Hacking Articles Tips Tricks Videos Tutorials

3 views18:50

Kali Linux Tutorials
Bopscrk : Tool To Generate Smart And Powerful Wordlists

bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists for targeted attacks.

* Targeted-attack wordlist creator: introduce personal info related to target, combines every word and transforms results into possible passwords. The lyricpass module allows to search lyrics related to artists and include them to the wordlists.
* Customizable case and leet transforms: create custom charsets and transforms patterns trough a simple config file.
* Wordlists exclusion: Exclude words from another wordlist (to avoid passwords that you have already tested).
* Interactive mode and one-line command interface supported.

Requirements

* Python 3 (secondary branch keeps Python 2.7 legacy support)
* optional – to use lyricpassmodule: pip install requirements.txtUsage

-h, –help show this help message and exit
-i, –interactive interactive mode, the script will ask you about target
-w words to combine comma-separated (non-interactive mode)
–min min length for the words to generate (default: 4)
–max max length for the words to generate (default: 32)
-c, –case enable case transformations
-l, –leet enable leet transformations
-n max amount of words to combine each time (default: 2)
-a , –artists artists to search song lyrics (comma-separated)
-x , –exclude exclude all the words included in other wordlists
(several wordlists should be comma-separated)
-o , –output output file to save the wordlist (default: tmp.txt)
-C , –config specify config file to use (default: ./bopscrk.cfg)

How it works

* You have to provide some words which will act as a base.
* The lyricpass feature allows to introduce artists. The tool will download all his songs’ lyrics and each line will be added as a new word. By default, artist names and a word formed by the initial of word on each phrase, will be added too.
* The tool will generate all possible combinations between them.
* To generate more combinations, it will add some common separators (e.g. “-“, “_”, “.”), numbers and special chars frequently used in passwords.
* You can use leet and case transforms to increase your chances.
* You can provide wordlists that you have already tested against the target in order to exclude all this words from the resultant wordlist (-x). Tips

* Fields can be left empty.
* You can use accentuation in your words.
* In the others field you can write several words comma-separated. Example: 2C,Flipper.
* If you want to produce all possible leet transformations, enable the recursive_leet option in configuration file.
* You can select which transforms to apply on lyrics phrases found trough the cfg file.
* Using the non-interactive mode, you should provide years in the long and short way (1970,70) to get the same result than the interactive mode.
* You have to be careful with -n argument. If you set a big value, it could result in too huge wordlists. I recommend values between 2 and 5.
* To provide several artist names through command line you should provides it comma-separated. Example: -a johndoe,johnsmith* To provide artist names with spaces through command line you should provides it quotes-enclosed. Example: -a "john doe,john smith"Lyricpass

This feature is based in a modified version of a tool developed originally by init string. The changes are made to integrate input and output’s tool with bopscrk.

It will retrieve all lyrics from all songs which belongs to artists that you provide. By default it will store each artist, each phrase found with space substitution, each phrase found reduced to its initials (which will be transformed later if you have activated leet and case transforms). Advanced Usage Customizing behaviour using .cfg file

* In bopscrk.cfgfile you can specify[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Bopscrk : Tool To Generate Smart And Powerful Wordlists

bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists for targeted attacks.

3 viewsedited 18:50

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials Bopscrk : Tool To Generate Smart And Powerful Wordlists bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists for targeted attacks. * Targeted-attack wordlist creator: introduce personal info related…

your own charsets and enable/disable options:
* threads: number of threads to use in multithreaded operations
* extra_combinations (like (john, doe) => 123john, john123, 123doe, doe123, john123doe doe123john) are enabled by default. You can disable it in the configuration file in order to get more focused wordlists.
* separators_chars: characters to use in extra-combinations. Can be a single char or a string of chars, e.g.: !?-/&(* separators_strings: strings to use in extra-combinations. Can be a single string or a list of strings space-separated, e.g.: 12334!@* leet_charset: characters to replace and correspondent substitute in leet transforms, e.g.: e:3 b:8 t:7 a:4* recursive_leet: enables a recursive call to leet_transforms() function to get all possible leet transforms (disabled by default). WARNING: enabled with huge –max parameters (e.g.: greater than 18) could take several minutes. Can be true or false.
* remove_parenthesis: remove all parenthesis in lyrics found before any transform
* take_initials: produce words based on initial of each word in lyric phrases found (if enabled with remove_parenthesis disabled, it can produce useless words)
* artist_split_by_word: split artist names and add each word as a new one
* lyric_split_by_word: same with lyrics found
* artist_space_replacement: replace spaces in artist names with chars/strings defined in charset
* lyric_space_replacement: same with lyrics found
* space_replacement_chars: characters to insert instead of spaces inside an artist name or a lyric phrase. Can be a single char or a string of chars, e.g.: !?-/&(* space_replacement_strings: strings to insert instead of spaces inside an artist name or a lyric phrase. Can be a single string or a list of strings space-separated, e.g.: 12334!@* Some transforms have extensive charsets preincluded. To use it instead of the basic, just uncomment the corresponding line.
* Parameters configuration examples
* Combine all the words using dots as separator, and same using commas separators_chars=.,* Convert all “a/A” occurrences into “4” and all “e/E” occurrences into “3” leet_charset=a:4 e:3Weighted-words system

[…] Coming soon […] Change List

* 2.3.1 version notes* fixing namespace bug (related to aux.py module, renamed to auxiliars.py) when running on windows systems
* unittest (and simple unitary tests for transforms, excluders and combinators functions) implemented.

* 2.3 version notes (15/10/2020)* Customizable configuration for artists and lyrics transforms using the cfg file
* Requirements at setup.py updated
* Multithreads logic improved
* Leet and case order reversed to improve operations efficiency
* BUG FIXED in lyrics space replacement
* BUG FIXED when remove duplicates (Type Error: unhashable type: ‘list’)
* Memory management and efficiency improved
* SPLIT INTO MODULES to improve project structure
* BUG FIXED in wordlists-exclusion feature

* 2.2 version notes (11/10/2020* Configuration file implemented
* NEW FEATURE: Allow to create custom charsets and transforms patterns trough the config file
* NEW FEATURE: Recursive leet transforms implemented (disabled by default, can be enabled in cfg file)

* 2.2~beta version notes (10/10/2020)* The lyricpass integration have been updated to run with last version released by initstring
* --lyrics-alloption removed (feature integrated in other options)

* 2.1 version notes (11/07/2020)* Fixing min and max length bug

* 2.0/1.5 version notes (17/06/2020)* PYTHON 3 NOW IS SUPPORTED: master branch moves to Python 3. Secondary branch keeps Python 2.7 legacy support

* 0-1.2(beta) version notes* EXCLUDE WORDLISTS: speed improvement using multithreaded exclusions
* NEW FEATURE: lyrics searching relat[...]

___________________________
@hacking_Attack
@Hacking_Video

4 viewsedited 18:50

Hacking Articles Tips Tricks Videos Tutorials

your own charsets and enable/disable options: * threads: number of threads to use in multithreaded operations * extra_combinations (like (john, doe) => 123john, john123, 123doe, doe123, john123doe doe123john) are enabled by default. You can disable it in the…

ed to artists increase the wordlist chances Download

___________________________
@hacking_Attack
@Hacking_Video

4 viewsedited 18:50

Hacking Articles Tips Tricks Videos Tutorials

This media is not supported in your browser

VIEW IN TELEGRAM

4 views18:50

Hacking Articles Tips Tricks Videos Tutorials

GIF

Kali Linux Tutorials
efiXplorer : IDA Plugin For UEFI Firmware Analysis And Reverse Engineering Automation

efiXplorer – IDA plugin for UEFI firmware analysis and reverse engineering automation

Supported versions of Hex-Rays products: everytime we focus on last versions of IDA and Decompiler because we try to use most recent features from new SDK releases. That means we tested only on recent versions of Hex-Rays products and do not guarantee stable work on previous generations.

Why not IDApython: all code developed in C++ because it’s a more stable and performant way to support a complex plugin and get full power of most recent SDK’s features.

Supported Platforms: Windows, Linux and OSX.

efiXplorer core features

Features Summary Table
Feature name32-bit64-bitBoot Services++Runtime Services++SMM services–+PEI Services+–Protocols++GUIDS++Applying types for local variables++Vulnerabilities scanner++Report in JSON format++Loader–+Dependency graph–+
Identify available Boot Services automatically

Annotate Boot Services calls in assembly code automatically:
https://1.bp.blogspot.com/-go-agnzFGjA/YV0gKjJz0TI/AAAAAAAALAs/eTkQYQHTpJ03gta6HYak1L0T_E-fm5SpgCLcBGAsYHQ/s1572/1.gif
Identify available Runtime Services automatically

Annotate Runtime Services calls in assembly code automatically:
https://1.bp.blogspot.com/-QTyE5G3JCFE/YV0gsSq4poI/AAAAAAAALA0/v1JnVCkyaJUtDovIOe44deDZiijJZ6ZZwCLcBGAsYHQ/s1572/2.gif
Identify available SMM services automatically

Annotate SMM Services calls in assembly code automatically:
https://1.bp.blogspot.com/-yHCaXosb9DY/YV0iBC5s6TI/AAAAAAAALA8/089G8ETkOVMu-GOqmshP_oY7g_Y8bixQQCLcBGAsYHQ/s1572/3.gif
Identify available PEI services automatically

Annotate PEI Services calls in assembly code automatically:
https://1.bp.blogspot.com/-gvAleAuiPBk/YV0lHOmddII/AAAAAAAALBc/ZyQfN-IudpAMQieLIXbE8vbxU0Hw_7yzgCLcBGAsYHQ/s1572/4.gif
Identify available EFI Protocols automatically

Build the list of EFI Protocols firmware consumes and installs:
https://1.bp.blogspot.com/-zRR4eJv5Lqg/YV2RIfP58zI/AAAAAAAALCM/pmeDMdyRu1Ut7o9Dr_IGDUVTJf3TbHSjQCLcBGAsYHQ/s1572/5.gif
Identify known EFI GUIDs

Build the list of identified EFI GUIDs (including protocol names for known GUIDS):
https://1.bp.blogspot.com/-M8JI3IsBy6M/YV2RwaOUhpI/AAAAAAAALCU/Y1thSao2xXMuiO7X6ouHNjzjTf0GZZFdgCLcBGAsYHQ/s1572/6.gif
Applying Types For Protocols Interfaces

This feature works only in conjunction with a HexRays decompiler. If you don’t have a HexRays decompiler, build efiXplorerwithout hexrays_sdk.

Vulnerabilities Scanner

efiXplorerscans drivers for the following types of vulnerabilities:

* SMM callouts
* OOB Write via wrong GetVariableusage (in PEI, DXE and SMM drivers)

At the end of the analysis, a chooser is displayed with the suspected vulnerabilities.

Report in JSON format

After analysis efiXplorersaves the report in JSON format.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

efiXplorer : IDA Plugin For UEFI Firmware Analysis

efiXplorer - IDA plugin for UEFI firmware analysis and reverse engineering automation. we focus on last versions of IDA and Decompiler

4 viewsedited 18:50

Hacking Articles Tips Tricks Videos Tutorials

4 views19:03

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Ring containing 2 hidden RFID chips

Included in the ring is a 13.56MHz Mifare 1k Magic gen2 chip and a 125kHz T5577 RFID chip.

Can be reprogrammed and used to replace electronic car keys, garage door openers, RFID key cards, etc.

https://dangerousthings.com/product/magic-ring/

submitted by /u/SpecialSeasons
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ring containing 2 hidden RFID chips

Included in the ring is a 13.56MHz Mifare 1k Magic gen2 chip and a 125kHz T5577 RFID chip. Can be reprogrammed and used to replace electronic car...

6 viewsedited 19:03

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Where do i download sqlidumper

The title says it all.

submitted by /u/CookieKola
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Where do i download sqlidumper

The title says it all.

7 viewsedited 19:03

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
Links?

Does anybody has a link for a anynomys chat room in dark web just for fun with a friend

submitted by /u/Kiano18
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Links?

Does anybody has a link for a anynomys chat room in dark web just for fun with a friend

6 viewsedited 19:38

Hacking Articles Tips Tricks Videos Tutorials

6 views19:44

Hacking Articles Tips Tricks Videos Tutorials

Photo

Deep Web
I find this video; fascinating.

https://external-preview.redd.it/RePlWMoBlVDmkzYt0q7JXbRt1SgL0ZWTa5vDpd52xGA.jpg?width=320&crop=smart&auto=webp&s=bfffda6d303ab5ea7739c18a0959839815f11f91 submitted by /u/truthseeker2007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I find this video; fascinating.

Posted in r/deepweb by u/truthseeker2007 • 0 points and 1 comment

3 viewsedited 19:44

Hacking Articles Tips Tricks Videos Tutorials