hacking: security in practice
A step-by-step analysis of the new malware used by APT28/Sofacy called SkinnyBoy

https://external-preview.redd.it/uCgsrSYejE0hkB1dpcijrRXihMj46a2cGNyjEjQSaYQ.jpg?width=320&crop=smart&auto=webp&s=930bec3788fc132bf5afe798153632d5936841f3 submitted by /u/mow167
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vim/Neovim Plugins for A Better Integrated Experience

https://cdn-images-1.medium.com/max/700/0*C_Y9E8En1BMKCVlz.png
Plugins for a better integrated development experience to make your life easier.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google sent 50,000 warnings to users on government-back hackings

https://cdn-images-1.medium.com/max/768/0*mdRjsD336EC7JuGT.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

DorkScout - Golang Tool To Automate Google Dork Scan Against The Entiere Internet Or Specific Targets
http://www.kitploit.com/2021/10/dorkscout-golang-tool-to-automate.html

___________________________
@hacking_Attack
@Hacking_Video

Go Packagesthrought Golang Packages (https://github.com/rust-lang/cargo) (golang package manager)go get github.com/R4yGM/dorkscoutthis will work for every platform
Dockerif you don't have docker installed you can follow their guide (https://docs.docker.com/engine/install/)first of all you have to pull the docker image (only 17.21 MB) from the docker registry, you can see it here (https://hub.docker.com/r/r4yan/dorkscout), if you don't want to pull the image you can also clone the repository and then build the image from the Dockerfiledocker pull r4yan/dorkscout:latestif you don't want to pull the image you can download or copy the dorkscout Dockerfile (https://www.kitploit.com/search/label/Dockerfile) that can be found here (https://github.com/R4yGM/dorkscout/blob/1.0/Dockerfile) and then build the image from the Dockerfilethen if you want to launch the container (https://www.kitploit.com/search/label/Container) you have to first create a volume to share your files to the containerdocker volume create --name dorkscout_datausing docker when you launch the container it will automatically install the dork lists inside a directory called "dorkscout" :Vulnerability Data.dorkscout' -rw-r--r-- 1 r4yan r4yan 49048 Jul 31 14:56 'Pages Containing Login Portals.dorkscout' -rw-r--r-- 1 r4yan r4yan 16112 Jul 31 14:56 'Sensitive Directories.dorkscout' -rw-r--r-- 1 r4yan r4yan 451 Jul 31 14:56 'Sensitive Online Shopping Info.dorkscout' -rw-r--r-- 1 r4yan r4yan 29938 Jul 31 14:56 'Various Online Devices.dorkscout' -rw-r--r-- 1 r4yan r4yan 2802 Jul 31 14:56 'Vulnerable Files.dorkscout' -rw-r--r-- 1 r4yan r4yan 4925 Jul 31 14:56 'Vulnerable Servers.dorkscout' -rw-r--r-- 1 r4yan r4yan 8145 Jul 31 14:56 'Web Server Detection.dorkscout' ">-rw-r--r-- 1 r4yan r4yan 110 Jul 31 14:56 .dorkscout
-rw-r--r-- 1 r4yan r4yan 79312 Aug 10 20:30 'Advisories and Vulnerabilities.dorkscout'
-rw-r--r-- 1 r4yan r4yan 6352 Jul 31 14:56 'Error Messages.dorkscout'
-rw-r--r-- 1 r4yan r4yan 38448 Jul 31 14:56 'Files Containing Juicy Info.dorkscout'
-rw-r--r-- 1 r4yan r4yan 17110 Jul 31 14:56 'Files Containing Passwords.dorkscout'
-rw-r--r-- 1 r4yan r4yan 1879 Jul 31 14:56 'Files Containing Usernames.dorkscout'
-rw-r--r-- 1 r4yan r4yan 5398 Jul 31 14:56 Footholds.dorkscout
-rw-r--r-- 1 r4yan r4yan 5568 Jul 31 14:56 'Network or Vulnerability Data.dorkscout'
-rw-r--r-- 1 r4yan r4yan 49048 Jul 31 14:56 'Pages Containing Login Portals.dorkscout'
-rw-r--r-- 1 r4yan r4yan 16112 Jul 31 14:56 'Sensitive Directories.dorkscout'
-rw-r--r-- 1 r4yan r4yan 451 Jul 31 14:56 'Sensitive Online Shopping Info.dorkscout'
-rw-r--r-- 1 r4yan r4yan 29938 Jul 31 14:56 'Various Online Devices.dorkscout'
-rw-r--r-- 1 r4yan r4yan 2802 Jul 31 14:56 'Vulnerable Files.dorkscout'
-rw-r--r-- 1 r4yan r4yan 4925 Jul 31 14:56 'Vulnerable Servers.dorkscout'
-rw-r--r-- 1 r4yan r4yan 8145 Jul 31 14:56 'Web Server Detection.dorkscout'so that you don't have to install them then you can start scanning by doing : ">docker run -v Dorkscout:/dorkscout r4yan/dorkscout scan replace the with the options/arguments you want to give to dorkscout, example :docker run -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d="/dorkscout/Sensitive Online Shopping Info.dorkscout" -H="/dorkscout/a.html"If you wanted to scan throught a proxy using a docker container you have to add the --net host optionexample :docker run --net host -v dorkscout_data:/dorkscout r4yan/dorkscout scan -d="/dorkscout/Sensitive Online Shopping Info.dorkscout" -H="/dorkscout/a.html -x socks5://127.0.0.1:9050"Always save your results inside the volume and not in the container because then the results will be deleted! you can save them by writing the same volume path of the directory you are saving the resultsif you added this and did everything correctly at the end of every scan you'd find the results inside the folder /var/lib/docker/volumes/dorkscout_data/_datathis will work for every platform
Executable

___________________________
@hacking_Attack
@Hacking_Video

you can also download the already compiled binaries here (https://github.com/R4yGM/dorkscout/releases) and then execute them
Usage
dorkscout -hUsage:
dorkscout [command]

Available Commands:
completion generate the autocompletion script for the specified shell
delete deletes all the .dorkscout files inside a given directory
help Help about any command
install installs a list of dorks from exploit-db.com
scan scans a specific website or all the websites it founds for a list of dorks

Flags:
-h, --help help for dorkscout

Use "dorkscout [command] --help" for more information about a command.to start scanning with a wordlist and a proxy that will then return the results in a HTML formatdorkscout scan -d="/dorkscout/Sensitive Online Shopping Info.dorkscout" -H="/dorkscout/a.html" -x socks5://127.0.0.1:9050results :

___________________________
@hacking_Attack
@Hacking_Video

Install wordlists
to start scanning you'll need some dork lists and to have these lists you can install them through the install commanddorkscout install --output-dir /dorksand this will fetch all the available dorks from exploit.db[+] ./Advisories and Vulnerabilities.dorkscout
[+] ./Vulnerable Files.dorkscout
[+] ./Files Containing Juicy Info.dorkscout
[+] ./Sensitive Online Shopping Info.dorkscout
[+] ./Files Containing Passwords.dorkscout
[+] ./Vulnerable Servers.dorkscout
[+] ./Various Online Devices.dorkscout
[+] ./Pages Containing Login Portals.dorkscout
[+] ./Footholds.dorkscout
[+] ./Error Messages.dorkscout
[+] ./Files Containing Usernames.dorkscout
[+] ./Network or Vulnerability Data.dorkscout
[+] ./.dorkscout
[+] ./Sensitive Directories.dorkscout
[+] ./Web Server Detection.dorkscout
2021/08/11 19:02:45 Installation finished in 2.007928 seconds on /dorks


Download Dorkscout (https://github.com/R4yGM/dorkscout)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
DorkScout - Golang Tool To Automate Google Dork Scan Against The Entiere Internet Or Specific Targets

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–30481: Source engine remote code execution via game invites
https://bountyget.medium.com/cve-2021-30481-source-engine-remote-code-execution-via-game-invites-53373f64460f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Steam is the most popular PC game launcher in the world. It gives millions of people the chance to play their favorite video games with…Continue reading on Medium » (https://bountyget.medium.com/cve-2021-30481-source-engine-remote-code-execution-via-game-invites-53373f64460f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hacking windows over WAN connection

is it even possible. as far as i know, for most payloads to work you have to be connected to the same network

submitted by /u/ball-sack-patato
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do i use these files?

now i dont know if this is a place for game hacks, but ill try, and i never found that in the rules. anyway, the game i want to "hack" is Rainbow Six Siege, but nearly every youtube video i could find had the files as a Trojan virus. I then found these files on GitHub, but i don't know how to use them. do i put the files in the main file location of the game? do i have to put them somewhere else?

submitted by /u/ShaderGamingYT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
building my own crawler and spider looking for resources,

submitted by /u/subatomic_rabbithole
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video