AES256\_Passwd\_Store - Secure Open-Source Password Manager
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.Example usage using scrypt as the hashing algorithm: Create a database file: python3 aespasswd_store.py -a scrypt -c Change master password for a database file: python3 aespasswd_store.py -a scrypt -cp Edit a database file: python3 aespasswd_store.py -a scrypt -e Query data from within the database file: python3 aespasswd_store.py -a scrypt -q Examples: # Add entry to the database/modify existing data:pass_id1=passwordpass_id2=passwordpass_id3=password# Delete existing data:pass_id1=deletepass_id2=delete# -q parameter: Query data (entering nothing dumps all data):pass_id1pass_id3# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input. Download Aes256_Passwd_Store
Read more...
___________________________
@hacking_Attack
@Hacking_Video
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file. This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file's data using the algorithm's hash as the AES-256 key. When providing the 'scrypt' argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely ge nerated salt is base64 encoded and prepended to each database file's encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data. When using the change password parameter/-cp the script will decrypt the database file's data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.Example usage using scrypt as the hashing algorithm: Create a database file: python3 aespasswd_store.py -a scrypt -c Change master password for a database file: python3 aespasswd_store.py -a scrypt -cp Edit a database file: python3 aespasswd_store.py -a scrypt -e Query data from within the database file: python3 aespasswd_store.py -a scrypt -q Examples: # Add entry to the database/modify existing data:pass_id1=passwordpass_id2=passwordpass_id3=password# Delete existing data:pass_id1=deletepass_id2=delete# -q parameter: Query data (entering nothing dumps all data):pass_id1pass_id3# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input. Download Aes256_Passwd_Store
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Así son los ordenadores detrás de Netflix: sirven hasta 50 GB/s
https://cdn-images-1.medium.com/max/1200/0*h203Md6HxEvsRHoF
PUBLICADO EN 22 SEPTIEMBRE, 2021POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Así son los ordenadores detrás de Netflix: sirven hasta 50 GB/s
https://cdn-images-1.medium.com/max/1200/0*h203Md6HxEvsRHoF
PUBLICADO EN 22 SEPTIEMBRE, 2021POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Así son los ordenadores detrás de Netflix: sirven hasta 50 GB/s
PUBLICADO EN 22 SEPTIEMBRE, 2021POR EHACKING
Catching the big fish: Analyzing a large-scale phishing-as-a-service operation
https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/PhishingAAS) [comments] (https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/PhishingAAS) [comments] (https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Catching the big fish: Analyzing a large-scale...
Posted in r/redteamsec by u/SCI_Rusher • 1 point and 0 comments
hacking: security in practice
Website Admins Can See My Personal Cookies?
Hello everyone,
I would like to know what exactly external websites can see from cookies? Not the cookies I have on this particular website but from all my cookies on Chrome.
I'm not talking about Facebook or all those big websites but a small website, what can they actually see from my cookies?
I searched on the web and apparently, external websites should not be able to see my cookies but I know for a fact that they can see some kind of data from my cookies, what can they see actually?
If it's really not possible, could they pay some companies that can actually extract some data out of my cookies?
Thanks!
submitted by /u/KDOTOVERLORD
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Website Admins Can See My Personal Cookies?
Hello everyone,
I would like to know what exactly external websites can see from cookies? Not the cookies I have on this particular website but from all my cookies on Chrome.
I'm not talking about Facebook or all those big websites but a small website, what can they actually see from my cookies?
I searched on the web and apparently, external websites should not be able to see my cookies but I know for a fact that they can see some kind of data from my cookies, what can they see actually?
If it's really not possible, could they pay some companies that can actually extract some data out of my cookies?
Thanks!
submitted by /u/KDOTOVERLORD
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Website Admins Can See My Personal Cookies?
Hello everyone, I would like to know what exactly external websites can see from cookies? Not the cookies I have on this particular website but...
hacking: security in practice
How to bypass "Do you want to allow this app from an unknown publisher ?" considering that I don't have admin right ?
My brother's school computer is blocked :
1) he doesn't have admin rights
2) he can execute app from an unknown publisher
3) and worst of all the BIOS has a password
He want to do some stuff so I've been searching for hours for a solutions but I found nothing relevant
Do you have any solution ?
submitted by /u/Jallbalath
[link] [comments]
How to bypass "Do you want to allow this app from an unknown publisher ?" considering that I don't have admin right ?
My brother's school computer is blocked :
1) he doesn't have admin rights
2) he can execute app from an unknown publisher
3) and worst of all the BIOS has a password
He want to do some stuff so I've been searching for hours for a solutions but I found nothing relevant
Do you have any solution ?
submitted by /u/Jallbalath
[link] [comments]
reddit
How to bypass "Do you want to allow this app from an unknown...
My brother's school computer is blocked : 1) he doesn't have admin rights 2) he can execute app from an unknown publisher 3) and worst of all...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Here it is! deserter is the first of its kind (at least to my knowledge) targeted DNS cache poisoner
https://external-preview.redd.it/lyc9mJV0MTQaAQyZ6VBxml62OJwEi7tGA7_sF0-UTxU.jpg?width=640&crop=smart&auto=webp&s=e8408507f66e85be189b9bf145c71bef41b07297 submitted by /u/b4ckslash0
[link] [comments]
Here it is! deserter is the first of its kind (at least to my knowledge) targeted DNS cache poisoner
https://external-preview.redd.it/lyc9mJV0MTQaAQyZ6VBxml62OJwEi7tGA7_sF0-UTxU.jpg?width=640&crop=smart&auto=webp&s=e8408507f66e85be189b9bf145c71bef41b07297 submitted by /u/b4ckslash0
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet via VPN? How would a hacker exploit this situation? Curious to learn! Thanks
submitted by /u/possiblyai
[link] [comments]
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet via VPN? How would a hacker exploit this situation? Curious to learn! Thanks
submitted by /u/possiblyai
[link] [comments]
reddit
How secure is data saved on iCloud locked notes + VPN?
Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
CVE-2021-28663 - POC - Explanation
Hello,
I have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU.
The issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.
submitted by /u/reujea0
[link] [comments]
CVE-2021-28663 - POC - Explanation
Hello,
I have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU.
The issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.
submitted by /u/reujea0
[link] [comments]