Kali Linux Tutorials
Karma_V2 : A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
LazyCSRF : A More Useful CSRF PoC Generator

___________________________
@hacking_Attack
@Hacking_Video

n the subnet(i.e., Can ping all the host in the subnet)
* userdef: Create only the hosts specified in the hosts configuration.

* storage: Specify the storage used for log collection, support sqlite, mysql, elasticsearch. e.g.
* sqlite3:logs.db
* mysql://user:password@tcp(127.0.0.1:3306)/logs
* es://http://username:password@127.0.0.1:9200 (currently only supports Elasticsearch 7.x)

* geo_db: MaxMind geoip2 database file path, used to generate ip geographic location information. if you use Elasticsearch storage, never need this field, it will be automatically generated using the geoip processor of Elasticsearch.
* hostname: Specify the host field in the log.
* use_logq: Use local disk message queue to save logs, and then send it to remote mysql or Elasticsearch to prevent remote log loss.
* cert_name: Common name of the generated certificate.
* syn_dev: Specify the network interface used to capture tcp syn packets. If it is empty, the tcp syn packet will not be recorded. On windows, the device name is like “\Device\NPF_{xxxx-xxxx}”.
* udp_dev: Same as syn_dev, but for udp packet.
* icmp_dev: Same as syn_dev, but for icmp ping packet.
* exclusions: Exclude remote ips from logs.
* hosts: Each item is a host configuration.
* handlers: Service configuration, the service configured on the host, each item is a service configuration.
* handler: Service name (i.e., protocol name)
* params: Set the parameters supported by the service. Example

Create a virtual network, The subnet is 172.16.0.0/24, include 2 hosts,

172.16.0.3 run dns, ssh service,

and 172.16.0.5 run rpc, rdp service,

protocol access logs are saved to elasticsearch, exclude the access log of 127.0.0.1 and 8.8.8.8.

{
“version”: “0.40”,
“network”: “172.16.0.0/24”,
“network_build”: “userdef”,
“storage”: “es://http://127.0.0.1:9200”,
“use_logq”: true,
“cert_name”: “unknown”,
“syn_dev”: “any”,
“udp_dev”: “any”,
“icmp_dev”: “any”,
“exclusions”: [“127.0.0.1”, “8.8.8.8”],
“geo_db”: “”,
“hosts”: [
{
“ip”: “172.16.0.3”,
“handlers”: [
{
“handler”: “dns”,
“port”: 53,
“params”: {
“accounts”: [
“admin:123456”
],
“appname”: “domain”
}
},
{
“handler”: “ssh”,
“port”: 22,
“params”: {
“accounts”: [
“root:5555555:/root:0”
],
“prompt”: “$ “,
“server_version”: “SSH-2.0-OpenSSH_7.4”
}
}
]
},
{
“ip”: “172.16.0.5”,
“handlers”: [
{
“handler”: “dcerpc”,
“port”: 135,
“params”: {
“accounts”: [
“administrator:123456”
],
“domain_name”: “DESKTOP-Q1Test”
}
},
{
“handler”: “rdp”,
“port”: 3389,
“params”: {
“accounts”: [
“administrator:123456”
],
“auth”: false,
“domain_name”: “DESKTOP-Q1Test”,
“image”: “rdp.jpg”,
“sec_layer”: “auto”
}
}
]
}
]
}

Automatically generate service configuration

Use the ipclone.py script in Scripts, You can clone the ip service configuration from fofa to quickly generate the service configuration of the real machine.

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/h9JJHqoYMu-EJEqYd1-tmoDU5mi9SeSqoojAQjr0Otw.jpg ​

https://preview.redd.it/ui2o540fcew71.png?width=674&format=png&auto=webp&s=b1068462255cf7f4a35633748cf4928ad3678900

submitted by /u/abderhmanhaji
[link] [comments]

hacking: security in practice
Why are MacBooks so popular among hackers when they are considered "bad and overpriced"?

Don't get me wrong, there are probably a lot of people who don't use MacBooks but I've seen a surprising high amount of them. I guess they're not horrible but from what I've heard they're overpriced and offer pretty bad performance.

I'm not good at computers nor hacking but I want to learn and was thinking if MacBooks are a good idea. I can buy used once to save money. Cheers

submitted by /u/large_red_apple
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the best free site for text documentation?

Im new to this, i only knew some basic network theory and some basic linux. I want to learn more about the methods of hacking/pen testing/etc and i prefer to read a documentation rather than watch a video. If you can give me some sites with good content , i am grateful.

submitted by /u/davvboos
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any good tricks for msfvenom payloads?

I’m working on a x64 msfvenom windows payload and in the past I’ve had good luck with avoiding Antivirus software using a Golang shellcode loader, but for this project I want the best possible results so do you lads have any good tricks for msfvenom payloads? I plan to add the delay feature and maybe a few more tricks, any thoughts?

submitted by /u/_Lukisha_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
using Hashcat on the cloud

using hashcat would it be practical to crack an 8 digit uppercase letter and digit only, wpa2 password on the cloud. using 4 rtx 6000 cards.

submitted by /u/gregt0799
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Xcode

Is there a workaround to run xcode and do builds for iOS apps on Linux?

I didn't do ios development for many years. My Mac just sat there. Now it's unsupported on xcode and I don't want to buy a Mac just for builds. There has to be a workaround. Ive been a debian user for the past 2 decades and I'd like to keep it that way.

I need to be able to build swift / react native apps using local machine (no cloud build solutions / expo)

I'd love to hear from you!

submitted by /u/DirectionNo420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CONFIGURAÇÃO DO AMBIENTE E INTERCEPTAÇÃO DE TRÁFEGO. 3

https://cdn-images-1.medium.com/max/1920/1*uvfSJ_7D4vj7lCG-Kmom4w.png
Você vai economizar muito tempo e dor de cabeça se procurar Falhas em um local bem configurado, como um laboratório. Neste Texto, vou…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Getting Started With Cyber Security & Ethical Hacking

https://cdn-images-1.medium.com/max/1920/0*qIQWwsLSL2-pE5Hd
Why Cybersecurity? In the current scenario, where everything has shifted to internet, so is the crime that has also upgraded…..

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Footprinting and Reconnaissance

https://cdn-images-1.medium.com/max/1920/0*7T_YjdSnACBdSu-9
Footprinting is the first step a hacker does before hacking. In this step the hacker tries to gain information regarding the victim or…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I was able to access a properly Configured S3 Bucket

https://cdn-images-1.medium.com/max/600/1*6bWo-VdVMac1FtUOkMCI-w.png
Hello All

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Footprinting and Reconnaissance using Windows OS

https://cdn-images-1.medium.com/max/1920/0*4yXf6NHSJJQVbiwT
This blog is in continuation previous blog on footprinting and reconnaissance. Previously you understood how to do footprinting with the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video