hacking: security in practice
What ports are okay to be open on home router?
I nmapped my router and I found it has port 53, 80, 443, and 8080 open. Is that okay?
submitted by /u/Lmaoootyler
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
What ports are okay to be open on home router?
I nmapped my router and I found it has port 53, 80, 443, and 8080 open. Is that okay?
submitted by /u/Lmaoootyler
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TOP 3 BEST ANTIVIRUS FOR LAPTOPS IN AMAZON
https://cdn-images-1.medium.com/max/750/1*tcyzieZ_Vc1jPXeXMvShmw.jpeg
Laptops are no longer merely an add-on to a typical desktop computer. Laptops are increasingly far more popular as the only form of…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TOP 3 BEST ANTIVIRUS FOR LAPTOPS IN AMAZON
https://cdn-images-1.medium.com/max/750/1*tcyzieZ_Vc1jPXeXMvShmw.jpeg
Laptops are no longer merely an add-on to a typical desktop computer. Laptops are increasingly far more popular as the only form of…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
CLICK HERE CLICK HERE
Laptops are no longer merely an add-on to a typical desktop computer. Laptops are increasingly far more popular as the only form of…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Jupyter Notebook + Vim/Neovim
https://cdn-images-1.medium.com/max/600/1*aerRQ4H806K5u5MTAWE4BQ.png
Vim/Neovim code editing experience for Jupyter.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Jupyter Notebook + Vim/Neovim
https://cdn-images-1.medium.com/max/600/1*aerRQ4H806K5u5MTAWE4BQ.png
Vim/Neovim code editing experience for Jupyter.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Jupyter Notebook + Vim/Neovim
Vim/Neovim code editing experience for Jupyter.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HTB-{BountyHunter} user Flag
https://cdn-images-1.medium.com/max/1366/1*Ot9NoHEF8E5z9wuf6fbRsQ.png
Hackthebox Bounty Hunter machine writeup
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
HTB-{BountyHunter} user Flag
https://cdn-images-1.medium.com/max/1366/1*Ot9NoHEF8E5z9wuf6fbRsQ.png
Hackthebox Bounty Hunter machine writeup
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
HTB-{BountyHunter} user Flag
Hackthebox Bounty Hunter machine writeup
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux Distribution
Kali Linux 2021.3 is a Penetration Testing and Ethical Hacking Linux Distribution. A summary of the changes since the 2021.2 release from June are:
* OpenSSL – Wide compatibility by default – Keep reading for what that means
* New Kali-Tools site – Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session – Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools – From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch – first of its kind, for TicHunter Pro
* KDE 5.21 – Plasma desktop received a version bump
OpenSSL: wide compatibility by default
Going forwards from Kali Linux 2021.3, OpenSSL has now been configured for wider compatibility to allow Kali to talk to as many services as possible. This means that legacy protocols (such as TLS 1.0 and TLS 1.1) and older ciphers are enabled by default. This is done to help increase Kali’s ability to talk to older, obsolete systems and servers that are still using these older protocols. This may potentially increase your options on available attack surfaces (if your target has these End of Life (EoL) services running, having then forgotten about them, what else could this uncover?). While this is not a configuration that would be good for a general purpose operating systems, this setting makes sense for Kali as it enables the user to engage and talk with more potential targets.
This setting is easy to modify via the command-line tool
For more details, refer to the documentation: kali.org/docs/general-use/openssl-configuration/
Kali-Tools
In 2019.4 we moved our documentation over to our updated /docs/ page. It’s now finally the turn of our Kali-Tools site!
We have refreshed every aspect of the previous site, giving a new, faster, layout, content, and system! The backend is now in a semi-automated state and more in the open, which like before, allows for anyone to help out and contribute.
Once these sites have settled down from all the changes and matured a bit, we will start to package these both up, allowing for offline reading.
https://1.bp.blogspot.com/-VR39ACsZI_4/YUNdLQTHkgI/AAAAAAAAK3I/SF24zxRlyzcp1wPPmwfQOAe_OsFfgOkmACLcBGAsYHQ/s1435/1.png
Virtualization: improvements all over the place
The Kali Live image received some love during this release cycle! We worked hard to make the experience smoother for those who run the Live image in virtualized environments. Basic features like copy’n’paste and drag’n’drop between the host and the guest should now work out of the box. And this is really for everyone: VMware, VirtualBox, Hyper-V and QEMU+Spice. Did we forget anyone? Drop us a word on the Kali bug tracker!
On the same line: it’s now very easy to configure Kali for Hyper-V Enhanced Session Mode. Open
If you use this feature, make sure to visit kali.org/docs/virtualization/install-hyper-v-guest-enhanced-session-mode/, as there are a few additional things to be aware of.
Many thanks to @Shane Bennett, who spent a tremendous amount of time testing this feature, provided extremely detailed feedback all along, and even helped us with the documentation. Kudos Shane!
New Tools in Kali
It wouldn’t be a Kali release if there weren’t any new tools added! A quick run down of what’s been added (to [...]
Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux Distribution
Kali Linux 2021.3 is a Penetration Testing and Ethical Hacking Linux Distribution. A summary of the changes since the 2021.2 release from June are:
* OpenSSL – Wide compatibility by default – Keep reading for what that means
* New Kali-Tools site – Following the footsteps of Kali-Docs, Kali-Tools has had a complete refresh
* Better VM support in the Live image session – Copy & paste and drag & drop from your machine into a Kali VM by default
* New tools – From adversary emulation, to subdomain takeover to Wi-Fi attacks
* Kali NetHunter smartwatch – first of its kind, for TicHunter Pro
* KDE 5.21 – Plasma desktop received a version bump
OpenSSL: wide compatibility by default
Going forwards from Kali Linux 2021.3, OpenSSL has now been configured for wider compatibility to allow Kali to talk to as many services as possible. This means that legacy protocols (such as TLS 1.0 and TLS 1.1) and older ciphers are enabled by default. This is done to help increase Kali’s ability to talk to older, obsolete systems and servers that are still using these older protocols. This may potentially increase your options on available attack surfaces (if your target has these End of Life (EoL) services running, having then forgotten about them, what else could this uncover?). While this is not a configuration that would be good for a general purpose operating systems, this setting makes sense for Kali as it enables the user to engage and talk with more potential targets.
This setting is easy to modify via the command-line tool
kali-tweaksthough. Enter the Hardeningsection, and from there you can configure OpenSSL for Strong Security mode instead, which uses today’s current modern standard allowing for secure communication.For more details, refer to the documentation: kali.org/docs/general-use/openssl-configuration/
Kali-Tools
In 2019.4 we moved our documentation over to our updated /docs/ page. It’s now finally the turn of our Kali-Tools site!
We have refreshed every aspect of the previous site, giving a new, faster, layout, content, and system! The backend is now in a semi-automated state and more in the open, which like before, allows for anyone to help out and contribute.
Once these sites have settled down from all the changes and matured a bit, we will start to package these both up, allowing for offline reading.
https://1.bp.blogspot.com/-VR39ACsZI_4/YUNdLQTHkgI/AAAAAAAAK3I/SF24zxRlyzcp1wPPmwfQOAe_OsFfgOkmACLcBGAsYHQ/s1435/1.png
Virtualization: improvements all over the place
The Kali Live image received some love during this release cycle! We worked hard to make the experience smoother for those who run the Live image in virtualized environments. Basic features like copy’n’paste and drag’n’drop between the host and the guest should now work out of the box. And this is really for everyone: VMware, VirtualBox, Hyper-V and QEMU+Spice. Did we forget anyone? Drop us a word on the Kali bug tracker!
On the same line: it’s now very easy to configure Kali for Hyper-V Enhanced Session Mode. Open
kali-tweaksin a terminal, select Virtualization, and if Kali is running under Hyper-V, you’ll see a setting to turn on Hyper-V Enhanced Session Mode. It’s now as simple as hitting Enter!If you use this feature, make sure to visit kali.org/docs/virtualization/install-hyper-v-guest-enhanced-session-mode/, as there are a few additional things to be aware of.
Many thanks to @Shane Bennett, who spent a tremendous amount of time testing this feature, provided extremely detailed feedback all along, and even helped us with the documentation. Kudos Shane!
New Tools in Kali
It wouldn’t be a Kali release if there weren’t any new tools added! A quick run down of what’s been added (to [...]
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux Distribution Kali Linux 2021.3 is a Penetration Testing and Ethical Hacking Linux Distribution. A summary of the changes since the 2021.2 release from June are: * OpenSSL –…
the network repositories):
* Berate_ap – Orchestrating MANA rogue Wi-Fi Access Points
* CALDERA – Scalable automated adversary emulation platform
* EAPHammer – Targeted evil twin attacks against WPA2-Enterprise Wi-Fi networks
* HostHunter – Recon tool for discovering hostnames using OSINT techniques
* RouterKeygenPC – Generate default WPA/WEP Wi-Fi keys
* Subjack – Subdomain takeover
* WPA_Sycophant – Evil client portion of EAP relay attack
Kali NetHunter Updates
https://1.bp.blogspot.com/-9A5WYFosQFA/YUNdkwc2sqI/AAAAAAAAK3Q/eK88spZs8T0os3QP5Ai1drupXbaeybgaQCLcBGAsYHQ/s1582/NHWheader.png
Kali NetHunter Watch
We proudly introduce the world’s first Kali NetHunter smartwatch, the TicHunter Pro thanks to the outstanding work of our very own NetHunter developer @yesimxev. It is still experimental, hence the features are limited to USB attacks, and some basic functions. The hardware also has limitations, as such a small battery won’t supply enough voltage for any OTG adapters, so huge antennas won’t stick out of your wrist! The future is very promising, bringing support for Nexmon and internal bluetooth usage.
The image is available on our download page.
Please note that those images contain a “nano Kali rootfs” due to technical reasons. The detailed installation guide can be found in our Kali documentation. Feel free to join the adventure!
Kali NetHunter Installation via Magisk
Thanks to the amazing work of @Mominul Islam, we can now bring Kali NetHunter to Android 11 devices without a fully working TWRP!
Each Kali NetHunter image can be flashed as a Magisk module. This work is still in its infancy and more work is needed to bring it up to par with the traditional installer through TWRP.
One of the missing parts is the kernel installation. We haven’t been able to install the kernel through Magisk yet. That has to be done via kernel installers like the “Franco Kernel Manager”. If you are keen to get NetHunter onto your Android 11 device, just give it a crack. If you are interested in helping out with getting the kernel part finished, please get in touch with us through our GitLab issue tracker. Any help is greatly appreciated!
Kali NetHunter installation step-by-step guide for our preferred device, the OnePlus 7
Our preferred device for Kali NetHunter is the OnePlus 7 running Android 10 (stock ROM).
For a step-by-step installation guide and links to all the files required to restore your phone to the latest stock Android 10 ROM, install TWRP, Magisk and Kali NetHunter, head over to our Kali documentation page.
Kali ARM Updates
We have been busy doing various tweaks and tinkering on our Kali ARM images, which covers:
* Our Kali ARM build-scripts have been re-worked.
* Thanks to @cyrus104, we now have a build-script to support the Gateworks Newport board, and he also added documentation for it.
* @Re4son contributed a build-script for the Raspberry Pi Zero W based “Pi-Tail” (Find more information here).
* Additionally, the RaspberryPi Zero W based “P4wnP1” build-script has undergone some major changes.
* All images should finally resize the file-system on the first boot.
* We now re-generate the default snakeoil cert, which fixes a couple of tools that were failing to run previously.
* Images default to
* We now set a default locale of
* The Kali user on ARM images is now in all of the same groups as base images by default, and uses zsh for the default shell. You can change your default shell by using the
* Raspberry Pi images can now use a
* Raspberry Pi images now come with
* Berate_ap – Orchestrating MANA rogue Wi-Fi Access Points
* CALDERA – Scalable automated adversary emulation platform
* EAPHammer – Targeted evil twin attacks against WPA2-Enterprise Wi-Fi networks
* HostHunter – Recon tool for discovering hostnames using OSINT techniques
* RouterKeygenPC – Generate default WPA/WEP Wi-Fi keys
* Subjack – Subdomain takeover
* WPA_Sycophant – Evil client portion of EAP relay attack
Kali NetHunter Updates
https://1.bp.blogspot.com/-9A5WYFosQFA/YUNdkwc2sqI/AAAAAAAAK3Q/eK88spZs8T0os3QP5Ai1drupXbaeybgaQCLcBGAsYHQ/s1582/NHWheader.png
Kali NetHunter Watch
We proudly introduce the world’s first Kali NetHunter smartwatch, the TicHunter Pro thanks to the outstanding work of our very own NetHunter developer @yesimxev. It is still experimental, hence the features are limited to USB attacks, and some basic functions. The hardware also has limitations, as such a small battery won’t supply enough voltage for any OTG adapters, so huge antennas won’t stick out of your wrist! The future is very promising, bringing support for Nexmon and internal bluetooth usage.
The image is available on our download page.
Please note that those images contain a “nano Kali rootfs” due to technical reasons. The detailed installation guide can be found in our Kali documentation. Feel free to join the adventure!
Kali NetHunter Installation via Magisk
Thanks to the amazing work of @Mominul Islam, we can now bring Kali NetHunter to Android 11 devices without a fully working TWRP!
Each Kali NetHunter image can be flashed as a Magisk module. This work is still in its infancy and more work is needed to bring it up to par with the traditional installer through TWRP.
One of the missing parts is the kernel installation. We haven’t been able to install the kernel through Magisk yet. That has to be done via kernel installers like the “Franco Kernel Manager”. If you are keen to get NetHunter onto your Android 11 device, just give it a crack. If you are interested in helping out with getting the kernel part finished, please get in touch with us through our GitLab issue tracker. Any help is greatly appreciated!
Kali NetHunter installation step-by-step guide for our preferred device, the OnePlus 7
Our preferred device for Kali NetHunter is the OnePlus 7 running Android 10 (stock ROM).
For a step-by-step installation guide and links to all the files required to restore your phone to the latest stock Android 10 ROM, install TWRP, Magisk and Kali NetHunter, head over to our Kali documentation page.
Kali ARM Updates
We have been busy doing various tweaks and tinkering on our Kali ARM images, which covers:
* Our Kali ARM build-scripts have been re-worked.
* Thanks to @cyrus104, we now have a build-script to support the Gateworks Newport board, and he also added documentation for it.
* @Re4son contributed a build-script for the Raspberry Pi Zero W based “Pi-Tail” (Find more information here).
* Additionally, the RaspberryPi Zero W based “P4wnP1” build-script has undergone some major changes.
* All images should finally resize the file-system on the first boot.
* We now re-generate the default snakeoil cert, which fixes a couple of tools that were failing to run previously.
* Images default to
iptables-legacyand ip6tables-legacyfor iptables support.* We now set a default locale of
en_US.UTF-8on all images, you can, of course, change this to your preferred locale.* The Kali user on ARM images is now in all of the same groups as base images by default, and uses zsh for the default shell. You can change your default shell by using the
kali-tweakstool which also comes pre-installed.* Raspberry Pi images can now use a
wpa_supplicant.conffile on the /bootpartition.* Raspberry Pi images now come with
kalipi-config, and kalipi-tft-configpre-installed.[...]Kali Linux Tutorials
Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux Distribution
Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux Distribution
Kali Linux Tutorials
Kali Linux 2021.3 : Penetration Testing and Ethical Hacking Linux
Kali Linux 2021.3 is a Penetration Testing and Ethical Hacking Linux Distribution. Summary of the changes since the 2021.2 release from June.
Two-Factor Authentication Bypass
https://medium.com/@mazoka777/two-factor-authentication-bypass-4c814627f8c3?source=rss------bug_bounty-5
What is 2fa ?Continue reading on Medium » (https://medium.com/@mazoka777/two-factor-authentication-bypass-4c814627f8c3?source=rss------bug_bounty-5)
https://medium.com/@mazoka777/two-factor-authentication-bypass-4c814627f8c3?source=rss------bug_bounty-5
What is 2fa ?Continue reading on Medium » (https://medium.com/@mazoka777/two-factor-authentication-bypass-4c814627f8c3?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Fraudsters and scammers continue to plague investors
https://cdn-images-1.medium.com/max/2424/1*56fT727vgG8N9btI7xvlEw.png
Protecting investors and maintaining confidence in the financial markets were two of the key reasons for regulators to be established, so…
Continue reading on Geek Culture »
Fraudsters and scammers continue to plague investors
https://cdn-images-1.medium.com/max/2424/1*56fT727vgG8N9btI7xvlEw.png
Protecting investors and maintaining confidence in the financial markets were two of the key reasons for regulators to be established, so…
Continue reading on Geek Culture »