Hacking on Medium
Continuation of the Evil Twin Attacks-Part 1(click this link to read part 1 → c).

https://cdn-images-1.medium.com/max/1500/1*XOvz1LOe6FZF1oG5X0cYVA.png
Let’s get the ball rolling with how the attack is carried out and remedies to this attack.

Continue reading on Medium »

Hacking on Medium
How do Ethical hackers help to secure systems?

https://cdn-images-1.medium.com/max/748/1*Jl7gqyyFtlpjBXBETt6U2g.png
Ethical hackers are security experts who hack into the system in the same way the black hat hackers do and secure them like security…

Continue reading on Medium »

Hacking on Medium
Brooklyn Nine Nine — Try Hack Me

https://cdn-images-1.medium.com/max/1218/1*iMs6AbjZB-M2zfQGVnT_RQ.png
Here is another easy box from tryhackme. This box involves breaking into the nine nine department using stenography and privilege's…

Continue reading on Medium »

Hacking on Medium
Kali Linux VS Parrot OS

https://cdn-images-1.medium.com/max/1200/1*COBMgsKTpV55hEtK7d5v5g.png
Which is Best OS for Hacking

Continue reading on Medium »

Install cmake on Kali Linux

cmake — is used to control the software compilation process.Continue reading on Medium »
Read more...

Install urldedupe on Kali Linux

urldedupe — is a tool to quickly pass in a list of URLs, and get back a list of deduplicated (unique) URL and query string combination.Continue reading on Medium »
Read more...

Install GauPlus on Kali Linux

GauPlus — A modified version of gau (get all urls).Continue reading on Medium »
Read more...

Install subjs on Kali Linux

subjs — fetches javascript files from a list of URLS or subdomains.Continue reading on Medium »
Read more...

https://b.thumbs.redditmedia.com/nphzFwkQf3zh0iDCi422ydmlJASZQ0xF-pgUi5LNcYc.jpg HI so, i am doing an evil Twin attack, but the only problem is that the client does not De-auth when i launch the FAKE AP (with the name of the client). What could be the problem ?

i have got the 4 way handshake and also the captive portal works and i get the password, but the client does not auto deauth from the original connection.

I want to de-auth the client, so they get frustrated and sign in via the FAKE One .

I am using Fluxion but also tried the same thing in airgeddon-master.

Images for reference:

​

https://preview.redd.it/p96hwrqvlvi71.png?width=1364&format=png&auto=webp&s=fcf36fc82b876495e6cd6468630836b79893c907

​

​

Thanks

​

I am using my laptops internal Wifi-card and do not have an external adapter like panda or alpha. (Should i buy one) ?

submitted by /u/Edulad
[link] [comments]

hacking: security in practice
This PLAY STORE app is able to intercept the "clear data" command and cancel it on a ROOTLESS stock phone!

Like per the title, This PLAY STORE app is able to intercept the "clear data" command and cancel it on a ROOTLESS stock phone! This is not normal and it should not be allowed. I've tried reverse engineering the application but in my short analysis I've found nothing that could indicate me on how it's happening. I've also found no trace of the only intent that could even be related (aka ACTION_PACKAGE_DATA_CLEARED)

I've tried on multiple devices and emulators to confirm that it's not an issue with the ROM. So it's either an android bug or the app is very shady! I've made a video of the issue here

submitted by /u/BadgerRound
[link] [comments]

hacking: security in practice
Must check

https://t.me/IG_hack_bot?start=r07640763210

submitted by /u/skrilla777
[link] [comments]

Trusting Pre-domain Wildcard as Origin CSRF Attack — Devfolio

Cross Site Request Forgery (CSRF) attacks are the most common vulnerabilities on the web today, naturally they make their way into the…Continue reading on Medium »
Read more...

Trusting Pre-domain Wildcard as Origin CSRF Attack — Devfolio
https://monish-basaniwal.medium.com/trusting-pre-domain-wildcard-as-origin-csrf-attack-devfolio-adc2261635cf?source=rss------bug_bounty-5

Cross Site Request Forgery (CSRF) attacks are the most common vulnerabilities on the web today, naturally they make their way into the…Continue reading on Medium » (https://monish-basaniwal.medium.com/trusting-pre-domain-wildcard-as-origin-csrf-attack-devfolio-adc2261635cf?source=rss------bug_bounty-5)