Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Proving Grounds | FunboxEasyEnum

A box on Proving Grounds focusing more on enumeration! If in-doubt just enumerate!!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Proving Grounds | FunboxEasyEnum

A box on Proving Grounds focusing more on enumeration! If in-doubt just enumerate!!

11 viewsedited 11:26

Hacking Articles Tips Tricks Videos Tutorials

9 views11:26

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Double Trouble (V

https://cdn-images-1.medium.com/max/600/0*3hi2mQnSUYuwL3Jo.png
Created by: tasiyanci

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Double Trouble (Vulnhub)

Created by: tasiyanci

10 viewsedited 11:26

Hacking Articles Tips Tricks Videos Tutorials

9 views11:26

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Dissecting a fake Discord site.

https://cdn-images-1.medium.com/max/1000/1*EI-4WT8_x3jwtIL-u2retQ.jpeg
Okay so its the year 2021 and we’re almost in 2022. And technology has been evolving much more and we’re more reliant on communicating…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Dissecting a fake Discord site.

Okay so its the year 2021 and we’re almost in 2022. And technology has been evolving much more and we’re more reliant on communicating…

9 viewsedited 11:26

Hacking Articles Tips Tricks Videos Tutorials

Disclosure of User Information
https://medium.com/@Anonymous_45/disclosure-of-user-information-9ae86839279d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Disclosure of User Information

Hello guys, this is my first medium blog. I’m going to explain about Information Disclosure and how I found it on one of the educational…

8 viewsedited 11:59

Hacking Articles Tips Tricks Videos Tutorials

7 views11:59

Hacking Articles Tips Tricks Videos Tutorials

Hello guys, this is my first medium blog. I’m going to explain about Information Disclosure and how I found it on one of the educational…Continue reading on Medium » (https://medium.com/@Anonymous_45/disclosure-of-user-information-9ae86839279d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Disclosure of User Information

Hello guys, this is my first medium blog. I’m going to explain about Information Disclosure and how I found it on one of the educational…

6 viewsedited 11:59

Hacking Articles Tips Tricks Videos Tutorials

SharpML - Machine Learning Network Share Password Hunting Toolkit

SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C#. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C# and Python based tool that performs a number of operations with a view to mining file shares, querying Active Directory for users, dropping an ML model and associated rules, perfoming Active Directory authentication checks, with a view to automating the process of hunting for passwords in file shares by feeding the mined data into the ML model. The ML model is written in Python, and has been developed using a custom algorithm to identify likelyhoods of passwords. The model has been compiled with PyInstaller and sits as resource file in the C# wrapper, which interops between itself, the data and the model. The program logic can be seen below: Currently it allows for a single file share to be assessed. You will need to have read access to the file share you are targeting, after which the tool will perform its activities mostly autonomously. There a compiled release in the release section, and it is to be noted that this tool is currently a PoC and subject to numerous improvements. Usage: cmd.exe C:\> SharpML.exe -u \\fileshare\d$ Cobalt Strike > execute-assembly SharpML.exe -u \\fileshare\d$ Authors Marco Valentini Tom Kallo To Do When SharpML is run it will attempt to verify all users that it finds. If a restrictive domain lockout policy exits, it may attempt to verify users multiple times and lock the account out in event of multiple failed authentications Some file size limitations need to be implemented in order for larger text based files not to cause a bottle neck when copying the raw data Select the option of running multiple file shares simultaneously. By implementing an automatic share finder, allow SharpML to be completely autonomous and scour the whole network Improve some program logic, including further options such as the choice of cehcking against 10,000 most common passwords or not Download SharpML
Read more...

___________________________
@hacking_Attack
@Hacking_Video

7 viewsedited 12:17

Hacking Articles Tips Tricks Videos Tutorials

8 views12:21

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Not all Phishing attack types can be protected using software solutions

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Not all Phishing attack types can be protected using software solutionsPost Views: 30
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png
Reading Time: 3 Minutes

Fact: Not all Phishing attack types can be protected using software solutions
There are different phishing attack types and often people classify them all under one category, which is not the case in the real world.

We will focus on Spear-Phishing Attacks vs Normal Phishing attacks to highlight their importance and how software is not enough to block such attacks, due to the ways there are in Offensive Security which can bypass any type of rules set, using advanced spoofing and a targeted approach.
See Also: Cyber Attacks do not discriminate when choosing victims.
Spear-Phishing Attack is the most successful form of acquiring confidential information on the internet, accounting for 91% of attacks.

Spear-phishing is a targeted attempt to steal sensitive information such as account credentials or financial information from a specific victim, often for malicious reasons. This is achieved by acquiring personal details on the victim such as their friends, hometown, employer, locations they frequent, and what they have recently bought online. The attackers then disguise themselves as trustworthy friends or entities to acquire sensitive information, typically through email or other online messaging.
Phishing attacks are not personalized to their victims and are usually sent to masses of people at the same time. The goal of phishing attacks is to send a spoofed email that looks as if it is from an authentic organization to a large number of people, banking on the chances that someone will click on that link and provide their personal information or download malware. Poor Spoofing techniques are used and often are easy to identify from the sender’s email address.
See Also: Apple Pay with VISA lets hackers force payments on locked iPhones
Spear-phishing attacks target a specific victim, and messages are modified to specifically address that victim, purportedly coming from an entity that they are familiar with and containing personal information. Spear-phishing requires more thought and time to achieve than phishing. Spear-phishing attackers try to obtain as much personal information about their victims as possible to make the emails that they send look legitimate and to increase their chance of fooling recipients. Because of the personal level of these emails, it is more difficult to identify spear-phishing attacks than to identify phishing attacks conducted.
Some tips to avoid spear-phishing attacks, which goes beyond relying on hardware, software, and security measures that could save you from a serious breach:
⦿ Educate employee’s responses to them because solutions implemented alone cannot block them. Especially if they are crafted using sophisticated techniques like spoofing & bypassing SPF, DKIM, DMARC measures.

⦿ Watch what personal information you post on the internet: Look at your online profiles. How much personal information is available for potential attackers to view and remove the ones that provide sensitive information that is not needed.

⦿ Use logic when opening emails: If you get an email from a “friend” asking for personal information including your password, carefully check to see if their email address is one that you have seen them use in the past. Real businesses will not send you an email asking for your usernam[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Not all Phishing attack types can be protected using software solutions | Black Hat Ethical Hacking

There are different phishing attack types and often people classify them all under one category, which is not the case in the real world.

10 viewsedited 12:21

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Not all Phishing attack types can be protected using software solutions https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Not all Phishing attack types can be protected using software solutionsPost…