Hacking on Medium
BORN2ROOT —  Offensive Security

https://cdn-images-1.medium.com/max/896/1*5bvKh9L8r7dM3P2_cek8rA.png
Offensive Security Proving Ground Complete Write-up

Continue reading on Medium »

Hacking on Medium
Hacking Android Remotely (WAN) using Kali Linux | Android Hacking using Metasploit-Framework

https://cdn-images-1.medium.com/max/600/1*UZ-jgU23wvCW8hixEp3bcg.png
we use msfvenom to create the payload and save it as an .apk file. After creating the payload, we need to configure a monitor for the…

Continue reading on Medium »

Hacking on Medium
Brute-force da chave. continuação do texto 0.9

Também pode ser possível adivinhar por Brute-force, a chave usada para assinar um JWT.
O invasor tem muitas informações para começar: o…

Continue reading on Medium »

Clash - A Rule-Based Tunnel In Go

Clash A rule-based tunnel in Go.Features Local HTTP/HTTPS/SOCKS server with authentication support VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP. Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency Remote providers, allowing users to get node lists remotely instead of hardcoding in config Netfilter TCP redirecting. Deploy Clash on your Internet gateway with iptables. Comprehensive HTTP RESTful API controller Premium Features TUN mode on macOS, Linux and Windows. Doc Match your tunnel by Script Rule Provider Getting Started Documentations are now moved to GitHub Wiki. Premium Release Release Development If you want to build an application that uses clash as a library, check out the the GitHub Wiki Credits riobard/go-shadowsocks2 v2ray/v2ray-core WireGuard/wireguard-go License This software is released under the GPL-3.0 license. Download Clash
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Clash - A Rule-Based Tunnel In Go
http://www.kitploit.com/2021/10/clash-rule-based-tunnel-in-go.html

___________________________
@hacking_Attack
@Hacking_Video

Clash
A rule-based tunnel in Go.
Features
Local HTTP/HTTPS/SOCKS server with authentication (https://www.kitploit.com/search/label/Authentication) support VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP. Rules based off domains, GEOIP, IPCIDR or Process to forward packets (https://www.kitploit.com/search/label/Packets) to different nodes Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing (https://www.kitploit.com/search/label/Load%20Balancing) or auto select node based off latency Remote providers, allowing users to get node lists remotely instead of hardcoding in config Netfilter TCP redirecting. Deploy Clash on your Internet gateway (https://www.kitploit.com/search/label/Gateway) with iptables. Comprehensive HTTP RESTful API controller
Premium Features
TUN mode on macOS, Linux and Windows. Doc (https://github.com/Dreamacro/clash/wiki/premium-core-features#tun-device) Match your tunnel by Script (https://github.com/Dreamacro/clash/wiki/premium-core-features#script) Rule Provider (https://github.com/Dreamacro/clash/wiki/premium-core-features#rule-providers)
Getting Started
Documentations are now moved to GitHub Wiki (https://github.com/Dreamacro/clash/wiki).
Premium Release
Release (https://github.com/Dreamacro/clash/releases/tag/premium)
Development
If you want to build an application that uses clash as a library, check out the the GitHub Wiki (https://github.com/Dreamacro/clash/wiki/use-clash-as-a-library)
Credits
riobard/go-shadowsocks2 (https://github.com/riobard/go-shadowsocks2) v2ray/v2ray-core (https://github.com/v2ray/v2ray-core) WireGuard/wireguard-go (https://github.com/WireGuard/wireguard-go)
License
This software is released under the GPL-3.0 license.

___________________________
@hacking_Attack
@Hacking_Video

Download Clash (https://github.com/Dreamacro/clash)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Clash - A Rule-Based Tunnel In Go

http://2.bp.blogspot.com/-cEWMiock5qs/YXMEaqh6Y5I/AAAAAAAAwo0/5QgP0MjvOFsfNQai7sa7RwhNJxRV0JdwACK4BGAYYCw/s320/clash_1_logo-709985.png
Clash


A rule-based tunnel in Go.
Features

* Local HTTP/HTTPS/SOCKS server with authentication support
* VMess, Shadowsocks, Trojan, Snell protocol support for remote connections
* Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP.
* Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes
* Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency
* Remote providers, allowing users to get node lists remotely instead of hardcoding in config
* Netfilter TCP redirecting. Deploy Clash on your Internet gateway with iptables.
* Comprehensive HTTP RESTful API controller

Premium Features

* TUN mode on macOS, Linux and Windows. Doc
* Match your tunnel by Script
* Rule Provider

Getting Started

Documentations are now moved to GitHub Wiki.

Premium Release

Release

Development

If you want to build an application that uses clash as a library, check out the the GitHub Wiki

Credits

* riobard/go-shadowsocks2
* v2ray/v2ray-core
* WireGuard/wireguard-go

License

This software is released under the GPL-3.0 license.

https://camo.githubusercontent.com/03945189d34d536d58cf302b42e8897ee6d2b80af0111d990bf23b7081f3a385/68747470733a2f2f6170702e666f7373612e696f2f6170692f70726f6a656374732f6769742532426769746875622e636f6d253246447265616d6163726f253246636c6173682e7376673f747970653d6c61726765
Download Clash

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Read Between the Lines: Finding Flaws in EPUB Reading Systems

Security researchers who analyzed 97 free EPUB reading applications found half are not compliant with security recommendations.

Dark Reading: Attacks/Breaches
QR Codes Help Attackers Sneak Emails Past Security Controls

A recently discovered campaign shows how attackers are constantly developing new techniques to deceive phishing victims.

Dark Reading: Attacks/Breaches
Defenders Worry Orgs Are More Vulnerable Than Last Year

Most IT and security leaders are confident their cybersecurity strategy is on the right track, but they still believe their organizations are as vulnerable as they were a year ago.

hacking: security in practice
Rootkit development

Hello everyone! I hope all of you are doing well.

I'm looking for any advice on how to start to build a PoC Rootkit that first infects an OS and stays "alive" inside a Linux Live USB OS. Nothing special, just creating a file there or something else.

I've found some articles about exploiting the ACPI tables to do it, but didn't find a deeper approach on how to build the rootkit. The same goes for UEFI rootkits, PCI, etc.

I'm looking for anything that can help me to build my own, it's just a Proof of concept, so it doesn't need to evade things like Secure Boot or other security measures.

Any help is appreciated!

EDIT: added ACPI article link

submitted by /u/Lucisu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My Grandmother is Hacking Me 🤔👵💻

Everytime I’m at her house my phone shuts off and starts beeping. I try to turn it back on and the recorder app is popping up on my phone. When I’m browsing webpages ssl errors pop up and different webpages appear from the ones I type. Everytime this happens she is missing on her laptop. How does this happen?

submitted by /u/Illustrious_Law_9381
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How can I make $100 online daily without investment.

There are so many ways you can earn $100 in a day with zero investment.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video