Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
SMTP issue Gophish

I’ve been experimented with phishing attack and recently stumbled upon the Gophish attack framework. When I reach the sending profile tab where I upload my SMTP server and send a test email it replies “Max connection attempts exceeded -530 Invalid username or password. I’ve checked and rechecked but my credentials are the same. Is this a common error? The server I used was the sendinblue.

submitted by /u/fizzcoguy589
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

SMTP issue Gophish

I’ve been experimented with phishing attack and recently stumbled upon the Gophish attack framework. When I reach the sending profile tab where I...

7 viewsedited 00:40

hacking: security in practice
What hackers use...?

It was very interesting to me, so I did a little research on google, I read that they mostly use linux as an OS, so I'm interested in whether black hackers really use linux, or make their OS, which only they have access to. Another question is what hardware they use, like which processors and the rest, are there any companies that work illegally and make certain processors. I'm interested in how well they hide from everything, whether there is even a possibility to catch them through the hardware and locate them. I'm not a hacker, I don't deal with it, I'm just interested in some things like this.

I’ve been hearing a lot about them lately on youtube and I read a lot still. I still can’t fathom that with all this technology, they can’t get over it, catch them or something. Either they depend on state security, or they are very neutral, not working for anyone but themselves. I find it very strange because money is everywhere in the world, why he can never buy them.

There is probably someone among you who would like to tell me a few details, so that I know what I am up to, so that I can continue reading.

Thanks!

submitted by /u/MechanistDesign
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What hackers use...?

It was very interesting to me, so I did a little research on google, I read that they mostly use linux as an OS, so I'm interested in whether...

8 viewsedited 00:40

Hacking Articles Tips Tricks Videos Tutorials

8 views02:27

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
New Android Spyware Variants Linked to Middle Eastern APT

The new variants, improved for stealth and persistence, share code with other malware samples attributed to the C-23 APT.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

New Android Spyware Variants Linked to Middle Eastern APT

The new variants, improved for stealth and persistence, share code with other malware samples attributed to the C-23 APT.

9 viewsedited 02:27

Hacking Articles Tips Tricks Videos Tutorials

9 views02:27

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

Amazon Redshift customers can use Baffle’s Data Privacy Cloud to secure the data pipeline as source data is migrated to Redshift and used for data analytics.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

Amazon Redshift customers can use Baffle’s Data Privacy Cloud to secure the data pipeline as source data is migrated to Redshift and used for data analytics.

9 viewsedited 02:27

Hacking Articles Tips Tricks Videos Tutorials

Whispers - Identify Hardcoded Secrets In Static Structured Text

"My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord VarysWhispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can integrate it in your CI/CD pipeline.DetectsPasswordsAPI tokensAWS keysPrivate keysHashed credentialsAuthentication tokensDangerous functionsSensitive filesSupported FormatsWhispers is intended to be a structured text parser, not a code parser.The following commonly used formats are currently supported:YAMLJSONXML.npmrc.pypirc.htpasswd.propertiespip.confconf / iniDockerfileDockercfgShell scriptsPython3Python3 files are parsed as ASTs because of native language support.Declaration & Assignment FormatsThe following language files are parsed as text, and checked for common variable declaration and assignment patterns:JavaScriptJavaGoPHPSpecial FormatsAWS credentials filesJDBC connection stringsJenkins config filesSpringFramework Beans config filesJava Properties filesDockercfg private registry auth filesGithub tokensInstallationFrom PyPIpip3 install whispersFrom GitHubgit clone https://github.com/Skyscanner/whisperscd whispersmake installUsageCLIwhispers --helpwhispers --infowhispers source/code/fileOrDirwhispers --config config.yml source/code/fileOrDirwhispers --output /tmp/secrets.yml source/code/fileOrDirwhispers --rules aws-id,aws-secret source/code/fileOrDirwhispers --severity BLOCKER,CRITICAL source/code/fileOrDirwhispers --exitcode 7 source/code/fileOrDirPythonfrom whispers.cli import parse_argsfrom whispers.core import runsrc = "tests/fixtures"configfile = "whispers/config.yml"args = parse_args("-c", configfile, src)for secret in run(args): print(secret)ConfigThere are several configuration options available in Whispers. It’s possible to include/exclude results based on file path, key, or value. File path specifications are interpreted as globs. Keys and values accept regular expressions and several other parameters. There is a default configuration file built-in that will be used if you don't provide a custom one.config.yml should have the following structure:include: files: - "**/*.yml"exclude: files: - "**/test/**/*" - "**/tests/**/*" keys: - ^foo values: - bar$rules: starks: message: Whispers from the North severity: CRITICAL value: regex: (Aria|Ned) Stark ignorecase: TrueThe fastest way to tweak detection (ie: remove false positives and unwanted results) is to copy the default config.yml into a new file, adapt it, and pass it as an argument to Whispers.whispers --config config.yml --rules starks src/file/or/dirCustom RulesRules specify the actual things that should be pulled out from key-value pairs. There are several common ones that come built-in, such as AWS keys and passwords, but the tool is made to be easily expandable with new rules.Custom rules can be defined in the main config file under rules:Custom rules can be added to whispers/rulesrule-id: # unique rule name description: Values formatted like AWS Session Token message: AWS Session Token # report will show this message severity: BLOCKER # one of BLOCKER, CRITICAL, MAJOR, MINOR, INFO key: # specify key format regex: (aws.?session.?token)? ignorecase: True # case-insensitive matching value: # specify value format regex: ^(?=.*a-z)(?=.*A-Z)A-Za-z0-9\+\/{270,450}$ ignorecase: False # case-sensitive matching minlen: 270 # value is at least this long isBase64: True # value is base64-encoded isAscii: False # value is binary data when decoded isUri: False # value is not formatted like a URI similar: 0.35 # maximum allowed similarity between key and value # (1.0 being exactly the same)PluginsAll parsing functionality is implemented via plugins. Each plugin implements a class with the pairs() method that runs through files and returns the key-value pairs to be checked with rules.class PluginName: def pairs(self, file): yield "key", "value"Download Whispers
Read more...

12 views03:50

Hacking Articles Tips Tricks Videos Tutorials

9 views04:40

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Here's a cool way to capture login credentials between a Windows machine and a Linux file server using MITM ARP poisoning attack and Wireshark. Of course, you can use this approach between any type of system that authenticates over the network in the same subnet. Enjoy!

https://external-preview.redd.it/7SpxRngiQygp74IskQp88T-jOb5b3LYqqZcXiu5-nVI.jpg?width=640&crop=smart&auto=webp&s=0b8577a9c40b6e0665f9507f6a8e54a5c8c4c53e submitted by /u/nexenta81
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Here's a cool way to capture login credentials between a Windows...

Posted in r/hacking by u/nexenta81 • 1 point and 0 comments

11 viewsedited 04:40

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Cisco anyconnect exploits 4.10

Anyone??

submitted by /u/Sicfast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cisco anyconnect exploits 4.10

Anyone??

11 viewsedited 04:40

Hacking Articles Tips Tricks Videos Tutorials

10 views08:09

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Container Security-Common issues

https://cdn-images-1.medium.com/max/1038/1*XWHG9906dZSQBIAZT7kdrg.png
A) Docker unix socket mounted in container(Container Breakout-1)-

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Container Security-Common issues

A) Docker unix socket mounted in container(Container Breakout-1)-

11 viewsedited 08:09

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Ngrok not working wan

I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io not found

ERR_NGROK_3200’

submitted by /u/alotofquestionsforyk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ngrok not working wan

I’m testing a phishing tool kit and when I use the ngrok link on a device not on the network (my phone ) I get ‘Tunnel 22b7-108-246-4-62.ngrok.io...

10 viewsedited 08:41

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is this electromagnetic hacking and how come there isn’t much about it?

I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430 in the morning while I was losing control of my IPad including the storage filling up, not being able to download, upload, back up, record anything, vpn dropping, and pages I was trying to access either not loading or loading and then going elsewhere. 3 days after I caught her outside I lost control of my IPad completely as in the passcode was remotely changed faster than me while I was trying to change it locking me out of it. Since then, I’ve noticed the same with my IPhone as well as noticed her and her bf’s vehicle close by. From what I’ve gathered she needs proximity to hack me the way she seems to need to and I’m wondering if this is electromagnetic hacking which allows for a hacker to hack even airlocked systems. Is this what she is doing? Why am I experiencing a repeat of 4 years ago, the same tricks and what is the reason she needs to be so close to me. She’s been stalking me since I moved and I believe this has become something she’s very invested in bc she hates my guts and wants to teach me a lesson. It’s like it’s a game to her and I don’t know how to fight back.
I also think she’s able to read my sms, at least the ones that aren’t encrypted and to hear my convos so I’ve switched to Signal. Can anyone explain to me why she needs proximity, how this helps her hacking and what kind of hacking this is? She is also a ham radio operator and understands frequencies and shit which is how hackers intercept messages and calls I think. Thanks in advance to anyone who can help.

submitted by /u/Schneckie2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is this electromagnetic hacking and how come there isn’t much...

I have an IPhone 12 and 4 years ago my IPad was hacked by my neighbour (now former). I caught her inside her car outside my parents house at 430...

9 viewsedited 08:41

Hacking Articles Tips Tricks Videos Tutorials

8 views09:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Malware now trying to exploit new Windows Installer zero-day

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Malware now trying to exploit new Windows Installer zero-dayPost Views: 143
https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/BF2.gif
Reading Time: 1 Minute
Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.
“Talos has already detected malware samples in the wild that are attempting to take advantage of this vulnerability,” said Jaeson Schultz, Technical Leader for Cisco’s Talos Security Intelligence & Research Group.

However, as Cisco Talos’ Head of Outreach Nick Biasini told BleepingComputer, these exploitation attempts are part of low volume attacks likely focused on testing and tweaking exploits for full-blown campaigns.

“During our investigation, we looked at recent malware samples and were able to identify several that were already attempting to leverage the exploit,” Biasini told BleepingComputer.

“Since the volume is low, this is likely people working with the proof of concept code or testing for future campaigns. This is just more evidence on how quickly adversaries work to weaponize a publicly available exploit.”
See Also: Complete Offensive Security and Ethical Hacking Course Zero-day bypasses Windows Installer patchThe vulnerability in question is a local privilege elevation bug found as a bypass to a patch Microsoft released during November 2021’s Patch Tuesday to address a flaw tracked as CVE-2021-41379.

On Sunday, Naceri published a working proof-of-concept exploit for this new zero-day, saying it works on all supported versions of Windows.

If successfully exploited, this bypass gives attackers SYSTEM privileges on up-to-date devices running the latest Windows releases, including Windows 10, Windows 11, and Windows Server 2022.

SYSTEM privileges are the highest user rights available to a Windows user and make it possible to perform any operating system command.

By exploiting this zero-day, attackers with limited access to compromised systems can easily elevate their privileges to help spread laterally within a victim’s network.
See Also: New Windows zero-day with public exploit lets you become an admin BleepingComputer has tested Naceri’s exploit and used it to successfully open a command prompt with SYSTEM permissions from an account with low-level ‘Standard’ privileges.

“The best workaround available at the time of writing this is to wait Microsoft to release a security patch, due to the complexity of this vulnerability,” explained Naceri.

“Any attempt to patch the binary directly will break windows installer. So you better wait and see how Microsoft will screw the patch again.”
See Also: Offensive Security Tools: Awesome Bug Bounty Tools “We are aware of the disclosure and will do what is necessary to keep our customers safe and protected. An attacker using the methods described must already have access and the ability to run code on a target victim’s machine,” a Microsoft spokesperson told BleepingComputer when asked for more details regarding this vulnerability.
See Also: Hacking stories – Operation Troy – How researchers linked the cyberattacks Source: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/https___specials-images.forbesimg.com_imageserve_503493618_Green-binary-code-on-screen-with-Zero-Day[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Malware now trying to exploit new Windows Installer zero-day | Black Hat Ethical Hacking

Malware creators have already started testing a proof-of-concept exploit targeting a new Microsoft Windows Installer zero-day publicly disclosed by security researcher Abdelhamid Naceri over the weekend.

9 viewsedited 09:17

About

Blog

Apps

Platform