Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
“Defend the Web” write-up (Intro 11— file direction vulnerability)
https://cdn-images-1.medium.com/max/1405/1*wXwtBxznFYftIMplaDU5dg.jpeg
Let’s dive into the challenge. In this example, we will be exploiting the file direction vulnerability. First, try it yourself and see if…
Continue reading on Purple TEAM »
“Defend the Web” write-up (Intro 11— file direction vulnerability)
https://cdn-images-1.medium.com/max/1405/1*wXwtBxznFYftIMplaDU5dg.jpeg
Let’s dive into the challenge. In this example, we will be exploiting the file direction vulnerability. First, try it yourself and see if…
Continue reading on Purple TEAM »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
“Defend the Web” write-up (Intro 12 — MD5 Decryption)
https://cdn-images-1.medium.com/max/1000/1*i_P706yBiPRV7Y-GjVfGPg.jpeg
This challenge is fairly simple, it gives you the hashed password and asks you to use it to pass the login page. You may view the source…
Continue reading on Purple TEAM »
“Defend the Web” write-up (Intro 12 — MD5 Decryption)
https://cdn-images-1.medium.com/max/1000/1*i_P706yBiPRV7Y-GjVfGPg.jpeg
This challenge is fairly simple, it gives you the hashed password and asks you to use it to pass the login page. You may view the source…
Continue reading on Purple TEAM »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Bypasseando el AMSI con ficheros inexistentes.
https://cdn-images-1.medium.com/max/997/1*l0Z5vg4-a7tde7MPpRNobA.png
Después de varios meses de parón como consecuencia de la preparación para el OSCP (5 máquinas rooteadas :) / al segundo intento D: ) os…
Continue reading on Medium »
Bypasseando el AMSI con ficheros inexistentes.
https://cdn-images-1.medium.com/max/997/1*l0Z5vg4-a7tde7MPpRNobA.png
Después de varios meses de parón como consecuencia de la preparación para el OSCP (5 máquinas rooteadas :) / al segundo intento D: ) os…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
My Hacker Lab
https://cdn-images-1.medium.com/max/702/1*sljMufRWUlhrG_K2EOyYVA.png
Over the past few months I have updated my “Hacker Lab”. Before I was using VirtualBox from Oracle, it a type 2 hypervisor, my cousin…
Continue reading on Medium »
My Hacker Lab
https://cdn-images-1.medium.com/max/702/1*sljMufRWUlhrG_K2EOyYVA.png
Over the past few months I have updated my “Hacker Lab”. Before I was using VirtualBox from Oracle, it a type 2 hypervisor, my cousin…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Article of the Day: History of Chinese Hacking
https://cdn-images-1.medium.com/max/926/1*JBgjkxTNWJ1283BM5Tcikw.jpeg
An (in)Competent Cyber Program — A brief cyber history of the ‘CCP’ — IntrusionTruth, 7/29/2021
Continue reading on Hybrid Analyst »
Article of the Day: History of Chinese Hacking
https://cdn-images-1.medium.com/max/926/1*JBgjkxTNWJ1283BM5Tcikw.jpeg
An (in)Competent Cyber Program — A brief cyber history of the ‘CCP’ — IntrusionTruth, 7/29/2021
Continue reading on Hybrid Analyst »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
BART — HackTheBox WriteUp
https://cdn-images-1.medium.com/max/913/1*G8xviEELyp92H75lU3huEQ.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…
Continue reading on Medium »
BART — HackTheBox WriteUp
https://cdn-images-1.medium.com/max/913/1*G8xviEELyp92H75lU3huEQ.png
This box is a part of TJnull’s list of boxes. I am doing these boxes as a part of my preparation for OSCP. I will be sharing the writeups…
Continue reading on Medium »
PickleC2 - A Post-Exploitation And Lateral Movements Framework
PickleC2 is a post-exploitation and lateral movements framework. Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process. Features There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module Future Features In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted. Install git clone https://github.com/xRET2pwn/PickleC2.gitcd PickleC2sudo apt install python3 python3-pippython3 -m pip install -r requirements.txt./run.py Download PickleC2
Read more...
PickleC2 is a post-exploitation and lateral movements framework. Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process. Features There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module Future Features In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted. Install git clone https://github.com/xRET2pwn/PickleC2.gitcd PickleC2sudo apt install python3 python3-pippython3 -m pip install -r requirements.txt./run.py Download PickleC2
Read more...
PickleC2 - A Post-Exploitation And Lateral Movements Framework
http://www.kitploit.com/2021/08/picklec2-post-exploitation-and-lateral.html
http://www.kitploit.com/2021/08/picklec2-post-exploitation-and-lateral.html
PickleC2 is a post-exploitation and lateral movements framework.
Documentation
ReadTheDocs (https://picklec2.readthedocs.io/)
Overview
PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming (https://www.kitploit.com/search/label/Red%20Teaming) engagements. PickleC2 has the ability to import your own PowerShell (https://www.kitploit.com/search/label/PowerShell) module for Post-Exploitation (https://www.kitploit.com/search/label/Post-Exploitation) and Lateral Movement (https://www.kitploit.com/search/label/Lateral%20Movement) or automate the process.
Features
There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module
Future Features
In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted.
Install
git clone https://github.com/xRET2pwn/PickleC2.git
cd PickleC2
sudo apt install python3 python3-pip
python3 -m pip install -r requirements.txt
./run.py
Download PickleC2 (https://github.com/xRET2pwn/PickleC2)
Documentation
ReadTheDocs (https://picklec2.readthedocs.io/)
Overview
PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming (https://www.kitploit.com/search/label/Red%20Teaming) engagements. PickleC2 has the ability to import your own PowerShell (https://www.kitploit.com/search/label/PowerShell) module for Post-Exploitation (https://www.kitploit.com/search/label/Post-Exploitation) and Lateral Movement (https://www.kitploit.com/search/label/Lateral%20Movement) or automate the process.
Features
There is a one implant for the beta version which is powershell. PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP. PickleC2 can handle multiple listeners and implants with no issues PickleC2 supports anyone who would like to add his own PowerShell Module
Future Features
In the up coming updates pickle will support: Go Implant Powershell-Less Implant that don’t use System.Management.Automation.dll. Malleable C2 Profile will be supported. HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted.
Install
git clone https://github.com/xRET2pwn/PickleC2.git
cd PickleC2
sudo apt install python3 python3-pip
python3 -m pip install -r requirements.txt
./run.py
Download PickleC2 (https://github.com/xRET2pwn/PickleC2)
hacking: security in practice
Beginner Seeking Advice on Revenge Hacking "Ethics"...
So I've been a graphic designer for 8 years, just transitioned careers into software engineering about 3 months ago, so I feel I'm somewhat proficient with programming but obviously have a lot to learn. As I've been studying web languages, the prospect of cyber security/hacking has stood out to me as a potential area I'd like to expand into over the next few years, and an opportunity has arisen that I feel can help motivate me to dig in.
On to the topic at hand - my gf was recently scammed by a small local "entrepreneur" - sent a deposit via cashapp and was immediately blocked. Went to the given address and turns out to be someone different. I figured a shady small business owner would be a great target to practice on, but am at a loss for where to start exactly. I've got her Facebook page both personal and professional, as well as her Instagram and cashapp address. They don't have a website, which I thought would open the door for me to offer a cheap website build and then just dip out after getting payment but... There's less opportunity to learn by going that route.
If I were to pursue this "educational hacking experience", what would be some of the possible legal ramifications if I do it poorly? I imagine messing with behemoths like Facebook and Instagram would require a significant amount of expertise to begin with, much less not get caught - but if it's possible, are there any specific tools that you'd recommend? I'm not in any rush, and looking at this as a personal growth project to tinker with in my spare time. But any advice to point me in the right direction would be greatly appreciated 🙏
submitted by /u/Guilteus
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Beginner Seeking Advice on Revenge Hacking "Ethics"...
So I've been a graphic designer for 8 years, just transitioned careers into software engineering about 3 months ago, so I feel I'm somewhat proficient with programming but obviously have a lot to learn. As I've been studying web languages, the prospect of cyber security/hacking has stood out to me as a potential area I'd like to expand into over the next few years, and an opportunity has arisen that I feel can help motivate me to dig in.
On to the topic at hand - my gf was recently scammed by a small local "entrepreneur" - sent a deposit via cashapp and was immediately blocked. Went to the given address and turns out to be someone different. I figured a shady small business owner would be a great target to practice on, but am at a loss for where to start exactly. I've got her Facebook page both personal and professional, as well as her Instagram and cashapp address. They don't have a website, which I thought would open the door for me to offer a cheap website build and then just dip out after getting payment but... There's less opportunity to learn by going that route.
If I were to pursue this "educational hacking experience", what would be some of the possible legal ramifications if I do it poorly? I imagine messing with behemoths like Facebook and Instagram would require a significant amount of expertise to begin with, much less not get caught - but if it's possible, are there any specific tools that you'd recommend? I'm not in any rush, and looking at this as a personal growth project to tinker with in my spare time. But any advice to point me in the right direction would be greatly appreciated 🙏
submitted by /u/Guilteus
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Beginner Seeking Advice on Revenge Hacking "Ethics"...
So I've been a graphic designer for 8 years, just transitioned careers into software engineering about 3 months ago, so I feel I'm somewhat...
hacking: security in practice
Am I correct in assuming that packet sniffing isn't really a threat these days?
If my Wi-Fi is unsecured, almost everything is sent using HTTPS anyway so the most an attacker can see is the domain names I visit.
Even through a man in the middle attack, it seems to me like the there isn't a reliable way to spoof the certificates to decrypt HTTPS.
Am I totally missing something here? It seems like MITM attacks and packet spoofing aren't really a major concern in 2021.
I fully accept if I'm wrong, I'm quite new to this stuff so feel free to correct me!
submitted by /u/EeyoresM8
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Am I correct in assuming that packet sniffing isn't really a threat these days?
If my Wi-Fi is unsecured, almost everything is sent using HTTPS anyway so the most an attacker can see is the domain names I visit.
Even through a man in the middle attack, it seems to me like the there isn't a reliable way to spoof the certificates to decrypt HTTPS.
Am I totally missing something here? It seems like MITM attacks and packet spoofing aren't really a major concern in 2021.
I fully accept if I'm wrong, I'm quite new to this stuff so feel free to correct me!
submitted by /u/EeyoresM8
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Am I correct in assuming that packet sniffing isn't really a...
If my Wi-Fi is unsecured, almost everything is sent using HTTPS anyway so the most an attacker can see is the domain names I visit. Even through...