Hacking on Medium
Kuya — Vulnhub

https://cdn-images-1.medium.com/max/600/1*k2wj_miJ9FHaMjWVhzm37g.png
Here is another box that is hosted on vulnhub. This is a fun easy box that allows us to conduct a web application pentest. Multiple types…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking lab

https://cdn-images-1.medium.com/max/682/1*NMuJAj35jF0Bw9_7sxc3vA.jpeg
What is a Hacking lab?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hacker claims to steal data of 100 million T-mobile customers

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacker claims to steal data of 100 million T-mobile customersPost Views: 67
Reading Time: 1 Minute
T-Mobile is actively investigating a data breach after a threat actor claims to have hacked T-Mobile’s servers and stolen databases containing the personal data of approximately 100 million customers.
The alleged data breach first surfaced on a hacking forum yesterday after the threat actor claimed to be selling a database for six bitcoin (~$280K) containing birth dates, driver’s license numbers, and social security numbers for 30 million people.
https://www.bleepstatic.com/images/news/security/d/data-breaches/t/t-mobile/servers-breached/forum-post.jpg Forum post selling T-Mobile data
While the forum post does not state the origins of the data, the threat actor told BleepingComputer that they took it from T-Mobile in a massive server breach.

The threat actor claims to have hacked into T-Mobile’s production, staging, and development servers two weeks ago, including an Oracle database server containing customer data.

This stolen data allegedly contains the data for approximately 100 million T-Mobile customers and can include customers’ IMSI, IMEI, phone numbers, customer names, security PINs, Social Security numbers, driver’s license numbers, and date of birth.
See Also: Auth Bypass Bug Exploited, Affecting Millions of Routers “Their entire IMEI history database going back to 2004 was stolen,” the hacker told BleepingComputer.

An IMEI (International Mobile Equipment Identity) is a unique number used to identify mobile phones, while an IMSI (International mobile subscriber identity) is a unique number associated with a user on a cellular network.

As proof that they breached T-Mobile’s servers, the threat actors shared a screenshot of an SSH connection to a production server running Oracle.
https://www.bleepstatic.com/images/news/security/d/data-breaches/t/t-mobile/servers-breached/tmobile-shell-redacted.jpg
See Also: Hacking Stories: Andrian Lamo – The ‘homeless’ HackerT-Mobile hacked for revengeThe threat actors tol Alon Gal, CTO of cybercrime intelligence firm Hudson Rock, that they performed this hack to damage US infrastructure.

“This breach was done to retaliate against the US for the kidnapping and torture of John Erin Binns (CIA Raven-1) in Germany by CIA and Turkish intelligence agents in 2019,” the threat actors told Gal in a conversation.

“We did it to harm US infrast[...]

___________________________
@hacking_Attack
@Hacking_Video

ructure.”

Binns is a resident of Turkey who sued the FBI, CIA, and Department of Justice in 2020.

The complaint alleges that Binn was tortured and harassed by the US and Turkish governments and is seeking to compel the USA to release documents regarding these activities under the Freedom of Information Act.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/depositphotos_40325161-stock-photo-microsoft-building-90x90.jpg Microsoft Warns: Another Unpatched PrintNightmare Zero-Day3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/crypto-hack-90x90.jpg Crypto Hack Earned Crooks $600 Million4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: ‘I’m Calling About Your Car Warranty’, aka PII Hijinx2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome’s JavaScript engine can lead to powerful exploits. This project aims to stop them2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds2 weeks ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Hacker claims to steal data of 100 million T-mobile customers first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Apron Network Supports Cosmos Ecosystem With Node Service
https://apron-network.medium.com/apron-network-supports-cosmos-ecosystem-with-node-service-791fbf8b718d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cosmos, known as the “Internet of Blockchain”, is also known as version 3.0 of blockchain, which aims to solve the problems of blockchain…Continue reading on Medium » (https://apron-network.medium.com/apron-network-supports-cosmos-ecosystem-with-node-service-791fbf8b718d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Wsh : Web Shell Generator And Command Line Interface

wsh (pronounced woosh) is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There’s a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow better […]

The post Wsh : Web Shell Generator And Command Line Interface appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Apron Network Supports Cosmos Ecosystem With Node Service

Cosmos, known as the “Internet of Blockchain”, is also known as version 3.0 of blockchain, which aims to solve the problems of blockchain…Continue reading on Medium »
Read more...

hacking: security in practice
Tracking PC

Suppose that you, the attacker, know ahead of time that my PC always establishes a distinct set of unencrypted TCP connections with 3rd party services at StartUp (e.g. Skype). Regardless, you have been tracking me via the fact that I always use the same external IP. However, suppose I then change local network completely and remove said static IP making it dynamically set. Now how would you find my external IP given said distinct set of connections only?

submitted by /u/ZucchiniVibes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CamPhish - Grab Cam Shots From Target'S Phone Front Camera Or PC Webcam Just Sending A Link.
http://www.kitploit.com/2021/08/camphish-grab-cam-shots-from-targets.html

___________________________
@hacking_Attack
@Hacking_Video

Grab cam shots from target's phone front camera or PC webcam just sending a link. 
What is CamPhish?
CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website (https://www.kitploit.com/search/label/Website) on in built PHP server and uses ngrok & serveo to generate a link which we will forward to the target, which can be used on over internet. website asks for camera permission and if the target allows it, this tool grab camshots of target's device
Features
In this tool I added two automatic webpage templates for engaged target on webpage to get more picture of cam Festival Wishing Live YouTube TV simply enter festival name or youtube's video ID
This Tool Tested On :
Kali Linux Termux MacOS Ubuntu Perrot Sec OS
Installing and requirements
This tool require PHP for webserver, SSH or serveo link. First run following command on your terminal openssh git wget ">apt-get -y install php openssh git wget

Installing (Kali Linux/Termux):
git clone https://github.com/techchipnet/CamPhish
cd CamPhish
bash camphish.sh

CamPhish is created to help in penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) and it's not responsible for any misuse or illegal purposes. CamPhish is inspired by https://github.com/thelinuxchoice/ Big thanks to @thelinuxchoice

Download CamPhish (https://github.com/techchipnet/CamPhish)

___________________________
@hacking_Attack
@Hacking_Video

CamPhish - Grab Cam Shots From Target'S Phone Front Camera Or PC Webcam Just Sending A Link.

Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish? CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will forward to the target, which can be used on over internet. website asks for camera permission and if the target allows it, this tool grab camshots of target's deviceFeatures In this tool I added two automatic webpage templates for engaged target on webpage to get more picture of cam Festival Wishing Live YouTube TV simply enter festival name or youtube's video ID This Tool Tested On : Kali Linux Termux MacOS Ubuntu Perrot Sec OS Installing and requirements This tool require PHP for webserver, SSH or serveo link. First run following command on your terminal openssh git wget ">apt-get -y install php openssh git wget Installing (Kali Linux/Termux): git clone https://github.com/techchipnet/CamPhishcd CamPhishbash camphish.sh CamPhish is created to help in penetration testing and it's not responsible for any misuse or illegal purposes. CamPhish is inspired by https://github.com/thelinuxchoice/ Big thanks to @thelinuxchoice Download CamPhish
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CamPhish - Grab Cam Shots From Target'S Phone Front Camera Or PC Webcam Just Sending A Link.

http://1.bp.blogspot.com/-TZZrEvg4jAk/YRYFvF9wgsI/AAAAAAAAp5Y/7S1JERdlb0o2cyXSbhftrz3BViMjm8x-gCK4BGAYYCw/w640-h364/CamPhish_1-704443.jpeg

Grab cam shots from target's phone front camera or PC webcam just sending a link.

What is CamPhish?

CamPhish is techniques to take cam shots of target's phone fornt camera or PC webcam. CamPhish Hosts a fake website on in built PHP server and uses ngrok & serveo to generate a link which we will forward to the target, which can be used on over internet. website asks for camera permission and if the target allows it, this tool grab camshots of target's device
Features

In this tool I added two automatic webpage templates for engaged target on webpage to get more picture of cam

* Festival Wishing
* Live YouTube TV

simply enter festival name or youtube's video ID

This Tool Tested On :

* Kali Linux
* Termux
* MacOS
* Ubuntu
* Perrot Sec OS

Installing and requirements

This tool require PHP for webserver, SSH or serveo link. First run following command on your terminal

openssh git wget ">apt-get -y install php openssh git wget


Installing (Kali Linux/Termux):

git clone https://github.com/techchipnet/CamPhish
cd CamPhish
bash camphish.sh

CamPhish is created to help in penetration testing and it's not responsible for any misuse or illegal purposes.

CamPhish is inspired by https://github.com/thelinuxchoice/ Big thanks to @thelinuxchoice
Download CamPhish

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Simple Secure Coding Guide For Web Developers

https://cdn-images-1.medium.com/max/1920/1*PBn7GWNPYpWrBkXWA80G_g.jpeg
An easy to read guide on general secure coding in web development.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video