hacking: security in practice
Am I correct in assuming that packet sniffing isn't really a threat these days?

If my Wi-Fi is unsecured, almost everything is sent using HTTPS anyway so the most an attacker can see is the domain names I visit.

Even through a man in the middle attack, it seems to me like the there isn't a reliable way to spoof the certificates to decrypt HTTPS.

Am I totally missing something here? It seems like MITM attacks and packet spoofing aren't really a major concern in 2021.
I fully accept if I'm wrong, I'm quite new to this stuff so feel free to correct me!

submitted by /u/EeyoresM8
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PickleC2 - A Post-Exploitation And Lateral Movements Framework

http://2.bp.blogspot.com/-BJz3rJkO40I/YRYFs4cOcmI/AAAAAAAAp5A/93aHuuKRrHUZ3TS7EFG5RnCdiJyDZEBogCK4BGAYYCw/w640-h274/PickleC2_1_c2-792326.png

PickleC2 is a post-exploitation and lateral movements framework.
Documentation

ReadTheDocs

Overview

PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements.

PickleC2 has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process.

Features

There is a one implant for the beta version which is powershell.

1.
PickleC2 is fully encrypted communications, protecting the confidentiality and integrity of the C2 traffic even when communicating over HTTP.

2.
PickleC2 can handle multiple listeners and implants with no issues

3.
PickleC2 supports anyone who would like to add his own PowerShell Module
Future Features

In the up coming updates pickle will support:

1.
Go Implant

2.
Powershell-Less Implant that don’t use System.Management.Automation.dll.

3.
Malleable C2 Profile will be supported.

4.
HTTPS communications will be supported. NOTE: Even HTTP communications is fully encrypted.
Install

git clone https://github.com/xRET2pwn/PickleC2.git
cd PickleC2
sudo apt install python3 python3-pip
python3 -m pip install -r requirements.txt
./run.py
Download PickleC2

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Como Robar un Banco en 2021

La semana pasada un grupo de hackers robaron más de US $600M de la plataforma de finanzas decentralizadas (DeFi) Poly Network. Dado que es…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Se encontraron docenas de fallas relacionadas con STARTTLS que afectan a clientes de correo…

https://cdn-images-1.medium.com/max/1010/0*R3YAQUTiICdQeBs1
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
What does auto finalization mean?

When you make an order, what does “the order will auto finalize on____ at___.” Is the order supposed to come by then, or does it mean something else? Please help. It’s my first time and I don’t know what the right thing to do is. Thank you

submitted by /u/autistic__angel
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How to search the deep web to protect online reputation and privacy

What the title says. How do I search the deep web to try to find what personal information exists about me?

submitted by /u/aboabro
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Looking to be trained into an elite assassin

I am looking to reach the peak of humanity and then go beyond that. This is a step towards that direction. Does anybody have any leads for me?

submitted by /u/PresentOpportunity12
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any jobs related to binary exploitation?

Is this skill today still useful or is it just a waste if time to get really good at it

submitted by /u/Comprehensive-Echo-6
[link] [comments]

hacking: security in practice
Tesla Model 3 premium amp reverse engineered to work with Jetson nano

https://external-preview.redd.it/BbnfxXx_dmXJHPrsxVVd_iqcwc0Gj1kWQX-ncqQ3Nz8.jpg?width=320&crop=smart&auto=webp&s=fc32f306cfc0a1f89a5d7a1ca09119789aad4a9c submitted by /u/doitaljosh
[link] [comments]

Poly Network Joins Immunefi With $100,000 Bug Bounty After Hack
https://medium.com/immunefi/poly-network-joins-immunefi-with-100-000-bug-bounty-after-hack-d349e1192853?source=rss------bug_bounty-5

Following the biggest hack in DeFi history, Poly Network is joining Immunefi with a bug bounty of $100,000 for critical vulnerabilities…Continue reading on Immunefi » (https://medium.com/immunefi/poly-network-joins-immunefi-with-100-000-bug-bounty-after-hack-d349e1192853?source=rss------bug_bounty-5)

Hacking on Medium
Attack Insecure Rsync Service

https://cdn-images-1.medium.com/max/1950/1*F0uyH_P-DND-nA3fI7iGXw.jpeg
Rsync Enumeration and Exploitation

Continue reading on R3d Buck3T »

Hacking on Medium
TryHackMe: The find command Walkthrough by Razrexe

https://cdn-images-1.medium.com/max/2600/1*HL5nlbu3XIEMhw2a5QuMOg.jpeg
Some of the fundamental knowledge that a security professional must have is using properly the Linux ‘find’ command.

Continue reading on Medium »