hacking: security in practice
Sharing My Private Methods
Methods available :
* Bitcoin Silent Miner
* Etherium Silent Miner
* BTC to XMR to BTC ( safest way )
* Paypal Bypass Verification
* Refferals Autopilot Method (5 USD each day)
Dm if you are interested in one of these methods.
submitted by /u/savageaf247
[link] [comments]
Sharing My Private Methods
Methods available :
* Bitcoin Silent Miner
* Etherium Silent Miner
* BTC to XMR to BTC ( safest way )
* Paypal Bypass Verification
* Refferals Autopilot Method (5 USD each day)
Dm if you are interested in one of these methods.
submitted by /u/savageaf247
[link] [comments]
reddit
Sharing My Private Methods
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Hacking my 4G Hotspot Dongle from China
https://b.thumbs.redditmedia.com/Qp6KHo5TxsMNkK1jU8sxEAM1AIXbBOhos6eEFzlsEaE.jpg So I bought this sketchy 4G Hotspot Dongle with Wifi broadcast capability from Amazon, and the vendor was sloppy enough to send me a used model with a ripped box and the password hadn't even been reset to default. I was pretty salty because these devices are hard to find, and I couldn't even test it to verify I hadn't been bamboozled with regard to the mobile operating bands (B2, B4 vs B1, B3) of the device.
I've never really been too interested in hacking, but it's my dongle, and I want it now. After doing a brief search on how "hacking" is done, I realized that most WPA2 AP attacks require you to intercept a handshake occurring between the AP and a client. There are no clients in this case, so I found this article (https://miloserdov.org/?p=2100) concerning hacking an AP without clients, but the author mentions that this is specifically for 802.11i/p/q/r protocol routers with "roaming". According to the cardboard box, my dubious dongle is not one of those (802.11b/g/n).
I'm wondering what attack vector I should chose to crack my client-less dongle. I did use a scanner thing to confirm that it is using WPA2 PSK authentication, and it seems logical that I should try to crack it with a "rainbow table" or a "dictionary attack". Again, I'm definitely no hacker, but I did complete my CCNA a few months ago and I haven't cleaned my room in over a month so I think I have a solid foundation.
Can anyone offer some guidance? Thank you for your time!
picture if it helps
submitted by /u/Sad-Cryptographer454
[link] [comments]
Hacking my 4G Hotspot Dongle from China
https://b.thumbs.redditmedia.com/Qp6KHo5TxsMNkK1jU8sxEAM1AIXbBOhos6eEFzlsEaE.jpg So I bought this sketchy 4G Hotspot Dongle with Wifi broadcast capability from Amazon, and the vendor was sloppy enough to send me a used model with a ripped box and the password hadn't even been reset to default. I was pretty salty because these devices are hard to find, and I couldn't even test it to verify I hadn't been bamboozled with regard to the mobile operating bands (B2, B4 vs B1, B3) of the device.
I've never really been too interested in hacking, but it's my dongle, and I want it now. After doing a brief search on how "hacking" is done, I realized that most WPA2 AP attacks require you to intercept a handshake occurring between the AP and a client. There are no clients in this case, so I found this article (https://miloserdov.org/?p=2100) concerning hacking an AP without clients, but the author mentions that this is specifically for 802.11i/p/q/r protocol routers with "roaming". According to the cardboard box, my dubious dongle is not one of those (802.11b/g/n).
I'm wondering what attack vector I should chose to crack my client-less dongle. I did use a scanner thing to confirm that it is using WPA2 PSK authentication, and it seems logical that I should try to crack it with a "rainbow table" or a "dictionary attack". Again, I'm definitely no hacker, but I did complete my CCNA a few months ago and I haven't cleaned my room in over a month so I think I have a solid foundation.
Can anyone offer some guidance? Thank you for your time!
picture if it helps
submitted by /u/Sad-Cryptographer454
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Judith Milhon: Hacking on the edges of polite computing society
https://cdn-images-1.medium.com/max/2600/1*KQhfs-XvmK02uuuyy9FpeQ.jpeg
The stereotype of 1980s hackers is that they were isolated young men with a penchant for mischief. But can we learn more about the origins…
Continue reading on The Startup »
Judith Milhon: Hacking on the edges of polite computing society
https://cdn-images-1.medium.com/max/2600/1*KQhfs-XvmK02uuuyy9FpeQ.jpeg
The stereotype of 1980s hackers is that they were isolated young men with a penchant for mischief. But can we learn more about the origins…
Continue reading on The Startup »
Deep Web
Howard Chu, high-IQ scholar developing Monero
Howard "hyc_symas" Chu is a C language programmer for Monero crypto coin. Howard Chu is a high-IQ scholar who made Monero project the best project in top 10 coins. Monero project is being constantly updated to become the future Monetary system. It will be used worldwide and will give huge gains to the early adopters like Bitcoin did. use Monero cryptocurrency and make easy gains.
submitted by /u/ThematicUrobilin219
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Howard Chu, high-IQ scholar developing Monero
Howard "hyc_symas" Chu is a C language programmer for Monero crypto coin. Howard Chu is a high-IQ scholar who made Monero project the best project in top 10 coins. Monero project is being constantly updated to become the future Monetary system. It will be used worldwide and will give huge gains to the early adopters like Bitcoin did. use Monero cryptocurrency and make easy gains.
submitted by /u/ThematicUrobilin219
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
reddit
Howard Chu, high-IQ scholar developing Monero
Howard "hyc_symas" Chu is a C language programmer for Monero crypto coin. Howard Chu is a high-IQ scholar who made Monero project the best project...
Deep Web
Is it really easy just to hire a hacker?
Like I've heard if you need someone to get an account back bc you don't have the info anymore...but like how often does this happen?
submitted by /u/thrwawayithinkimdumb
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Is it really easy just to hire a hacker?
Like I've heard if you need someone to get an account back bc you don't have the info anymore...but like how often does this happen?
submitted by /u/thrwawayithinkimdumb
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
reddit
Is it really easy just to hire a hacker?
Like I've heard if you need someone to get an account back bc you don't have the info anymore...but like how often does this happen?
hacking: security in practice
Laptops recommendations for a budget of $1,500
Hello I’m currently looking to upgrade from my old laptop. I been looking into thinkpads but I would like to see what laptops you would recommend for $1,500.
submitted by /u/Anongraffiti
[link] [comments]
Laptops recommendations for a budget of $1,500
Hello I’m currently looking to upgrade from my old laptop. I been looking into thinkpads but I would like to see what laptops you would recommend for $1,500.
submitted by /u/Anongraffiti
[link] [comments]
reddit
Laptops recommendations for a budget of $1,500
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Funbox: 1 write-up
https://cdn-images-1.medium.com/max/1519/1*A30qBYo1o8jsVRnFc84Hfw.png
This is a boot2 root machine from vulnhub this machine rated as easy to medium so today we are gonna exploit it : )
Continue reading on Medium »
Funbox: 1 write-up
https://cdn-images-1.medium.com/max/1519/1*A30qBYo1o8jsVRnFc84Hfw.png
This is a boot2 root machine from vulnhub this machine rated as easy to medium so today we are gonna exploit it : )
Continue reading on Medium »
AWS S3 Bucket Misconfiguration in Trading Website
https://muhdaffa.medium.com/aws-s3-bucket-misconfiguration-in-trading-website-1794d48dccc3?source=rss------bug_bounty-5
https://muhdaffa.medium.com/aws-s3-bucket-misconfiguration-in-trading-website-1794d48dccc3?source=rss------bug_bounty-5
Hello, my name is Muhammad Daffa, in this post I will share my simple writeup about AWS S3 Bucket Misconfiguration that I found on the…Continue reading on Medium » (https://muhdaffa.medium.com/aws-s3-bucket-misconfiguration-in-trading-website-1794d48dccc3?source=rss------bug_bounty-5)
CallObfuscator - Obfuscate Specific Windows Apis With Different APIs
http://www.kitploit.com/2021/03/callobfuscator-obfuscate-specific.html
http://www.kitploit.com/2021/03/callobfuscator-obfuscate-specific.html
Obfuscate (hide) the PE imports from static/dynamic analysis tools.
Theory
This's pretty forward, let's say I've used VirtualProtect and I want to obfuscate it with Sleep, the tool will manipulate the IAT so that the thunk that points to VirtualProtect will point instead to Sleep, now at executing the file, windows loader will load Sleep instead of VirtualProtect, and moves the execution to the entry point, from there the execution will be redirected to the shellcode, the tool put before, to find the address of VirtualProtect and use it to replace the address of Sleep which assigned before by the loader.
How to use
It can be included directly as a library, see the following snippet (based on the example), also you can take a look at cli.cpp (https://github.com/d35ha/CallObfuscator/blob/master/cli/cli.cpp).
#include
int main() {
cobf obf_file = cobf("sample.exe");
obf_file.load_pe();
obf_file.obf_sym("kernel32.dll", "SetLastError", "Beep");
obf_file.obf_sym("kernel32.dll", "GetLastError", "GetACP");
obf_file.generate("sample_obfuscated.exe");
obf_file.unload_pe();
return 0;
}; Also can be used as a command line (https://www.kitploit.com/search/label/Command%20Line) tool by supplying it with the input PE path, the output PE path and optionally the path to the configuration file (default is config.ini).
cobf.exe [config file]
The config file contains the obfuscations needed (dlls, symbols, ...).
Here is a template for the config file content
; Template for the config file:
; * Sections can be written as:
; [dll_name]
; old_sym=new_sym
; * The dll name is case insensitive, but
; the old and the new symbols are not.
; * You can use the wildcard on both the
; dll name and the old symbol.
; * You can use '#' at the start of
; the old or the new symbol to flag
; an ordinal.
; * The new symbol should be exported
; by the dll so the windows loader can resolve it.
; For example:
; * Obfuscating all of the symbols
; imported from user32.dll with ordinal 1600.
[user32.dll]
*=#1600
; * Obfuscating symbols imported from both
; kernel32.dll and kernelbase.dll with Sleep.
[kernel*.dll]
*=Sleep
; * Obfuscating fprintf with exit.
[*]
fprintf=exit
Example
Build this code sample
#include
#include
int main() {
SetLastError(5);
printf("Last error is %d\n", GetLastError());
return 0;
}; After building it, this is how the kernel32 imports look like
Theory
This's pretty forward, let's say I've used VirtualProtect and I want to obfuscate it with Sleep, the tool will manipulate the IAT so that the thunk that points to VirtualProtect will point instead to Sleep, now at executing the file, windows loader will load Sleep instead of VirtualProtect, and moves the execution to the entry point, from there the execution will be redirected to the shellcode, the tool put before, to find the address of VirtualProtect and use it to replace the address of Sleep which assigned before by the loader.
How to use
It can be included directly as a library, see the following snippet (based on the example), also you can take a look at cli.cpp (https://github.com/d35ha/CallObfuscator/blob/master/cli/cli.cpp).
#include
int main() {
cobf obf_file = cobf("sample.exe");
obf_file.load_pe();
obf_file.obf_sym("kernel32.dll", "SetLastError", "Beep");
obf_file.obf_sym("kernel32.dll", "GetLastError", "GetACP");
obf_file.generate("sample_obfuscated.exe");
obf_file.unload_pe();
return 0;
}; Also can be used as a command line (https://www.kitploit.com/search/label/Command%20Line) tool by supplying it with the input PE path, the output PE path and optionally the path to the configuration file (default is config.ini).
cobf.exe [config file]
The config file contains the obfuscations needed (dlls, symbols, ...).
Here is a template for the config file content
; Template for the config file:
; * Sections can be written as:
; [dll_name]
; old_sym=new_sym
; * The dll name is case insensitive, but
; the old and the new symbols are not.
; * You can use the wildcard on both the
; dll name and the old symbol.
; * You can use '#' at the start of
; the old or the new symbol to flag
; an ordinal.
; * The new symbol should be exported
; by the dll so the windows loader can resolve it.
; For example:
; * Obfuscating all of the symbols
; imported from user32.dll with ordinal 1600.
[user32.dll]
*=#1600
; * Obfuscating symbols imported from both
; kernel32.dll and kernelbase.dll with Sleep.
[kernel*.dll]
*=Sleep
; * Obfuscating fprintf with exit.
[*]
fprintf=exit
Example
Build this code sample
#include
#include
int main() {
SetLastError(5);
printf("Last error is %d\n", GetLastError());
return 0;
}; After building it, this is how the kernel32 imports look like
Now let's obfuscate both SetLastError and GetLastError with Beep and GetACP (actually any api from kernel32 will be ok even if it's not imported at all).
The used configurations are
[kernel32.dll]
SetLastError=Beep
GetLastError=GetACP Here is the output (also you can use the library directly as shown above).
The used configurations are
[kernel32.dll]
SetLastError=Beep
GetLastError=GetACP Here is the output (also you can use the library directly as shown above).