Hacking on Medium
Trace Exact Location

https://cdn-images-1.medium.com/max/1284/1*h-2NUgtANDBaHlw-yFV6mg.gif
Trace any device’s location like a pro.

Continue reading on Medium »

hacking: security in practice
Where is salting stored?

From what I understand salting is your computer adding a little piece of random data to your password, so when you login it has to hash your imputed plain text password and then add the salt and then match with the stored password, so where is the salt data stored?

submitted by /u/my_py
[link] [comments]

hacking: security in practice
How do i create a kind of usb virus downloader?

I just recently got into python. I have seen things like the WOWcable that can run a program as soon as it's plugged into a device. How can I program a USB stick to run a program on the device it's plugged into? Feel free to link tutorials in the comment section.

submitted by /u/simen64
[link] [comments]

hacking: security in practice
Is this a game hacking thing?

Like can I (EXAMPLE) use this to hack Roblox plzz answer

submitted by /u/RevolutionaryFilm995
[link] [comments]

KitPloit - PenTest Tools!
CloudSpec - An Open Source Tool For Validating Your Resources In Your Cloud Providers Using A Logical Language

https://blogger.googleusercontent.com/img/a/AVvXsEgOpILtIMjdhc3DC4CbhSxfT-Js5HvSIqwrxhPEkGUrOgd5I3y5Zi8IvllO_slgPIH1ZhGWYt7YFeUA_7OLDrKUcP-5hy6T8Xg0PN1lV9_cv0UugiDpciC25vLd4Q7pkGyzUi-xUpfUCoA_oHYcpp0oHM5T3AtbZMiBNYbq4OmL83gQl6rWiTZxc-DdWg=w640-h116 CloudSpec is an open source tool for validating your resources in your cloud providers using a logical language that everybody can understand. With its reasonably simple syntax, you can validate the configuration of your cloud resources, avoiding mistakes that can lead to availability or confidentiality issues. https://blogger.googleusercontent.com/img/a/AVvXsEg6Sa09x3JefCaNJ-vky2yLKIBkw4AmAeIupz1Rm1TXq8I5Su15Bra1VSNI73AWnnr3dicFLiNfszRO9O4RmzafeRm7sbZNayt2uN06JHcUy8D8q7DtiXhWBlBYny7VFkyIZen0s7Cz1vIPAczGQ6KaeJCejikHE29xQsH8mCORFJG3SRKKF4dKO-clpg=w640-h430 IntroductionWith CloudSpec you validate resources in your cloud provider. A resource can be anything, from an EC2 Instance to an SES rule. Anything that a CloudSpec provider implements.

Resources have properties and associations. Properties define the shape, or configuration, of the resource, while associations define its relationships with other resources. With CloudSpec, you not only can validate the configuration of the resource, but also the configuration of its associated resources. For example, let's take an EC2 Instance. It has properties defining its shape, like its unique instance ID, its name, its type, and the such. But it also has associations like the subnet it belongs to, the EBS volumes attached to it, the AMI it uses, and the such. You not only can validate whether an EC2 Instance is of a particular instance type, or has the delete termination flag enabled, but also the size of its attached volumes, the CIDR block of its subnet, or any other property in its associated resources, or associated resources to its associated resources, and so on. You follow me.

Your cloud resources are entangled together, creating a graph. A graph that you can traverse and validate as you see fit according to your best practices or compliance policies. That ability, plus its logical language, is the beauty of CloudSpec.
access logs enabled" on aws:s3:bucket assert access_logs is enabled end rule rule "Instances must use 'gp2' volumes and be at least 50GiBs large." on aws:ec2:instance with tags["environment"] equal to "production" assert devices ( > volume ( type equal to "gp2" and size gte 50 ) ) end ">set aws:regions = ["us-east-1", "eu-west-1"]

use "./my_module" as my_module

rule "Buckets must have access logs enabled"
on aws:s3:bucket
assert access_logs is enabled
end rule

rule "Instances must use 'gp2' volumes and be at least 50GiBs large."
on aws:ec2:instance
with tags["environment"] equal to "production"
assert devices (
> volume (
type equal to "gp2" and
size gte 50
)
)
end
You can find the full syntax in the CloudSpec Reference documentation. ProvidersCloudSpec itself does not support any resource. The core of CloudSpec is the syntax interpreter for the specification files and its validation engine. However, CloudSpec does use providers, which are extensions to CloudSpec supporting each different type of resource.

A provider defines the shape of each resource type, properties and associations, and the logic to load those resources.

You can find the available providers and resources they provide in the CloudSpec Referencedocumentation. Running CloudSpec docker imageYou can either build and run the CloudSpec jar yourself, or you can run the latest docker image straight from the Docker Hub registry.

To use the Docker image, you first need to put your spec files [...]

(e.g. specs/my_module) in a directory to mount it in the Docker container. Otherwise, the CloudSpec will not be able to open the spec files outside the container. export AWS_ACCESS_KEY_ID=***
export AWS_SECRET_ACCESS_KEY=***
export AWS_REGION=eu-west-1
docker run -v "/my_module:/my_module" -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_REGION efoncubierta/cloudspec run -d my_module If you are running the docker container in AWS with a dedicated IAM role attached, you can omit the AWS environment variables.

For more options of the CloudSpec command, see help: docker run efoncubierta/cloudspec -h Build CloudSpecIf you want to build CloudSpec yourself, follow these instructions.

Requirements:

* Git
* Maven 3
* OpenJDK 8
* Docker

Pull the source code and build CloudSpec: # Clone git repo
git clone https://github.com/efoncubierta/cloudspec
cd cloudspec
# Build CloudSpec
mvn clean install
# Run CloudSpec
java -jar runner/target/cloudspec-${VERSION}.jar -h CollaborationsFor the time being, this is a pet project and, therefore, only some resources in AWS are supported, but I am open to collaborations. Feel free to fork this project and send pull requests. Download Cloudspec

Exploit samAccountName spoofing with Kerberos
https://www.reddit.com/r/redteamsec/comments/reps7h/exploit_samaccountname_spoofing_with_kerberos/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing/) [comments] (https://www.reddit.com/r/redteamsec/comments/reps7h/exploit_samaccountname_spoofing_with_kerberos/)

Bug Bounty Recon: Horizontal Correlation.
https://medium.com/@Sm9l/bug-bounty-recon-horizontal-correlation-b7c81a32951a?source=rss------bug_bounty-5

Horizontal Correlation — The process of finding different domains owned by the same organisation.Continue reading on Medium » (https://medium.com/@Sm9l/bug-bounty-recon-horizontal-correlation-b7c81a32951a?source=rss------bug_bounty-5)

Hacking on Medium
Cybersecurity: This Truly Scared Me!

https://cdn-images-1.medium.com/max/1920/1*6c6l9mayUjwZ409KRzrmnQ.jpeg
Apache log4j Vulnerability CVE-2021–4428

Continue reading on Medium »

Hacking on Medium
Bug Bounty Recon: Horizontal Correlation.

https://cdn-images-1.medium.com/max/1806/1*TXvQicGt_KbOHA5Ji3IK8w.png
Horizontal Correlation — The process of finding different domains owned by the same organisation.

Continue reading on Medium »

Hacking on Medium
Instalação do DVWA via Docker

https://cdn-images-1.medium.com/max/1440/0*L0xE_oKhjLP-RLpW.jpg
O Damn Vulnerable Web Application (DVWA) é uma aplicação desenvolvida em PHP e MySQL que contém diversos tipos de vulnerabilidades, com o…

Continue reading on Medium »

hacking: security in practice
Currently working through the logic puzzle book: “What is the name of this book?”. Is there any benefit of solving the puzzles in your mind without writing anything down?

I am improving my logical thinking by working the logic puzzles in “What is the name of this Book?” by Raymond Smullyan.

So far I have been solving everything in my mind, then writing it down to check the answers. But how does that compare to working through the logic puzzles on paper?

My goal is to become a better hacker, so I was thinking that it is essential to improve my ability to hold many things in mind at a time. Which would mean that solving the puzzles completely in my mind would be helpful. However, it may be more beneficial to just solve the puzzles on paper since I am able to work through them faster like that.

submitted by /u/Mysterious_Ad7624
[link] [comments]

A story about a not-so-direct SSRF

Hi all, hope you are keeping well and staying safe. This blog is about my recent SSRF finding.Continue reading on InfoSec Write-ups »
Read more...

this is my write up , lets start

Broken Authentication and Session Management > Privilege EscalationContinue reading on Medium »
Read more...