hacking: security in practice
WiFi Password Then What?

Hello everyone,

I see a lot of "tutorials" talking about how to "crack" a WiFi password. But what if someone can actually crack someone's password? What will they be available to do? Illegal downloading, of course, but my question is more "hacking" oriented.

* Is it possible for them to mitm and see my passwords/cookies, one way or another?
* Redirect my traffic to a website they own?
* ...?

I do find a lot of question about the WiFi password but not much about what they can do next.

Regards.

submitted by /u/Herostere_
[link] [comments]

KitPloit - PenTest Tools!
ChopChop - ChopChop Is A CLI To Help Developers Scanning Endpoints And Identifying Exposition Of Sensitive Services/Files/Folders

https://blogger.googleusercontent.com/img/a/AVvXsEi6v7StxBr88UBmWNlKt3oLKHxqIbMH-2TyCZRyIJd-NraXIhK8mvn7kuC-OIBedmFOSDrmlA5p7Co11F4tu-67v49oD8kngM4ZmjuSPYxJ4TMpHmQerRKqroLHqrSPtRrUNSO2SBLcqfD1aPYwa4ri91EqcSj-6VD615mgl1mwLQNOrM6TFUhD8__cRw=w400-h324 ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT.

Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config file (by default: chopchop.yml), fully configurable, and especially by developers. https://blogger.googleusercontent.com/img/a/AVvXsEg8HBszmSVrJrfezZ5fnpgGXhHFKgvrzXB-MVmAbvA2vAVFADhuTaD_Jcy9VqPrvHY3netwy14oe_GL_jBAfBxY18VoqDbqUypNRxrBRnM2-iImxaGgME6gKhkTgnAXgMMAN3B_DxoYxcj0_ZpgRBpL_nxvDy1zSDo6_HQSqCFFzZUbF_1-hRPQ2TLfgA=w640-h432 "Chop chop" is a phrase rooted in Cantonese. "Chop chop" means "hurry" and suggests that something should be done now and without delay. BuildingWe tried to make the build process painless and hopefully, it should be as easy as: $ go mod download
$ go build .There should be a resulting gochopchopbinary in the folder. Using DockerThanks to Github Container Registry, we are able to provide you some freshly-build Docker images! docker run ghcr.io/michelin/gochopchop scan https://foobar.com -v debug But if you prefer, you can also build it locally, see below: Build locallydocker build -t gochopchop .UsageWe are continuously trying to make goChopChopas easy as possible. Scanning a host with this utility is as simple as : $ ./gochopchop scan https://foobar.comUsing Dockerdocker run gochopchop scan https://foobar.comCustom configuration filedocker run -v ./:/app chopchop scan -c /app/chopchop.yml https://foobar.comWhat's nextThe Golang rewrite took place a couple of months ago but there's so much to do, still. Here are some features we are planning to integrate : [x] Threading for better performance [x] Ability to specify the number of concurrent threads [x] Colors and better formatting [x] Ability to filter checks/signatures to search for [x] Mock and unit tests [x] Github CI And much more! TestingTo quickly end-to-end test chopchop, we provided a web-server in tests/server.go. To try it, please run go run tests/server.gothen run chopchop with the following command ./gochopchop scan http://localhost:8000 --verbosity Debug. ChopChop should print "no vulnerabilities found".

There are also unit test that you can launch with go test -v ./.... These tests are integrated in the github CI workflow. Available flagsYou can find the available flags available for the scancommand :
FlagFull flagDescription-h--helpHelp wizard-v--verbosityVerbose level of logging-c--signaturePath of custom signature file-k--insecureDisable SSL Verification-u--url-filePath to a specified file containing urls to test-b--max-severityBlock the CI pipeline if severity is over or equal specified flag-e--exportExport type of the output (csv and/or json)--export-filenameSpecify the filename for the export file(s)-t--timeoutTimeout for the HTTP requests--severity-filterFilter Plugins by severity--plugin-filterFilter Plugins by name of plugin--threadsNumber of con[...]

Metasploit Introduction | TryHackMe
https://sudozain.medium.com/metasploit-introduction-tryhackme-9db608546381?source=rss------bug_bounty-5

Welcome Again ! In this write-up we will discuss introduction to the main components of the Metasploit Framework. This room provided on…Continue reading on Medium » (https://sudozain.medium.com/metasploit-introduction-tryhackme-9db608546381?source=rss------bug_bounty-5)

Hacking on Medium
Top 10 Best Exploitation Tools in Termux 2021 — Ak Turmux

Cmseek Tool Installation Commands:-

Continue reading on Medium »

Hacking on Medium
How to install parrot os on android without root | Parrot OS in Termux

What is Termux?

Continue reading on Medium »

Hacking on Medium
Content Discovery TryHackMe

Welcome Again ! This walkthrough is about a video solving Content Discovery room on tryhackme and we made it on our youtube channel …

Continue reading on Medium »

Hacking on Medium
Metasploit Introduction | TryHackMe

https://cdn-images-1.medium.com/max/1280/1*YVstsKiC69Zsm3n5_Zo-YQ.jpeg
Welcome Again ! In this write-up we will discuss introduction to the main components of the Metasploit Framework. This room provided on…

Continue reading on Medium »

Hacking on Medium
swap.kiwi audit result ✅

https://cdn-images-1.medium.com/max/2600/0*Se3d_Tb-zpcrfGaV
Trust is hard to gain and easy to lose. It is the foundation swap.kiwi is built on. We ask you trust us. To help you in doing so we are…

Continue reading on Medium »

Hacking on Medium
Overview — The Art of Invisibility: The World’s Most Famous Hacker Teaches You How to Be Safe in…

https://cdn-images-1.medium.com/max/2600/0*Os7Rr7UQu983ZSxr
The Art of Invisibility is a book written by Kevin D. Mitnick. The book provides strategies for defending yourself against data gathering…

Continue reading on Medium »

hacking: security in practice
Ethically beginning research on a particular site

I'm new to hacking, but even I know that there's probably something wrong with this one site I use. I'm not going to mention the exact organization for obvious reasons.

Basic recon (reading http headers) reveals they're using a pretty old version of server software, with plenty of potential RCE opportunities. I'm worried they're not keeping it updated, especially since they have my credit card information on their servers.

I want to start doing research on their behalf so my info doesn't get stolen. In short, I want to see if I can start hacking on the site. Naturally, I'd only try to access admin and my own account.

But I'm stuck even before that, because I want to notify them before I try. Suppose I just make attempts without informing them what's going on. They'll come to learn that a customer is trying to maliciously steal info, and legally I'd be dead to rights.

They're not sophisticated. I can't expect a bug bounty program. And I can't expect a warm reception if I just email them saying, "hey I wanna hack u but im a good guy lol".

What do?

submitted by /u/CavemanKnuckles
[link] [comments]

Account Takeover! Which companies don't accept

Hello everyone! 🎉Continue reading on Medium »
Read more...