hacking: security in practice
Are any of the hacker playbooks still worth it today?

I have just exploited my first easy machine on htb and now would like to get the hacker playbook 2 to learn more. Is it worth it?

submitted by /u/BigSausajey
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Buffer Overflow 101 Series

Hey guys - I've made a series of videos and a writeup for some Buffer Overflow basics. Covering how memory is managed in x86 systems before moving onto building a Buffer Overflow exploit for a target.

Videos
Writeup

Hope someone finds this helpful. Working on an AD series next which should be coming in the next few weeks.

submitted by /u/_delfino
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CaptfEncoder - An Extensible Cross Platform Network Security Tool Suite

Captfencoder is an extensible cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, special coding, miscellaneous tools, and aggregating all kinds of online tools.CaptfEncoder all functions provided are based on plugin framewrok，All plugins are in the program extensions directory.UseMethod always downloads the executablehttps://github.com/guyoung/CaptfEncoder/releasesBaidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9Method 2 uses electron operationgit clone https://github.com/guyoung/CaptfEncoder.gitcd CaptfEncodernpm installnpm startSupport operating systemWindowsLinuxMacOSOther...(Support Node.js)Function introductionConverterAscii encodingBase64、Base encodingEscape encodingHex encodingHtml entity encodingMorse codeQuoted-printable encodingShellcode encodingSql encodingTap CodeUnicode encodingUrl encodingClassical cipherRail-fence cipherAtbash cipherCaesar cipherROT13、ROT series cipherSimple Substitution cipherHill cipherPolybius Square cipherPlayfair cipherVigenère cipherAutokey cipherBeaufort cipherRunning Key cipherPorta cipherAffine cipherBaconian cipherADFGX cipherADFGVX cipherBifid cipherFour-Square cipherStraddle Checkerboard cipherGronsfeld cipherCryptologyHashMD5、MD seriesSHA1、SHA seriesHMACBcryptScryptAESDES3DES（TripleDES）RC2RC4RabbitBlowfishSM3SM4RIPEMDPublic key cryptographyRSA cryptoRSA generate keyOther encodingJSFuck encodingJother encodingBrainfuck encodingIp address encodingBase64 image encodingQR CodeMime encodingCRC encodingPunycode encodingBubble Babble encodingUUEncode encodingXXEncode encodingMiscFile hashFile typeHash identificationImage exifGIF frame extractorOthers(online)FactordbIP ASNIP infoIP WhoisWhoisProject websitehttps://github.com/guyoung/CaptfEncoderDownload softwarehttps://github.com/guyoung/CaptfEncoder/releasesBaidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9Download CaptfEncoder
Read more...

___________________________
@hacking_Attack
@Hacking_Video

CaptfEncoder - An Extensible Cross Platform Network Security Tool Suite
http://www.kitploit.com/2021/12/captfencoder-extensible-cross-platform.html

___________________________
@hacking_Attack
@Hacking_Video

Captfencoder is an extensible cross platform (https://www.kitploit.com/search/label/Cross%20Platform) network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, special coding, miscellaneous tools, and aggregating all kinds of online tools.

___________________________
@hacking_Attack
@Hacking_Video

CaptfEncoder all functions provided are based on plugin (https://www.kitploit.com/search/label/Plugin) framewrok，All plugins are in the program extensions directory.

___________________________
@hacking_Attack
@Hacking_Video

UseMethod always downloads the executablehttps://github.com/guyoung/CaptfEncoder/releasesBaidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9Method 2 uses electron (https://www.kitploit.com/search/label/Electron) operationgit clone https://github.com/guyoung/CaptfEncoder.gitcd CaptfEncodernpm installnpm startSupport operating systemWindowsLinuxMacOSOther...(Support Node.js)Function introductionConverterAscii encodingBase64、Base encodingEscape encodingHex encodingHtml entity encodingMorse codeQuoted-printable encodingShellcode encodingSql encodingTap CodeUnicode encodingUrl encodingClassical cipherRail-fence cipherAtbash cipherCaesar cipherROT13、ROT series cipherSimple Substitution cipherHill cipherPolybius Square cipherPlayfair cipherVigenère cipherAutokey cipherBeaufort cipherRunning Key cipherPorta cipherAffine cipherBaconian cipherADFGX cipherADFGVX cipherBifid cipherFour-Square cipherStraddle Checkerboard cipherGronsfeld cipherCryptologyHashMD5、MD seriesSHA1、SHA seriesHMACBcryptScryptAESDES3DES（TripleDES）RC2RC4RabbitBlowfishSM3SM4RIPEMDPublic key cryptographyRSA cryptoRSA generate keyOther encodingJSFuck encodingJother encodingBrainfuck encodingIp address encodingBase64 image encodingQR CodeMime encodingCRC encodingPunycode encodingBubble Babble encodingUUEncode encodingXXEncode encodingMiscFile hashFile typeHash identificationImage exifGIF frame extractorOthers(online)FactordbIP ASNIP infoIP WhoisWhoisProject websitehttps://github.com/guyoung/CaptfEncoderDownload softwarehttps://github.com/guyoung/CaptfEncoder/releasesBaidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9

Download CaptfEncoder (https://github.com/guyoung/CaptfEncoder)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CaptfEncoder - An Extensible Cross Platform Network Security Tool Suite

https://blogger.googleusercontent.com/img/a/AVvXsEglfPHSn0PSuHkQ_7c6u-Cj8Yb7zTy6WUWAyJTYlQ1C1IYtuje75kNcpGqsxZwqEML_eXehLdPxocCEeiDbPdMfRdk5wYmv5LUKI1JWzHN6xTMv3-cXWVCrqczxAl3BA-SHN52QQhGRJ0veKWQwLdR0RA8hDKkmSDEpdBghzxSHmASFAagp1SiEdAO1jA Captfencoder is an extensible cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, special coding, miscellaneous tools, and aggregating all kinds of online tools. https://blogger.googleusercontent.com/img/a/AVvXsEht_I_QS-vaA62RMAfmMK1duG-t4G4rSjhCmbEJvvx2wzYIESUxU55J50Ce75IUxCR_nd4U_5ThDvF0_JeTlHjKy0OcL-uvDghA-C2Pq9mXQjHHdeHsuKUPml2mROO3dsVSdeMv1_ipyEfvcnsutcdl6gCwaL3DDrYq0se3zhwkyhpT2PfbVfXbU5izwg=w640-h360 CaptfEncoder all functions provided are based on plugin framewrok，All plugins are in the program extensions directory. https://blogger.googleusercontent.com/img/a/AVvXsEh3RZJitOvOU-izL3mc7jkjIB0yaxD4YUlff9IqpAEwU7VmRThDflHtmT4ID6ovyy1Uo8pbvqMy1-dYvFN-_7HM3pBJorp0L68xi8OIhuOPAlF5T94TTm_SVn21_c7nkUlrKE4mFHxyp5wrIl6rjRq9SDxHgOljRKmGDpeRLumTZrmaPY1LZtRTt1k6ng=w640-h488 UseMethod always downloads the executable* https://github.com/guyoung/CaptfEncoder/releases
* Baidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9 Method 2 uses electron operation* git clone https://github.com/guyoung/CaptfEncoder.git
* cd CaptfEncoder
* npm install
* npm start Support operating system* Windows
* Linux
* MacOS
* Other...(Support Node.js) Function introduction*
Converter

* Ascii encoding
* Base64、Base encoding
* Escape encoding
* Hex encoding
* Html entity encoding
* Morse code
* Quoted-printable encoding
* Shellcode encoding
* Sql encoding
* Tap Code
* Unicode encoding
* Url encoding

*
Classical cipher

* Rail-fence cipher
* Atbash cipher
* Caesar cipher
* ROT13、ROT series cipher
* Simple Substitution cipher
* Hill cipher
* Polybius Square cipher
* Playfair cipher
* Vigenère cipher
* Autokey cipher
* Beaufort cipher
* Running Key cipher
* Porta cipher
* Affine cipher
* Baconian cipher
* ADFGX cipher
* ADFGVX cipher
* Bifid cipher
* Four-Square cipher
* Straddle Checkerboard cipher
* Gronsfeld cipher

*
Cryptology

* Hash
* MD5、MD series
* SHA1、SHA series
* HMAC
* Bcrypt
* Scrypt
* AES
* DES
* 3DES（TripleDES）
* RC2
* RC4
* Rabbit
* Blowfish
* SM3
* SM4
* RIPEMD

*
Public key cryptography

* RSA crypto
* RSA generate key

*
Other encoding

* JSFuck encoding
* Jother encoding
* Brainfuck encoding
* Ip address encoding
* Base64 image encoding
* QR Code
* Mime encoding
* CRC encoding
* Punycode encoding
* Bubble Babble encoding
* UUEncode encoding
* XXEncode encoding

*
Misc

* File hash
* File type
* Hash identification
* Image exif
* GIF frame extractor

*
Others(online)

* Factordb
* IP ASN
* IP info
* IP Whois
* Whois Project website* https://github.com/guyoung/CaptfEncoder Download software* https://github.com/guyoung/CaptfEncoder/releases
* Baidu network disk https://pan.baidu.com/s/1q2N1w44bvYIXLe5gCI5oKA Password: k5b9 Download CaptfEncoder

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberSploit: 1 Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/791/0*090LqJFWEtbG_uJ1.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Black Hat Exploits of the Stupid-Easy ‘80s

https://cdn-images-1.medium.com/max/719/0*MLMowNSuCN1Ch2Wq.png
I’m not saying there was no computer security in the 1980s but, Wait... Yes. Yes, I am.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Chronos Vulnhub Walkthrrough

Chronos is an easy/medium machine from Vulnhub by AL1ENUM. This machine is also tested in VirtualBox. This lab is suitable for novices because it has significant bugs such as Remote Command Execution for reverse connection and a privilege escalation approach. So, let's get started and learn how to break things down into manageable pieces. Methodology * netdiscoverEnumeration* Abusing HTTPExploitation* Inject Netcat reverse shellPrivilege Escalation* Exploiting file express uploadLevel: Easy-MediumFirstly, we have to scan the network to find the Victim machine IP using netdiscover command.netdiscover The IP address we get is192.168.1.174 https://blogger.googleusercontent.com/img/a/AVvXsEgH0cQc1k0ymb9JXhjkJRUt6zmocFHgeD8UzMjIJOBVsoG33zuyiU3k5NwLf6LAkhpbh-ofZi4u3UaQGJsz2yiwp44m-Bwt3XISMPc73DoWinM-Y-QUracQ4TMCEpD-GNV3joBxyn9lAapChmPrbQB1II0WZys5yJQpPhFcw3ma0R3GPRQllRAC3M7izw=s16000 Nmap Further, we ran an aggressive scan (-A) for open port enumeration where we found the following port details:nmap -A 192.168.1.174According to the Nmap output, we get https://blogger.googleusercontent.com/img/a/AVvXsEjhSZhh_nCWo87Smf_gjIgH2nb80AGZaGnaVaBviRQajpKXN9S1H7FP3EoeuWXf2zGAoqwY_Cvk_ulHhVU6gDZej1iqlcnRekWvYpouB6BdRERDDftU5vGhkbHmkHMmLXoZOWL45IRlRSVrkikYAVRYW6c4Fe5hIjEMsSOuTcBbnvsRdXRozqVK6OQE8w=s16000 EnumerationLet’s check port 80 to see if we get anything interesting. We can verify it immediately in the browser because the Apache Server is running on port 80. https://blogger.googleusercontent.com/img/a/AVvXsEhia3BpSfvJs8DlLedC_qi1-JmtXS6nHnKM46Qn95EUITQPPZpkSrD5-KfhNqPE1ChvMaX3zBg05G5bxgAxar2aoTJ-s68R2LdiJ5yMKCg2K7vWbemctpBUze1JSb15l3qqkCz0yEb_oUr-nNOkmMqD2vmQ_u1tWwi2GRci9FJR_0bIG5c0S5tSvSQUOA=s16000 hostnames and URL. Since the hostname has not been included in our /etc/hosts configuration file, we cannot route. https://blogger.googleusercontent.com/img/a/AVvXsEio8_49lglGnu192hcOGrtvABCStbkoAV3hGWLZSdR00LCCi7VQTm_8rbAIQIW4DravfM0QaNUZ4Hx1_7bWGkUZoGF7CZ41r1YEYS0-8Qc0GsLaUtRra7-8eFoFBGRG9keYSL9KDSRxy0A1podRUCAISy1X0-my_ldoAX6Iljjq0y_57n8lsWQuAyY72g=s16000 192.168.1.174 chronos.localhttps://blogger.googleusercontent.com/img/a/AVvXsEibwQfRzgG56YC0EE-ydVdUZ-wXp8ze2WvE0qz-UlPG64LeJA9jc8cRK4szwEAVm3vX2vx1XMPl6s0GH6agb94sOBCE8OsUtejYLIFRpTgknQP37xXhy0WhtBSAZfYa19SsdUjtgxugEZI-brxiTHp_YkkCEgJvIONpsAK9DeROOzdeb7ad5JGYDM7P7Q=s16000 ___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Chronos Vulnhub Walkthrrough

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to get into a password locked windows laptop

Sorry if this question is not allowed but my uncle has recently passed on and my dad has his laptop. My dad would like to a access it but it’s locked behind a windows password, any way to get into it without a password.

submitted by /u/MrTem08
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video