Kali Linux VM in the Cloud
https://www.reddit.com/r/Pentesting/comments/r6k8f9/kali_linux_vm_in_the_cloud/

Hey there, I’m looking for your suggestions on the best way to get a Kali Linux VM up and running, preferably in the cloud. I currently have an AWS EC2 instance on T3.xlarge, using xrdp to RDP in, but it just seems a little slow and choppy. I assumed it was just the instance at first, so I upgraded to the T3 xlarge, which is 4vCPUs and 16GB RAM, and it’s still choppy and just not as reactive as I want it to be. And I’ve pinged my instance, with the response being -20-40ms, so it isn’t a latency issue. What do you guys recommend for getting a VM up and running to where the performance isn’t just so slow and choppy? I would run it locally on my own machine, but I want to access the same VM from both my desktop and laptop, and storage on my laptop is also currently an issue— so no space to even host the VM. submitted by /u/Landonnnn_ (https://www.reddit.com/user/Landonnnn_)
[link] (https://www.reddit.com/r/Pentesting/comments/r6k8f9/kali_linux_vm_in_the_cloud/) [comments] (https://www.reddit.com/r/Pentesting/comments/r6k8f9/kali_linux_vm_in_the_cloud/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bypass File Upload Restrictions

https://cdn-images-1.medium.com/max/2600/1*5qJLOZFazUQ2SqN82988JA.png
How to Get a Shell on a Website using a File [Tutorial]

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Protect yourself on Internet

https://cdn-images-1.medium.com/max/2600/1*E1BhHySLxKtThD067wyq2g.jpeg
Disclaimer! The following technologies are presented only for inform the public on some of the state-of-the-art Cyber Security…

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Android4: Walkthrough

https://cdn-images-1.medium.com/max/972/0*n6kp8qOvRwyveuYD.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What to do if you can’t find internships?

https://cdn-images-1.medium.com/max/800/0*atMUxuObZT0OdLlT
A story by Noureldin Ehab aka Creeper.exe

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los mayores riesgos de seguridad: Phishing, ransomware y error humano

https://cdn-images-1.medium.com/max/1487/0*hQrwF9qP4-NxeWDF
PUBLICADO EN 1 DICIEMBRE, 2021 POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Platypus Testnet Bug Bounty Winners Announcement

Our brilliant white hat hackers have been on a roll!🔥🔥Continue reading on Medium »
Read more...

hacking: security in practice
The winding, telephonic odyssey of Joybubbles, the original phone phreak

https://external-preview.redd.it/RbjzWEBmZkQ9sFmgwVenZ9URzkNDMDbA1mvyL5uo8Ak.jpg?width=640&crop=smart&auto=webp&s=a4bb6c8ffadece5815370bb9914e732215108d95 submitted by /u/riffic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What would be a good gift for someone into hacking gear, programming and cyber security?

I am researching online but I thought it wouldn't hurt to ask here as well!

I'd appreciate every single response.

submitted by /u/1itt1ekids1ov3r
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking to buy some tools

I've been looking to buy some hacking tools for a while now and I saw that Hak5 is having a "create a kit" sale on their site. I was looking through the tools and came up with the list below.

Wifi pineapple, 3 extra antenna, rubber ducky, bash bunny, shark jack, micro ethernet switch.

I was also looking at the packet squirrel and plunder bug but I'm not as familiar with use-cases for them.

Is there anything I should switch out? Are the rubber ducky and bash bunny too similar? Does this seem like a good entry point for someone in the IT field looking to get into hacking? Any advice on what to get would be appreciated.

submitted by /u/Zeusaurus
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is urlscan.io safe and reliable?

Don’t know if this fits in this subreddit but was wondering if any of you have experience using this and if it does the job of finding where suspicious links and urls lead to without infecting your device. Thanks for any help and advice!

submitted by /u/makoto_abe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

ShonyDanza - A Customizable, Easy-To-Navigate Tool For Researching, Pen Testing, And Defending With The Power Of Shodan
http://www.kitploit.com/2021/12/shonydanza-customizable-easy-to.html

___________________________
@hacking_Attack
@Hacking_Video

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP searches to filter on your specified net range(s) Pre-configure search limits Use build-a-search to craft searches with easy building blocks Use stock searches and pre-configure your own stock searches Check if IPs are known malware (https://www.kitploit.com/search/label/Malware) C2s Get host and domain profiles Scan on-demand Find exploits Get total counts for searches and exploits Automatically save exploit code, IP lists, host profiles, domain profiles, and scan results to directories within ShonyDanza Installation git clone https://github.com/fierceoj/ShonyDanza.git
Requirements python3 shodan library cd ShonyDanza
pip3 install -r requirements.txt Usage Edit config.py to include your desired configurations
cd configs
sudo nano config.py
#config file for shonydanza searches

#REQUIRED
#maximum number of results that will be returned per search
#default is 100

SEARCH_LIMIT = 100


#REQUIRED
#IPs exceeding the honeyscore limit will not show up in IP results
#scale is 0.0 to 1.0
#adjust to desired probability to restrict results by threshold, or keep at 1.0 to include all results

HONEYSCORE_LIMIT = 1.0


#REQUIRED - at least one key: value pair
#add a shodan dork to the dictionary below to add it to your shonydanza stock searches menu
#see https://github.com/jakejarvis/awesome-shodan-queries for a great source of queries
#check into "vuln:" filter if you have Small Business Plan or higher (e.g., vuln:cve-2019-11510)

STOCK_SEARCHES = {
'ANONYMOUS_FTP':'ftp anonymous ok',
'RDP':'port:3389 has_screenshot:true',
'OPEN_TELNET':'port:23 console gateway -password',
'APACHE_DIR_LIST':'http.title:"Index of / "',
'SPRING_BOOT':'http.favicon.hash:116323821',
'HP_PRINTERS':'"Serial Number:" "Built:" "Server: HP HTTP"',
'DOCKER_API':'"Docker Containers:" port:2375',
'ANDROID_ROOT_BRIDGE':'"Android Debug Bridge" "Device" port:5555',
'MONGO_EXPRESS_GUI':'"Set-Cookie: mongo-express=" "200 OK"',
'CVE-2019-11510_PULSE_VPN':'http.html:/dana-na/',
'CVE-2019-19781_CITRIX_NETSCALER':'http.waf:"Citrix NetScaler"',
'CVE-2020-5902_F5_BIGIP':'http.favicon.hash:-335242539 "3992"',
'CVE-2020-3452_CISCO_ASA_FTD':'200 "Set-Cookie: webvpn;"'
}


#OPTIONAL
#IP or cidr range constraint for searches that return list of IP addresses
#use comma-separated list to designate multiple (e.g. 1.1.1.1,2.2.0.0/16,3.3.3.3,3.3.3.4)

#NET_RANGE = '0.0.0.0/0'
Run
cd ../
python3 shonydanza.py
See this how-to article (https://null-byte.wonderhowto.com/forum/to-use-shonydanza-find-target-and-exploit-0318883/) for additional usage instruction. Legal Disclaimer This project is made for educational and ethical testing (https://www.kitploit.com/search/label/Testing) purposes only. Usage of ShonyDanza for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Download ShonyDanza (https://github.com/fierceoj/ShonyDanza)

___________________________
@hacking_Attack
@Hacking_Video

Kerentanan pada WordPress melalui Pengungkapan Informasi pengguna

Content: Broken Access Control (BAC) — Disclosure of User InformationContinue reading on Medium »
Read more...