hacking: security in practice
Download PPT used in Adobe connect?
What's up guys,
So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT each day and I was wondering if there is anyone knows how to get a hold of the actual PPT presentation used (presenter does not enable content share).
I know there's a way because I've seen one guy do it somehow and share it from time to time but can't figure out how.
Any ideas? Thanks!
p.s. im not a hacker or anything close to it
submitted by /u/dhroa
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Download PPT used in Adobe connect?
What's up guys,
So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT each day and I was wondering if there is anyone knows how to get a hold of the actual PPT presentation used (presenter does not enable content share).
I know there's a way because I've seen one guy do it somehow and share it from time to time but can't figure out how.
Any ideas? Thanks!
p.s. im not a hacker or anything close to it
submitted by /u/dhroa
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Download PPT used in Adobe connect?
What's up guys, So i´m currently takiing some courses that are given by way of adobe connect (web conferences), where the presenter shares PPT...
1*GVSxg9BAJMVjVRAioufqoA.gif
34.3 KB
Hacking on Medium
Exploiting Critical SQL Injection Vulnerability
Hi Guys,
Continue reading on Medium »
Exploiting Critical SQL Injection Vulnerability
Hi Guys,
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
Freedom Hosting Admin Sentenced to 27 Years in Prison
https://external-preview.redd.it/Bn5uT7ReHZJQod0Xb7NNDib52YJdtbLxqLNJEjcA3F4.jpg?width=640&crop=smart&auto=webp&s=b943d43a1f6e23f3df7e5690a765cfd5084d8dbf submitted by /u/kirby__000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Freedom Hosting Admin Sentenced to 27 Years in Prison
https://external-preview.redd.it/Bn5uT7ReHZJQod0Xb7NNDib52YJdtbLxqLNJEjcA3F4.jpg?width=640&crop=smart&auto=webp&s=b943d43a1f6e23f3df7e5690a765cfd5084d8dbf submitted by /u/kirby__000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Freedom Hosting Admin Sentenced to 27 Years in Prison
Posted in r/deepweb by u/kirby__000 • 1 point and 0 comments
PyHook - An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call
PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target processSupported Processes Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm and should give you credentials for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking Download PyHook
Read more...
___________________________
@hacking_Attack
@Hacking_Video
PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target processSupported Processes Process API Call Description Progress mstsc CredUnPackAuthenticationBufferW This will hook into mstsc and should give you Username and Password DONE runas CreateProcessWithLogonW This will hook into runas and should give you Username, Password and the domain name DONE cmd RtlInitUnicodeStringEx This should hook into cmd and then would be able to filter keywords like: PsExec,password etc.. DONE MobaXterm CharUpperBuffA This will hook into MobaXterm and should give you credentials for SSH and RDP logins DONE explorer (UAC Prompt) CredUnPackAuthenticationBufferW This will hook into explorer and should give you Username, Password and the Domain name from the UAC Prompt DONE Link my blog post covering this topic: https://ilankalendarov.github.io/posts/offensive-hooking Download PyHook
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Ilan Kalendarov
Offensive API Hooking
Introduction
Difficulty in finding jobs
https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for around 5y in total. 2 years ago I decided to move to offensive security. September 1st I took my OSCP credential, since then, I'm looking for a formal position in ethical hacking/pentesting/red pill team; there's a LOT of available jobs, but I couldn't found any country accepting people from outside - for many reasons that you guys may know (citizenship, TS/SCI clearance, etc.) even for remote jobs. 2 months ago I left my 5 years job at IBM to focus on my offensive security career. Now I'm afraid to not be able to have a job in this area. Could you guys please give me a direction? I really appreciate PS: I also have a dozen other certificates (as RHCE, AWS DevOps Engineer...) and I live in Brazil. submitted by /u/brunoanjoz (https://www.reddit.com/user/brunoanjoz)
[link] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/) [comments] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for around 5y in total. 2 years ago I decided to move to offensive security. September 1st I took my OSCP credential, since then, I'm looking for a formal position in ethical hacking/pentesting/red pill team; there's a LOT of available jobs, but I couldn't found any country accepting people from outside - for many reasons that you guys may know (citizenship, TS/SCI clearance, etc.) even for remote jobs. 2 months ago I left my 5 years job at IBM to focus on my offensive security career. Now I'm afraid to not be able to have a job in this area. Could you guys please give me a direction? I really appreciate PS: I also have a dozen other certificates (as RHCE, AWS DevOps Engineer...) and I live in Brazil. submitted by /u/brunoanjoz (https://www.reddit.com/user/brunoanjoz)
[link] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/) [comments] (https://www.reddit.com/r/Pentesting/comments/psvgyz/difficulty_in_finding_jobs/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Difficulty in finding jobs
Hello friends, I'm a Linux systems administrator with +12y experience. Also having worked as Security Analyst and Security Admin for...
hacking: security in practice
Anyone know how to fix this Beef-xss problem im having?
Heres the log
[i] GeoIP database is missing
[i] Run geoipupdate to download / update Maxmind GeoIP database
[*] Please wait for the BeEF service to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*] Web UI: http://127.0.0.1:3000/ui/panel
[*] Hook:
[*] Example:
● beef-xss.service - beef-xss
Loaded: loaded (/lib/systemd/system/beef-xss.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2021-09-21 20:33:54 EDT; 3s ago
Process: 1241 ExecStart=/usr/share/beef-xss/beef (code=exited, status=1/FAILURE)
Main PID: 1241 (code=exited, status=1/FAILURE)
CPU: 1.159s
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Browser Exploitation Framework (BeEF) 0.5.0.0
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Twit: u/beefproject
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Site: https://beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Blog: http://blog.beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] |_ Wiki: https://github.com/beefproject/beef/wiki
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Project Creator: Wade Alcorn (@WadeAlcorn)
Sep 21 20:33:54 kali beef[1241]: -- migration_context()
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Main process exited, code=exited, status=1/FAILURE
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Failed with result 'exit-code'.
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Consumed 1.159s CPU time.
[*] Opening Web UI (http://127.0.0.1:3000/ui/panel) in: 5... 4... 3... 2... 1...
┌──(kali㉿kali)-[~]
└─$
submitted by /u/o1blique1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Anyone know how to fix this Beef-xss problem im having?
Heres the log
[i] GeoIP database is missing
[i] Run geoipupdate to download / update Maxmind GeoIP database
[*] Please wait for the BeEF service to start.
[*]
[*] You might need to refresh your browser once it opens.
[*]
[*] Web UI: http://127.0.0.1:3000/ui/panel
[*] Hook:
[*] Example:
● beef-xss.service - beef-xss
Loaded: loaded (/lib/systemd/system/beef-xss.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2021-09-21 20:33:54 EDT; 3s ago
Process: 1241 ExecStart=/usr/share/beef-xss/beef (code=exited, status=1/FAILURE)
Main PID: 1241 (code=exited, status=1/FAILURE)
CPU: 1.159s
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Browser Exploitation Framework (BeEF) 0.5.0.0
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Twit: u/beefproject
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Site: https://beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] | Blog: http://blog.beefproject.com
Sep 21 20:33:54 kali beef[1241]: [20:33:54] |_ Wiki: https://github.com/beefproject/beef/wiki
Sep 21 20:33:54 kali beef[1241]: [20:33:54][*] Project Creator: Wade Alcorn (@WadeAlcorn)
Sep 21 20:33:54 kali beef[1241]: -- migration_context()
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Main process exited, code=exited, status=1/FAILURE
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Failed with result 'exit-code'.
Sep 21 20:33:54 kali systemd[1]: beef-xss.service: Consumed 1.159s CPU time.
[*] Opening Web UI (http://127.0.0.1:3000/ui/panel) in: 5... 4... 3... 2... 1...
┌──(kali㉿kali)-[~]
└─$
submitted by /u/o1blique1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Anyone know how to fix this Beef-xss problem im having?
Heres the log \[i\] GeoIP database is missing \[i\] Run geoipupdate to download / update Maxmind GeoIP database \[\*\]...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
When is it possible to make an attack like this?
I'm starting to study pentest and cybersecurity.
I found this attack on a website. I would like to know how this attack would work. When is it possible and what information is needed to carry it out.
I created an environment of servers and fake sites to play with, but I couldn't hack into any system. I must have something wrong.
What do you say?
submitted by /u/essencedata
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
When is it possible to make an attack like this?
I'm starting to study pentest and cybersecurity.
I found this attack on a website. I would like to know how this attack would work. When is it possible and what information is needed to carry it out.
I created an environment of servers and fake sites to play with, but I couldn't hack into any system. I must have something wrong.
What do you say?
submitted by /u/essencedata
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
When is it possible to make an attack like this?
I'm starting to study pentest and cybersecurity. I found this attack on a website. I would like to know how [this...
hacking: security in practice
GCP - recommended vulnerability scanners
I have worked with AWS for years and recently found myself within a Google Cloud architecture at a new position. I’m not very familiar with GCP in the first place so I’m cautious/skeptical of integrations.
We utilize most of the Firebase suite (functions, pubsub, Firestore, etc). Honestly, it’s all a seemingly a little cookie cutter for my taste but it’s what it is.
Outside of me doing my own DD with their blogs and recommendations on security setup I wanted to reach out to this group.
Are there recommend automation tools someone could suggest for me to run a high level pen test best suited for GCP?
submitted by /u/jalapeno-grill
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
GCP - recommended vulnerability scanners
I have worked with AWS for years and recently found myself within a Google Cloud architecture at a new position. I’m not very familiar with GCP in the first place so I’m cautious/skeptical of integrations.
We utilize most of the Firebase suite (functions, pubsub, Firestore, etc). Honestly, it’s all a seemingly a little cookie cutter for my taste but it’s what it is.
Outside of me doing my own DD with their blogs and recommendations on security setup I wanted to reach out to this group.
Are there recommend automation tools someone could suggest for me to run a high level pen test best suited for GCP?
submitted by /u/jalapeno-grill
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
GCP - recommended vulnerability scanners
I have worked with AWS for years and recently found myself within a Google Cloud architecture at a new position. I’m not very familiar with GCP in...