hacking: security in practice
I Noticed My School District Has SSL Decryption, Could it Decrypt a VPN?

My school district and all of the wifi at my school has a very strict website blocker (which, for some reason, even blocks google.com so I can't use Google Docs), so I use a VPN to bypass it. Though I don't really know how much the details matter, I'm using PrivateVPN, in 'Stealth Mode', which I think just means it uses port 443 (Normally the VPN is blocked unless I use stealth mode, but it might just block all connections to port 1194). One time, though, when I had the VPN off (I forgot to turn it on), I noticed on the blocked page that one of the links was ssldecrypt2.myschool.district. I'm now more glad I'm using a VPN, for privacy reasons as well, but I'm wondering, since there's already ssl decryption, could that same decryption also decrypt a VPN? And would it matter if it's on port 443? Sorry if this has a simple answer, I might just be missing something big. TIA!

submitted by /u/fun840
[link] [comments]

hacking: security in practice
Looking for advice.

Hello, I recently purchased a storage unit at an auction (the kind you see on storage wars) and was curious if anyone had an idea on how I could get into the various electronics I found. (I have everything but Linux based computers out of it)

submitted by /u/Thatonensoutherner
[link] [comments]

Hacking on Medium
ROOTME WALKTHROUGH — TRYHACKME.COM — CTF FOR BEGINNERS


Hi there, welcome to my write-up as I go through the RootMe room on TryHackMe.

Continue reading on Medium »

Deep Web
What Was It Like To Browse The Deep Web In The Early to Mid 2010s

submitted by /u/SoldierSam1
[link] [comments]

Hacking on Medium
Brooklyn Nine Nine-TryHackMe-Writeup.


Writeup de la maquina Brooklyn en try hack me.

Continue reading on Medium »

Hacking on Medium
Latest Atlassian Confluence Flaw Exploited To Breach Jenkins Project Server


Being a project manager is like being an artist, you have the different colored project streams combining into a work of art.

Continue reading on rootissh »

¿Cómo usar FFUF, por donde empezar?
https://4rthur.medium.com/c%C3%B3mo-usar-ffuf-por-donde-empezar-52d0ffa46abf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Una técnica muy interesante dentro de las pruebas de penetración es el descubrimiento de directorios por fuerza bruta. He estado probando…Continue reading on Medium » (https://4rthur.medium.com/c%C3%B3mo-usar-ffuf-por-donde-empezar-52d0ffa46abf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How do you install Kleopatra and GPA on tails?

or is there an easier method nowadays?

submitted by /u/Globislove
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Aspiring undergrad college student documenting every day in his life until he gets his dream red-team job
https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/

I am the maker of this blog, and didn't really know where to share and propagate the blog. It is just a personal project of mine for those interested in watching me grow from a zero to a hero both in maturity and in technical skill. I'm not exactly a zero in general IT, but for IT security and red-teaming I am. I'll copy and paste this post to the discord as well for whoever is interested. My entire life story and current situation is contained within the first blog post. Obviously I wouldn't give any hardcore personal identifiable life experiences and give away my true identity. submitted by /u/Hyperion_Mobius (https://www.reddit.com/user/Hyperion_Mobius)
[link] (https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/) [comments] (https://www.reddit.com/r/redteamsec/comments/prq4jl/aspiring_undergrad_college_student_documenting/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
MobileAudit : SAST and Malware Analysis for Android Mobile APKs


MobileAudit is a SAST and Malware Analysis for Android Mobile APKs.

Django Web application for performing Static Analysis and detecting malware in Android APKs
https://1.bp.blogspot.com/-k2TOBVolCxo/YTIntzJhpaI/AAAAAAAAKqo/dHY9JN7V_o0uM3EQVFE7eLUGaPCUGEOwwCLcBGAsYHQ/s1449/1.png
In each of the scans, it would have the following information:

* Application Info
* Security Info
* Components
* SAST Findings
* Best Practices Implemented
* Virus Total Info
* Certificate Info
* Strings
* Databases
* Files
https://1.bp.blogspot.com/-k5vdRnxvrfY/YTIoB7qdzzI/AAAAAAAAKqw/KSny0cKhw84u61dJy7KXctj09LQ1m3lvQCLcBGAsYHQ/s1212/2.png
For easy access there is a sidebar on the left page of the scan:
https://1.bp.blogspot.com/-3VzDmkOWk8Q/YTIoWHr_9iI/AAAAAAAAKq4/Bcijq11Pp5oi3gQp34mKAWyNbSoqrGcTwCLcBGAsYHQ/s777/4.png
Components
https://1.bp.blogspot.com/-QslEVo1mfzg/YTIolSNA6GI/AAAAAAAAKq8/GaqMg5wimsobolh1Nj-GQsd1qO3L1cqRQCLcBGAsYHQ/s1758/5.png
* db: PostgreSQL 13.2
* nginx: Nginx 1.19.10
* rabbitmq: RabbitMQ 3.8.14
* worker: Celery 5.0.5
* web: Mobile Audit App

Docker Base images

Image is based on python buster. Link to Docker Hub image
ImageTagsBasempast/mobile_audit1.3.8python:3.9.4-bustermpast/mobile_audit1.3.6python:3.9.2-bustermpast/mobile_audit1.3.0python:3.9.1-bustermpast/mobile_audit1.0.0python:3.9.0-buster
Main Features

* Uses Docker for easy deployment in multiplatform environment
* Extract all information of the APK
* Analyze all the source code searching for weaknesses
* All findings are categorized and follows CWE standards
* All findings are categorized and include Mobile Top 10 Risk
* Also highlight the Best Practices in Secure Android Implementation in the APK
* The findings can be edited and the false positives can be triaged and deleted
* All scan results can be exported to PDF
* User authentication and user management
* API v1 with Swagger and ReDoc
* TLS
* Dynamic page reload (WIP)
* LDAP integration
* Export to Markdown
* Export to CSV

Patterns

The application has an engine with different rules and patterns that are used though the findings scanning phase to detect vulnerabilities and/or malicious code into the apk.
These can be activated and deactivated in /pat[...]

hacking: security in practice
Techie spends thousands of dollars and no doubt hundreds of hours to build a machine that fakes handwriting

https://external-preview.redd.it/Qp9UKoQMj3MeZqnnBKi2LnjjCushgMrabpSCMT45lZo.jpg?width=640&crop=smart&auto=webp&s=e7bea91bfce52fedb0814841f66513162add4631 submitted by /u/pinpepnet
[link] [comments]

hacking: security in practice
Hi, guys. In your PC you can turn on god mode with following just some steps. step one: In your desktop press right click and create a new folder. Step two: Rename the folder with this code: GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

Thank you!

submitted by /u/Jarzis-Hossain-ppp
[link] [comments]

hacking: security in practice
How to use Recon-ng in this recon-ng tutorial, discover open source intelligence and how to easily pivot to new results. Find targets and move to discovering vulnerabilities.

https://external-preview.redd.it/ryL01jI1413tO8YtDTbHdlpodtWftOSQbj4dhoS55RQ.jpg?width=640&crop=smart&auto=webp&s=8adfa54b3a158621df0293f61891200b481b0761 submitted by /u/Way_Tough
[link] [comments]