Uninstall Go Lang From Kali Linux
https://medium.com/@sherlock297/uninstall-go-lang-from-kali-linux-41de5157cd60?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello All, if you have Go Lang installed from Kali Linux Package that is using sudo apt install golang (shown in video) and now for some…Continue reading on Medium » (https://medium.com/@sherlock297/uninstall-go-lang-from-kali-linux-41de5157cd60?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Credit card PINs can be guessed even when covering the ATM pad

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Credit card PINs can be guessed even when covering the ATM padPost Views: 145
Reading Time: 1 Minute
Researchers have proven it’s possible to train a special-purpose deep-learning algorithm that can guess 4-digit card PINs 41% of the time, even if the victim is covering the pad with their hands.
The attack requires the setting up of a replica of the target ATM because training the algorithm for the specific dimensions and key spacing of the different PIN pads is crucially important.

Next, the machine-learning model is trained to recognize pad presses and assign specific probabilities on a set of guesses, using video of people typing PINs on the ATM pad.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/pin_attack.jpg
CountermeasuresThis experiment proves that covering the PIN pad with the other hand is not sufficient to defend against deep learning-based attacks, but thankfully, there are some countermeasures you can deploy.

* First, if your bank gives you the option to choose a 5-digit PIN instead of a 4-digit one, pick the longer one. It may be harder to remember, but it is a lot safer against attacks of this kind.
* Secondly, the percentage of the hand coverage is significantly lowering the prediction accuracy. A coverage percentage of 75% gives an accuracy of 0.55 for each try, while a total coverage (100%) takes the accuracy down to 0.33.
* A third countermeasure would be to serve users with a virtual and randomized keypad instead of the standardized mechanical one. This inevitably comes with usability drawbacks, but it’s an excellent security measure.

Interestingly, the researchers used the experiment’s video clips on a survey with 78 participants to determine if humans could also guess the concealed P[...]

___________________________
@hacking_Attack
@Hacking_Video

INs and up to what point.

On average, the survey participants answered with an accuracy of only 7.92%, which is inefficient for carrying out attacks of this type.
See Also: Offensive Security Tool: Dalfox See Also: Hacking stories – Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/REVIL-headpic-90x90.jpg REvil ransomware shuts down again after Tor sites were hijacked1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/google-chrome-adblocker-uai-1440x900-1-90x90.jpg Malicious Chrome ad blocker injects ads behind the scenes4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/maxresdefault-90x90.jpg Brizy WordPress Plugin Exploit Chains Allow Full Site Takeovers5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/abstract_mysterysnail-90x90.jpg Microsoft Kills Bug Being Exploited in MysterySnail Espionage Campaign6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/apple-iphone-hacking-90x90.jpg Emergency Apple iOS 15.0.2 update fixes zero-day used in attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Linux-1280x720-1-90x90.jpg FontOnLake malware infects Linux systems1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/excel-header-90x90.jpg Microsoft is disabling Excel 4.0 macros by default to protect users2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/ezgif.com-gif-maker-1-90x90.jpg Twitch source code and creator payouts part of massive leak2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Apache-web-server-90x90.png Apache fixes actively exploited zero-day vulnerability, patch now2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/security-breach-freepik-90x90.jpg Encrypted & Fileless Malware Sees Big Growth2 weeks ago
The post Credit card PINs can be guessed even when covering the ATM pad first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
7 Cross-Industry Technology Trends That Will Disrupt the World

Recent McKinsey & Company analysis examines which technologies will have the most momentum in the next ten years. These are the trends security teams need to be aware of in order to protect the organization effectively.

hacking: security in practice
How to find real IP behind Cloudflare

Hi guys,

​

I am trying to find the real IP of a website which is behind Cloudflare.

​

There is many tools and websites but most of them are not functional anymore or they do not give me the info I am looking for.

​

Tools and sites I have tried:

Cloudfail

securitytrails.com

Censys

Shodan

Crimeflare.com - dead

sitereport.netcraft.com

Cloudflare Enumeration Tool

​

Any other sites or tools which you are aware of which is still functional?

​

Thanks!

​

​

Any suggestions?

submitted by /u/h4ckii
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Networking courses

I have a basic understanding in networking but i would like if somoene have a free networking course that he would like to share because i want to make sure that my basics are super solid

submitted by /u/Brilliant_Fall8987
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cheap no code USB to TTL with arduino

https://external-preview.redd.it/QwXsYDLMn8MhUm1TyiwqkD_JZ5TtBj6Wf2H05aWHAjQ.jpg?width=640&crop=smart&auto=webp&s=0003ec2bdcb9808cbf19faee9c1fa155721850cd submitted by /u/madm0use
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create CSRF vulnerable website for CTF?

So I decided to make a CTF and one of the steps of that CTF will be the CSRF exploitation. So my question is really simple. How can I create a website which is going to be CSRF vulnerable so the players will be able to exploit it to request the flag?

PS - I am going to have my web server.

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get rid of an active Trojan ?

My computer has been telling me constantly that I should scan for malware and everytime I find a Trojan or pieces of it. How to prevent it from doing any more damage and how to destroy it?

submitted by /u/gekke_gijt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Uninstall Go Lang From Kali Linux

Hello All, if you have Go Lang installed from Kali Linux Package that is using sudo apt install golang (shown in video) and now for some…Continue reading on Medium »
Read more...

Karma_V2 - A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)
http://www.kitploit.com/2021/10/karmav2-passive-open-source.html

___________________________
@hacking_Attack
@Hacking_Video

𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence (https://www.kitploit.com/search/label/Intelligence) (OSINT) Automated Reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) (framework)

𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many more about their target. Shodan Premium API key is required to use this automation. Output from the 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is displayed to the screen and saved to files/directories.

Regarding Premium Shodan API, Please see the Shodan site for more information.Shodan website: Shodan Website (https://shodan.io/)API : Developer API (https://developer.shodan.io/api)
Features
Powerful and flexible results via Shodan DorksSSL SHA1 checksum/fingerprint SearchOnly hit In-Scope IPsVerify each IP with SSL/TLS certificate issuer match RegExProvide Out-Of-Scope IPsFind out all ports including well known/uncommon/dynamicGrab all targets vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) related to CVEsBanner grab for each IP, Product, OS, Services & Org etc.Grab favicon IconsGenerate Favicon Hash using python3 mmh3 ModuleFavicon Technology Detection using nuclei custom templateASN ScanBGP NeighbourIPv4 & IPv6 Profixes for ASNInteresting Leaks like Indexing, NDMP, SMB, Login, SignUp, OAuth, SSO, Status 401/403/500, VPN, Citrix, Jfrog, Dashboards, OpenFire, Control Panels, Wordpress, Laravel, Jetty, S3 Buckets, Cloudfront, Jenkins, Kubernetes, Node Exports, Grafana, RabbitMQ, Containers, GitLab, MongoDB, Elastic, FTP anonymous, Memcached, DNS Recursion, Kibana, Prometheus, Default Passwords, Protected Objects, Moodle, Spring Boot, Django, Jira, Ruby, Secret Key and many more...
Installation

1. Clone the repo
# git clone https://github.com/Dheerajmadhukar/karma_v2.git
2. Install shodan & mmh3 python module
# python3 -m pip install shodan mmh3
3. Install JSON Parser [JQ]
# apt install jq -y
4. Install httprobe @tomnomnom (https://github.com/tomnomnom/httprobe) to probe the requests
# GO111MODULE=on go get -v github.com/tomnomnom/httprobe
5. Install Interlace @codingo (https://github.com/codingo/Interlace.git) to multithread [Follow the codingo interlace repo instructions]
# git clone https://github.com/codingo/Interlace.git & install accordingly.
6. Install nuclei @projectdiscovery (https://github.com/Dheerajmadhukar/karma_v2/blob/main/github.com/projectdiscovery/nuclei)
# GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei
7. Install lolcat
# apt install lolcat -y
8. Install anew
# GO111MODULE=on go get -u github.com/tomnomnom/anew
Ok, how do I use it?
.token SHODAN_PREMIUM_API_HERE "># cat > .token
SHODAN_PREMIUM_API_HERE
Usage
You can use this command to check help:$ bash karma_v2 -h

___________________________
@hacking_Attack
@Hacking_Video

MODEs
MODEExamples-ip bash karma_v2 -d -l -ip-asn bash karma_v2 -d -l -asn-cve bash karma_v2 -d -l -cve-favicon bash karma_v2 -d -l -favicon-leaks bash karma_v2 -d -l -leaks-deep bash karma_v2 -d -l -deep-count bash karma_v2 -d -l -count
Demo
karma_v2 [mode -ip]

___________________________
@hacking_Attack
@Hacking_Video

karma_v2 [mode -asn]

___________________________
@hacking_Attack
@Hacking_Video