Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
PMkid on windows .

Is it Really neccesary to be running Linux to capture a pmkid ?? can't u just do it on windows??
If u have an article , forum post or video explaining how to do it please link it :)
and is there a way to reset a locked wps on windows too.
i know some of you will just tell me switch to linux i already have the latest build of kali linux installed .

submitted by /u/COMUS_DYONOSIS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PMkid on windows .

Is it Really neccesary to be running Linux to capture a pmkid ?? can't u just do it on windows?? If u have an article , forum post or video...

10 viewsedited 21:24

hacking: security in practice
njs is a subset of the JavaScript language that allows extending nginx functionality. njs is created in compliance with ECMAScript 5.1 (strict mode) with some ECMAScript 6 and later extensions. The compliance is still evolving

Use cases

Complex access control and security checks in njs before a request reaches an upstream serverManipulating response headersWriting flexible asynchronous content handlers and filters

https://nginx.org/en/docs/njs/

submitted by /u/totie01010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

njs is a subset of the JavaScript language that allows extending...

Use cases Complex access control and security checks in njs before a request reaches an upstream serverManipulating response headersWriting...

9 viewsedited 21:24

Hacking Articles Tips Tricks Videos Tutorials

9 views21:24

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Rate my cert path

Now I know tryhackme, ctf, codecsmp, and a few YouTube channels are always the recommendations for a true grasp on hacking, but I would like something I could measure and confirm my skill with. In addition employers would like to see something whether it's a degree, cert, demonstration, or something else. In my path I am trying to play both sides (so I can always come out on top) of red and blue. I like the idea of being good at one to do the other and trading back and forth. I am partial to red team though. I have used the roadmap created by Mr. Paul Jeremy to formulate a plan that increases with (subjective) difficulty. So with that said here is a path I planned:

Linux +

GAQM CFA

Pentest+

CFR and/or eJPT

CEPT

MBT and/or MPT

OSCP

submitted by /u/JudasRose
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Rate my cert path

Now I know tryhackme, ctf, codecamp, and a few YouTube channels are always the recommendations for a true grasp on hacking, but I would like...

14 viewsedited 21:24

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Spoof email

How do I use a spoof mailer? I've tried Emkeis, and a few others, with no success..

How's it done these days? Any simple software or other trick that may fix this?

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Spoof email

How do I use a spoof mailer? I've tried Emkeis, and a few others, with no success.. How's it done these days? Any simple software or other trick...

11 viewsedited 21:24

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Exploits to use as a demonstration?

Hello all,

I'm a high school senior, and we've started thinking about our senior projects. Being interested in cybersecurity and penetration testing, I was planning on "hacking" something live for anyone to watch.

My question is, what should I hack?

Ideally, this "hack" would be somewhat easy to understand and perform, be easy to "undo", and bonus points for audience involvement/looking cool.

I thought about perhaps using an old WiFi router and maybe some sort of MiTM attack? I will need to conduct research, however I believe it would be cool to have students join a WiFi network, then demonstrate how their information can be taken without the use of a VPN.

Any other ideas on how to demonstrate a vulnerability/practice to the public?

Thank you!

submitted by /u/Mindstorm89
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploits to use as a demonstration?

Hello all, I'm a high school senior, and we've started thinking about our senior projects. Being interested in cybersecurity and penetration...

14 viewsedited 21:24

Hacking Articles Tips Tricks Videos Tutorials

Wild Credit Interest Rate Calculation Bug Post-Mortem
https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Wild Credit Interest Rate Calculation Bug Post-Mortem

Summary

10 viewsedited 21:33

Hacking Articles Tips Tricks Videos Tutorials

10 views21:33

Hacking Articles Tips Tricks Videos Tutorials

SummaryContinue reading on Ante Finance » (https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Wild Credit Interest Rate Calculation Bug Post-Mortem

Summary

9 viewsedited 21:33

Hacking Articles Tips Tricks Videos Tutorials

I want to MITM-attack SSH connections coming through an OpenVPN server, any advice?
https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/

I am pen testing a small business that tunnels all employee traffic through an OpenVPN server (running on local infrastructure). I want to perform a MITM attack for SSH traffic running through the OpenVPN server by intercepting traffic leaving the OVPN server and going over external networks to the SSH server(s). Ideally, I will run software alongside the OpenVPN server on that machine. This is a basic diagram of the network structure (https://viewer.diagrams.net/?tags=%7B%7D&highlight=0000ff&edit=_blank&layers=1&nav=1&title=VPN-SSH-MITM#R5Vhdc5swEPw1fkzGQsaxHxPiNp1p0jTOtOlTR2MUUC10jBA27q%2BvBOLLxE7ScU2bPplbTiDt7Z5kBtiLsveSxOE1%2BJQPnKGfDfDlwHEQwo7%2BMcimQMauWwCBZL5NqoE5%2B0ktOLRoynyatBIVAFcsboMLEIIuVAsjUsK6nfYIvP3WmAS0A8wXhHfRr8xXYYFOnLMav6IsCO2b3QkubkSkzLULSULiw7oB4dkAexJAFVdR5lFuuCtpKca923G3mpekQr1kQLYUbL36%2FhlFMHtQ93fpzZKejO3c1KZcL%2FX18m0IUoUQgCB8VqMXElLhU%2FPUoY7qnI8AsQaRBn9QpTa2liRVoKFQRdzepRlTD43rb%2BZRp66NLjP75DzYlIFQcvPQDBqjTFgPy6NyXLE%2Bs6idtFkogVQu6B6urJAVkQFVe%2FJGVXG1KShEVM9Hj5OUE8VW7XkQq86gyqsrqC9sEV9RUDvJFeGpfdN8fqUBjzOzYGeIcm0umQhq0zAQua0MC0mYULmiEp0uIBrgc8fpSKQtgHXIFJ3HJOdurZtAu9h2PlQqmu0vQZcyO2BsHWQ7CJraeF37EZUuCxteLMcdnGS3Q3IfNjqgtPGRpJ0PPZeSbBoJMTChksaTbw1Ql9%2BZtOuPtxvdM%2FllXFe8mEFd%2F2opvy8J%2FJzvnBf6zvlrfef07rvyTPB2jDd6ofGmfRjPLY9qpQDc%2Fcbr5KMjGA91d7z%2FRBNoh3uPLIrp60SB8RFEMepo4lNMxZfbGw3O8zZreEqFKNqxbtUn1x%2FurzvCeabHtlVzgI6Lt7euUd8t96zDpFftXVolQyi4rOjdIlBTodqcJUrCknrAQWpEgDD2e2Scb0GEs0DocKGp06%2FAF4ZYpv%2BXndsbEfP93LtPFenglak2v7IyuFuZ8ROFwX%2BqMNNOYZ48urdVbopj5d%2Bz0sdo61A%2F6VvpCO1m1PkHGcXD3hntHorvaJByYjrGvXdrjsfNZvJWe4eLt3pHuSUevnfosP6iVOym9Wc5PPsF), in case it wasn't clear. submitted by /u/social-bleach (https://www.reddit.com/user/social-bleach)
[link] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/) [comments] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/)

___________________________
@hacking_Attack
@Hacking_Video

Posted by social-bleach - 3 votes and 9 comments

8 viewsedited 21:55

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
How Risky Is the Log4J Vulnerability?

Security teams around the world are on high alert dealing with the Log4j vulnerability, but how risky is it, really?

8 views22:50

Source

About

Blog

Apps

Platform