The SQLite database is typically 61% larger that the CSV file used to create it. It can also take some time to create the database depending on the size of files. Prepare your filesystem requirements (https://www.kitploit.com/search/label/Requirements) accordingly. Here is an example using the rockyou dictionary: Base rockyou dictionary 129M hashcat generated rockyou.csv 462M Resulting SQLite database rockyou.db 746M BZip2 maximum compression rockyou.db.bz2 339M You could save space by converting and inserting each hash dynamically and skipping the need for the intermediary CSV file.
NTLMv1 SSP
NTLMv1 will work in exactly the same way, unless it's using SSP. You'll know if SSP is in use if you get an LM response that ends in a bunch of zeros. You can use the included ntlm-ssp.py to produce the server challenge that assless will need. Run it like this: python3 ntlm-ssp.py For example if we use the example NTLMv1-SSP challenge response from the hashcat example hashes (https://hashcat.net/wiki/doku.php?id=example_hashes): u4-netntlm::kNS:338d08f8e26de93300000000000000000000000000000000:9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41:cb8086049ec4736c You would pass in the LM and challenge like so: python3 ntlm-ssp.py 338d08f8e26de93300000000000000000000000000000000 cb8086049ec4736c And get the following response: The server challenge is: 724edf24aea0d68b Which can then be cracked with assless-chaps like normal: ./assless-chaps 724edf24aea0d68b 9526fb8c23a90751cdd619b6cea564742e1e4bf33006ba41 hashes.db

Download Assless-Chaps (https://github.com/sensepost/assless-chaps)

hacking: security in practice
How a vulnerability in the Bumble dating app can reveal any user's exact location

https://external-preview.redd.it/BnuEvj7UtF_zpzOPaYzPYXhB9F21X4QCGq3pjuMociQ.jpg?width=640&crop=smart&auto=webp&s=4054e8446bd84a6413892a4e6946514a47cb8470 submitted by /u/pimterry
[link] [comments]

hacking: security in practice
If you have been wanting to participate in the hackathon for a long time, your time has come!

I have been watching hackathons for a long time and at the moment there is one interesting and at first glance easy for experienced teams.

You've probably heard about Near and its $ 1 million MetaBUIDL hackathon. Here are two reviews on it:

https://lolsontg.medium.com/metabuidl-hakathon-how-to-participate-and-find-a-team-8edcbec4bb01

https://lolsontg.medium.com/earn-money-with-near-part-1-hackathons-913d8f73c33b

In short, there is now a pool of tasks from various companies from the Near ecosystem that have already allocated a budget of more than 200 thousand dollars, although about a hundred were announced.

Unfortunately, I am not so strong in programming to take part, but I am sure that there are those among us who want to make money. For example, I saw a vacancy there with 8.5 k per month for full-time development (I am so sorry at such moments that I do not know how to develop)

In short, guys, if you have knowledge in development, design, NFT, I advise you to participate. The hackathon will last until the end of the year.

Official site: https://metabuidl.splashthat.com/

submitted by /u/osmimsc
[link] [comments]

hacking: security in practice
How do i find the owner of this insta?

there has recently been an Instagram account that is completely anonymous that has been spreading rumors and has been overall bad for our school. I logged their IP and I want to somehow use that to either identify them or do something to scare them into identifying themselves. Someone please advise/lead to somewhere with people who could advise! thanks

WHAT I KNOW:

their general location: The same as everyone else’s general location

internet provider: The only high-speed provider in our town

device/os: iPhone, iOS 14.7.1 (same as every1)

I can’t get anything else

I AM NOT GOING TO THE POLICE, IT ISN’T RLY THAT SERIOUS, I JUST WANNA GET THIS SHUT DOWN WITHOUT INVOLVING THE ADMINISTRATION OT AUTHORITIES

submitted by /u/UpbeatTomorrow8
[link] [comments]

hacking: security in practice
Cybersecurity/Ethical Hacking Course Giveaway Competition!

https://external-preview.redd.it/Ht5RGUvsWxUqGsxJmljULQyhb_6sttV-M61rXt5feCo.jpg?width=640&crop=smart&auto=webp&s=b042d5da19bc2d4753185fe625cdd24490da2dd4 submitted by /u/starfox7077
[link] [comments]

hacking: security in practice
Sequencer Analyze Now Button Greyed out on Burp

So I'm working on learning more about Burp.

Trying to do some some cookie/session analysis with Sequencer.

I launch the live capture, but the "Analyze now" button is greyed out.

I let the capture run for a while and it never lets me analyze it.

All the guides I've found for sequencer basically just say "start live capture", the "pause", then press "Analyze now".

Am I missing something here?

submitted by /u/labmansteve
[link] [comments]

Hacking on Medium
Breaking Application’s Logic to DOS Attack

https://cdn-images-1.medium.com/max/600/1*bG0nYMMLc6Y6oLEbJ58rHg.png
Hey guys,
Recently I had found a bug which was fine enough to deserve this post. So, I thought of writing it up here. I can not disclose…

Continue reading on Nerd For Tech »

Hacking on Medium
How to Track Someone’s Location by Sending them over a Link?

https://cdn-images-1.medium.com/max/1000/1*oLiAf7XI9OMQ0KbQe1TxtA.jpeg
Disclaimer: It is a simple tool that is freely available online. It is for educational purposes only. To protect yourself from scammers…

Continue reading on Medium »

Hacking on Medium
Passed OSCP with 100% in 15 hours

https://cdn-images-1.medium.com/max/1033/1*7yUonpltudyIz92gFvBDGw.png
Hi everyone, I am back with OSCP this time. I wanted to share my full journey on how I passed OSCP in the first attempt and was able to…

Continue reading on Medium »

Hacking on Medium
CWE-79

https://cdn-images-1.medium.com/max/640/1*Ut4I_zK5nItYsNcUDR-hWg.jpeg
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Continue reading on ShiftLeft Blog »

Hacking on Medium
MetaBUIDL Hakathon how to participate and find a team?

https://cdn-images-1.medium.com/max/600/0*Odq20y9Sq5BNEwB8
We continue to understand the hackathon. In general, I explained what a hackathon and a MetaBUIDL event are in this article, if you are a…

Continue reading on Medium »

chaining bugs from self XSS to account takeover

ingredients for P2 account takeover= self XSS + WAF bypass + csrf bypassContinue reading on Medium »
Read more...