Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Networkit : A Growing Open-Source Toolkit For Large-Scale Network Analysis NetworKit is an open-source tool suite for high-performance network analysis. Its aim is to provide tools for the analysis of large networks in the size range…
ced,pc,turbo) detected communities in 0.14577102661132812 [s]
solution properties:
communities 4536
min community size 1
max community size 2790
avg. community size 22.0459
modularity 0.987243
——————- ———–

Install the C++ Core only

In case you only want to work with NetworKit’s C++ core, you can either install it via package managers or build it from source. Install C++ core via package manager conda (channel conda-forge)

conda config –add channels conda-forge
conda install libnetworkit [-c conda-forge]

brew

brew install libnetworkit

spack

spack install libnetworkit

Building the C++ core from source

We recommend CMake and your preferred build system for building the C++ part of NetworKit.

The following description shows how to use CMake in order to build the C++ Core only:

First you have to create and change to a build directory: (in this case named build)

mkdir build
cd build

Then call CMake to generate files for the makebuild system, specifying the directory of the root CMakeLists.txtfile (e.g., ..). After this makeis called to start the build process:

cmake ..
make -jX

o speed up the compilation with make a multi-core machine, you can append -jXwhere X denotes the number of threads to compile with. Use NetworKit as a library

This paragraph explains how to use the NetworKit core C++ library in case it has been built from source. For how to use it when installed via package managers, best refer to the official documentation (brew, conda, spack).

In order to use the previous compiled networkit library, you need to have it installed, and link it while compiling your project. Use these instructions to compile and install NetworKit in /usr/local:

cmake ..
make -jX install

Once NetworKit has been installed, you can use include directives in your C++-application as follows:

# include

You can compile your source as follows:

g++ my_file.cpp -lnetworkit

Unit Tests

Building and running NetworKit unit tests is not mandatory. However, as a developer you might want to write and run unit tests for your code, or if you experience any issues with NetworKit, you might want to check if NetworKit runs properly. The unit tests can only be run from a clone or copy of the repository and not from a pip installation. In order to run the unit tests, you need to compile them first. This is done by setting the CMake NETWORKI_BUILD_TESTSflag to ON:

cmake -DNETWORKIT_BUILD_TESTS=ON ..

Unit tests are implemented using GTest macros such as TEST_F(CentralityGTest, testBetweennessCentrality). Single tests can be executed with:

./networkit_tests –gtest_filter=CentralityGTest.testBetweennessCentrality

Additionally, one can specify the level of the logs outputs by adding --loglevel ; supported log levels are: TRACE, DEBUG, INFO, WARN, ERROR, and FATAL.

Compiling with address/leak sanitizers

Sanitizers are great tools to debug your code. NetworKit provides additional Cmake flags to enable address, leak, and undefined behavior sanitizers. To compile your code with sanitizers, set the CMake NETWORKIT_WITH_SANITIZERSto either addressor leak:

cmake -DNETWORKIT_WITH_SANITIZERS=leak ..

By setting this flag to address, your code will be compiled with the addressand the undefinedsanitizers. Setting it to leakalso adds the leaksanitizer. Download

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
* Used in conjunction with other passive web vulnerability scannersFirst, start a passive scanner and set the listening address to: http://127.0.0.1:1234/Next, assuming crawlergo is on the same machine as the scanner, start crawlergo and set the parameters:…
y for path fuzzing. (Default: false)
* --fuzz-path-dictCustomize the Fuzz path by passing in a dictionary file path, e.g. /home/user/fuzz_dir.txt, each line of the file represents a path to be fuzzed. (Default: null)
* --robots-pathResolve the path from the /robots.txt file. (Default: false) Form auto-fill

* --ignore-url-keywords, -iukURL keyword that you don’t want to visit, generally used to exclude logout links when customizing cookies. Usage: -iuk logout -iuk exit. (default: “logout”, “quit”, “exit”)
* --form-values, -fvCustomize the value of the form fill, set by text type. Support definition types: default, mail, code, phone, username, password, qq, id_card, url, date and number. Text types are identified by the four attribute value keywords id, name, class, typeof the input box label. For example, define the mailbox input box to be automatically filled with A and the password input box to be automatically filled with B, -fv mail=A -fv password=B.Where default represents the fill value when the text type is not recognized, as “Cralwergo”. (Default: Cralwergo)
* --form-keyword-values, -fkvCustomize the value of the form fill, set by keyword fuzzy match. The keyword matches the four attribute values of id, name, class, typeof the input box label. For example, fuzzy match the pass keyword to fill 123456 and the user keyword to fill admin, -fkv user=admin -fkv pass=123456. (Default: Cralwergo) Advanced settings for the crawling process

* --incognito-context, -iBrowser start incognito mode. (Default: true)
* --max-tab-count Number, -t NumberThe maximum number of tabs the crawler can open at the same time. (Default: 8)
* --tab-run-timeout TimeoutMaximum runtime for a single tab page. (Default: 20s)
* --wait-dom-content-loaded-timeout TimeoutThe maximum timeout to wait for the page to finish loading. (Default: 5s)
* --event-trigger-interval IntervalThe interval when the event is triggered automatically, generally used in the case of slow target network and DOM update conflicts that lead to URL miss capture. (Default: 100ms)
* --event-trigger-mode ValueDOM event auto-triggered mode, with asyncand sync, for URL miss-catching caused by DOM update conflicts. (Default: async)
* --before-exit-delayDelay exit to close chrome at the end of a single tab task. Used to wait for partial DOM updates and XHR requests to be captured. (Default: 1s) Other

* --push-to-proxyThe listener address of the crawler result to be received, usually the listener address of the passive scanner. (Default: null)
* --push-pool-maxThe maximum number of concurrency when sending crawler results to the listening address. (Default: 10)
* --log-levelLogging levels, debug, info, warn, error and fatal. (Default: info)
* --no-headlessTurn off chrome headless mode to visualize the crawling process. (Default: false) Download

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Is it possible to ‘hijack’ someone else’s public IP address?

Like a lot of IT departments, the company I work for has an allow list of IP addresses to control who can access certain resources in our infrastructure. But how possible is it for an attacker to get their computer to assume one of those IP addresses and get access to all the stuff we’ve put that access control in for?

submitted by /u/jjsmyth1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Forensic investigation assignment

I have a school project assignment to research and demonstrate forensic investigation on digital devices. Use of Autopsy software is not allowed

I have been thinking of a demonstration by infecting an android VM with "pegasus spyware" and using "Mobile Verification Toolkit" by mvt project

I have been trying to look for a way to either acquire pegasus or something similar but unable to find any.

would any experts here guide me a bit for this task or point me in the right direction ? thanks!

submitted by /u/banana-cognac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Are public IPs really useful to be exploited?

I find that the only thing that I can do with IPs are looking them up and using the online locator but those are incredibly inaccurate so I’ve been wondering if they really can be used for anything (idk if this sounds stupid but i just got into this and I’m curious)

submitted by /u/Armweak5104
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Suggestions on subreddits for finding groups?

I've always been into finding an easy way to unlock stuff in games, and with time I've found there are dedicated trainers to almost all games,

I used to play games like that but now I want to make those cheats my self,

The problem is I can't find any dedicated subreddits for this stuff, so can anyone suggest place where i can get my hands dirty?

Subreddits, discords, websites anything goes.

I've tried unknown cheats but the interaction is pretty minimal, so i want something where i can interact with the veterans in this side of programming.

submitted by /u/Zapismeta
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Backdoor.Win32.Hupigon.acio Unquoted Service Path

https://4.bp.blogspot.com/-OTiSJPLOhfQ/WWlvdFudhmI/AAAAAAAAIPg/Ji3s4Viv0XwGl76TD9pbO-WowW5kHfgewCLcBGAs/s1600/h78.png
Backdoor.Win32.Hupigon.acio malware suffers from an unquoted service path vulnerability.

MD5 | e6adc2a82544b7f24f2b3ccf022fa695

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/21f324a6a62d8125bc83b8d1865e17f9.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Hupigon.acio
Vulnerability: Insecure Service Path
Description: The malware creates a service with an unquoted path. Third party attackers who can place an arbitrary executable under c:\ drive can potentially undermine the integrity of the malware by having it run theirs instead with SYSTEM privs.
Type: PE32
MD5: 21f324a6a62d8125bc83b8d1865e17f9
Vuln ID: MVID-2021-0372
Dropped files: IEload.exe
Disclosure: 10/27/2021
Exploit/PoC:
C:\>sc qc "Win32Help"
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: Win32Help
TYPE : 110 WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 0 IGNORE
BINARY_PATH_NAME : C:\Program Files (x86)\Internet Explorer\Connection Wizard\IEload.exe
LOAD_ORDER_GROUP :
TAG : 0
DISPLAY_NAME : Windows Help Client
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
Trojan.Win32.Akl.bc Insecure Permissions

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
Trojan.Win32.Akl.bc malware suffers from an insecure permissions vulnerability.

MD5 | 740eb0c39314c0c8686e809a5be79850

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/0b2a0f61a209e24a7d7b2c2d5efb4d68.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Akl.bc
Vulnerability: Insecure Permissions
Description: The malware creates an dir named "LMPITF" with insecure permissions under Windows\SysWOW64 granting full (F) permissions to the Everyone user group. Standard users can rename the executable dropped by the malware to disable it or replace it with their own executable. Then wait for a privileged user to logon to the infected machine to potentially escalate privileges.
Type: PE32
MD5: 0b2a0f61a209e24a7d7b2c2d5efb4d68
Vuln ID: MVID-2021-0370
Dropped files: AKV.exe, QPM.exe
Disclosure: 10/27/2021

Exploit/PoC:
C:\>cacls C:\Windows\SysWOW64\LMPITF
C:\Windows\SysWOW64\LMPITF Everyone:F
Everyone:(OI)(CI)(IO)F

C:\>dir C:\Windows\SysWOW64\LMPITF
Volume in drive C has no label.

Directory of C:\Windows\SysWOW64\LMPITF

10/16/2021 10:31 PM 467,456 AKV.exe
10/16/2021 10:31 PM 62,464 QPM.001
10/16/2021 10:31 PM 44,032 QPM.002
10/16/2021 10:31 PM 1,602 QPM.004
10/16/2021 10:31 PM 1,544,192 QPM.exe
5 File(s) 2,119,746 bytes
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video