hacking: security in practice
Hackers / devs in the Dominican Republic?

The PRuF dev team is currently based in the DR. We are hard at work on pruf.io and are looking for local devs that would like to learn about smart contract testing, attack surfaces, etc as part of an internal testing/attack team we are forming to augment our internal pre-audit testing.

If this sounds interesting or you just want to chat, reply here.

submitted by /u/exosequitur
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Business Logic Errors - Must Vote
https://shahjerry33.medium.com/business-logic-errors-must-vote-68f642b60fb7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/business-logic-errors-must-vote-68f642b60fb7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How i hacked BBC mail servers
https://cyberguy0xd1.medium.com/how-i-hacked-bbc-mail-servers-e61bb6faed2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Walk-through in hacking BBC mail servers through chained vulnerabilityContinue reading on Medium » (https://cyberguy0xd1.medium.com/how-i-hacked-bbc-mail-servers-e61bb6faed2d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-Up: Watcher.

https://cdn-images-1.medium.com/max/967/1*tf0ycr4l_MS0b4mJgbZyyA.png
Dificultad: Media

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Get Anyone’s Location Using Seeker

https://cdn-images-1.medium.com/max/2600/0*PEVgsb_XK-_Mwq-V
Hello Folks, I am Nirmal Unagar

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/RFpJw39MgC9UVGu0E9dmQxX7QhqU_uofbS7AvLUWynw.jpg We need your help finding video evidence for a gang rape crime that happened in Egypt.

In 2014, a high profile gang r**pe incident called ‘The Fairmont Crime’ took place at a luxury hotel in Egypt, in which 4 rich and well-connected men drugged and r**ped the girl and signed their initials on her body. They filmed the whole thing and circulated it all over the internet. It ruined her life. After a miraculous MeToo movement in Egypt, my friend (the survivor) decided to finally take legal action against the r*pists. After a social media uproar, many of them fled the country, 4 were dragged to jail, but many of the witnesses were also arrested. The video was quickly buried & just a few months ago, the men were all released and the case is on pause. Even though we have several witnesses and two detailed screenshots of the video, the corrupt prosecution concluded that “there was not enough evidence” to incriminate them given that we didn’t have the full video.

Her family is ready to pay $8,000 to anyone who finds the Fairmont video, or $2,000 if other videos of them are found (given how they’ve done this to literally hundreds of women). You may find other men in other videos as well. It's a massive gang of rapists.

These are the 4 men you’ll find in this specific video: https://i.imgur.com/IZzBRX9.jpg

We know their faces, we know every single detail of the video & we can send (censored) screenshots to anyone searching. This is a high profile case, you will find details on google.

These sick men need to be brought to justice. Please contact me for details.

Serial gang rapists from egypt.

submitted by /u/PM_ME_YOUR_LIT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Zuthaka - An Open Source Application Designed To Assist Red-Teaming Efforts, By Simplifying The Task Of Managing Different APTs And Other Post-Exploitation Tools
http://www.kitploit.com/2021/09/zuthaka-open-source-application.html

___________________________
@hacking_Attack
@Hacking_Video

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2.
Explore the docs »

About the project

Problem Statement
The current C2s ecosystem has rapidly grown in order to adapt to modern red team operations (https://www.kitploit.com/search/label/Operations) and diverse needs (further information on C2 selection can be found here (https://www.thec2matrix.com/)). This comes with a lot of overhead work for Offensive Security professionals everywhere. Creating a C2 is already a demanding task, and most C2s available lack an intuitive and easy to use (https://www.kitploit.com/search/label/Easy%20To%20Use) web interface. Most Red Teams must independently administer and understand each C2 in their infrastructure.
Solution
With the belief that community efforts surpass that of any individual, Zuthaka presents a simplified API for fast and clear integration of C2s and provides a centralized management (https://www.kitploit.com/search/label/Management) for multiple C2 instances through a unified interface for Red Team operations.Zuthaka is more than just a collection of C2s, it is also a solid foundation that can be built upon and easily customized to meet the needs of the exercise that needs to be accomplish. This integration framework for C2 allows developers to concentrate on a unique target environment and not have to reinvent the wheel.

___________________________
@hacking_Attack
@Hacking_Video

Built With
Django Rest Framework (https://www.django-rest-framework.org/)Redis (https://redis.io/)ReactJS (https://reactjs.org/)Nginx (https://www.nginx.com/)Docker (https://www.docker.com/)PostgreSQL (https://www.postgresql.org//)
Already Supported C2
CovenantEmpire
Getting Started
Zuthaka is composed of a front-end that exposes a UI for the API of process manager, file manager, shell post-exploitation (https://www.kitploit.com/search/label/Post-Exploitation) modules and general C2 handling, and a back-end, in charge of handling the consistency and availability issues of the C2s instantiated in Zuthaka. Also deployed is Redis as a message broker to handle asynchronously every element in the Agent's UI and an Nginx server.
Prerequisites
The installation of a working Docker instance is necessary for the automatic deployment of the essential infrastructure (https://www.kitploit.com/search/label/Infrastructure) (Zuthaka's frontend and backend, Nginx, Redis). All the desired C2s that need to be handled should be deployed in parallel.
Installation
To build the full Zuthaka project, first download dependencies. git clone https://github.com/pucara/zuthaka
To start the project with the corresponding services, the docker-compose file can be utilized.docker-compose up

Usage

___________________________
@hacking_Attack
@Hacking_Video

After de solution is deployed, the available class handlers will be incorporated on zuthaka for you to use it to integrate your infrastructure.For further information, please refer to the Documentation (https://docs.zuthaka.com/)
Unreleased

Added
service instantiation of C2service creation of listenersservice deletion of listenersservice download of launchersservice agent integrationAutomatic database collection of handler classes"out of the box" listing of ProcessManager and FileManager
Roadmap
service usage of post-exploitation modules
License
Distributed under the BSD-3 clause License. See LICENSE.md for more information.
Contact
Pucara team - @pucara (https://twitter.com/pucara) - contant@pucara.io (mailto:contant@pucara.io)Zuthaka community on discord - Zuthaka (https://zuthaka.com/discord)Project Link: https://github.com/pucarasec/zuthaka

Download Zuthaka (https://github.com/pucarasec/zuthaka)

___________________________
@hacking_Attack
@Hacking_Video