hacking: security in practice
source
photo
John gives up without attempting to crack password.

I'm doing the introductory "Blue" lesson on TryHackMe, which requires cracking a Windows password hash. I've used John before, but I have no clue what's going on here.

So, I have the formatted password hash extracted:
Jon:1000:aad3b435b51404eeaad3b435b51404ee:ffb43f0de35be4d9917ac0cc8ad57f8d:::
I redirect this to a file:
echo -n "Jon:1000:aad3b435b51404eeaad3b435b51404ee:ffb43f0de35be4d9917ac0cc8ad57f8d:::" > jon_hash
Then load it and rockyou.txtinto john:
john -w /usr/share/wordlists/rockyou.txt --format=nt jon_hash
The output though isn't encouraging. It finishes instantly, and shows this:
Created directory: /home/name/.john Using default input encoding: UTF-8 Loaded 52 password hashes with no different salts (NT [MD4 256/256 AVX2 8x3]) Warning: no OpenMP support for this hash type, consider --fork=8 Press 'q' or Ctrl-C to abort, almost any other key for status 0g 0:00:00:00 DONE (2021-09-11 17:11) 0g/s 7708p/s 7708c/s 400852C/s !@#$%..sss Session completed
Then, if I try to show cracked passwords:
$ john --show jon_hash 0 password hashes cracked, 1 left
I kept at it for awhile, then looked up a guide. It shows essentially the procedure I already did though, and they were able to get it cracked. And yes, I checked my copy of rockyou.txt, and it does contain the expected password.

Does anyone know why it isn't attempting to crack it?

Thank you

submitted by /u/carcigenicate
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Expiration of SSL handshake

After physically obtaining (pre)master key, which was generated in SSL handshake - how long can one use it to decrypt HTTPS traffic? For session? To next reboot? Or maybe it has to be manually deleted on client side to force making next SSL handshake with generating new master key?

submitted by /u/Dry_Equal_9398
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vehicle infotainment system as an attack vector?

So my brain started firing off signals today and im curious. Has anyone heard of someone pulling files or injecting a payload to a connected device from a vehicles infotainment system? When I get in a newer vehicle it starts asking for all sorts of permissions when I access Bluetooth or plug in via cable. My first thought was:

"A O.MG cable left in your vehicle could probably work."

However, that isn't really weaponizing any vehicle systems so my question isn't satisfied. Then I thought:

"Well, what if someone built out a raspberry pi to function as a normal infotainment system and programmed malicious code into the Pi so when a device is connected it starts dumping payloads."

But that solution in itself is just a more complicated version of the O.MG cable.

Does anyone have any insight that might satisfy my noggin?

submitted by /u/usrnamealreadytaken1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Randomly kick a win10 machine off my wifi

I have a new user in my house who is being an utter prick.

I wish to, at random times, boot the machine off my network.

I was using aireplay-ng -0 100 [bssid] [clientid] wlan0mon but while this works on other machines, I am assuming its not working on this win10 machine because of windows security?

Is there any way I can mod that command, any other flags etc that may give me my goal?

submitted by /u/iGraveling
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-up: VulnNet Roasted.


Dificultad : Fácil.

Continue reading on Medium »

Deep Web
I'm sick of tor!

Is there another anonymous browser that's almost identical to tor that doesn't take to 5hours to connect. Tor is really annoying. Any suggestions? (Help) I need another browser

submitted by /u/mscott303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Looking for local crime links, is their anyway or any website that would have leaks or something of that nature, recently moved into a place with a known high organiser crime rate and I’m just wanting to know which places to steer clear off

submitted by /u/Smegma_on_bread
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
State of wireless keyboard and mouse security?

Last I heard there were reported vulnerabilities with wireless keyboards even with encryption. Is this still the case today?

How about mice? Are they less of a risk since it is mostly clicking and coordinates, except when you cut and paste?

submitted by /u/Necessary-Helpful
[link] [comments]

hacking: security in practice
Dear reddit...

Recently, I joined a Minecraft realm on bedrock. The server is neat, but somebody had to come in and ruin the peace. They managed to get a command block from who knows where and type some lousy command to make the entire server essentially useless. What happens when you join is you are greeted by a lovely sound of thousands upon thousands of totems of undying breaking. Your inventory is also filled with barriers and you get a pumpkin put on your head. you also get every debuff in the game. how do we fix this? The hackers alias was "Cookieman"

submitted by /u/StrongMonkies
[link] [comments]

hacking: security in practice
Figuring out if a werkzeug 1.0.1 server is running in debugger mode.

Hey everyone, new to finding exploits. Currently working on a ctf that has a site that is running a wsgi server with werkzeug 1.0.1 and python 2.7 on it. I know that there is a vulnerability with running a werkzeug server with debugger enabled. How can I figure out if the debugger mode is currently enabled? Ive looked it up and have found its easiest to try and cause an internal server error, then this would show if debugger mode is enabled. How would I go about doing that?

submitted by /u/tmag97
[link] [comments]

hacking: security in practice
Not sure if this has been asked before, but how secure are React states?

I know that browser cookies are insecure and used for CSRF and stuff. What about info that are stored in React/Redux? How do hackers go about to access them, since they're gone after a refresh? And any good practice to secure it?

submitted by /u/ohlesl1e
[link] [comments]

Deep Web
thoughts on dark0de?

submitted by /u/boonerpatooner
[link] [comments]

Deep Web
What’s the new alphabay? Hit my dm🙏

submitted by /u/gvnsvn
[link] [comments]

Loader shellcode that executes an ELF in-memory using an anonymous file descriptor
https://www.reddit.com/r/redteamsec/comments/pmoseh/loader_shellcode_that_executes_an_elf_inmemory/

submitted by /u/0xDangerous_bit (https://www.reddit.com/user/0xDangerous_bit)
[link] (https://gist.github.com/zznop/0117c24164ee715e750150633c7c1782) [comments] (https://www.reddit.com/r/redteamsec/comments/pmoseh/loader_shellcode_that_executes_an_elf_inmemory/)

How I Found 7 XSS Vulnerabilities in Filename Reflecting
https://alimanshester.medium.com/how-i-found-7-xss-vulnerabilities-in-filename-reflecting-6347279ee82a?source=rss------bug_bounty-5

in one of HackerOne public programsContinue reading on Medium » (https://alimanshester.medium.com/how-i-found-7-xss-vulnerabilities-in-filename-reflecting-6347279ee82a?source=rss------bug_bounty-5)

hacking: security in practice
Does Kali run on Docker well? What are the drawbacks?

I’ve read that Docker is less resource intensive and that there are Kali images for it, but some old sources mentioned it lacking full functionality.

I have a weak computer and don’t like waiting on VMware, so I’m considering this as an alternative.

submitted by /u/pass-the-word
[link] [comments]

hacking: security in practice
source
photo
REvil ransomware is back in full attack mode and leaking data

https://external-preview.redd.it/SCqjrGrHHj2pjZ5fouec_KWDUojBeaV5hp05O4izTEw.jpg?width=640&crop=smart&auto=webp&s=29538cb53c51c1ecddc0c11990b892afa1f16a09 submitted by /u/inlay883
[link] [comments]