Deep Web
REMINDER - Read This Before Posting
I posted this a while back, but now we have people digging through YEARS old posts and reporting violating content - often not to us, but directly to the Reddit admins. This means that Reddit's Anti-Evil Operations team has been spending more time digging through our subreddit and looking for content in violation of Reddit's rules.
You can find the original post and its discussion here.
If you see posts that are in violation of Reddit's rules or the subreddit rules, use the report button. Do not engage with it. Don't comment. Just report it to us, and please move on.
Reddit admins have been watching this sub lately, which means that we are possibly on the verge of being quarantined and/or banned. A few things need to be repeated (yet again), since people seem to not be able to follow the rules: Do NOT discuss or mention child exploitation material...at all.* Don't ask about it.
* Don't ask where to get it.
* Don't ask if people remember it.
* Do. Not. Mention. Child exploitation material. Period.
If someone does mention it - before they're banned - please do not muse about the awful things that should happen to the perpetrators/producers of said material. Yes, we all agree that they're the scum of the earth and horrible things should happen to them.
However, in the eyes of Reddit admins - who, again, are now watching this subreddit - these musings can be and are seen as calls to violence. Do NOT discuss or mention drugs, markets, or anything illegal on this subreddit.We do our best to automatically weed out posts about these topics with the AutoModerator, and when they're found, the following advice is given:
You appear to be asking a specific question related to darknet markets. Due to Reddit's actions on some other subreddits, The moderators have determined that it's not safe to host such discussions here if we want to be able to continue providing this sub as an educational resource.
We have, however, come up with some resources that may help you in terms of finding an appropriate place to ask such questions:
* Dark.fail is a popular onion service monitor that verifies links via PGP to ensure you're not accessing a phishing site
* Darknet Live is a news focused site that also contains links to popular onion services
* Dread is an established darknet discussion forum similar to Reddit, but with fewer restrictions (see also: r/DreadAlert for updates)
* Real World Onion Sites is a listing of several popular onion services that are less "legally gray"
If a post makes it by the filter (or if someone makes a comment that mentions these) please use the report feature. Do not further engage the posts. Do not answer the questions. Report the post/comment as a violation of Rule 2, and move on.
If the post or comment is a particularly grievous violation, feel free to send us a ModMail message to let us know about it. Repeat postsFor the new people - you're not the first person to wonder what the creepiest thing someone found, ask for "good links" etc. etc. etc. There seems to be like half a dozen of these same questions asked several times a week in different variations. USE THE SEARCH BAR BEFORE POSTING.
This is another situation where we try to catch posts with AutoModerator and provide answers.
To the regulars: If the AutoModerator answers OP's question, please feel free to upvote it. Everyone - Please review the RulesWe want to keep this subreddit a useful and educational resource for new folks. We cannot do this if it's banned, and a quarantine would essentially be a death knell for this sub, if that's its intended purpose, as new people aren't going to visit a quarantined subreddit to ask questions.
Thank you for your attention and cooperation.
submitted by /u/TheNerdyAnarchist [link] [comm[...]
___________________________
@hacking_Attack
@Hacking_Video
REMINDER - Read This Before Posting
I posted this a while back, but now we have people digging through YEARS old posts and reporting violating content - often not to us, but directly to the Reddit admins. This means that Reddit's Anti-Evil Operations team has been spending more time digging through our subreddit and looking for content in violation of Reddit's rules.
You can find the original post and its discussion here.
If you see posts that are in violation of Reddit's rules or the subreddit rules, use the report button. Do not engage with it. Don't comment. Just report it to us, and please move on.
Reddit admins have been watching this sub lately, which means that we are possibly on the verge of being quarantined and/or banned. A few things need to be repeated (yet again), since people seem to not be able to follow the rules: Do NOT discuss or mention child exploitation material...at all.* Don't ask about it.
* Don't ask where to get it.
* Don't ask if people remember it.
* Do. Not. Mention. Child exploitation material. Period.
If someone does mention it - before they're banned - please do not muse about the awful things that should happen to the perpetrators/producers of said material. Yes, we all agree that they're the scum of the earth and horrible things should happen to them.
However, in the eyes of Reddit admins - who, again, are now watching this subreddit - these musings can be and are seen as calls to violence. Do NOT discuss or mention drugs, markets, or anything illegal on this subreddit.We do our best to automatically weed out posts about these topics with the AutoModerator, and when they're found, the following advice is given:
You appear to be asking a specific question related to darknet markets. Due to Reddit's actions on some other subreddits, The moderators have determined that it's not safe to host such discussions here if we want to be able to continue providing this sub as an educational resource.
We have, however, come up with some resources that may help you in terms of finding an appropriate place to ask such questions:
* Dark.fail is a popular onion service monitor that verifies links via PGP to ensure you're not accessing a phishing site
* Darknet Live is a news focused site that also contains links to popular onion services
* Dread is an established darknet discussion forum similar to Reddit, but with fewer restrictions (see also: r/DreadAlert for updates)
* Real World Onion Sites is a listing of several popular onion services that are less "legally gray"
If a post makes it by the filter (or if someone makes a comment that mentions these) please use the report feature. Do not further engage the posts. Do not answer the questions. Report the post/comment as a violation of Rule 2, and move on.
If the post or comment is a particularly grievous violation, feel free to send us a ModMail message to let us know about it. Repeat postsFor the new people - you're not the first person to wonder what the creepiest thing someone found, ask for "good links" etc. etc. etc. There seems to be like half a dozen of these same questions asked several times a week in different variations. USE THE SEARCH BAR BEFORE POSTING.
This is another situation where we try to catch posts with AutoModerator and provide answers.
To the regulars: If the AutoModerator answers OP's question, please feel free to upvote it. Everyone - Please review the RulesWe want to keep this subreddit a useful and educational resource for new folks. We cannot do this if it's banned, and a quarantine would essentially be a death knell for this sub, if that's its intended purpose, as new people aren't going to visit a quarantined subreddit to ask questions.
Thank you for your attention and cooperation.
submitted by /u/TheNerdyAnarchist [link] [comm[...]
___________________________
@hacking_Attack
@Hacking_Video
reddit
REMINDER - Read This Before Posting
I posted this a while back, but now we have people digging through YEARS old posts and reporting violating content - often not to us, but directly...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Vailyn - A Phased, Evasive Path Traversal + LFI Scanning & Exploitation Tool In Python
http://4.bp.blogspot.com/-2rdx0vfyq9k/YTVN7X0T73I/AAAAAAAAuI4/Dl9NXtf72WkZGlSn7yTU6K97vHQSLTlcACK4BGAYYCw/w193-h400/Vailyn_1_logo-700923.png
Vailyn
Phased Path Traversal & LFI Attacks
Vailyn 3.0
Since v3.0, Vailyn supports LFI PHP wrappers in Phase 1. Use
About
Vailyn is a multi-phased vulnerability analysis and exploitation tool for path traversal and file inclusion vulnerabilities. It is built to make it as performant as possible, and to offer a wide arsenal of filter evasion techniques.
How does it work?
Vailyn operates in 2 phases. First, it checks if the vulnerability is present. It does so by trying to access /etc/passwd (or a user-specified file), with all of its evasive payloads. Analysing the response, payloads that worked are separated from the others.
Now, the user can choose freely which payloads to use. Only these payloads will be used in the second phase.
The second phase is the exploitation phase. Now, it tries to leak all possible files from the server using a file and a directory dictionary. The search depth and the directory permutation level can be adapted via arguments. Optionally, it can download found files, and save them in its loot folder. Alternatively, it will try to obtain a reverse shell on the system, letting the attacker gain full control over the server.
Right now, it supports multiple attack vectors: injection via query, path, cookie and POST data.
Why the phase separation?
The separation in several phases is done to hugely improve the performance of the tool. In previous versions, every file-directory combination was checked with every payload. This resulted in a huge overhead due to payloads being always used again, despite not working for the current page.
Installation
Recommended & tested Python versions are 3.7+, but it should work fine with Python 3.5 & Python 3.6, too. To install Vailyn, download the archive from the release tab, or perform
Once on your system, you'll need to install the Python dependencies.
Unix Systems
On Unix systems, it is sufficient to run
Windows
Some libraries Vailyn uses do not work well with Windows, or will fail to install.
If you use Windows, use
If twisted fails to ins[...]
___________________________
@hacking_Attack
@Hacking_Video
Vailyn - A Phased, Evasive Path Traversal + LFI Scanning & Exploitation Tool In Python
http://4.bp.blogspot.com/-2rdx0vfyq9k/YTVN7X0T73I/AAAAAAAAuI4/Dl9NXtf72WkZGlSn7yTU6K97vHQSLTlcACK4BGAYYCw/w193-h400/Vailyn_1_logo-700923.png
Vailyn
Phased Path Traversal & LFI Attacks
Vailyn 3.0
Since v3.0, Vailyn supports LFI PHP wrappers in Phase 1. Use
--lfito include them in the scan.About
Vailyn is a multi-phased vulnerability analysis and exploitation tool for path traversal and file inclusion vulnerabilities. It is built to make it as performant as possible, and to offer a wide arsenal of filter evasion techniques.
How does it work?
Vailyn operates in 2 phases. First, it checks if the vulnerability is present. It does so by trying to access /etc/passwd (or a user-specified file), with all of its evasive payloads. Analysing the response, payloads that worked are separated from the others.
Now, the user can choose freely which payloads to use. Only these payloads will be used in the second phase.
The second phase is the exploitation phase. Now, it tries to leak all possible files from the server using a file and a directory dictionary. The search depth and the directory permutation level can be adapted via arguments. Optionally, it can download found files, and save them in its loot folder. Alternatively, it will try to obtain a reverse shell on the system, letting the attacker gain full control over the server.
Right now, it supports multiple attack vectors: injection via query, path, cookie and POST data.
Why the phase separation?
The separation in several phases is done to hugely improve the performance of the tool. In previous versions, every file-directory combination was checked with every payload. This resulted in a huge overhead due to payloads being always used again, despite not working for the current page.
Installation
Recommended & tested Python versions are 3.7+, but it should work fine with Python 3.5 & Python 3.6, too. To install Vailyn, download the archive from the release tab, or perform
$ git clone https://github.com/VainlyStrain/Vailyn
Once on your system, you'll need to install the Python dependencies.
Unix Systems
On Unix systems, it is sufficient to run
$ pip install -r requirements.txt # --user
Windows
Some libraries Vailyn uses do not work well with Windows, or will fail to install.
If you use Windows, use
pipto install the requirements listed in Vailyn\·›\requirements-windows.txt.If twisted fails to ins[...]
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Vailyn - A Phased, Evasive Path Traversal + LFI Scanning & Exploitation Tool In Python
hacking: security in practice
Went web crawling for a site, 403 issue
Nginx 403 Forbidden error popped up after crawling a site. How do I get around that to see what’s on that page?
I don’t own or service the site
submitted by /u/sxyalicerose
[link] [comments]
Went web crawling for a site, 403 issue
Nginx 403 Forbidden error popped up after crawling a site. How do I get around that to see what’s on that page?
I don’t own or service the site
submitted by /u/sxyalicerose
[link] [comments]
reddit
Went web crawling for a site, 403 issue
Nginx 403 Forbidden error popped up after crawling a site. How do I get around that to see what’s on that page? I don’t own or service the site
KitPloit - PenTest Tools!
Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution
Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.
A summary of the changes since the 2021.2 release from June are:
* OpenSSL - Wide compatibility by default - Keep reading for what that means
* New Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools - From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch - first of its kind, for TicHunter Pro
* KDE 5.21 - Plasma desktop received a version bump
More info here.
Download Kali Linux 2021.1
Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution
Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.
A summary of the changes since the 2021.2 release from June are:
* OpenSSL - Wide compatibility by default - Keep reading for what that means
* New Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools - From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch - first of its kind, for TicHunter Pro
* KDE 5.21 - Plasma desktop received a version bump
More info here.
Download Kali Linux 2021.1
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux TutorialsHuan : Encrypted PE Loader Generator
Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files.
How It Works?
First, Huan reads the given PE file and encrypts it with CBC mode AES-128 encryption algorithm. For the encryption, I used
When the loader is executed, it first takes the image base of itself by reading the
Quick Demo
Download
Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files.
How It Works?
First, Huan reads the given PE file and encrypts it with CBC mode AES-128 encryption algorithm. For the encryption, I used
Tiny AES in C and prepared a padding code for the requirement of this library. When the encryption is complete, it compiles the loader using the Visual Studio compiler (MsBuild.exe) and creates an executable. After that, it creates a section (called .huan) on that executable, and embed the encrypted content, size information, IV and symmetric key. Both keys are created randomly for each copy of the loader. The layout of this section can be seen below.When the loader is executed, it first takes the image base of itself by reading the
Process Environment Block. After learning the image base, it parses the loaded copy of itself to find .huansection. Then, it decrypts the whole content, buffers it, and loads the binary which relies on the memory.Quick Demo
Download
[Metasploit]Upgrade Normal Shell To Meterpreter Shell
https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646?source=rss------bug_bounty-5
https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646?source=rss------bug_bounty-5
After we got access to the machine, sometimes we get Meterpreter Shell immediately after exploitation.Continue reading on Medium » (https://binamrapandey.medium.com/metasploit-upgrade-normal-shell-to-meterpreter-shell-2f09be895646?source=rss------bug_bounty-5)
Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution
http://www.kitploit.com/2021/09/kali-linux-20213-penetration-testing.html
http://www.kitploit.com/2021/09/kali-linux-20213-penetration-testing.html
Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.
A summary of the changes (https://bugs.kali.org/changelog_page.php) since the 2021.2 release from June (https://www.kali.org/blog/kali-linux-2021-2-release/) are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump
More info here (https://www.kali.org/blog/kali-linux-2021-3-release/).
Download Kali Linux 2021.1 (https://www.kali.org/downloads/)
A summary of the changes (https://bugs.kali.org/changelog_page.php) since the 2021.2 release from June (https://www.kali.org/blog/kali-linux-2021-2-release/) are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump
More info here (https://www.kali.org/blog/kali-linux-2021-3-release/).
Download Kali Linux 2021.1 (https://www.kali.org/downloads/)
Kali Linux 2021.3 - Penetration Testing and Ethical Hacking Linux Distribution
Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.A summary of the changes since the 2021.2 release from June are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump More info here.Download Kali Linux 2021.1
Read more...
Time for another Kali Linux release! – Kali Linux 2021.1. This release has various impressive updates.A summary of the changes since the 2021.2 release from June are:OpenSSL - Wide compatibility by default - Keep reading for what that meansNew Kali-Tools site - Following the footsteps of Kali-Docs, Kali-Tools has had a complete refreshBetter VM support in the Live image session - Copy & paste and drag & drop from your machine into a Kali VM by defaultNew tools - From adversary emulation, to subdomain takeover to Wi-Fi attacksKali NetHunter smartwatch - first of its kind, for TicHunter ProKDE 5.21 - Plasma desktop received a version bump More info here.Download Kali Linux 2021.1
Read more...
10 golden minutes for taking over a Chess.com account
Hi folks, this is the second write-up about finding bugs on Chess.com. You can find the first one here.
Chess.com is the most famous…
Read more...
Hi folks, this is the second write-up about finding bugs on Chess.com. You can find the first one here.
Chess.com is the most famous…
Read more...
Bug-Bounty Getting started & some tips
Collection of resources and some tips for Bug bounty By (@boomneroli)
Read more...
Collection of resources and some tips for Bug bounty By (@boomneroli)
Read more...
hacking: security in practice
Is there a way for I to make a GigaSpark out of my raspberry pi pico
I wanted to run a mac script with my pico and I made it into a ducky and it could not run mac script. I researched a little more and I saw GigaSpark work.
submitted by /u/_MiloDoesStuff
[link] [comments]
Is there a way for I to make a GigaSpark out of my raspberry pi pico
I wanted to run a mac script with my pico and I made it into a ducky and it could not run mac script. I researched a little more and I saw GigaSpark work.
submitted by /u/_MiloDoesStuff
[link] [comments]
reddit
Is there a way for I to make a GigaSpark out of my raspberry pi pico
I wanted to run a mac script with my pico and I made it into a ducky and it could not run mac script. I researched a little more and I saw...