Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Koiprtic Level 1 - Walkthrough
It was pretty simple compared to my last venture, still wanted to share my walkthrough, so here it is,
https://medium.com/@sarangiprateek80/kioptrix-level-1-af7a4c4386cc
submitted by /u/psarangi112
[link] [comments]
Koiprtic Level 1 - Walkthrough
It was pretty simple compared to my last venture, still wanted to share my walkthrough, so here it is,
https://medium.com/@sarangiprateek80/kioptrix-level-1-af7a4c4386cc
submitted by /u/psarangi112
[link] [comments]
hacking: security in practice
Are there any hackers who are late bloomers/were late bloomers?
I read about many hackers and most common pattern that I have noticed is that, they start very young. Many hackers are teens who hack CIA, DDOS Yahoo and damage systems.
For example, mark Hutchins who stopped and reverse engineered wanna cry ransomware was so young.
Also one more thing is that, all of them are statistical genuises. Iq above 140 and all!
submitted by /u/Good-Bottle7238
[link] [comments]
Are there any hackers who are late bloomers/were late bloomers?
I read about many hackers and most common pattern that I have noticed is that, they start very young. Many hackers are teens who hack CIA, DDOS Yahoo and damage systems.
For example, mark Hutchins who stopped and reverse engineered wanna cry ransomware was so young.
Also one more thing is that, all of them are statistical genuises. Iq above 140 and all!
submitted by /u/Good-Bottle7238
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Assless-Chaps : Crack MSCHAPv2 Challenge/Responses Quickly Using A Database Of NT Hashes
Assless-CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response (e.g. from a WiFi EAP WPE attack).
It requires a database of NT hashes, instructions on how to make these from existing lists or using hashcat with wordlists and rules are available below. I’ve included a sample database from SecLists. You’ll need to bunzip it.
Technique
An MSCHAPv2 exchange does not require the clear-text password to be “cracked”, rather we merely need the NThash used.
MSCHAPv2 splits the NThash into three parts, and uses each part as different keys to DES encrypt the same challenge (derived from the peer and authenticator challenges). The NTHash is split into two 7-byte keys, and one 2-byte key. This means the last key is padded with NULLs to make a key of the required length. This can be rapidly brute forced due to the efficiency of DES operation and a keyspace of 65 535. Once we have those two bytes, we can look up all NThashes in our database, that end in those two bytes. This provides a much smaller set of possible hashes to check.
This is a form of space vs time tradeoff, similar to a rainbow table. It’s also a form of hash shucking.
Presentation
This was first presented at Defcon 29’s RF Hacking Village. The slides are included in this repository.
Speed
Here is the comparison for three sample challenge/response’s and three different wordlists, a small private one, rockyou, and the Have I Been Pwned list. These were done on my Macbook Pro 2016. Hashcat is using this hash schucking kernel and the two builtin GPUs and a pure rather than optimised kernel (as the latter doesn’t exist yet). Hash3 isn’t in the lists to simulate worst case performance. I’m not including the time hashcat takes to build the dictionary cache on first run.
Hash1
Small hashlist:
hashcat 0.50s user 0.27s system 55% cpu 1.405 total (8597.8 kH/s)
assless 0.05s user 0.00s system 294% cpu 0.018 total
Rockyou hashlist:
hashcat 2.67s user 0.51s system 93% cpu 3.413 total
assless 0.05s user 0.01s system 281% cpu 0.021 total
HIBP hashlist:
hashcat 59.97s user 11.72s system 136% cpu 52.603 total (5620.6 kH/s)
assless 0.05s user 0.00s system 292% cpu 0.018 total
Hash 2
Small hashlist:
hashcat 0.51s user 0.27s system 55% cpu 1.409 total (8704.7 kH/s)
assless 0.03s user 0.00s system 248% cpu 0.012 total
Rockyou hashlist:
hashcat 2.20s user 0.46s system 110% cpu 2.409 total (5798.4 kH/s)
assless 0.03s user 0.00s system 231% cpu 0.015 total
HIBP hashlist:
<p class="has-vivid-green-cyan-color has-black-background-color ha[...]
➖ Sent by @TheFeedReaderBot ➖
Assless-Chaps : Crack MSCHAPv2 Challenge/Responses Quickly Using A Database Of NT Hashes
Assless-CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response (e.g. from a WiFi EAP WPE attack).
It requires a database of NT hashes, instructions on how to make these from existing lists or using hashcat with wordlists and rules are available below. I’ve included a sample database from SecLists. You’ll need to bunzip it.
Technique
An MSCHAPv2 exchange does not require the clear-text password to be “cracked”, rather we merely need the NThash used.
MSCHAPv2 splits the NThash into three parts, and uses each part as different keys to DES encrypt the same challenge (derived from the peer and authenticator challenges). The NTHash is split into two 7-byte keys, and one 2-byte key. This means the last key is padded with NULLs to make a key of the required length. This can be rapidly brute forced due to the efficiency of DES operation and a keyspace of 65 535. Once we have those two bytes, we can look up all NThashes in our database, that end in those two bytes. This provides a much smaller set of possible hashes to check.
This is a form of space vs time tradeoff, similar to a rainbow table. It’s also a form of hash shucking.
Presentation
This was first presented at Defcon 29’s RF Hacking Village. The slides are included in this repository.
Speed
Here is the comparison for three sample challenge/response’s and three different wordlists, a small private one, rockyou, and the Have I Been Pwned list. These were done on my Macbook Pro 2016. Hashcat is using this hash schucking kernel and the two builtin GPUs and a pure rather than optimised kernel (as the latter doesn’t exist yet). Hash3 isn’t in the lists to simulate worst case performance. I’m not including the time hashcat takes to build the dictionary cache on first run.
Hash1
Small hashlist:
hashcat 0.50s user 0.27s system 55% cpu 1.405 total (8597.8 kH/s)
assless 0.05s user 0.00s system 294% cpu 0.018 total
Rockyou hashlist:
hashcat 2.67s user 0.51s system 93% cpu 3.413 total
assless 0.05s user 0.01s system 281% cpu 0.021 total
HIBP hashlist:
hashcat 59.97s user 11.72s system 136% cpu 52.603 total (5620.6 kH/s)
assless 0.05s user 0.00s system 292% cpu 0.018 total
Hash 2
Small hashlist:
hashcat 0.51s user 0.27s system 55% cpu 1.409 total (8704.7 kH/s)
assless 0.03s user 0.00s system 248% cpu 0.012 total
Rockyou hashlist:
hashcat 2.20s user 0.46s system 110% cpu 2.409 total (5798.4 kH/s)
assless 0.03s user 0.00s system 231% cpu 0.015 total
HIBP hashlist:
<p class="has-vivid-green-cyan-color has-black-background-color ha[...]
➖ Sent by @TheFeedReaderBot ➖
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Things Not do On Internet :Can be hacked.
Internet is our necessity and a way to get connected with peoples, companies and brands.
Continue reading on Medium »
Things Not do On Internet :Can be hacked.
Internet is our necessity and a way to get connected with peoples, companies and brands.
Continue reading on Medium »
Hacking on Medium
InsurAce.io Biweekly Updates (Sep 06 — Sep 19)
Check what we have achieved during the past 2 weeks.
Continue reading on InsurAce.io Blog »
InsurAce.io Biweekly Updates (Sep 06 — Sep 19)
Check what we have achieved during the past 2 weeks.
Continue reading on InsurAce.io Blog »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux TutorialsKnockOutlook : A Little Tool To Play With Outlook
KnockOutlook is a C# project that interacts with Outlook’s COM object in order to perform a number of operations useful in red team engagements.
Command Line Usage
_ _ _ _ _ _ / /// / // _ _ / // / _ / /_ / ,< / _ \/ _ \/ / /// / / / / / / / / \/ _ \/ ///
/ /| |/ / / / // / // ,< / // / // / // / // / // / ,< // |// //__/___//_\___/__,/_//___/____/_/_\
Parameters:
–operation : specify the operation to run
–keyword : specify a keyword for the ‘search’ operation
–id : specify an EntryID for the ‘save’ operation
–bypass : bypass the Programmatic Access Security settings (requires admin)
Operations:
check : perform a number of checks to ensure operational security
contacts : extract all contacts of every account
mails : extract mailbox metadata of every account
search : search for the provided keyword in every mailbox
save : save a specified mail by its EntryID
Examples:
KnockOutlook.exe –operation check
KnockOutlook.exe –operation contacts
KnockOutlook.exe –operation mails –bypass
KnockOutlook.exe –operation search –keyword password
KnockOutlook.exe –operation save –id {EntryID} –bypass
Operations
* checkEnumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting.If this value is set to
* contactsEnumerates the contacts of every configured account and extracts the following information:
* Full Name
* Email Address
* mailsEnumerates the mails of every configured account and extracts the following metadata:
* ID
* Timestamp
* Subject
* From
* To
* Attachments
* searchSearches inside the mailbox of every configured account using Outlook’s built-in search engine and returns the
* saveUses Outlook’s built-in
Object Model Guard Bypass
The
It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished.
Output
All operations will output basic information on screen.
The
The
All filenames are randomly generated during runtime.
By default, Outlook’s Secure Temp Folder is used as a destination for all exported files.
Download
KnockOutlook is a C# project that interacts with Outlook’s COM object in order to perform a number of operations useful in red team engagements.
Command Line Usage
_ _ _ _ _ _ / /// / // _ _ / // / _ / /_ / ,< / _ \/ _ \/ / /// / / / / / / / / \/ _ \/ ///
/ /| |/ / / / // / // ,< / // / // / // / // / // / ,< // |// //__/___//_\___/__,/_//___/____/_/_\
Parameters:
–operation : specify the operation to run
–keyword : specify a keyword for the ‘search’ operation
–id : specify an EntryID for the ‘save’ operation
–bypass : bypass the Programmatic Access Security settings (requires admin)
Operations:
check : perform a number of checks to ensure operational security
contacts : extract all contacts of every account
mails : extract mailbox metadata of every account
search : search for the provided keyword in every mailbox
save : save a specified mail by its EntryID
Examples:
KnockOutlook.exe –operation check
KnockOutlook.exe –operation contacts
KnockOutlook.exe –operation mails –bypass
KnockOutlook.exe –operation search –keyword password
KnockOutlook.exe –operation save –id {EntryID} –bypass
Operations
* checkEnumerates the Outlook installation details in order to construct the correct registry key and retrieve the Programmatic Access Security setting.If this value is set to
Warn when antivirus is inactive or out-of-date it queries WMI for any installed antivirus products and parses their current state.* contactsEnumerates the contacts of every configured account and extracts the following information:
* Full Name
* Email Address
* mailsEnumerates the mails of every configured account and extracts the following metadata:
* ID
* Timestamp
* Subject
* From
* To
* Attachments
* searchSearches inside the mailbox of every configured account using Outlook’s built-in search engine and returns the
EntryID of mails that contain the provided keyword in their body.* saveUses Outlook’s built-in
Save As mechanism to export a mail referenced by its EntryID.Object Model Guard Bypass
The
--bypass switch can be used in conjunction with contacts, mails, search and save operations given the fact that the current process is running with high integrity level.It will attempt to snapshot the current security policy of Outlook, patch it in a way that the Programmatic Access Security prompt is auto-allowed and finally revert it to its initial state after the operation has finished.
Output
All operations will output basic information on screen.
The
contacts and mails operations will output results in JSON format to a Gzip compressed file.The
save operation will export the requested mail in .MSG format.All filenames are randomly generated during runtime.
By default, Outlook’s Secure Temp Folder is used as a destination for all exported files.
Download
Access more than 10k premium API keys | python exploit
https://4bdoz.medium.com/access-more-than-10k-premium-api-keys-python-exploit-c728fdf5eae?source=rss------bug_bounty-5
https://4bdoz.medium.com/access-more-than-10k-premium-api-keys-python-exploit-c728fdf5eae?source=rss------bug_bounty-5