Hacking on Medium
My First Pre-Auth Account Takeover in 20 secs

https://cdn-images-1.medium.com/max/820/1*uwzTIiw1la6qBcsqCP265A.jpeg
Hello All, this is my first account takeover writeup and I hope it helps everyone. Taking over another user’s account is something that…

Continue reading on Medium »

hacking: security in practice
Multi-industry ransomware survey. The results provide a better understanding of lesser-known aspects of the current ransomware epidemic.

https://external-preview.redd.it/cjur5c57HHSB8yt_KJAK9fUbdkf6dwg2KbxQ2QQz_KM.jpg?width=640&crop=smart&auto=webp&s=42a2637675c66687ce7bf79b9dfd68625143d608 submitted by /u/oxowewry
[link] [comments]

hacking: security in practice
Can hackers get into my computer, literally?

Like, into the system in real time, and see what I'm doing, watching and clicking at the very moment? Or even being able to do stuff on my computer? If yes, what is the point of VPNs, Tor, Password Managers, etc?

submitted by /u/frozny
[link] [comments]

Analyzing and finding root cause of a vulnerability with time travel debugging with windbg preview
https://www.reddit.com/r/redteamsec/comments/r0a9v4/analyzing_and_finding_root_cause_of_a/

submitted by /u/secgeek (https://www.reddit.com/user/secgeek)
[link] (https://hardik05.wordpress.com/2021/11/23/analyzing-and-finding-root-cause-of-a-vulnerability-with-time-travel-debugging-with-windbg-preview/) [comments] (https://www.reddit.com/r/redteamsec/comments/r0a9v4/analyzing_and_finding_root_cause_of_a/)

KitPloit - PenTest Tools!
UDP-Hunter - Network Assessment Tool For Various UDP Services Covering Both IPv4 And IPv6 Protocols

https://blogger.googleusercontent.com/img/a/AVvXsEjZbr_sNzIkpleg07A9XpItbxy2CUdWq4OC2M2oY8Tu0SjGk1AwpZmSJLV8dMUZJx-i2Weem13dtB-5-bQ-4nERekUMgNwQvavqFnZMJYCVqjW9kt3kVZMbSjpm_DMs3m-i-BU9W8pLumKw0nwuvFOtD1VItnPGaJW5aFDfS97ni8HB500rZfw277ACdQ=w640-h326 UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing auditing of widely known UDP protocols for IPv6 and IPv4 hosts. As of today, UDP Hunter supports 19 different service probes. The tool allows you to do bulk scanning of large networks as well as targeted host scanning for specific ports and more. Once an open service is discovered, UDP Hunter takes it one step further and even provides you guidance on how you can possibly exploit the discovered services. UDP Hunter provides reports in a neat text format, however, support for more formats is under way. How does UDP Hunter work?UDP Hunter creates a list of IPs when any IP range is provided to it. It also supports domain names which will be resolved and the IP will be added to the list. Once the list has been created internally by UDP Hunter, it will send UDP probes to all listed IPs. If the host is running a UDP service, it will respond. UDP Hunter basically sniffs network particularly for UDP traffic, then reads all UDP packets coming to the target host. All UDP probes received after running UDP Hunter will be reported. However, there is an option (by setting --noise=false) to ignore irrelevant UDP packets and only observe the UDP traffic of interest originated from the hosts and services/ports which are mentioned in the target list. The idea behind creating UDP Hunter was initially inspired by udp-proto-scanner. I heartily thank Portcullis Labs for it and also Anant and Sumit Siddharth(Sid) for their valuable inputs while working on UDP Hunter. Supported UDP Probes:As of today, we support the following UDP service probes on their default ports:

* ike - 500 port
* rpc / RPCCheck - 111 port
* ntp / NTPRequest - 123 port
* snmp-public / SNMPv3GetRequest - 161 port
* ms-sql / ms-sql-slam - 1434 port
* netop - 6502 port
* tftp - 69 port
* db2 - 523 port
* citrix - 1604 port
* echo - 7 port
* chargen - 19 port
* systat - 11 port
* daytime / time - 13 port
* DNSStatusRequest / DNSVersionBindReq - 53 port
* NBTStat - 137 port
* xdmcp - 177 port
* net-support - 5405 port
* mdns-zeroconf - 5353 port
* gtpv1 - 2123 port Setup:Download the tool from here or Clone the repository:git clone https://github.com/NotSoSecure/udp-hunter Requirements:* Python 3.x
* Python Modules - also mentioned in “requirements.txt” file
* netaddr
* colorama
* argparse
* ifaddr
* datetime This should help you with the initial setup:Install all required modules: pip3 install -r requirements.txt Configuration files required:* udp.txt - This file contains UDP probes
* udphelp.txt - This file contains list of tools, suggestions for each UDP probes or services You can also change configuration files by using command line argument:“--configfile ” and “--probehelp ” Verify the configurations by running following command:python udp-hunter.py

Note: It should display following help details, if this throws any error check your configurations or connect with me for any tool specific errors. Features / Options:UDP Hunter v0.1beta has the following features:Mandatory Options:* --host - Single Host - Required or
* --file - File of ips - Required Optional:* --output [...]

___________________________
@hacking_Attack
@Hacking_Video

- Output file - Required
* --probes - Name of probe or 'all' (default: all probes) (Optional)
* Probe list - ike, rpc, ntp, snmp-public, ms-sql, ms-sql-slam, netop, tftp, db2, citrix, echo, chargen, systat, daytime, time, RPCCheck, DNSStatusRequest, DNSVersionBindReq, NBTStat, NTPRequest, SNMPv3GetRequest, xdmcp, net-support, mdns-zeroconf, gtpv1

* --ports - List of ports or 'all' (default: all ports) (Optional)
* --retries - Number of packets to send to each host. Default 2 (Optional)
* --noise - To filter output from non-listed IPs (Optional)
* --verbose - verbosity, will show sniffer output also --- please keep this a true, by default this is true. This will help us to analyze output.
* --timeout - Timeout 1.0, 2.0 in minutes (Optional)
* --lhost6 - Provide IPv6 of listner interface
* --lhost4 - Provide IPv4 of listner interface
* --configfile - Configuration file location - default is 'udp.txt' in same directory
* --probehelp - Help file location - default is 'udphelp.txt' in same directory Usage:Usage: python udp-hunter.py --file=inputfile.txt --output=outputfile.txt [optional arguments] Usage: python udp-hunter.py --file=inputfile.txt --output=outputfile.txt [--probes=NTPRequest,SNMPv3GetReques] [--ports=123,161,53] [--retries=3] [--noise=true] [--verbose=false] [--timeout=1.0] [--configfile] Credits:The UDP probes are mainly taken from amap, ike-scan, nmap and udp-proto-scanner. Inspiration for the scanning code was drawn from udp-proto-scanner. Future Work:* Addition of more UDP probes
* Different reporting formats
* Update exploitation-related helps Read More:* UDP Hunter - An Open Source Network Assessment Tool
* Setup Steps for UDP Hunter
* Sample Execution of UDP Hunter Download Udp-Hunter

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
ILPT:

https://a.thumbs.redditmedia.com/pPKJmtSCYiAtcwPJ7jiKrcHY0NSeofJEZMgRmaiipY0.jpg submitted by /u/guacamole3434
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The Pen Testing Tools We’re Thankful for in 2021 - Annual Recap of Pentesting Tools
https://www.reddit.com/r/Pentesting/comments/r0e5dz/the_pen_testing_tools_were_thankful_for_in_2021/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/breach_house (https://www.reddit.com/user/breach_house)
[link] (https://bishopfox.com/blog/pen-testing-tools-2021) [comments] (https://www.reddit.com/r/Pentesting/comments/r0e5dz/the_pen_testing_tools_were_thankful_for_in_2021/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing two factor authentication? Any point in trying?

Sigh.. As the title says, image getting the right credentials (username, email, password) for online accounts of your target. Good job 🤝 Now what?? You're still stuck cause the moment you try logging in to the target service, your target gets a notification telling them that they need to authenticate themselves before signing in. Is there a way to bypass it? Is this the end of the line for account hacking..?

submitted by /u/TheN1ght0w1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Read wifi traffic data?

Is there a way I can log and read traffic data on my wifi, in regular format? Like if someone goes to in PH and searches donkey porn can I capture that activity in a log that also includes Mac address?

submitted by /u/igotthrownaway90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Method?

How hackers easily hack the gmail and drive photos and other content even after google security mail and 2 step verification?

submitted by /u/EntrepreneurIll1660
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Full key extraction of NVIDIA TSEC

submitted by /u/pcaversaccio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can Hackers get into my computer, literally?

I have a mid-tower PC case, a micro ATX form factor mobo and 3 geforce rtx 3070s, so naturally, there's not a lot of space left in my computer for a hacker.

I also have a glass panel on the side of my computer so I think I'd be able to see if there was a hacker in my system, then again I don't have any RGB so it is quite dark in there.

My computer is also really loud so it is possible someone could be living in there and I wouldn't hear them.

I'm worried cause sometimes my mouse cuts out and it could be him unplugging it from inside to plug in his USB powered kettle, which would also explain the steam coming out of the I/O shield.

I'm was thinking of activating my firewall but I thought was a bit unethical, as he might get burnt so instead I comprised by uninstalling my antivirus so he gets a cold and has to come out.

Could anyone help? there might be a hacker in my system.

submitted by /u/NettleRash
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mac OS reverse shell persistence

Mac OS reverse shell persistence?

Currently the persistence module in metasploit is not functioning properly does anyone know of anyway to achieve a persistent reverse shell on a Mac wether that would be achieving a reverse shell then entering commands and how to listen for it Or a listener that can achieve it ?

Could I just write a launchd that executes the reverse shell on boot

Or any other suggestions?

submitted by /u/alotofquestionsforyk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cracken - a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust

https://external-preview.redd.it/2D0z3KSMlXwVy2KkZr5LMnLiTsGPn2T90iuYv9I8lb4.jpg?width=640&crop=smart&auto=webp&s=7f7a0b192331728a7b2f67884b25a7af51f637e4 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video