hacking: security in practice
When is it possible to make an attack like this?

I'm starting to study pentest and cybersecurity.

I found this attack on a website. I would like to know how this attack would work. When is it possible and what information is needed to carry it out.

I created an environment of servers and fake sites to play with, but I couldn't hack into any system. I must have something wrong.

What do you say?

submitted by /u/essencedata
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GCP - recommended vulnerability scanners

I have worked with AWS for years and recently found myself within a Google Cloud architecture at a new position. I’m not very familiar with GCP in the first place so I’m cautious/skeptical of integrations.

We utilize most of the Firebase suite (functions, pubsub, Firestore, etc). Honestly, it’s all a seemingly a little cookie cutter for my taste but it’s what it is.

Outside of me doing my own DD with their blogs and recommendations on security setup I wanted to reach out to this group.

Are there recommend automation tools someone could suggest for me to run a high level pen test best suited for GCP?

submitted by /u/jalapeno-grill
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kali Linux adalah distribusi linux turunan debian yang dikelola oleh keamanan ofensif.


1. NMAP
Nmap adalah pemindai jaringan sumber terbuka (Open Source) yang digunakan untuk Mengetahui atau memindai pada suatu jaringan.

Continue reading on Medium »

Hacking on Medium
penting nya mengamankan website


dijaman sekarang yang serba canggih tidak luput yang namanya peretasan data, maka dari itu jika kita mempunyai website alangkah baik nya…

Continue reading on Medium »

Hacking on Medium
Hacker101 CTF — Encrypted Pastebin — 2/4 FLAGS (Español)


Hola terrícolas, espero estén teniendo un excelente mes.

Continue reading on Medium »

KitPloit - PenTest Tools!Weakpass - Rule-Based Online Generator To Create A Wordlist Based On A Set Of Words





The tool generates a wordlist based on a set of words entered by the user.




For example, during penetration testing, you need to gain access to some service, device, account, or Wi-Fi network that is password protected. For example, let it be the Wi-Fi network of EvilCorp. Sometimes, a password is a combination of device/network/organization name with some date, special character, etc. Therefore, it is simpler and easier to test some combinations before launching more complex and time-consuming checks. For example, cracking a Wi-Fi password with a wordlist can take several hours and can fail, even if you choose a great wordlist because there was no such password in it like Evilcorp2019.

Therefore, using the generated wordlist, it is possible to organize a targeted and effective online password check.

Link: https://zzzteph.github.io/weakpass/

Secondary: https://weakpass.com/generate

Features

The hashcat rule syntax is used to generate the wordlist. By default, the generator uses a set of rules "online.rule", which performs the following mutations:

1. Adding special characters and popular endings to the end of the word - !,!@, !@#, 123! etc. evilcorp!, evilcorp!123
2. Adding digits from 1 to 31, from 01 to 12 - evilcorp01, evilcorp12.
3. Adding the date 2018-2023 - evilcorp2018, evilcorp2019
4. Various combinations of 1-3 - evilcorp2018!
5. Capitalize the first letter and lower the rest, apply 1-4. Evilcorp!2021

As a result, for the word evilcorp, the following passwords will be generated (216 in total):

* evilcorp
* Evilcorp
* EVILCORP
* evilcorp123456
* evilcorp2018
* Evilcorp!2021
* Evilcorp!2022
* Evilcorp2018!@#

You can use your own hashcat rules, just click "Show rules" and put in the "Rules" textarea them with the list of rules you like best. Rules that are supported (source https://hashcat.net/wiki/doku.php?id=rule_based_attack):
NameFunctionDescriptionExample RuleInput WordOutput WordNothing:Do nothing (passthrough):p@ssW0rdp@ssW0rdLowercaselLowercase all letterslp@ssW0rdp@ssw0rdUppercaseuUppercase all lettersup@ssW0rdP@SSW0RDCapitalizecCapitalize the first letter and lower the restcp@ssW0rdP@ssw0rdInvert CapitalizeCLowercase first found character, uppercase the restCp@ssW0rdp@SSW0RDToggle CasetToggle the case of all characters in word.tp@ssW0rdP@SSw0RDToggle @TNToggle the case of characters at position NT3p@ssW0rdp@sSW0rdReverserReverse the entire wordrp@ssW0rddr0Wss@pDuplicatedDuplicate entire worddp@ssW0rdp@ssW0rdp@ssW0rdDuplicate NpNAppend duplicated word N timesp2p@ssW0rdp@ssW0rdp@ssW0rdp@ssW0rdReflectfDuplicate word reversedfp@ssW0rdp@ssW0rddr0Wss@pRotate Left{Rotate the word left.{p@ssW0rd@ssW0rdpRotate Right}Rotate the word right}p@ssW0rddp@ssW0rAppend Character$XAppend character X to end$1p@ssW0rdp@ssW0rd1Prepend Character^XPrepend character X to front^1p@ssW0rd1p@ssW0rdTruncate left[Delete first character[p@ssW0rd@ssW0rdTrucate right]Delete last character]p@ssW0rdp@assW0rDelete @ NDNDelete character at position ND3p@ssW0rdp@sW0rdExtract rangexNMExtract M characters, starting at position Nx04p@ssW0rdp@ssOmit rangeONMDelete M characters, starting at position NO12p@ssW0rdpsW0rdInsert @ NiNXInsert character X at position Ni4!p@ssW0rdp@ss!W0rdOverwrite @ NoNXOverwrite character at position N with Xo3$p@ssW0rdp@s$W0rdTruncate @ N'NTruncate word at position N'6p@ssW0rdp@ssW0ReplacesXYReplace all instances of X with Yss$p@ssW0rdp@$$W0rdPurge@XPurge all instances of X@sp@ssW0rdp@W0rdDuplicate first NzNDuplicate first character N timesz2p@ssW0rdppp@ssW0rdDuplicate last NZNDuplicate last character N timesZ2p@ssW0rdp@ssW0rdddDuplicate allqDuplicate every characterqp@ssW0rdpp@@ssssWW00rrdd
The generator automatically removes duplicate passwords.

By pressing the Wi-Fi, all passwords less than 8 characters long will be automaticall[...]

___________________________
@hacking_Attack
@Hacking_Video

y deleted.

All data is generated using Javascript so that you can use the generator without internet access.

How-to









1. To generate a wordlist, enter in the Words field, words that can be used as part of the password.
2. Click on the Generate button
3. Copy the received content or click on the Copy to clipboard button for automatic copying.
4. ...
5. Profit!



Download Weakpass

___________________________
@hacking_Attack
@Hacking_Video

My hacking journey and How i got my First Bug after 50+ duplicates?
https://medium.com/@tbw_lucilu/my-hacking-journey-and-how-i-got-my-first-bug-after-50-duplicates-a1ec22c365fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Hunters,Continue reading on Medium » (https://medium.com/@tbw_lucilu/my-hacking-journey-and-how-i-got-my-first-bug-after-50-duplicates-a1ec22c365fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Feel Free to Check Out My New DoS Tool

https://external-preview.redd.it/TjJiq0DC_IkttH4_6nSjH8plTvuzDhXux8ojjFsOveQ.jpg?width=640&crop=smart&auto=webp&s=9e0583e769d545ea75dbe13d78d242122206bbc1 submitted by /u/entropydaemon3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Amazon Dot Gen 3 Shell

Anyone know if it’s possible to get a shell on an Amazon Echo 3rd Gen? I do know the baud rate, but no luck getting a shell. Any help/articles/tips would be awesome. Thanks!

submitted by /u/meercat256
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/QEexCtKQDn76_tBkZ-hYzxgB94rhR3Dz3vEIY3PCvpM.jpg New equipment added to the bag.

5 Wifi connections available for whatever is needed. One used to operate wirelessly.

Massive battery for over 8 hours of use.

Loaded with a very nice Open-WRT firmware with plugins.

16GB of storage.

​

https://preview.redd.it/jxv050yl5zo71.jpg?width=3024&format=pjpg&auto=webp&s=f3d3bf648ec5b555ce830caa5547cc01fa131772

https://preview.redd.it/aeblw3yl5zo71.jpg?width=3024&format=pjpg&auto=webp&s=226b7afde6df5666447bcc3eb90d82724bb90245

https://preview.redd.it/mel6d2yl5zo71.jpg?width=4032&format=pjpg&auto=webp&s=babf8c08ca4eac8a0c3c08c028470c1a71fd9d6c

https://preview.redd.it/766baayl5zo71.jpg?width=4032&format=pjpg&auto=webp&s=627a2c4670bd2b21a311b5fbfdbcdaca72e49ab5

https://preview.redd.it/94dcyuxl5zo71.jpg?width=4032&format=pjpg&auto=webp&s=b70fe8cbecc6003a0e8e215d13aa361761400604

submitted by /u/fancy_scarecrow
[link] [comments]

Hacking on Medium
For what reason Can’t Blockchain Be Hacked?


An overview led by The World Economic Forum in 2017 gave the astounding forward direction that we can expect up to 10% of worldwide gross…

Continue reading on Medium »

Black Hat Ethical Hacking
New macOS zero-day bug lets attackers run commands remotely

___________________________
@hacking_Attack
@Hacking_Video

A fever Worth 750$- [Accessing Private Projects ]

Hello Champs, Shakti here , I hope you all are having some good times. Usually i’m not a person who makes writeup for the findings, but i…Continue reading on Medium »
Read more...

Super Admin panel without Credentials

As-Salaam-Alaikum.Continue reading on Medium »
Read more...