Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66.1K photos
15 videos
157 files
133K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Having trouble understanding WEP cracking and Initialization vectors

Hi guys, I'm going through a course on EH and came across WEP cracking, but can't grasp the theory behind it, particularly regarding Initialization vectors.

They explain that an IV is appended to the key which becomes a keystream that is used to encrpyt the data, and then go on to state that having multiple of the same IVs after collecting thousands of packets, we can go on to decrypt the data within.

My questions are:

1) How does an IV secure the key used to create the keystream? Or rather, why does adding a random value to the key make it harder to decrypt? How would we decrypt the key without the IV in the first place?

2) Why would having multiple IVs help us? If the key stream is just (IV + Key), what's the difference if we get two of the same ones?

Answers are appreicated, thanks for taking the time to read this :)

submitted by /u/Craedyth
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
How many brute force attempts could an average computer nowadays try in an hour?

How many attempts could a modern computer attempt? I'm not sure how I could calculate or figure this out and I cant find any data online. Does anyone here know with a source if you could?

Edit: pretend that the only limiting factor was the capabilities of an average computer

submitted by /u/SewgMan
[link] [comments]
hacking: security in practice
Hacking Forums (Are they legal?)

Okay, I'm just honestly curious. How are all of the hacking/doxing/cracking forums staying up? Like nulled, raid, etc. They post some illegal things on the clear web. What protects them? This intrigued me once I really started thinking abt it. Does anyone know?

Because some of them, people are selling fraud services, but also so was the silk road. What is protecting these clear-web sites, like how are they still up?

Sorry i got high and went on a rabbit hole

submitted by /u/Numbtuna
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Chaos ransomware targets gamers via fake Minecraft alt lists

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Chaos ransomware targets gamers via fake Minecraft alt listsPost Views: 107
Reading Time: 1 Minute
The Chaos Ransomware gang encrypts gamers’ Windows devices through fake Minecraft alt lists promoted on gaming forums.
Minecraft is a massively popular sandbox video game currently played by over 140 million people, and according to Nintendo sales numbers, it’s a top-seller title in Japan. Masked as an ‘alt list’ text fileAccording to researchers at FortiGuard, a recently discovered variant of the Chaos ransomware is being tentatively distributed in Japan, encrypting the files of Minecraft players and dropping ransom notes.

The lure used by the threat actors are ‘alt list’ text files that supposedly contain stolen Minecraft account credentials, but in reality, is Chaos ransomware executable.

Minecraft players who want to troll or grief other players without the risk of their accounts being banned will sometimes use ‘alt’ lists to find stolen accounts that they can use for bannable offenses.
See Also: Complete Offensive Security and Ethical Hacking Course
Due to their popularity, alt lists are always in demand and are commonly shared for free or through automated account generators that supply the community with “spare” accounts.
https://www.bleepstatic.com/images/news/u/1220909/ransomware/image%20(2).png
<figcaptionAlt list txt offered for free download The Chaos RansomwareWhen encrypting victims, the Chaos ransomware will append four random characters or digits as the extension to encrypted files.

The ransomware will also drop a ransom note named ‘ReadMe.txt,’ where the threat actors demand 2,000 yen (~$17.56) in pre-paid cards.
https://www.bleepstatic.com/images/news/u/1220909/ransomware/ransom.png
<figcaptionRansom note dropped by Chaos actors
Source: FortiGuard
See Also: All Windows versions impacted by new LPE zero-day vulnerability A destructive infectionThis particular variant of the Chaos Ransomware is configured to search the infected systems for different file types smaller than 2ΜΒ and encrypts them.

However, if the file is larger than 2MB is will inject random bytes into the files, making them unrecoverable even if a ransom is paid.

Due to the destructive nature of the attack, those who pay the ransom can only recover smaller files.

The reason for this functionality is unclear, and it could be caused by poor coding, incorrect configuration, or to damage gamers’ files purposely.

In this particular campaign, the threat actors are promoting text files to create a false sense of security while swapping them out in the end with executables.
See Also: Offensive Security Tool: ZipExec Users should be suspicious of and not execute any files they download from the Internet unless they trust the site and have scanned it with a tool like VirusTotal.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/microsoft-zero-day-vulnerabilities-800x358-1-90x90.png All Windows versions impacted by new LPE zero-day vulnerability3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/social_preview-scaled-90x90.jpg Sensitive data of 400,000 German students exposed by API flaw4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/hacked-90x90.jpg Brutal WordPress plugin bug allows subscribers to wipe sites5 [...]