Kali Linux Tutorials
Tor-Rootkit : A Python 3 Standalone Windows 10 / Linux Rootkit Using Tor

Tor-Rootkit is a Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get’s established over the tor network.

How To Use

* Clone the repo and change directory:

git clone https://github.com/emcruise/TorRootkit.git
cd ./tor-rootkit

Build docker container:

docker build -t listener .

Run docker container:

docker run -v $(pwd)/executables:/executables/ -it listener

Deploy the executables: When the listener is up and running it generates a “executables” directory containing different payloads for different plattforms.

TorRootkit/
│ …
└ executables/

Note: The client can take some time to connect because PyInstaller executables are a bit slower and it need’s to start tor.

Features

* Standalone executables for Windows and Linux, including python interpreter and tor
* the whole communication works over tor hidden services which guarantees some degree of anonymity
* The Listener can handle multiple clients
* The Listener generates payloads for different platforms on startup

Listener Shell Commands
CommandExplanationhelpShows the help menu^C or exitExits the shelllistlists all connected clients with their according indexselect start shell with client
Client Shell Commands
CommandExplanationhelpShows the help menu^C or exitExits the client shell and returns to listener shellos Executes a command in the clients shell and returns the outputbackgroundKeeps the connection to a client and returns to listener

Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Mod 26

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Python Wrangling

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Wave a flag

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
mhz_cxf: c1f Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/752/0*7IwLSILHKd25FfCo.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Removing the mask from the July attacker (part 1)

https://cdn-images-1.medium.com/max/612/1*_pGS8nUteWGqOk5TuIttDA.jpeg
The attack on DeFiPIE in July 2021 was carried out from 2 different addresses:

Continue reading on pieLABS »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is the Dark Web?

https://cdn-images-1.medium.com/max/2600/0*C1V7-4B7kTrQsLvM
The dark web is stereotypically thought of as a dangerous and illegal place only criminals go to. This stereotype could not be further from

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do some hackers manage to hack old Youtube channels?

Hello. Sorry if this is the wrong place for this question.

No, this is not me asking anybody of you for a tutorial or something to hack a Youtube channel, but Im rather curious about how some hackers manage to take over old Youtube channels and I obviously dont know a thing about hacking (hacking in the sense of the cyber security stuff)

Heres an example:

Recently, an old Youtube channel was hacked, which has been inactive for 10 years and the owner himself said that the email adress of that channel doesnt exist anymore and that he also forgot the password.

So what kind of exploit has been used here? It cant be a "human error" (dont know if its called like that) and that he accidentally gave his login details, because he doesnt remember them.

And while they could have cracked the password with brute force, I wonder how anyone could even go to the Log in screen of that channel, without having the email adress, which as the owner said doesnt exist anymore.

Idk if this is more of a Youtube related thing and I hope that this question is not out of place. Im aware that there cant be a clear solution to this, because I assume that there may be alot of answers to this question, but Im wondering about some possible ways one could have been able to get into a Youtube account that doesnt even have an existing email adress.

https://www.youtube.com/user/mariofan888

Is the channel in question.

Have a nice day and please be a bit nice. As you can clearly see, I dont know much.

submitted by /u/Eliotisnotconfused
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Winamp Source Code Leak

submitted by /u/pcaversaccio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AIDS Trojan: The Story Behind the First Ever Ransomware Attack

https://external-preview.redd.it/DAzIsfFdQYuVVz-MX24ByhijRUzLlNReErtTR-2ji3A.jpg?width=640&crop=smart&auto=webp&s=edd108faa6ac8d548cdcb7bb95f27b09e8a1a1db submitted by /u/tryingnewnow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Conducting an internal Pentest (everything a beginner needs to know)
https://www.reddit.com/r/Pentesting/comments/r500ex/conducting_an_internal_pentest_everything_a/

Hello, student/intern here. I am trying to get some information about internal or testing. What access do I need to be given to conduct the pentest? First steps to conduct in the pentest? Recommended tools As you can tell I am a complete novice to this, any advice/guidance is greatly appreciated. submitted by /u/Unknown_Mando (https://www.reddit.com/user/Unknown_Mando)
[link] (https://www.reddit.com/r/Pentesting/comments/r500ex/conducting_an_internal_pentest_everything_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/r500ex/conducting_an_internal_pentest_everything_a/)

___________________________
@hacking_Attack
@Hacking_Video

No organization wants to be part of this list- DDoS Attacks for the Month of October'21.
https://www.reddit.com/r/redteamsec/comments/r4z0ga/no_organization_wants_to_be_part_of_this_list/

submitted by /u/DDoS-Investigator (https://www.reddit.com/user/DDoS-Investigator)
[link] (https://blog.mazebolt.com/list-of-ddos-attacks-october-2021) [comments] (https://www.reddit.com/r/redteamsec/comments/r4z0ga/no_organization_wants_to_be_part_of_this_list/)

___________________________
@hacking_Attack
@Hacking_Video

Announcing the $1.5 million Astroport + Immunefi Bug Bounty Program
https://astroport.medium.com/announcing-the-1-5-million-astroport-immunefi-bug-bounty-program-57de529c100e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video