Hacking on Medium
What is CTF ?

https://cdn-images-1.medium.com/max/1251/0*x0x3mov8aZCl7X3s
CTF stands for Capture The Flag. No. I’m not talking about CTF in games. I’m talking about challenges that can teach you a lot of things…

Continue reading on Medium »

hacking: security in practice
I have assembled a playlist with over 220 educational videos on hacking/security/ctf

Hey everyone!

A little over one year ago I started learning cybersecurity related things and throughout the year I collected educational videos that were worth watching and put them in a playlist. Every video I put in there was because I learned something new and that's why I wanted to share this with the community.

The playlist includes a variety of topics including CTF walkthroughs, amazing talks and cool tech stuff (it's even organized). I'm sure there is something new to learn for everyone, especially beginners. I hope you'll enjoy it.

Here's the playlist: https://www.youtube.com/playlist?list=PLKON6-Pw2Rdm0ODF5U90eBPOVF84lBTrb

Have fun!

submitted by /u/mr-snocc
[link] [comments]

Hacking on Medium
Experience Diary: Doing infosec research the right way

https://cdn-images-1.medium.com/max/2600/1*tVWPIFEm_G3bzqpgde1G4Q.jpeg
Let me share my experience on how I do research on a topic. I would be happy to know your methodology as well :)

Continue reading on Medium »

Hacking on Medium
Remote Desktop (RDP)- Brute Force Attack

https://cdn-images-1.medium.com/max/703/1*7DgNl2HH90-_f2qBNxUUUg.png
Hello and welcome to my article.
I am Idan and I am a penetration tester / red teamer.

Continue reading on Medium »

Hacking on Medium
TABBY — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/823/1*6tAbjag5I1UqfYpfvLKGJA.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…

Continue reading on Medium »

Hacking on Medium
5 Ways to Backdoor a Linux System

https://cdn-images-1.medium.com/max/1280/1*r1k6I5ARgrasf7gnnJmaPA.jpeg
You’ve spent the time and effort gaining access to a Linux system, let's make sure we maintain it.

Continue reading on Medium »

Deep Web
Any way to block the darkweb?

Is there any way to block onion sites completely on a computer? I've been looking but it seems really hard to find something to do it. If anyone has any suggestions, I'd be most grateful. Thanks.

submitted by /u/DeslerZero
[link] [comments]

Deep Web
Dark Side of gaming

Ok I'm sure everyone knows there are games available on the deep web but I'm looking for the more obscure and hard to find ones like Sad_Satan and those like it. Any suggestions? I'm not interested in alleged backstories or creepypasta narratives from a friend of a friend. I just want suggestions and or links. Thanks.

submitted by /u/CheshireTeaCat
[link] [comments]

Raider - Web Authentication Testing Framework
http://www.kitploit.com/2021/08/raider-web-authentication-testing.html

This is a framework designed to test authentication (https://www.kitploit.com/search/label/Authentication) for web applications. While web proxies like ZAProxy (https://www.zaproxy.org/) and Burpsuite (https://portswigger.net/burp) allow authenticated tests, they don't provide features to test the authentication process itself, i.e. manipulating the relevant input fields to identify broken authentication. Most authentication bugs in the wild have been found by manually testing it or writing custom scripts (https://www.kitploit.com/search/label/Scripts) that replicate the behaviour. Raider aims to make testing easier, by providing the interface to interact with all important elements found in modern authentication systems.
Features
Raider has the goal to support most of the modern authentication systems, and here are some features that other tools don't offer: Unlimited authentication steps Unlimited inputs/outputs for each step Ability to conditionally decide the next step Running arbitrary operations (https://www.kitploit.com/search/label/Operations) when receiving the response Easy to write custom operations and plugins
How does it work
Raider treats the authentication as a finite state machine. Each authentication step is a different state, with its own inputs and outputs. Those can be cookies, headers, CSRF tokens, or other pieces of information. Each application needs its own configuration file for Raider to work. The configuration is written in Hylang (https://docs.hylang.org/). The language choice was done for multiple reasons, mainly because it's a Lisp dialect embedded (https://www.kitploit.com/search/label/Embedded) in Python. Using Lisp was necessarily since sometimes the authentication can get quite complex, and using a static configuration file would've not been enough to cover all the details. Lisp makes it easy to combine code and data, which is exactly what was needed here. By using a real programming language as a configuration file gives Raider a lot of power, and with great power comes great responsibility. Theoretically one can write entire malware (https://www.kitploit.com/search/label/Malware) inside the application configuration file, which means you should be careful what's being executed, and not to use configuration files from sources you don't trust. Raider will evaluate everything inside the .hy files, which means if you're not careful you could shoot yourself in the foot and break something on your system.
Installation
Raider is available on PyPi: $ pip3 install --user raider

Raider's philosophy
Raider was developed with the following goals: To abstract authentication concepts using Python objects. To support most modern web authentication features. To make it easy to add new features for users. And if you're looking at the code and willing to contribute, keep those in mind: The simpler and cleaner the code, the better. New features should be implemented as Plugins and Operations if possible. The hyfiles should stay as minimal as possible, while still allowing the user to get creative. In the future parts of this code could be autogenerated.
The Documentation is available on Read the Docs (https://raider.readthedocs.io/en/latest/).


Download Raider (https://github.com/DigeeX/raider)

Raider - Web Authentication Testing Framework

This is a framework designed to test authentication for web applications. While web proxies like ZAProxy and Burpsuite allow authenticated tests, they don't provide features to test the authentication process itself, i.e. manipulating the relevant input fields to identify broken authentication. Most authentication bugs in the wild have been found by manually testing it or writing custom scripts that replicate the behaviour. Raider aims to make testing easier, by providing the interface to interact with all important elements found in modern authentication systems.Features Raider has the goal to support most of the modern authentication systems, and here are some features that other tools don't offer: Unlimited authentication steps Unlimited inputs/outputs for each step Ability to conditionally decide the next step Running arbitrary operations when receiving the response Easy to write custom operations and plugins How does it work Raider treats the authentication as a finite state machine. Each authentication step is a different state, with its own inputs and outputs. Those can be cookies, headers, CSRF tokens, or other pieces of information. Each application needs its own configuration file for Raider to work. The configuration is written in Hylang. The language choice was done for multiple reasons, mainly because it's a Lisp dialect embedded in Python. Using Lisp was necessarily since sometimes the authentication can get quite complex, and using a static configuration file would've not been enough to cover all the details. Lisp makes it easy to combine code and data, which is exactly what was needed here. By using a real programming language as a configuration file gives Raider a lot of power, and with great power comes great responsibility. Theoretically one can write entire malware inside the application configuration file, which means you should be careful what's being executed, and not to use configuration files from sources you don't trust. Raider will evaluate everything inside the .hy files, which means if you're not careful you could shoot yourself in the foot and break something on your system. Installation Raider is available on PyPi: $ pip3 install --user raider Raider's philosophy Raider was developed with the following goals: To abstract authentication concepts using Python objects. To support most modern web authentication features. To make it easy to add new features for users. And if you're looking at the code and willing to contribute, keep those in mind: The simpler and cleaner the code, the better. New features should be implemented as Plugins and Operations if possible. The hyfiles should stay as minimal as possible, while still allowing the user to get creative. In the future parts of this code could be autogenerated. The Documentation is available on Read the Docs. Download Raider
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cellphones keep tracking location without consent

https://external-preview.redd.it/Th5I9n3fuKvza3sznZcFwkERYTFdepiaWTwf6YloYNg.jpg?width=640&crop=smart&auto=webp&s=7c2b1fc1da3de579cdd2b33a66cd9a7cf11650f1 submitted by /u/StcStasi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So I started learning ning python a bit and learned a bit about Blockchain technology. What should I do next if I want to go deeper in those technologie things?

I love to understand how things work and though about looking into computer engineering. What do you guys recommend?

submitted by /u/Spyx34
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video