hacking: security in practice
My dad tried to do smth w my phone

So let me start with the fact that I use Iphone. Two days ago my dad requested my phone. he tried to hide phone, but I saw how he was typing code on keypad. started with # and it was long code. It might be silly question but can he monitor or track my phone by this operation? Or what could it be ? came up with that idea because how I told he was hiding my phone and he never looks for my phone.

submitted by /u/JackDanniels11
[link] [comments]

Hacking on Medium
“Defend the Web” write-up (Intro 11— file direction vulnerability)

https://cdn-images-1.medium.com/max/1405/1*wXwtBxznFYftIMplaDU5dg.jpeg
Let’s dive into the challenge. In this example, we will be exploiting the file direction vulnerability. First, try it yourself and see if…

Continue reading on Purple TEAM »

Hacking on Medium
“Defend the Web” write-up (Intro 12 — MD5 Decryption)

https://cdn-images-1.medium.com/max/1000/1*i_P706yBiPRV7Y-GjVfGPg.jpeg
This challenge is fairly simple, it gives you the hashed password and asks you to use it to pass the login page. You may view the source…

Continue reading on Purple TEAM »

Hacking on Medium
Bypasseando el AMSI con ficheros inexistentes.

https://cdn-images-1.medium.com/max/997/1*l0Z5vg4-a7tde7MPpRNobA.png
Después de varios meses de parón como consecuencia de la preparación para el OSCP (5 máquinas rooteadas :) / al segundo intento D: ) os…

Continue reading on Medium »

Hacking on Medium
My Hacker Lab

https://cdn-images-1.medium.com/max/702/1*sljMufRWUlhrG_K2EOyYVA.png
Over the past few months I have updated my “Hacker Lab”. Before I was using VirtualBox from Oracle, it a type 2 hypervisor, my cousin…

Continue reading on Medium »

Hacking on Medium
Article of the Day: History of Chinese Hacking

https://cdn-images-1.medium.com/max/926/1*JBgjkxTNWJ1283BM5Tcikw.jpeg
An (in)Competent Cyber Program — A brief cyber history of the ‘CCP’ — IntrusionTruth, 7/29/2021

Continue reading on Hybrid Analyst »

Hacking on Medium
BART — HackTheBox WriteUp

https://cdn-images-1.medium.com/max/913/1*G8xviEELyp92H75lU3huEQ.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…

Continue reading on Medium »

Hacking on Medium
Hackers detectados usando código Morse en ataques de Phishing para evadir la detección.

https://cdn-images-1.medium.com/max/1600/0*xwET06K9bqCfq__H
POR EHACKING

Continue reading on Medium »

PickleC2 - A Post-Exploitation And Lateral Movements Framework

PickleC2 is a post-exploitation and lateral movements framework. Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process. Features There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module Future Features In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted. Install git clone https://github.com/xRET2pwn/PickleC2.gitcd PickleC2sudo apt install python3 python3-pippython3 -m pip install -r requirements.txt./run.py Download PickleC2
Read more...

PickleC2 - A Post-Exploitation And Lateral Movements Framework
http://www.kitploit.com/2021/08/picklec2-post-exploitation-and-lateral.html

PickleC2 is a post-exploitation and lateral movements framework.

Documentation
ReadTheDocs (https://picklec2.readthedocs.io/)
Overview
PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming (https://www.kitploit.com/search/label/Red%20Teaming) engagements. PickleC2 has the ability to import your own PowerShell (https://www.kitploit.com/search/label/PowerShell) module for Post-Exploitation (https://www.kitploit.com/search/label/Post-Exploitation) and Lateral Movement (https://www.kitploit.com/search/label/Lateral%20Movement) or automate the process.
Features
There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module
Future Features
In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted.
Install
git clone https://github.com/xRET2pwn/PickleC2.git
cd PickleC2
sudo apt install python3 python3-pip
python3 -m pip install -r requirements.txt
./run.py

Download PickleC2 (https://github.com/xRET2pwn/PickleC2)

hacking: security in practice
Beginner Seeking Advice on Revenge Hacking "Ethics"...

So I've been a graphic designer for 8 years, just transitioned careers into software engineering about 3 months ago, so I feel I'm somewhat proficient with programming but obviously have a lot to learn. As I've been studying web languages, the prospect of cyber security/hacking has stood out to me as a potential area I'd like to expand into over the next few years, and an opportunity has arisen that I feel can help motivate me to dig in.

On to the topic at hand - my gf was recently scammed by a small local "entrepreneur" - sent a deposit via cashapp and was immediately blocked. Went to the given address and turns out to be someone different. I figured a shady small business owner would be a great target to practice on, but am at a loss for where to start exactly. I've got her Facebook page both personal and professional, as well as her Instagram and cashapp address. They don't have a website, which I thought would open the door for me to offer a cheap website build and then just dip out after getting payment but... There's less opportunity to learn by going that route.

If I were to pursue this "educational hacking experience", what would be some of the possible legal ramifications if I do it poorly? I imagine messing with behemoths like Facebook and Instagram would require a significant amount of expertise to begin with, much less not get caught - but if it's possible, are there any specific tools that you'd recommend? I'm not in any rush, and looking at this as a personal growth project to tinker with in my spare time. But any advice to point me in the right direction would be greatly appreciated 🙏

submitted by /u/Guilteus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Am I correct in assuming that packet sniffing isn't really a threat these days?

If my Wi-Fi is unsecured, almost everything is sent using HTTPS anyway so the most an attacker can see is the domain names I visit.

Even through a man in the middle attack, it seems to me like the there isn't a reliable way to spoof the certificates to decrypt HTTPS.

Am I totally missing something here? It seems like MITM attacks and packet spoofing aren't really a major concern in 2021.
I fully accept if I'm wrong, I'm quite new to this stuff so feel free to correct me!

submitted by /u/EeyoresM8
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video