hacking: security in practice
How do you know you got hacked?

I get now and then an weird call or emails. So I have an suspicion that my contract information is being sold or stolen.

How can you check if your info is being misuesed and sold on the Internet? And how do you know you got hacked in general?

submitted by /u/the_dutch_geek
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Viewing the list of blocked sites

I am studying in a very networking-restrictive(oppressive, if you will) college(where sites like twitch.tv, kali.org, blackarch.org, steam(basically anything related to entertainment), fandom wiki, and even chess.com is blocked). Outgoing ssh port 22 is also blocked so I cannot ssh into any of my servers outside the university network nor use git by ssh. VPN is blocked but thankfully wireguard isn't so I can bypass it.

The enterprise network is a PEAP, mschapv2, with no certificate validation(so basically android 10+ users cannot even use it). We know more about IT than the IT department themselves these days(the head Network guy thinks ssh is a mail protocol to give you a taste).

I actually have a couple of questions,

1. Is there a way to see how many websites are blocked by our network?
2. Is there any way to stick it to em? (You don't have to answer this, I'm just really really pissed :( .)

submitted by /u/SHUT_MOUTH_HAMMOND
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Boundless Bug Bashing at Bugédex!
https://medium.com/@parthk1224/boundless-bug-bashing-at-bug%C3%A9dex-a11a07719aae?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This past weekend, I got the chance to dive into the world of cybersecurity and bug catching at Bugédex, and to say it was thrilling would…Continue reading on Medium » (https://medium.com/@parthk1224/boundless-bug-bashing-at-bug%C3%A9dex-a11a07719aae?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Netflix Eureka!

https://cdn-images-1.medium.com/max/712/1*VS43RoGDt4MHWMv0kdSuJA.png
TL;DR SSRF, internal traffic hijack, XSS

Continue reading on Backbase »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Setting up VPS for Bug-bounty Automation.

https://cdn-images-1.medium.com/max/1641/1*gdOziEYxfm7rOoXtx-s9Ng.png
Hey Guys!! How are you? I hope everyone is safe in Current Covid-19 Pandemic Situation. I am back with another Blog. Hope you will learn…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack This Site: Realistic Web Mission — Level 9

https://cdn-images-1.medium.com/max/1600/0*IngCF9gKCHgNeyam
Thanks for popping in, today we’re looking at Hack This SIte Realistic Web Mission 9. To put it another way, we are going to take down the…

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Scrummage - The Ultimate OSINT And Threat Hunting Framework
http://www.kitploit.com/2021/10/scrummage-ultimate-osint-and-threat.html

___________________________
@hacking_Attack
@Hacking_Video

VERSION 3.6Code efficiency enhancements and bug fixes for plugins, and improved logging.Significant UI/UX enhancements.Organisation specific settings and configurations, allowing for predefined searches based on your organisation and it's users.Due to the above change, if you are upgrading from version 3.4, a major update has been made to the config.json file. In the installation directory, there is a file called "3.6_Upgrade.py", please copy your config.json file to this directory and run the script to update it to the latest standard. Running it will create a file called "config_new.json", please keep a backup of your old config.json file, and then rename the "config_new.json" file to "config.json" and move it to the config directory.Over 20 new plugins!API Enhancements and new endpoints (https://www.kitploit.com/search/label/Endpoints) for identity management.Please note versions 3.3 - 3.6 entail a major overhaul of a lot of backend and frontend code for improved efficiency. Please don't hesitate to reach out about any code stability (https://www.kitploit.com/search/label/Stability) issues.Scrummage is an OSINT tool that centralises search functionality from powerful, yet simple OSINT sites. This project draws inspiration mainly from two other projects, including:The Scumblr (https://github.com/Netflix-Skunkworks/Scumblr) project, which while is now deprecated, inspired this concept.The OSINT Framework (https://osintframework.com/) project, which is a visualisation tool, depicting a range of sites that can be used to search for a variety of things.While at first glance the web application may not look all that different when compared to Scumblr, the copious amounts of plugins this tool comes with is mainly what makes this project unique, where the provided Python/Flask web application is just a simple, lightweight, and scalable way of providing users with the ability to manage large pools of results. The other main benefit this projects brags is a much simpler installation process, which is kept up to date, compared to Scumblr which is now deprecated.Any feedback is welcome.FOR INSTRUCTIONS REFER TO THE WIKI (https://github.com/matamorphosis/Scrummage/wiki)
An Overview of the Web Application

Some of the Many Available Scrummage Plugins
Blockchain SearchDomain FuzzerTwitter ScraperInstagram SearchHave I Been Pwned SearchAhmia Darkweb SearchIP Stack SearchThreat Crowd SearchYandex and Naver SearchVkontakte SearchVulners SearchBuilt With SearchYouTube SearchMany more... Refer to the wiki page here (https://github.com/matamorphosis/Scrummage/wiki/The-Long-List-of-Tasks) for the full list.
Dashboard
The dashboard (https://www.kitploit.com/search/label/Dashboard) is the home screen which the application directs a user to when they log in. It provides a high-level chart which shows the amount of each results based on their result type. It does this for each kind of finding. However, if a graph doesn’t load, this is most likely due to none of the results being in that category, I.e if there are no closed results, no graph will appear under “Overview of Closed Results”.

___________________________
@hacking_Attack
@Hacking_Video

Events
The events page shows anything that changes within the web application, from logins, to failed login attempts, to any actions performed against a task. This assists with understanding what has recently been happening in the web app, and can assist in matters such as detecting brute-force (https://www.kitploit.com/search/label/Brute-force) login attempts or tracking down who altered a task.Note: This page only loads the latest 1000 events, for optimisation of the web application.

___________________________
@hacking_Attack
@Hacking_Video

Results
The results page, simply shows results that have been created by a task. The results table shows the basic metadata of the result, but also provides a “Details” button which can be used to investigate the result further. As mentioned all results have some kind of output file, if a result is a link the file will be a copy of the HTML of the page. Furthermore screenshot (https://www.kitploit.com/search/label/Screenshot) functionality is provided to assist in keeping a photographic record of a result. Both the output and screenshot file will be deleted if the result is deleted.Note: This page only loads the latest 1000 results, for optimisation of the web application.

___________________________
@hacking_Attack
@Hacking_Video

For optimisation purposes, the results table only displays some of the general information regarding a result, to investigate a result further, the user should use the Details button. The details page allows the user to view the soft copy of the result's link and provides the ability for a user to generate a screenshot.

___________________________
@hacking_Attack
@Hacking_Video