hacking: security in practice
Networking courses

I have a basic understanding in networking but i would like if somoene have a free networking course that he would like to share because i want to make sure that my basics are super solid

submitted by /u/Brilliant_Fall8987
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cheap no code USB to TTL with arduino

https://external-preview.redd.it/QwXsYDLMn8MhUm1TyiwqkD_JZ5TtBj6Wf2H05aWHAjQ.jpg?width=640&crop=smart&auto=webp&s=0003ec2bdcb9808cbf19faee9c1fa155721850cd submitted by /u/madm0use
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create CSRF vulnerable website for CTF?

So I decided to make a CTF and one of the steps of that CTF will be the CSRF exploitation. So my question is really simple. How can I create a website which is going to be CSRF vulnerable so the players will be able to exploit it to request the flag?

PS - I am going to have my web server.

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get rid of an active Trojan ?

My computer has been telling me constantly that I should scan for malware and everytime I find a Trojan or pieces of it. How to prevent it from doing any more damage and how to destroy it?

submitted by /u/gekke_gijt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Uninstall Go Lang From Kali Linux

Hello All, if you have Go Lang installed from Kali Linux Package that is using sudo apt install golang (shown in video) and now for some…Continue reading on Medium »
Read more...

Karma_V2 - A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)
http://www.kitploit.com/2021/10/karmav2-passive-open-source.html

___________________________
@hacking_Attack
@Hacking_Video

𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence (https://www.kitploit.com/search/label/Intelligence) (OSINT) Automated Reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) (framework)

𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many more about their target. Shodan Premium API key is required to use this automation. Output from the 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is displayed to the screen and saved to files/directories.

Regarding Premium Shodan API, Please see the Shodan site for more information.Shodan website: Shodan Website (https://shodan.io/)API : Developer API (https://developer.shodan.io/api)
Features
Powerful and flexible results via Shodan DorksSSL SHA1 checksum/fingerprint SearchOnly hit In-Scope IPsVerify each IP with SSL/TLS certificate issuer match RegExProvide Out-Of-Scope IPsFind out all ports including well known/uncommon/dynamicGrab all targets vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) related to CVEsBanner grab for each IP, Product, OS, Services & Org etc.Grab favicon IconsGenerate Favicon Hash using python3 mmh3 ModuleFavicon Technology Detection using nuclei custom templateASN ScanBGP NeighbourIPv4 & IPv6 Profixes for ASNInteresting Leaks like Indexing, NDMP, SMB, Login, SignUp, OAuth, SSO, Status 401/403/500, VPN, Citrix, Jfrog, Dashboards, OpenFire, Control Panels, Wordpress, Laravel, Jetty, S3 Buckets, Cloudfront, Jenkins, Kubernetes, Node Exports, Grafana, RabbitMQ, Containers, GitLab, MongoDB, Elastic, FTP anonymous, Memcached, DNS Recursion, Kibana, Prometheus, Default Passwords, Protected Objects, Moodle, Spring Boot, Django, Jira, Ruby, Secret Key and many more...
Installation

1. Clone the repo
# git clone https://github.com/Dheerajmadhukar/karma_v2.git
2. Install shodan & mmh3 python module
# python3 -m pip install shodan mmh3
3. Install JSON Parser [JQ]
# apt install jq -y
4. Install httprobe @tomnomnom (https://github.com/tomnomnom/httprobe) to probe the requests
# GO111MODULE=on go get -v github.com/tomnomnom/httprobe
5. Install Interlace @codingo (https://github.com/codingo/Interlace.git) to multithread [Follow the codingo interlace repo instructions]
# git clone https://github.com/codingo/Interlace.git & install accordingly.
6. Install nuclei @projectdiscovery (https://github.com/Dheerajmadhukar/karma_v2/blob/main/github.com/projectdiscovery/nuclei)
# GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei
7. Install lolcat
# apt install lolcat -y
8. Install anew
# GO111MODULE=on go get -u github.com/tomnomnom/anew
Ok, how do I use it?
.token SHODAN_PREMIUM_API_HERE "># cat > .token
SHODAN_PREMIUM_API_HERE
Usage
You can use this command to check help:$ bash karma_v2 -h

___________________________
@hacking_Attack
@Hacking_Video

MODEs
MODEExamples-ip bash karma_v2 -d -l -ip-asn bash karma_v2 -d -l -asn-cve bash karma_v2 -d -l -cve-favicon bash karma_v2 -d -l -favicon-leaks bash karma_v2 -d -l -leaks-deep bash karma_v2 -d -l -deep-count bash karma_v2 -d -l -count
Demo
karma_v2 [mode -ip]

___________________________
@hacking_Attack
@Hacking_Video

karma_v2 [mode -asn]

___________________________
@hacking_Attack
@Hacking_Video

karma_v2 [mode -cve]

___________________________
@hacking_Attack
@Hacking_Video

karma_v2 [mode -favicon]

___________________________
@hacking_Attack
@Hacking_Video

karma_v2 [mode -leaks]

___________________________
@hacking_Attack
@Hacking_Video

│ ├── ssl_SHA1_198d6d4ec...681b77585190078b07b37c5e1_domain.tld.json.gz
│ ├── ssl_SHA1_26a9c5618...d60eae2947b42263e154d203f_domain.tld.json.gz
│ ├── ssl_SHA1_3da3825a2...3b852a42470410183adc3b9ee_domain.tld.json.gz
│ ├── ssl_SHA1_4d0eab730...68cf11d2db94cc2454c906532_domain.tld.json.gz
│ ├── ssl_SHA1_8907dab4c...12fdbdd6c445a4a8152f6b7b7_domain.tld.json.gz
│ ├── ssl_SHA1_9a9b99eba...5dc5106cea745a591bf96b044_domain.tld.json.gz
│ ├── ssl_SHA1_a7c14d201...b6fd4bc4e95ab2897e6a0bsfd_domain.tld.json.gz
│ ├── ssl_SHA1_a90f4ddb0...85780bdb06de83fefdc8a612d_domain.tld.json.gz
│ ├── ssl_domain_domain.tld.json.gz
│ ├── ssl_subjectCN_domain.tld.json.gz
│ └── ssl_subject_domain.tld.json.gz
| └── . . .
├── IP_VULNS
│ ├── 104.x.x.x.json.gz
│ ├── 107.x.x.x.json.gz
│ ├── 107.x.x.x.json.gz
│ └── 99.x.x.x.json.gz
| └── . . .
├── favicons_domain.tld.txt
├── host_enum_domain.tld.txt
├── ips_inscope_domain.tld.txt
├── main_domain.tld.data
├── . . .
karma_v2 Newly Added Shodan Dorks
SonarQubeApache hadoop nodeDirectory ListingOracle Business intelligenceOracle Web LoginDocker ExecApache StatusApache-Coyote/1.1 Tomcat-5.5Swagger UIH-SPHERESplunkJBossphpinfoID_VCConfluenceTIBCO_JaspersoftShipyard_Docker_managementSymfony PHP info AWS credsIgnored-by_CDNsDjango_ExposedCluster_Node_etcdSAP_NetWeaver_Application
𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 Supported Shodan Dorks
DORKsDORKsDORKsssl.cert.fingerprinthttp.status:"302" oauth"Server: Jetty"sslhttp.status:"302" ssoX-Amz-Bucket-Regionorgtitle:"401 Authorization (https://www.kitploit.com/search/label/Authorization) Required""development" org:"Amazon.com"hostnamehttp.html:"403 Forbidden""X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Jenkins [Jenkins]"ssl.cert.issuer.cnhttp.html:"500 Internal Server Error"http.favicon.hash:81586312 200ssl.cert.subject.cnssl.cert.subject.cn:*vpn*product:"Kubernetes" port:"10250, 2379"ssl.cert.expired:truetitle:"citrix gateway"port:"9100" http.title:"Node Exporter"ssl.cert.subject.commonNamehttp.html:"JFrog"http.title:"Grafana"http.title:"Index of /""X-Jfrog"http.title:"RabbitMQ"ftp port:"10000"http.title:"dashboard"HTTP/1.1 307 Temporary Redirect "Location: /containers""Authentication: disabled" port:445 product:"Samba"http.title:"Openfire Admin Console"http.favicon.hash:1278323681title:"Login - Adminer"http.title:"control panel""MongoDB Server Information" port:27017 -authenticationhttp.title:"sign up"http.html:"* The wp-config.php creation script uses this file"port:"9200" all:"elastic indices" http.title:"LogIn"clockwork"220" "230 Login successful." port:21port:"11211" product:"Memcached""port: 53" Recursion: Enabledtitle:"kibana"port:9090 http.title:"Prometheus Time Series (https://www.kitploit.com/search/label/Time%20Series) Collection and Processing Server""default password"title:protectedhttp.component:Moodlehttp.favicon.hash:116323821html:"/login/?next=" title:"Django"html:"/admin/login/?next=" title:"Django"title:"system dashboard" html:jirahttp.component:ruby port:3000html:"secret_key_base"I will add more soon. . .
𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 Newly Added Shodan Dorks
DORKsDORKsDORKs"netweaver"port:"2379" product:"etcd"http.title:"DisallowedHost"ssl:"${target}" "-AkamaiGHost" "-GHost"ssl:"${target}" "-Cloudflare"ssl:"${target}" "-Cloudfront""X-Debug-Token-Link" port:443http.title:"shipyard" HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5664http.title:"TIBCO Jaspersoft:" port:"443" "1970""Confluence"http.title:"SonarQube"html:"jmx?qry=Hadoop:*"http.title:"Directory Listing"http.title:"H-SPHERE"http.title:"Swagger UI - "Server: Apache-Coyote/1.1 Tomcat-5.5"port:2375 product:"Docker"http.title:"phpinfo()"http.title:"ID_VC_Welcome""x-powered-by" "jboss"jboss http.favicon.hash:-656811182http.title:"Welcome to JBoss"port:"8089, 8000" "splunkd"http.favicon.hash:-316785925title:"splunkd" org:"Amazon.com"http.title:"oracle business intelligence sign in"http.title:"Oracle WebLogic Server Administration Console"http.title:"Apache Status"I will add more soon. . .

___________________________
@hacking_Attack
@Hacking_Video

Download Karma_V2 (https://github.com/Dheerajmadhukar/karma_v2)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Network Enumeration — SMB tricks

https://cdn-images-1.medium.com/max/633/1*b_XV-RWqnl0xYrhnM4FU4A.png
Nmap is an amazing tool to enumerate all open ports on the machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beware, fraudsters hacking iOS devices via Tinder and Bumble

https://cdn-images-1.medium.com/max/1462/1*rJVbU04aeZxhmeJMUjYTnw.png
Fraudsters have not only stolen millions of money but have also gained access to victims’ iPhones via Tinder and Bumble.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video