checking process

Mail.Rip V2 uses the smtplib for the checking / cracking process. The “magic” is done this way:

1. The SMTP cracker / SMTP checker reads the next combo from the list loaded.
2. It looks up the email domain in the “smtphost” dictionary for the SMTP-host to attack.
3. For unknown hosts, it will try to get the address from the MX records of the email domain.
4. The connection port for host found in MX records is searched using the most common ones in a trial and error process.
5. Afterwards it establishes a connection to the SMTP host (trying SSL and non-SSL as well as TLS)
6. and sends the login data using the target email address and the given password from the combo.
7. If the login is denied, the cracker / checker will try to login with the user-ID (email without @…) and the password.
8. In case the login data is valid, the so-called “hit” will be saved to a txt-file.
9. In the end Mail.Rip V2 will try to send a test message to you using the found SMTP.

For best results every user should edit the host information in the library.json before starting Mail.Rip V2 the first time. Adding the data of the most common e-mail providers in a combolist will always speed up the checking / cracking process. And it will probably raise less security flags on the server-side.

Other ways to improve your results are: deactivating the proxy-support and adjusting default values. In fact, IT IS RECOMMENDED TO LEAVE THE PROXY-SUPPORT DEACTIVATED. Without using proxys, you will receive much better results – for the checker as well as for the inbox check. Notes on the email delivery test (inbox check)

The email content is generated randomly using templates in the “library.json”. Edit those templates for your needs. Editing the templates from time to time will provide a higher success rate.

Always regard that the email delivery test may return false negative results for many reasons. It just confirms that the given SMTP host can be used for sending emails with any software. Well-known email providers may block or restrict access to SMTP accounts, especially for tools like Mail.Rip V2. Moreover, free proxys may be blacklisted as well as the certain SMTP account itself. You should test valid logins for which the delivery test failed again after the attack has been finished. Notes on the blacklist check

The library.json includes a blacklist for email domains. More than 500 trashmail domains have been added to it. But there are also some very popular email providers on it. Those email providers are most often a waste of time when you check or crack mailpass combolists. Sometimes they just block the access, sometimes they ask for further verification.

If you want to attack those providers, too, edit the blacklist for your needs. Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
PyHook : An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call

PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials.

PyHook Uses frida to inject it’s dependencies into the target process

Supported Processes
ProcessAPI CallDescriptionProgressmstscCredUnPackAuthenticationBufferWHooks CredUnPackAuthenticationBufferWfrom mstsc and outputs username and passwordDONErunasCreateProcessWithLogonWHooks CreateProcessWithLogonWfrom runas and outputs username, password and a domain name.DONEPowerShellCreateProcessWithLogonWHooks CreateProcessWithLogonWfrom PowerShell and outputs username, password and a domain name (e.g – Start-Process cmd -Credential X).DONEcmdRtlInitUnicodeStringExHooks RtlInitUnicodeStringExfrom cmd and outputs data from specific filters (e.g – “-p”, “password” etc).DONEMobaXtermCharUpperBuffAHooks CharUpperBuffAfrom MobaXterm and outputs credentials for RDP and SSH logins.DONEexplorer (UAC Prompt)CredUnPackAuthenticationBufferWHooks CredUnPackAuthenticationBufferWfrom explorer and outputs username, password and a domain name.DONE
Demo
https://1.bp.blogspot.com/-D-SlOzbfFoc/YUyIvQz82fI/AAAAAAAAK7w/GcCmDfkzD4kh6NBzWbqwDeV8fErPB49tgCLcBGAsYHQ/s1756/Demo.gif

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Weakpass : Rule-Based Online Generator To Create A Wordlist Based On A Set Of Words

Weakpass is a tool generates a wordlist based on a set of words entered by the user.

For example, during penetration testing, you need to gain access to some service, device, account, or Wi-Fi network that is password protected. For example, let it be the Wi-Fi network of EvilCorp. Sometimes, a password is a combination of device/network/organization name with some date, special character, etc. Therefore, it is simpler and easier to test some combinations before launching more complex and time-consuming checks. For example, cracking a Wi-Fi password with a wordlist can take several hours and can fail, even if you choose a great wordlist because there was no such password in it like Evilcorp2019.

Therefore, using the generated wordlist, it is possible to organize a targeted and effective online password check.

Link: https://zzzteph.github.io/weakpass/

Secondary: https://weakpass.com/generate Features

The hashcat rule syntax is used to generate the wordlist. By default, the generator uses a set of rules “online.rule”, which performs the following mutations:

* Adding special characters and popular endings to the end of the word – !,!@, !@#, 123! etc. evilcorp!, evilcorp!123
* Adding digits from 1 to 31, from 01 to 12 – evilcorp01, evilcorp12.
* Adding the date 2018-2023 – evilcorp2018, evilcorp2019
* Various combinations of 1-3 – evilcorp2018!
* Capitalize the first letter and lower the rest, apply 1-4. Evilcorp!2021

As a result, for the word evilcorp, the following passwords will be generated (216 in total):

* evilcorp
* Evilcorp
* EVILCORP
* evilcorp123456
* evilcorp2018
* Evilcorp!2021
* Evilcorp!2022
* Evilcorp2018!@#

You can use your own hashcat rules, just click “Show rules” and put in the “Rules” textarea them with the list of rules you like best. Rules that are supported (source https://hashcat.net/wiki/doku.php?id=rule_based_attack):
NameFunctionDescriptionExample RuleInput WordOutput WordNothing:Do nothing (passthrough):p@ssW0rdp@ssW0rdLowercaselLowercase all letterslp@ssW0rdp@ssw0rdUppercaseuUppercase all lettersup@ssW0rdP@SSW0RDCapitalizecCapitalize the first letter and lower the restcp@ssW0rdP@ssw0rdInvert CapitalizeCLowercase first found character, uppercase the restCp@ssW0rdp@SSW0RDToggle CasetToggle the case of all characters in word.tp@ssW0rdP@SSw0RDToggle @TNToggle the case of characters at position NT3p@ssW0rdp@sSW0rdReverserReverse the entire wordrp@ssW0rddr0Wss@pDuplicatedDuplicate entire worddp@ssW0rdp@ssW0rdp@ssW0rdDuplicate NpNAppend duplicated word N timesp2p@ssW0rdp@ssW0rdp@ssW0rdp@ssW0rdReflectfDuplicate word reversedfp@ssW0rdp@ssW0rddr0Wss@pRotate Left{Rotate the word left.{p@ssW0rd@ssW0rdpRotate Right}Rotate the word right}p@ssW0rddp@ssW0rAppend Character$XAppend character X to end$1p@ssW0rdp@ssW0rd1Prepend Character^XPrepend character X to front^1p@ssW0rd1p@ssW0rdTruncate left[Delete first character[p@ssW0rd@ssW0rdTrucate right]Delete last character]p@ssW0rdp@assW0rDelete @ NDNDelete character at position ND3p@ssW0rdp@sW0rdExtract rangexNMExtract M characters, starting at position Nx04p@ssW0rdp@ssOmit rangeONMDelete M characters, starting at position NO12p@ssW0rdpsW0rdInsert @ NiNXInsert character X at position Ni4!p@ssW0rdp@ss!W0rdOverwrite @ NoNXOverwrite character at position N with Xo3$p@ssW0rdp@s$W0rdTruncate @ N‘NTruncate word at position N‘6p@ssW0rdp@ssW0ReplacesXYReplace all instances of X with Yss$p@ssW0rdp@$$W0rdPurge@XPurge all instances of X@sp@ssW0rdp@W0rdDuplicate first NzNDuplicate first character N timesz2p@ssW0rdppp@ssW0rdDuplicate last NZNDuplicate last character N timesZ2p@ssW0rdp@ssW0rdddDuplicate allqDuplicate every characterqp@ssW0rdpp@@ssssWW00rrdd
The generator automatically removes duplicate passwords.

By pressing the Wi-Fi, all passwords less than 8 cha[...]

___________________________
@hacking_Attack
@Hacking_Video

racters long will be automatically deleted.

All data is generated using Javascript so that you can use the generator without internet access. How-To
https://1.bp.blogspot.com/-22meQ-TFneo/YUyFqrdJH2I/AAAAAAAAK7g/5aRzZiIhAPsIiENI0QvO0DAfhusQqAGiQCLcBGAsYHQ/s334/howto.gif
* To generate a wordlist, enter in the Words field, words that can be used as part of the password.
* Click on the Generate button
* Copy the received content or click on the Copy to clipboard button for automatic copying.
* …
* Profit! Download

___________________________
@hacking_Attack
@Hacking_Video

Force Browsing bug at Facebook business plan ($500 Bounty)
https://dewcode.medium.com/force-browsing-bug-at-facebook-business-plan-500-bounty-73d1bb4883af?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi bug hunters! this article is about my last finding on Facebook.Continue reading on Medium » (https://dewcode.medium.com/force-browsing-bug-at-facebook-business-plan-500-bounty-73d1bb4883af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/yeM66DfvhWS8urd8Pz1g5lv5knmRjuGBCKYHXTojtM4.jpg Here is the command I launch and the result:

​

https://preview.redd.it/0a25zrzd4gq71.png?width=771&format=png&auto=webp&s=753e3930f7c9038ecbb0c086871d3301083a458c

The zip file secret_files.zipcontains three files, file1.txtcontaining the string "blablabla", and files 2 and 3 containing nothing. The password of the archive is listed in the dictionary provided. What am I doing wrong?

submitted by /u/ultome
[link] [comments]

hacking: security in practice
New way for malware to evade detection (involves attacking digital signature)

https://cybersecuritynews.com/hackers-have-figured-out-a-new-malware-evasion-technique-to-fly-under-the-radar/

submitted by /u/JDrisc3480
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bounty Hacker Tryhackme Walkthrough

Hello guys and welcome back , Ayush this side, today we’ll talk about one of the tryhackme room “Bounty Hacker”, it’s a quite easy room in…
Read more...

ASP.NET CORE Path Traversal

A path traversal attack (also known as directory traversal) aims to access files and directories that are stored outside the webroot…
Read more...

Hacking on Medium
h@cktivitycon 2021 CTF writeup: Reactor Android Challenge

https://cdn-images-1.medium.com/max/600/1*v-8D_EkkYDx5SD3CfqiwBg.png
Hey there, HackerOne hosted h@activitycon 2021 CTF a few weeks back. I got time to play around with a few challenges. Here is the write-up…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Windows Stack Buffer Overflow — TryHackMe Brainpan Walkthrough

https://cdn-images-1.medium.com/max/2000/0*JXqkTHvdMH_Ojj08.png
The OSCP exam consists of a 25 point Buffer Overflow machine. Some people make the mistake of leaving out this topic, even though these…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Force Browsing bug at Facebook business plan ($500 Bounty)

https://cdn-images-1.medium.com/max/723/1*zfptnHV8R_ejILPooxIZZA.png
Hi bug hunters! this article is about my last finding on Facebook.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video