacking on Medium
Utilities and VSCode Extensions to Make Developer’s Life Easier

https://cdn-images-1.medium.com/max/1920/1*0jxLUqJdXEvbmZMUI450yg.jpeg
Utilities and VSCode extensions to make developer’s life easier.

Continue reading on Medium »

Hacking on Medium
Port scanner

https://cdn-images-1.medium.com/max/1200/1*DXqoxSy4Rqih3no2_LhWxA.png
Port scanning é uma técnica em que consiste procurar possíveis portas abertas em um host; Quando você acessa algum site, acaba permitindo…

Continue reading on Medium »

Hacking Articles|Raj Chandel's Blog
Nmap for Pentester: Dictionary Attack

We will process the showcase for Nmap Brute NSE Script for dictionary attack in this article since Nmap is such a large tool that it can't be covered in one post.

If you're wondering whether or not a brute-force assault using Nmap is doable.<o:p

Yes, Nmap includes an NSE-based script that can perform dictionary brute force attacks on secured services.<o:p Table of Contents<o:p· FTP Brute Force<o:p

· SSH Brute Force<o:p

· Telnet Brute Force<o:p

· SMB Brute Force<o:p

· Pqsql Brute Force<o:p

· HTTP-form-brute Brute Force<o:p
The Nmap Scripting Engine (NSE) is one of Nmap's most powerful and flexible features. It allows users to write (and share) simple scripts to automate a wide variety of networking tasks. Those scripts are then executed in parallel with the speed and efficiency you expect from Nmap.  The core of the Nmap Scripting Engine is an embeddable Lua interpreter. The second part of the Nmap Scripting Engine is the NSE Library, which connects Lua and Nmap.<o:p

NSE scripts define a list of categories they belong to. Currently defined categories are auth, broadcast, brute, default. discovery, dos, exploit, external, fuzzer, intrusive, malware, safe, version, and vuln. <o:p

But I mentioned above that in this we will demonstrating the Nmap Brute script. These scripts use brute force attacks to guess the authentication credentials of a remote server. Nmap contains scripts for brute-forcing dozens of protocols, including HTTP-brute, oracle-brute, SNMP-brute, etc.<o:p

To list all nse scripts for brute forces :<o:p

locate *.nse |grep Brute<o:p https://1.bp.blogspot.com/-ysPdk6NP3fE/YRjb26vAHOI/AAAAAAAAyLo/s7o1e2o3HBYDY_5pTP0neCFeAbRkcM_hgCLcBGAsYHQ/s16000/1.png Simply specify -sCto enable the most common scripts. Or specify the --scriptoption to choose your scripts to execute by providing categories, script file names, or the name of directories full of scripts you wish to execute. You can customize some scripts by providing arguments to them via --script-argsand --script-args-fileoptions.<o:p FTP Brute Force<o:pPerforms brute force password auditing against FTP servers. All we need are dictionaries for usernames and passwords, which will be passed as arguments.<o:p
nmap -p21 --script ftp-brute.nse --script-args userdb=users.txt,passdb=pass.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-a76kN7BTqts/YRjcHPaFV_I/AAAAAAAAyLw/3eJe8bf8r9URWOPEQewqE2xfRurPK_7rwCLcBGAsYHQ/s16000/2.png SSH Brute Force<o:pPerforms brute-force password guessing against ssh servers and connection timeout (default: "5s"). All we need are dictionaries for usernames and passwords, which will be passed as arguments.<o:p
nmap -p22 --script ssh-brute.nse --script-args userdb=users.txt,passdb=pass.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-y7fTExpKpHA/YRjcStKdVDI/AAAAAAAAyL0/hbWSJsRhZX0SB7GY-lYQfMuJxA3-16pgACLcBGAsYHQ/s16000/3.png For valid username and password combination, it will dump the credential.<o:p https://1.bp.blogspot.com/-IlLKmj3jRqM/YRjcbOtgP5I/AAAAAAAAyL8/z4DYrstlxTk1xN4hnP28ijZBVlcXXikVgCLcBGAsYHQ/s16000/4.png Telnet Brute Force<o:pPerforms brute-force password auditing against telnet servers and connection timeout (default: "5s"). All we need are dictionaries for usernames and passwords, which will be passed as arguments.<o:p
nmap -p23 --script telnet-brute.nse --script-args userdb=users.txt,passdb=pass.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-BDXqRGS4hhk/YRjcg8HPghI/AAAAAAAAyMA/ZQjyVecViIcws4HVQkToZLiYJvpDLj7gwCLcBGAsYHQ/s16000/5.png SMB Brute Force<o:pAttempts to guess SMB username/password combinations, saving identified combinations for use in other sc[...]

ripts. Every effort will be made to get a genuine list of users and to validate each username before utilizing them. When a username is identified, it is not only displayed but also kept in the Nmap registry for future use by other Nmap scripts. <o:p
All we need are dictionaries for usernames and passwords, which will be passed as arguments.<o:p
nmap -p445 --script smb-brute.nse --script-args userdb=users.txt,passdb=pass.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-FruUgSTwlqc/YRjcl33fZ2I/AAAAAAAAyME/4fvWgR1Koq4QvuJ00JtZGg1Bn4PWKoSUgCLcBGAsYHQ/s16000/6.png Postgres Brute Force<o:pPerforms brute-force password auditing against telnet servers and connection timeout (default: "5s"). All we need are dictionaries for usernames and passwords, which will be passed as arguments.<o:p
nmap -p5432 --script pgsql-brute --script-args userdb=users.txt,passdb=pass.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-zLh1ChMitQg/YRjcx5V0VVI/AAAAAAAAyMQ/9nPyduXiDIoWlPevWL23c_EG7XfK1jCnACLcBGAsYHQ/s16000/7.png Mysql Brute Force<o:pPerforms brute-force password auditing against Mysql servers and connection timeout (default: "5s"). All we need are dictionaries for usernames and passwords, which will be passed as arguments. <o:p
nmap -p3306 --script mysql-brute --script-args userdb=users.txt 192.168.1.150<o:p https://1.bp.blogspot.com/-ySD0vB7LfA8/YRjc7Ri7yOI/AAAAAAAAyMY/ccpl3Bjij2Yd5FgBOwDJmD3gmxsJbwZlACLcBGAsYHQ/s16000/8.png HTTP Brute Force<o:pPerforms brute force password auditing against HTTP form-based authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use.<o:p https://1.bp.blogspot.com/-QCuqpzXFc3M/YRjdZkpUdhI/AAAAAAAAyMk/5Y2Mv0knE-QPhx5S2NyY54CyB4HYSakrACLcBGAsYHQ/s16000/9.png nmap -p 80 --script=http-form-brute --script-args "userdb=users.txt,passdb=pass.txt,http-form-brute.path=/dvwa/login.php" 192.168.1.150<o:p https://1.bp.blogspot.com/-j9xT9QxZGvM/YRjdgi4SfUI/AAAAAAAAyMs/GlVGV3VKKVQppIOxNoK814J3RqzKfERiwCLcBGAsYHQ/s16000/10.png Ms-SQL Brute Force<o:pPerforms brute-force password auditing against Ms-SQL servers and connection timeout (default: "5s"). All we need are dictionaries for usernames and passwords, which will be passed as arguments. <o:p
nmap -p1433 --script ms-sql-brute --script-args userdb=users.txt,passdb=pass.txt 192.168.1.146<o:p https://1.bp.blogspot.com/--xtuvDT2T2k/YRjdsAPQfxI/AAAAAAAAyM0/pGAj5VbypN4zRKywS33VfwuaJ9IsZKHEQCLcBGAsYHQ/s16000/12.png Refence: https://nmap.org/book/nse-usage.html#nse-categories https://nmap.org/nsedoc/scripts/http-form-brute.html<o:p

Hacking Articles
Nmap for Pentester: Password Cracking

We will process the showcase for Nmap Brute NSE Script for dictionary attack in this article since Nmap is such a large tool that it can’t be covered in one post. If you’re wondering whether or not a brute-force assault using Nmap is doable. Yes, Nmap includes an NSE-based script

The post Nmap for Pentester: Password Cracking appeared first on Hacking Articles.

hacking: security in practice
Fileviewpro

Can I trust fileviewpro,I have a bunch of crypt12 files that I need to open. So, I'm thinking of downloading fileviewpro.

submitted by /u/risheath
[link] [comments]

hacking: security in practice
OSCP THM HTB

hey guys!

I want to take the THM pentest+ and OSCP path for become a better at PT and start to do CTF in HTB for prepare to the OSCP exam.

Would you recommend to me to do this? does THM would make me ready? what do you think about that?

Thanks guys!

submitted by /u/Puzzleheaded-Bird-30
[link] [comments]

hacking: security in practice
All about XSS :3

https://external-preview.redd.it/D5kdd9IXhYZnxtppv6qgJ4FFxpujPdXKS7Y0jzv0PVY.jpg?width=320&crop=smart&auto=webp&s=39ce5eee187e817fb1a5bf56577f7983f691c84a submitted by /u/OrganizationWinter99
[link] [comments]