Account Persistence – Certificates
https://www.reddit.com/r/redteamsec/comments/pnnzgo/account_persistence_certificates/

submitted by /u/netbiosX (https://www.reddit.com/user/netbiosX)
[link] (https://pentestlab.blog/2021/09/13/account-persistence-certificates/) [comments] (https://www.reddit.com/r/redteamsec/comments/pnnzgo/account_persistence_certificates/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Have You Heard Of Ableonion

I was wondering if any of you have heard of Ableonion? For those who dont know Ableonion is a dark web chat that has a one to one chat and a group chat.

submitted by /u/TheToxicNinja20
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Peirates - Kubernetes Penetration Testing Tool

What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service accounts, obtain further code execution, and gain control of the cluster.Where do I run Peirates? You run Peirates from a container running on Kubernetes. Does Peirates attack a Kubernetes cluster? Yes, it absolutely does. Talk to your lawyer and the cluster owners before using this tool in a Kubernetes cluster. Who creates Peirates? InGuardians' CTO Jay Beale first conceived of Peirates and put together a group of InGuardians developers to create it with him, including Faith Alderson, Adam Crompton and Dave Mayer. Faith convinced us to all learn Golang, so she could implement the tool's use of the kubectl library from the Kubernetes project. Adam persuaded the group to use a highly-interactive user interface. Dave brought contagious enthusiasm. Together, these four developers implemented attacks and began releasing this tool that we use on our penetration tests. Do you welcome contributions? Yes, we absolutely do. Submit a pull request and/or reach out to contact@inguardians.com. What license is this released under? Peirates is released under the GPLv2 license. Modules Building and Running If you just want the peirates binary to start attacking things, grab the latest release from the releases page. However, if you want to build from source, read on! Get peirates go get -v "github.com/inguardians/peirates" Get libary sources if you haven't already (Warning: this will take almost a gig of space because it needs the whole kubernetes repository) go get -v "k8s.io/kubectl/pkg/cmd" "github.com/aws/aws-sdk-go" Build the executable cd $GOPATH/github.com/inguardians/peirates./build.sh This will generate an executable file named peirates in the same directory. Download Peirates
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!Peirates - Kubernetes Penetration Testing Tool


What is Peirates?

Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service accounts, obtain further code execution, and gain control of the cluster.



Where do I run Peirates?

You run Peirates from a container running on Kubernetes.

Does Peirates attack a Kubernetes cluster?

Yes, it absolutely does. Talk to your lawyer and the cluster owners before using this tool in a Kubernetes cluster.

Who creates Peirates?

InGuardians' CTO Jay Beale first conceived of Peirates and put together a group of InGuardians developers to create it with him, including Faith Alderson, Adam Crompton and Dave Mayer. Faith convinced us to all learn Golang, so she could implement the tool's use of the kubectl library from the Kubernetes project. Adam persuaded the group to use a highly-interactive user interface. Dave brought contagious enthusiasm. Together, these four developers implemented attacks and began releasing this tool that we use on our penetration tests.

Do you welcome contributions?

Yes, we absolutely do. Submit a pull request and/or reach out to contact@inguardians.com.

What license is this released under?

Peirates is released under the GPLv2 license.

Modules

Building and Running

If you just want the peirates binary to start attacking things, grab the latest release from the releases page.

However, if you want to build from source, read on!

Get peirates

go get -v "github.com/inguardians/peirates"


Get libary sources if you haven't already (Warning: this will take almost a gig of space because it needs the whole kubernetes repository)

go get -v "k8s.io/kubectl/pkg/cmd" "github.com/aws/aws-sdk-go"


Build the executable

cd $GOPATH/github.com/inguardians/peirates
./build.sh


This will generate an executable file named peiratesin the same directory.



Download Peirates

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iOS App Download

There are apps that allow downloading/management of iOS apps. I’d rather not trust random apps from unknown publishers.

Is there a way to download the binaries for a given iOS app for research?

submitted by /u/irkine
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El Hackeo que Cambió al Mundo

Siguiendo uno de los eventos más importantes del año pasado en el mundo digital, el hackeo conocido popularmente como SolarWinds demostró…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Un millón de dólares a cambio de infectar las redes de tu propia empresa”


PUBLICADO EN 13 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Hacking on Medium
Fool me once


This is the story of how my Outlook account got hacked, what was demanded, and how I rectified my mistake.

Continue reading on Geek Culture »

Deep Web
Need help creating a pgp key

Need help creating pgp key

Hello, I need help creating a pgp key. What I have researched is that the best software to use is kleopatra. However, I couldn’t find where to download it to windows. I tried downloading GPG4WIN and I get an error saying that my computer is unable to run that program. I have a Lenovo computer with windows 10. Can anybody help me please?

submitted by /u/No_Original7180
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Where can I go to find porn in the darkweb?

I'm having a hard time finding any porn at all on the dark web. Which direction should I go to?

submitted by /u/zinzudo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AWID key use

I have an AWID key to get into my apartment but they charge 100 bucks in my building to replace them and I want to have two on me at all times because I often lose things. Any ideas on how to do this.

submitted by /u/littlemanbigdream
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
WiFi password

Hi I didn’t know which subreddit I could use for this but I am currently trying to get my neighbors WiFi password because I do not have WiFi myself currently but the name of the WiFi name is “Potter House” any ideas on what the password could be? Lol

submitted by /u/Ju5tin26
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I figure out a Bluetooth protocol?

This darn Bluetooth printer needs a FANCY APP to run, but I'd rather create my own app, or print stuff directly using a desktop (or Arduino) https://www.amazon.com/dp/B08YJXLZN1 It uses some "iprint" app that seems super sketchy...

And extremely aggravating that I can't just use any device.

submitted by /u/MasonP13
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Finding a scammer?

My dear old mom is going through a really rough patch right now, so much so that she’s been a bit spacey these past couple of weeks. Which is why, in a rush to pay off her credit card, she locked herself out of her account and just googled & called the first number she saw. The guy claimed to be a bank associate and went through a series of getting her to add him on Zelle, send him $300, then created a MoonBase account to buy himself crypto.

I know it’s likely an L, but I have the phone number she called, the name and email of the person (probably fake).

Is there a way to reverse search a phone number/email to see who the scammer was?

submitted by /u/zawati_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PROTECTING YOURSELF ON FACEBOOK, KEEPING YOURSELF SAFE FROM OSINT INVESTIGATORS AND FRAUD ACTORS


Social media is a one-stop-shop where you can really find much personal information about people. You can find information like siblings…

Continue reading on Medium »

Hacking on Medium
Who is on your WiFi/Network? Find out now!! Only in 3 min. | Netdiscover| Linux| Windows


A. For Linux —

Continue reading on Medium »

Hacking on Medium
What are the Five Things you need to focus on, for a Career in Cyber Security as a beginner?


Basically everyone is noob for starting a new thing..we need to be strong with our basics…Cyber Security is a field which we should know…

Continue reading on Medium »

Deep Web
I keep hearing about dark web sites where you can watch real people stuck in escape rooms and stuff...

But how do people even watch stuff on the dark web if their Javascript is disabled on their Tor browser?

Sorry if this is a dumb question.

Also is it illegal to wach those real danger escape rooms if they exist?

submitted by /u/oxydiethylamide
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Ctf-Screenshotter : A CTF Web Challenge About Making Screenshots

Ctf-Screenshotter is a CTF web challenge about making screenshots. It is inspired by a bug found in real life. The challenge was created by @LiveOverflow for https://cscg.de/.

Watch the video writeup here: https://www.youtube.com/watch?v=FCjMoPpOPYI

Run The Challenge

To run the challenge you have to install docker-compose:

docker-compose up

Once the servicses are running, you should be able to access http://127.0.0.1:5000.

Solution

The DO_NOT_ACCESS folder contains the solution when you checkout the solution branch with git checkout solution.


Download