authorized entity as a means to compromise the security, privacy, confidentiality, integrity, and/or availability of systems and their associated resources by leveraging the exploitation of known or unknown vulnerabilities present in said systems, including, but not limited to, the implementation of security controls, human- or electronically-enabled.

The use of this code is only endorsed by the developers in those circumstances directly related to educational environments or authorized penetration testing engagements whose declared purpose is that of finding and mitigating vulnerabilities in systems, limiting their exposure to compromises and exploits employed by malicious agents as defined in their respective threat models. Download Packet-Sniffer

___________________________
@hacking_Attack
@Hacking_Video

A Unique Email Verification Bypass

Hello Hackers! , in this write-up, I will tell you how I found a unique email verification bypass.Continue reading on Medium »
Read more...

Blind XSS on Google Internal System

Blind cross-site scripting (XSS) refers to a type of code injection where an attacker inserts XSS payload in user input fields and they…Continue reading on Medium »
Read more...

Packet-Sniffer - A pure-Python Network Packet Sniffing Tool

A simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen. This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter.Installation GNU / Linux Simply clone this repository with git clone and execute the packet_sniffer.py file as described in the following Usage section. user@host:~/DIR$ git clone https://github.com/EONRaider/Packet-Sniffer.git Other Systems This project is dependent on PF_PACKET - a stateful packet filter not found on Windows or Mac OS X. For demonstration purposes, you can try out this package in a Docker container. Although it will not have full access to localhost on your machine, you can still sniff on the Docker subnet and at least get the module running. Use this command to build and run from the project directory: docker build -t sniff . && docker run --network host sniff Note that the entry command is simply python packet_sniffer.py, so feel free to use the full functionality of the module by overriding the default command. Remember that we tagged the container with the name "sniff" before, so we can pass command-line arguments to the sniffer in the following manner: docker run --network host sniff your command goes hereecho "Now let's print help"docker run --network host sniff python packet_sniffer.py --help Usage of --network host is not supported on OS X or Windows so this container won't be fully functional - but you will see packets traveling within the docker subnet. Usage packet_sniffer.py -h -i INTERFACE -dA pure-Python network packet sniffer.optional arguments: -h, --help show this help message and exit -i INTERFACE, --interface INTERFACE Interface from which packets will be captured (captures from all available interfaces by default). -d, --displaydata Output packet data during capture. Running the Application Objective Initiate the capture of packets on all available interfaces Execution sudo python3 packet_sniffer.py Outcome Refer to sample output below Sample output: > Packet #476 at 17:45:13: + MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9 + IPv4 ..........192.168.1.65 -> 140.82.113.3 | PROTO: TCP TTL: 64 + TCP ..................40820 -> 443 | Flags: 0x010 > ACK> Packet #477 at 17:45:14: + MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a + IPv4 ..........140.82.113.3 -> 192.168.1.65 | PROTO: TCP TTL: 49 + TCP ....................443 -> 40820 | Flags: 0x010 > ACK> Packet #478 at 17:45:18: + MAC ......dc:d9:ae:71:c8:b9 -> ae:45:39:30:8f:5a + ARP Who has 192.168.1.65 ? -> Tell 192.168.1.254> Packet #479 at 17:45:18: + MAC ......ae:45:39:30:8f:5a -> dc:d9:ae:71:c8:b9 + ARP ...........192.168.1.65 -> Is at ae:45:39:30:8f:5a Legal Disclaimer The use of code contained in this repository, either in part or in its totality, for engaging targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for misuses or damages caused by any code contained in this repository in any event that, accidentally or otherwise, it comes to be utilized by a threat agent or unauthorized entity as a means to compromise the security, privacy, confidentiality, integrity, and/or availability of systems and their associated resources by leveraging the exploitation of known or unknown vulnerabilities present in said systems, including, but not limited to, the implementation of security controls, human- or electronically-enabled. The use of this code is only endorsed by the developers in those circumstances directly related to educational environments or authorized penetration testing engagements whose declared purpose is that of finding and mitigating vulnerabilities in systems, limiting their exposure to compromises and exploits employed by malicious agents as defined in their respective threat models. Download Packet-Sniffer
Read more...

Hacking on Medium
Indexed Finance Suffered Its First Cyber-Attack Where Assets Worth $16m Were Stolen.

https://cdn-images-1.medium.com/max/1500/1*NDXF9X9fNfe3zZxDOJ6rAw.jpeg
Recently, Indexed Finance suffered a hack where assets worth $16 Million were exploited from CC10 and DEFI5.

Continue reading on Blockonomist »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox Write-up: Cronos.

https://cdn-images-1.medium.com/max/600/1*2zAvmViRIvBayijy-20piQ.png
Dificultad: Media.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Unique Email Verification Bypass

https://cdn-images-1.medium.com/max/600/1*22u_eHWB8a--jAzB5sHkwA.png
Hello Hackers! , in this write-up, I will tell you how I found a unique email verification bypass.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why everyone should use VPN.

https://cdn-images-1.medium.com/max/1048/1*iVNBD1-FHWf4smAkKqlW1A.jpeg
VPN whenever we hear the word VPN we all have that misconception that only hackers or bad people use VPN common people doesn’t
But that’s…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tech Tips To Protect Your Camera From Webcam Spying

https://cdn-images-1.medium.com/max/1920/0*6iN2LRWtCPBq6BKH.jpg
Someone could be watching you through your webcam, without you even realising.“Webcams can be easily compromised by even inexperienced and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
To Recruiters From an Engineer

https://cdn-images-1.medium.com/max/902/1*ZcpmnzNZ3GYHRLTpMcx3PA.jpeg
Technical recruiters can do better. Here’s my thoughts tied into a short story from my youth.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How would you go about getting access to SimonVoss locks?
https://www.reddit.com/r/Pentesting/comments/q9ehaf/how_would_you_go_about_getting_access_to/

submitted by /u/Entertainmensch (https://www.reddit.com/user/Entertainmensch)
[link] (https://www.reddit.com/r/Pentesting/comments/q9ehaf/how_would_you_go_about_getting_access_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/q9ehaf/how_would_you_go_about_getting_access_to/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking A Discord Bot

If you wanna learn how to hack join these awesome discord servers!Continue reading on Medium »
Read more...

Hacking A Discord Bot
https://medium.com/@0xhornet/hacking-a-discord-bot-3b81dcf55157?source=rss------bug_bounty-5

If you wanna learn how to hack join these awesome discord servers!Continue reading on Medium » (https://medium.com/@0xhornet/hacking-a-discord-bot-3b81dcf55157?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Creating a Basic Python Reverse Shell Listener

submitted by /u/pythonpsycho1337
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Future of Cybersecurity, Quantum Computing, and Smaller Enterprises

Over the next decade, I believe that cybercrime is going to go up immensely. I think we are all seeing the change happening, our world is becoming more and more reliant on

technology. How exactly will this cybercrime look? I'm not entirely sure. With the evolution of blockchain technology, I predict we will become more reliant on digital

currency for our financial transactions. With the breakthroughs in quantum computing that are making widespread use possible in the coming years, our

world's encryption standards are going to be worth almost as much as a plastic lock. No doubt, there will be new standards developed and implemented, but

thinking realistically, I think we have to ask ourselves, how quickly will companies and individuals adapt to this new standard? Sure, big corporations and big governments might be fast to transition, because another ransomware attack means more money out of their pocket (although I do have my doubts in this considering the corporate trend seems to be to cut

costs by not following best practices in cyber security standards). But for smaller companies and governments, will they have the means to implement these new

standards? In order to implement the new measures, it means having the know-how to do so (or the money to do so). And let's be honest, the smaller companies and governments

who don't necessarily have the funds to make this sort of thing happen will probably face a great deal of delay in getting the new standards of encryption implemented, at least

until the cost goes down to a point where they can afford it. And even then, I worry there will be other barriers, because not everyone will be honest in doing what they

are supposed to do.

This is a fear of mine that stems from a story I recently was told from a friend who works for a local government agency. Their servers were hit with ransomware and completely locked

up for almost a month. The insurance company negotiated and eventually got the key, but that took a while. On top of that, the company that they paid to provide cloud storage

backups stopped doing so about a year prior to the incident despite being paid to do so. Obviously that is super illegal/unethical on the backup storage service provider’s part, and I’m guessing legal action is going to be taken against them. But it highlights an issue I must think will continue to happen in the future, especially as our world becomes more reliant on technology.

So I guess I see the next decades as a battle between rolling out the new encryption standards and the growth of quantum computing (as well as the continued race to patch systems

with all the new vulnerabilities that are discovered).

Maybe I'm completely off base here, but I would love to hear everyone's thoughts on this. I am by no means an expert on quantum computing or even cyber security, but these

are some thoughts I've been having. This is cross-posted because I want to hear as much feedback on this as possible :)

submitted by /u/Shadow1893
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video