Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium » (https://bhansalipratish.medium.com/2fa-bypass-methodologies-25504dda13dd?source=rss------bug_bounty-5)
hacking: security in practice
Did I get hacked just by watching a youtube livestream??
I may be overreacting, but I was watching a livestream of a man playing Don't Starve Together when my mother texted me to ask if I wanted any food from Wendy's. Just then in the live chat someone said "oh nice Wendy's, can I get a coke and some nuggets?"
Did they somehow read my text message??? Is this even possible? No one mentioned Wendy's in the livestream so I'm pretty freaked out
submitted by /u/birdlady404
[link] [comments]
Did I get hacked just by watching a youtube livestream??
I may be overreacting, but I was watching a livestream of a man playing Don't Starve Together when my mother texted me to ask if I wanted any food from Wendy's. Just then in the live chat someone said "oh nice Wendy's, can I get a coke and some nuggets?"
Did they somehow read my text message??? Is this even possible? No one mentioned Wendy's in the livestream so I'm pretty freaked out
submitted by /u/birdlady404
[link] [comments]
reddit
Did I get hacked just by watching a youtube livestream??
I may be overreacting, but I was watching a livestream of a man playing Don't Starve Together when my mother texted me to ask if I wanted any food...
hacking: security in practice
What can I do on my schools private wifi?
So I got access to the teacher wifi. I found out that I can control the school speakers via Chromecast. What more do you think I can exploit? Do you think I can change the wifi name to prank my school more?
submitted by /u/alekstherussian
[link] [comments]
What can I do on my schools private wifi?
So I got access to the teacher wifi. I found out that I can control the school speakers via Chromecast. What more do you think I can exploit? Do you think I can change the wifi name to prank my school more?
submitted by /u/alekstherussian
[link] [comments]
reddit
What can I do on my schools private wifi?
So I got access to the teacher wifi. I found out that I can control the school speakers via Chromecast. What more do you think I can exploit? Do...
hacking: security in practice
How to MITM with Android Hotspot (WiFi Sharing) ?
As I mentioned in the title, there are some beginner apps like zAnti and some other, those are working well but they only work if you are connected to a vulnerable wifi network. I want to know if it is possible to create an access point via setting up a mobile hotspot and then doing the mitm attacks on it ? I'm a beginner but if I create the access point, shouldn't it be easier to modify the packets those others are interacting with ?
submitted by /u/cuccolboi
[link] [comments]
How to MITM with Android Hotspot (WiFi Sharing) ?
As I mentioned in the title, there are some beginner apps like zAnti and some other, those are working well but they only work if you are connected to a vulnerable wifi network. I want to know if it is possible to create an access point via setting up a mobile hotspot and then doing the mitm attacks on it ? I'm a beginner but if I create the access point, shouldn't it be easier to modify the packets those others are interacting with ?
submitted by /u/cuccolboi
[link] [comments]
reddit
How to MITM with Android Hotspot (WiFi Sharing) ?
As I mentioned in the title, there are some beginner apps like zAnti and some other, those are working well but they only work if you are...
hacking: security in practice
A friend of mine is hacked; what can we do?
Hi,
Let's dive into the story, I sincerely hope that I can get some advice on what to do next. So a friend of mine, he and his family, are getting constantly harassed by someone unknown. It seems that at least one of their devices is hacked, considering the hacker is able to tell whenever they get notifications on their phones and is able to extract personal data (Photo's, phone calls etc.) from their phones. I have told them to reset their phones, wipe everything off and go from there - but I am not entirely sure if that will seal the deal.
What we know is that the hacker utilizes Linux kali, and has access to personal data on several devices, ranging from iPhone to Samsung devices. He is able to tell anything that they do on their phones and is able to see notifications. Additionally, it seems that he infected the network as well considering he could tell whenever a phone was not connected to the network. He has a wide array of information, therefore it seems that he is well equipped.
I am not entirely sure what to do and the authorities are aware of the situation, however, they will not really do anything. I would appreciate your help, considering the harassment gets worse and some actually do worry about their safety.
Thanks,
submitted by /u/ElXanthaes
[link] [comments]
A friend of mine is hacked; what can we do?
Hi,
Let's dive into the story, I sincerely hope that I can get some advice on what to do next. So a friend of mine, he and his family, are getting constantly harassed by someone unknown. It seems that at least one of their devices is hacked, considering the hacker is able to tell whenever they get notifications on their phones and is able to extract personal data (Photo's, phone calls etc.) from their phones. I have told them to reset their phones, wipe everything off and go from there - but I am not entirely sure if that will seal the deal.
What we know is that the hacker utilizes Linux kali, and has access to personal data on several devices, ranging from iPhone to Samsung devices. He is able to tell anything that they do on their phones and is able to see notifications. Additionally, it seems that he infected the network as well considering he could tell whenever a phone was not connected to the network. He has a wide array of information, therefore it seems that he is well equipped.
I am not entirely sure what to do and the authorities are aware of the situation, however, they will not really do anything. I would appreciate your help, considering the harassment gets worse and some actually do worry about their safety.
Thanks,
submitted by /u/ElXanthaes
[link] [comments]
reddit
A friend of mine is hacked; what can we do?
Hi, Let's dive into the story, I sincerely hope that I can get some advice on what to do next. So a friend of mine, he and his family, are...
Nosferatu - Lsass NTLM Authentication Backdoor
Lsass NTLM Authentication BackdoorHow it WorksFirst, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.UsageNosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.You can see it loaded using Procexp: Login example using Impacket:LimitationsIn an Active Directory environment, authentication via RDP, runas, or the lock screen does not work with the nosferatu password. Authentication using SMB, WinRM, and WMI is still possible.In a non-AD environment, authentication works for all aspects.Download Nosferatu
Read more...
Lsass NTLM Authentication BackdoorHow it WorksFirst, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor hash for comparison.UsageNosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector with SeDebugPrivilege.You can see it loaded using Procexp: Login example using Impacket:LimitationsIn an Active Directory environment, authentication via RDP, runas, or the lock screen does not work with the nosferatu password. Authentication using SMB, WinRM, and WMI is still possible.In a non-AD environment, authentication works for all aspects.Download Nosferatu
Read more...
2FA Bypass Methodologies
Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium »
Read more...
Hello folks!! Hope you are doing good… I’m back with another blog after a long time… pretty long time tbh. For all the beginners who are…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
RCE with Server-Side Template Injection
https://cdn-images-1.medium.com/max/2600/1*jTOjIeK0cA7v-osM5Yl6bA.jpeg
Python Flask Application with Jinja2 Template — Doctor HTB machine
Continue reading on R3d Buck3T »
RCE with Server-Side Template Injection
https://cdn-images-1.medium.com/max/2600/1*jTOjIeK0cA7v-osM5Yl6bA.jpeg
Python Flask Application with Jinja2 Template — Doctor HTB machine
Continue reading on R3d Buck3T »
( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature
https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5
https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5
Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium » (https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5)
hacking: security in practice
How do UAV GPS spoofing attacks work in very simple terms?
Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing
submitted by /u/Br3ikros
[link] [comments]
How do UAV GPS spoofing attacks work in very simple terms?
Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing
submitted by /u/Br3ikros
[link] [comments]
reddit
How do UAV GPS spoofing attacks work in very simple terms?
Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Iranian Hackers Broke Into Newspaper Publisher Lee Enterprises Ahead of 2020 Election
https://external-preview.redd.it/7E4y0rawHjbwGFbR-cnNKbaVIhjtV-xrWN5V72MceKk.jpg?width=640&crop=smart&auto=webp&s=a9624685225a4142e87b95c53d95cb9b66c4fab1 submitted by /u/eis3nheim
[link] [comments]
Iranian Hackers Broke Into Newspaper Publisher Lee Enterprises Ahead of 2020 Election
https://external-preview.redd.it/7E4y0rawHjbwGFbR-cnNKbaVIhjtV-xrWN5V72MceKk.jpg?width=640&crop=smart&auto=webp&s=a9624685225a4142e87b95c53d95cb9b66c4fab1 submitted by /u/eis3nheim
[link] [comments]