0*q1_Fd1MIFwGsGHdu.gif
109.2 KB
Hacking on Medium
El nuevo malware Capoae se infiltra en los sitios de WordPress e instala el complemento con puerta…
PUBLICADO EN 22 SEPTIEMBRE, 2021 POR EHACKING
Continue reading on Medium »
El nuevo malware Capoae se infiltra en los sitios de WordPress e instala el complemento con puerta…
PUBLICADO EN 22 SEPTIEMBRE, 2021 POR EHACKING
Continue reading on Medium »
How I Hacked Database of MOGA Police Services Punjab Web-Applicaton !!
https://parshwa-fabaf.medium.com/how-i-hacked-database-of-moga-police-services-punjab-web-applicaton-bc47a978120c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://parshwa-fabaf.medium.com/how-i-hacked-database-of-moga-police-services-punjab-web-applicaton-bc47a978120c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
How I Hacked Database of MOGA Police Services Punjab Web-Applicaton !!
Hello Wonderful Readers ,
Hello Wonderful Readers ,Continue reading on Medium » (https://parshwa-fabaf.medium.com/how-i-hacked-database-of-moga-police-services-punjab-web-applicaton-bc47a978120c?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
How I Hacked Database of MOGA Police Services Punjab Web-Applicaton !!
Hello Wonderful Readers ,
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!AES256_Passwd_Store - Secure Open-Source Password Manager
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.
Example usage using scrypt as the hashing algorithm:
Create a database file:
Change master password for a database file:
Edit a database file:
Query data from within the database file:
Examples:
Download Aes256_Passwd_Store
___________________________
@hacking_Attack
@Hacking_Video
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.
Example usage using scrypt as the hashing algorithm:
Create a database file:
python3 aespasswd_store.py -a scrypt -c
Change master password for a database file:
python3 aespasswd_store.py -a scrypt -cp
Edit a database file:
python3 aespasswd_store.py -a scrypt -e
Query data from within the database file:
python3 aespasswd_store.py -a scrypt -q
Examples:
# Add entry to the database/modify existing data:
pass_id1=password
pass_id2=password
pass_id3=password
# Delete existing data:
pass_id1=delete
pass_id2=delete
# -q parameter: Query data (entering nothing dumps all data):
pass_id1
pass_id3
# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input.
Download Aes256_Passwd_Store
___________________________
@hacking_Attack
@Hacking_Video
OWASP 2013 vs 2017 vs 2021
https://shifacyclewala.medium.com/owasp-2013-vs-2017-vs-2021-aca88f466c20?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://shifacyclewala.medium.com/owasp-2013-vs-2017-vs-2021-aca88f466c20?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
OWASP 2013 vs 2017 vs 2021
Who is Owasp?
Who is Owasp?Continue reading on Medium » (https://shifacyclewala.medium.com/owasp-2013-vs-2017-vs-2021-aca88f466c20?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
OWASP 2013 vs 2017 vs 2021
Who is Owasp?
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux TutorialsOwt : The Most Compact WiFi Auditing Tool That Works On Command Line Linux
Owt compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still functioning at maximum proficiency.
Installation & Running The Script
~ $ git clone https://github.com/clu3bot/OWT.git
~ $ cd owt
~ $ sudo bash owt.sh
Note: owt requires root privileges
Make sure to allow updates regularly
Usage
NOTE These photos may be outdated but functionality will always be the same.
The first thing the user will see when starting owt is an update prompt that says check for script updates. Pressing enter will then check for updates of owt and automatically apply them.
Next the user will be prompted with the main intro where displayed is permissions status, the currently detected interface, and the distribution of Linux you are currently using. By pressing enter the script will automatically download any required dependencies.
After checking for required dependencies. You will have to put the the interface in monitor mode. Pressing Enter will do this for you.
Next the script will bring you to the owt main menu where the user can pick from 8 options.
Selecting Scan networks will scan for networks that you can select for your attack. This is required for all attacks besides Deauther and Beacon Flood.
After Scanning you will be given the scan results. This is where the user can select what network they want to use for attacking. After selecting a network you will be brought back the main menu.
Once the user has selected a network now its time to go to the WiFi Attacks menu. This is option 5 on the main menu. In the attacks menu there are 6 attack modes to choose from. All attacks require a network to be selected besides Deauther Attack and Beacon Flood attack.
If a network is not selected and you try to use a attack mode that requires it you will be redirected to Scan Networks.
Troubleshooting
Troubleshoot.sh will detect possible problems you may have with owt
~ $ cd owt
~ $ sudo bash troubleshoot.sh
Download
___________________________
@hacking_Attack
@Hacking_Video
Owt compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still functioning at maximum proficiency.
Installation & Running The Script
~ $ git clone https://github.com/clu3bot/OWT.git
~ $ cd owt
~ $ sudo bash owt.sh
Note: owt requires root privileges
Make sure to allow updates regularly
Usage
NOTE These photos may be outdated but functionality will always be the same.
The first thing the user will see when starting owt is an update prompt that says check for script updates. Pressing enter will then check for updates of owt and automatically apply them.
Next the user will be prompted with the main intro where displayed is permissions status, the currently detected interface, and the distribution of Linux you are currently using. By pressing enter the script will automatically download any required dependencies.
After checking for required dependencies. You will have to put the the interface in monitor mode. Pressing Enter will do this for you.
Next the script will bring you to the owt main menu where the user can pick from 8 options.
Selecting Scan networks will scan for networks that you can select for your attack. This is required for all attacks besides Deauther and Beacon Flood.
After Scanning you will be given the scan results. This is where the user can select what network they want to use for attacking. After selecting a network you will be brought back the main menu.
Once the user has selected a network now its time to go to the WiFi Attacks menu. This is option 5 on the main menu. In the attacks menu there are 6 attack modes to choose from. All attacks require a network to be selected besides Deauther Attack and Beacon Flood attack.
If a network is not selected and you try to use a attack mode that requires it you will be redirected to Scan Networks.
Troubleshooting
Troubleshoot.sh will detect possible problems you may have with owt
~ $ cd owt
~ $ sudo bash troubleshoot.sh
Download
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - clu3bot/owt: Update Version 3.1 added free SMS messaging.
Update Version 3.1 added free SMS messaging. Contribute to clu3bot/owt development by creating an account on GitHub.
AES256_Passwd_Store - Secure Open-Source Password Manager
http://www.kitploit.com/2021/09/aes256passwdstore-secure-open-source.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2021/09/aes256passwdstore-secure-open-source.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
AES256_Passwd_Store - Secure Open-Source Password Manager
This script securely encrypts or decrypts passwords (https://www.kitploit.com/search/label/Passwords) on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes (https://www.kitploit.com/search/label/Hashes) the password using the specified hashing (https://www.kitploit.com/search/label/Hashing) algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt (https://www.kitploit.com/search/label/SALT) per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.
Example usage using scrypt as the hashing algorithm:
Create a database file: ">python3 aespasswd_store.py -a scrypt -c
Change master password for a database file: ">python3 aespasswd_store.py -a scrypt -cp
Edit a database file: ">python3 aespasswd_store.py -a scrypt -e
Query data from within the database file: ">python3 aespasswd_store.py -a scrypt -q
Examples: # Add entry to the database/modify existing data:
pass_id1=password
pass_id2=password
pass_id3=password
# Delete existing data:
pass_id1=delete
pass_id2=delete
# -q parameter: Query data (entering nothing dumps all data):
pass_id1
pass_id3
# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input.
Download Aes256_Passwd_Store (https://github.com/c0dy-c0des/aes256_passwd_store)
___________________________
@hacking_Attack
@Hacking_Video
Example usage using scrypt as the hashing algorithm:
Create a database file: ">python3 aespasswd_store.py -a scrypt -c
Change master password for a database file: ">python3 aespasswd_store.py -a scrypt -cp
Edit a database file: ">python3 aespasswd_store.py -a scrypt -e
Query data from within the database file: ">python3 aespasswd_store.py -a scrypt -q
Examples: # Add entry to the database/modify existing data:
pass_id1=password
pass_id2=password
pass_id3=password
# Delete existing data:
pass_id1=delete
pass_id2=delete
# -q parameter: Query data (entering nothing dumps all data):
pass_id1
pass_id3
# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input.
Download Aes256_Passwd_Store (https://github.com/c0dy-c0des/aes256_passwd_store)
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Kitploit – Maintenance in Progress
Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.
How I Hacked Database of MOGA Police Services Punjab Web-Applicaton !!
Hello Wonderful Readers ,Continue reading on Medium »
Read more...
Hello Wonderful Readers ,Continue reading on Medium »
Read more...
AES256\_Passwd\_Store - Secure Open-Source Password Manager
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.Example usage using scrypt as the hashing algorithm: Create a database file: python3 aespasswd_store.py -a scrypt -c Change master password for a database file: python3 aespasswd_store.py -a scrypt -cp Edit a database file: python3 aespasswd_store.py -a scrypt -e Query data from within the database file: python3 aespasswd_store.py -a scrypt -q Examples: # Add entry to the database/modify existing data:pass_id1=passwordpass_id2=passwordpass_id3=password# Delete existing data:pass_id1=deletepass_id2=delete# -q parameter: Query data (entering nothing dumps all data):pass_id1pass_id3# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input. Download Aes256_Passwd_Store
Read more...
___________________________
@hacking_Attack
@Hacking_Video
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.Example usage using scrypt as the hashing algorithm: Create a database file: python3 aespasswd_store.py -a scrypt -c Change master password for a database file: python3 aespasswd_store.py -a scrypt -cp Edit a database file: python3 aespasswd_store.py -a scrypt -e Query data from within the database file: python3 aespasswd_store.py -a scrypt -q Examples: # Add entry to the database/modify existing data:pass_id1=passwordpass_id2=passwordpass_id3=password# Delete existing data:pass_id1=deletepass_id2=delete# -q parameter: Query data (entering nothing dumps all data):pass_id1pass_id3# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input. Download Aes256_Passwd_Store
Read more...
___________________________
@hacking_Attack
@Hacking_Video