Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Generating desired random numbers

Yesterday, I was watching TechWithTim's video about how random module in python works. He said if the seed was same, the sequence will be the same, that got me into thinking. is it possible to know the seed of the sequence by seeing the actual sequence? and after doing some research (googling) I found out that many random number generators use Seed x 8 modulo 11to generate random numbers. If I had a sequence like 1,3,4,2,1,2,3,2is it possible to find what the seed value was fed into the formula to create this pattern?

submitted by /u/Bharath1910
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit

Explore this post and more from the hacking community

7 viewsedited 14:15

Hacking Articles Tips Tricks Videos Tutorials

7 views14:38

Hacking Articles Tips Tricks Videos Tutorials

7 views14:38

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
DirSearch : A Go Implementation Of Dirsearch

DirSearch software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go’s concurrency model, channels, and so forth.

Purpose

DirSearch takes an input URL ( -urlparameter ) and a wordlist ( -wordlistparameter ), it will then perform concurrent HEADrequests using the lines of the wordlist as paths and files eventually brute forcing folders and files on a web server.

It supports a custom file extension ( -ext, default to php) and other optional arguments:

Usage of dirsearch:
-200only
If enabled, will only display responses with 200 status code.
-consumers int
Number of concurrent consumers. (default 8)
-ext string
File extension. (default “php”)
-maxerrors int
Maximum number of errors to get before killing the program. (default 20)
-url string
Base URL to start enumeration from.
-wordlist string
Wordlist file to use for enumeration. (default “dict.txt”)

Compilation

go get github.com/evilsocket/dirsearch
cd dirsearch
make get_glide
make install_dependencies
make build
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

DirSearch : A Go Implementation Of Dirsearch !!! Kali Linux

DirSearch software is a Go implementation of the original dirsearch tool written by Mauro Soria. It is the very first tool I write in G.

7 viewsedited 14:38

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
AES256_Passwd_Store : Secure Open-Source Password Manager

AES256_Passwd_Store script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve passwords from a previously generated database file.

This script takes a master password from stdin/from memory, then hashes the password using the specified hashing algorithm passed to the algorithm parameter/-a (scrypt, sha256) and finally AES-256 encrypts/decrypts the file’s data using the algorithm’s hash as the AES-256 key.

When providing the ‘scrypt’ argument to the algorithm parameter the script will generate a custom scrypt salt per each database file edit or creation. The uniquely generated salt is base64 encoded and prepended to each database file’s encrypted bytes separated by carriage return line feed bytes (for parsing) as meta-data.

When using the change password parameter/-cp the script will decrypt the database file’s data into memory, write random bytes*WIPE_PASSES to the database file, truncate the file and finally write the new data AES-256 encrypted with the new hashed master password to the database file. Effectively making data recovery/forensics difficult.

Example Usage Using Script As The Hashing Algorithm

Create a database file

python3 aespasswd_store.py -a scrypt -c

Change master password for a database file

python3 aespasswd_store.py -a scrypt -cp

Edit a database file

python3 aespasswd_store.py -a scrypt -e

Query data from within the database file

python3 aespasswd_store.py -a scrypt -q

Examples

# Add entry to the database/modify existing data:
pass_id1=password
pass_id2=password
pass_id3=password
# Delete existing data:
pass_id1=delete
pass_id2=delete
# -q parameter: Query data (entering nothing dumps all data):
pass_id1
pass_id3
# Press ctrl+D (linux) or ctrl+Z (windows) to save data from stardard input.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

AES256_Passwd_Store : Secure Open-Source Password Manager

AES256_Passwd_Store script securely encrypts or decrypts passwords on disk within a custom database file, retrieve PW from previous file.

7 viewsedited 14:38

Hacking Articles Tips Tricks Videos Tutorials

7 views14:38

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Wordlistgen : Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths

Wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application’s context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists.

Installation

If you don’t have Go installed, “go” do that!

go get -u github.com/ameenmaali/wordlistgen

Usage

wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as:

$ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123

Get unique URL components from a file of URLs and/or paths:

cat hosts.txt | wordlistgen

Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file:

cat hosts.txt | wordlistgen -qv > urlComponents.txt

wordlistgen works at it’s best when chained with other tools, such as @tonnomnom’s waybackurls :

cat hosts.txt | waybackurls | wordlistgen
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Wordlistgen : Quickly Generate Context-Specific Wordlists

Wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective.

10 viewsedited 14:38

Hacking Articles Tips Tricks Videos Tutorials

Belt Finance Logic Error Bug Fix Postmortem
https://medium.com/immunefi/belt-finance-logic-error-bug-fix-postmortem-39308a158291?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Belt Finance Logic Error Bug Fix Postmortem

Summary

8 viewsedited 15:06

Hacking Articles Tips Tricks Videos Tutorials

7 views15:06