hacking: security in practice
What is your home lab like?

I am just curious what your home security labs are like and what tools and setups you have for gaining knowledge. Yes Kali is probably a staple but let me know how you are doing it and is you can please share how it is working for you. Thanks.

submitted by /u/FTHomes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/bjzsMK1Wrkynzl3vaQgfHCvpesxkFzHOYCpVd4T6whg.jpg Background:

My organization uses an appliance that supports SSL certificates but doesn't seem to be accepting any PEM or PFX certs my CA generates (or OpenSSL certs or even online certs). I am pretty sure their code is broken (web app their device uses returns 500 error with the image below).

​

https://preview.redd.it/llr6i9veg7581.png?width=1207&format=png&auto=webp&s=80d3df8cc91adf708ea1962334b9ff8781e24a95

What I'm Trying:

I'd like to know what importcert.sh is actually doing.

The vendor, ZKTeco (Atlas Access Control), has downloads of its firmware freely available that I'd like to try and reverse engineer to see if I can understand what this script is trying to do.

The Ask:

Since I don't know what this hardware is even running (I may crack open a unit tomorrow to see), I'm curious if there's tooling that might help me inspect the patch file (beyond simply hex editor) and determine if its something I can tease apart and get a better idea of what they're doing.

Their support has basically said "we don't help customers with this" and their e-mail responses have indicated they literally have no idea of certificates and PKI works.

Any other resources would be highly appreciated. Thanks

submitted by /u/thevfguy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What software can spoof/unspoof a SSD?USB drive?

I have what I think is a spoofed SSD, and I'd like to fix it. What software can I use to fix it? I suspect I know how large it actually is, but I have no idea what to change to make it identify properly.

DDG results are manipulated so bad (how to install an SSD, how to upgrade an SSD, etc.), so the closest I can some is this article by Raymond (with no source URLs of the software :( ): https://www.raymond.cc/blog/test-and-detect-fake-or-counterfeit-usb-flash-drives-bought-from-ebay-with-h2testw/

I'm guessing the results are manipulated since a bad guy would want to find the software to use for bad guy stuff? idk I can't fathom what these digital nannys think nowadays.

I read the rules and don't think this is a beginner level question. I left out the beginner-level explanation of what the problem is as well, since I'd hope some hackers might already be familiar with what I'm talking about.

submitted by /u/l1nuxx_uzr_num737205
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A serious Log4J flaw puts much of the internet at risk

https://cdn-images-1.medium.com/max/1200/1*tMa115d4IW_TfmEgd0i4hw.jpeg
The Apache Software Foundation has issued patches to address a frequently leveraged zero-day flaw in the Apache Log4j Java-based logging…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The New Form of Activism; Anonymous and Hacktivism

https://cdn-images-1.medium.com/max/2600/1*dbUCgqYVlskEfoP0I75CJw.jpeg
How Anonymous Has Utilized Hacktivism and Popular Media to Spread and Promote Social Movements

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Im playing the game rust and trying to enter 10,000 4 digit codes is there a way so that i dont have to do it manually?

So im playing the game Rust with my friend and we’re trying to break into a base using a list of 10,000 4 digit codes and i was trying to figure out a way so i dont have to do all of them manually.

submitted by /u/Im_not_an_idiot69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can anyone guide me to the path of hacking online mobile games?

ive been trying to hack games for years and always end up unsuccessful, i want to learn how to do it manually rather than relying on lucky patcher etc or at least anyway that will work, i appreciate any help i can get

submitted by /u/TriggerRelentlessAce
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do countries like China, Russia, and Iran cooperate in tracing hackers?

For example, if a hack happened to the U.s. in those countries or a proxy server was used ine one of them would they cooperate in finding the culprit?

submitted by /u/Ok-Sign6089
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The most effective method to Begin A Ultra Productive Distributing Business And Get Compensated…

https://cdn-images-1.medium.com/max/756/0*dv4EN-XAebiIm1vt.jpg
Joel Peterson’s Affiliate Evergreen Webinar Invitation:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My uncle believes packet sniffing cannot possibly exist…

He said that his “computer buddy” told him that it’s encrypted which means it’s impossible to hack into. I asked;

“Even if I know the encryption password?” I ask, “Yes.” He says 🤔🤔

He already knows that I know his SSID and WPA2 password and insists it’s literally impossible even if I do, and I’m allowed to gain access to his internet router “if it even is possible, which it isn’t”

Now I’m just wondering how do I do it? 😂 I know it’s possible but have researched it a little and still have no clue how it works, he’s been extremely cocky, - and so have I as I know it’s possible -adamant his friend knows best and I don’t know what I’m on about, now I need to prove him wrong lol.

submitted by /u/Undtaser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
log4j npm package, vulnerable?

Anyone know if lg4js npm package is also vulnerable to log4shell?

submitted by /u/BlueEyedGirl25
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers start pushing malware in worldwide Log4Shell attacks

___________________________
@hacking_Attack
@Hacking_Video

Free Course
https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/

Hi I'm new in pentesting and my question is: Where Can I find free pentesting course and what you think about it? submitted by /u/kunecki0091 (https://www.reddit.com/user/kunecki0091)
[link] (https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/) [comments] (https://www.reddit.com/r/Pentesting/comments/rfbtkz/free_course/)

___________________________
@hacking_Attack
@Hacking_Video

Responder-Windows on Windows XP hangs.
https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/

Hey friends, Im using Responder-Windows compiled .exe from GitHub on Windows XP over meterpreter. Running w/o parameters it outputs the help in cli, but running using -i just hangs. I’ve already tried 2>&1, 1>&2, >logfile redirections. No changes. Maybe somebody had this situation and found a solution? Grateful.responder-windows (https://github.com/lgandx/Responder-Windows) submitted by /u/matomas99 (https://www.reddit.com/user/matomas99)
[link] (https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/) [comments] (https://www.reddit.com/r/Pentesting/comments/rfcxgf/responderwindows_on_windows_xp_hangs/)

___________________________
@hacking_Attack
@Hacking_Video