hacking: security in practice
Am I a hacker ?

Hello,

This might sound weird but I incidentally hacked two financial institutions in the last few years and I was wondering if I should consider myself a hacker ?

The first time happened because I usually always keep a dev window open on my browser. I have too many monitors when only browsing so often I'll open an inspect to fill a screen and because I find it funny to see all the errors on websites when browsing. As I logged into the account of a financial institution I work with I noticed some weird unused Javascript that seamed more managerial than user oriented that showed a hidden API. Playing around with postman I started pulling all sorts of information like number of customers etc... I informed the financial institution, they didn't answer but they closed my access to the API and removed the Javascript.

The second time again with a financial institution who I have a contract with for financial services. I wanted to go into my account but must have went in the wrong URL because I ended up in their intranet. Digging around at some point at +-11pm I ended in their SharePoint where I downloaded everything from source code, developer guidelines, server / software lists, some customers claim with all personal info etc. I informed them around midnight, at 5 AM they turned off everything from their website to SharePoint and I got a call requesting information about what I did. I also had sent some of their backend source code in my disclosure email so I guess they really took me seriously.

And I do keep looking at the dev data for sites I visit and dig in when I find weirdness.

So I was wondering if I should consider myself a hacker of sorts ?

I would love your opinions

Thanks

submitted by /u/human8264829264
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone ever manage to unlock a car replaying a car key fob?

I've seen a lotta videos, people basically using either a RPi and a RTL-SDR or even easier with a HackRf and replaying things like you know, garage or gate remotes but would it possible to replay a signal sent for car keys? I think newer ones are protected against that but on slightly older cars would it be possible? Like could you literally with a RPi and something along the lines of a RTL-SDR copy that signal and replay it to unlock the car? I saw this video on Youtube by Steve Mould and I'm quite intrigued so what are you thoughts?

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Jsleak - A Go Code To Detect Leaks In JS Files Via Regex Patterns

https://1.bp.blogspot.com/-fMvlStr5Pkk/YRvgsg3WiFI/AAAAAAAAqtM/aROefZ6A8ycBvdLqdeAd6IoAhWV8bOHNACNcBGAsYHQ/s16000/jsleak.png
jsleak is a tool to identify sensitive data in JS files through regex patterns. Although it's built for this, you can use it to identify anything as long as you have a regex pattern for it.
How to install

Directly:

{your package manager} install pkg-config libpcre++-dev
go get github.com/0xTeles/jsleak/v2/jsleak


Compiled: release page

How to use

Usage of jsleak:
-json string
[+] Json output file
-pattern string
[+] File contains patterns to test
-verbose
[+] Verbose Mode


Demo

cat urls.txt | jsleak -pattern regex.txt
[+] Url: http://localhost/index.js
[+] Pattern: p([a-z]+)ch
[+] Match: peach


To Do

* Fix output
* Add more patterns
* Add stdin
* Implement JSON input
* Fix patterns
* Implement PCRE

Regex list

* https://github.com/odomojuli/RegExAPI
* https://github.com/KaioGomesx/JSScanner/blob/main/regex.txt

Inspired by

* Necessity
* https://github.com/0x240x23elu/JSScanner
* https://github.com/KaioGomesx/JSScanner

Thanks

@fepame, @gustavorobertux, @Jhounx, @arthurair_es
Download Jsleak

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Steal $600,000,000

https://cdn-images-1.medium.com/max/1800/0*Dw2BqTKwGgmjEhAO
The biggest crypto news of the last weeks? A $612 million hack of Poly Network, a decentralized finance platform that allows different…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Revelada nueva vulnerabilidad de seguridad sin parche en FortiWeb WAF de Fortinet.

https://cdn-images-1.medium.com/max/1000/0*bs-JLTTC7RiIpkzB
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Aprende todo sobre el ataque ARP Poisoning y protégete.

https://cdn-images-1.medium.com/max/862/0*-_0SnrTCgvs7urPX
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Passed eJPT as a 15 year old & AMA!!!
https://www.reddit.com/r/Pentesting/comments/p77l21/passed_ejpt_as_a_15_year_old_ama/

submitted by /u/StrawberryShaker2005 (https://www.reddit.com/user/StrawberryShaker2005)
[link] (https://www.reddit.com/r/eLearnSecurity/comments/p77j9t/passed_ejpt_as_a_15_year_old_ama/) [comments] (https://www.reddit.com/r/Pentesting/comments/p77l21/passed_ejpt_as_a_15_year_old_ama/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a password hash be reversed if you know the hashing algorithm?

Let's use clock arithmetic and pretend our hashing function is f(x)=5*x. If we want to generate a hash for 5. f(5)=25, and the hash we have would be 3. With enough computing power, I assume that we could attempt to reverse the hashing algorithm until we get the original value, right? Thanks for your input!

submitted by /u/280-Z
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Paramount T-Mobile Data Breach

https://cdn-images-1.medium.com/max/1920/1*CQb4UjSdckM_SvrFFvuLwQ.jpeg
It comes as no surprise that T-mobile has yet again been made to look like a careless provider for its customers. This is the 6th major…

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
T-Mobile Hacked.

T-Mobile was recently hacked by someone on the dark web who claims to have stolen sensitive data, including phone numbers, names, social…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Piracy Scientific Journals

Never been on the Deep web, but was scrolling cause of curious. A lot of you mentioned pirating papers, but why would you need/ go through all the trouble for that? Don't Sci-Hub and LibGen already exist on the Normal web?

submitted by /u/delloskill
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nimplant : A Cross-Platform Implant Written In Nim

Nimplant is a cross-platform (Linux & Windows) implant written in Nim as a fun project to learn about Nim and see what it can bring to the table for red team tool development. Currently, Nimplant lacks extensive evasive tradecraft; however, overtime Nimplant will become much more sophisticated. Installation To install Nimplant, you’ll need Mythic installed […]

The post Nimplant : A Cross-Platform Implant Written In Nim appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why Secure Your E-commerce Business Now??

https://cdn-images-1.medium.com/max/1280/0*lVBm0fvjv8_RHBpB
In the times of Covid-19, we have observed a significant increase in the e-commerce industry. People are shifting more towards the virtual…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video