Hacking on Medium
ShellDredd-1 Hannah Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/753/0*di1DFeoCt-z2taVW.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Wild Credit Interest Rate Calculation Bug Post-Mortem

SummaryContinue reading on Ante Finance »
Read more...

hacking: security in practice
PMkid on windows .

Is it Really neccesary to be running Linux to capture a pmkid ?? can't u just do it on windows??
If u have an article , forum post or video explaining how to do it please link it :)
and is there a way to reset a locked wps on windows too.
i know some of you will just tell me switch to linux i already have the latest build of kali linux installed .

submitted by /u/COMUS_DYONOSIS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
njs is a subset of the JavaScript language that allows extending nginx functionality. njs is created in compliance with ECMAScript 5.1 (strict mode) with some ECMAScript 6 and later extensions. The compliance is still evolving

Use cases

Complex access control and security checks in njs before a request reaches an upstream serverManipulating response headersWriting flexible asynchronous content handlers and filters

https://nginx.org/en/docs/njs/

submitted by /u/totie01010
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Rate my cert path

Now I know tryhackme, ctf, codecsmp, and a few YouTube channels are always the recommendations for a true grasp on hacking, but I would like something I could measure and confirm my skill with. In addition employers would like to see something whether it's a degree, cert, demonstration, or something else. In my path I am trying to play both sides (so I can always come out on top) of red and blue. I like the idea of being good at one to do the other and trading back and forth. I am partial to red team though. I have used the roadmap created by Mr. Paul Jeremy to formulate a plan that increases with (subjective) difficulty. So with that said here is a path I planned:

Linux +

GAQM CFA

Pentest+

CFR and/or eJPT

CEPT

MBT and/or MPT

OSCP

submitted by /u/JudasRose
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Spoof email

How do I use a spoof mailer? I've tried Emkeis, and a few others, with no success..

How's it done these days? Any simple software or other trick that may fix this?

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploits to use as a demonstration?

Hello all,

I'm a high school senior, and we've started thinking about our senior projects. Being interested in cybersecurity and penetration testing, I was planning on "hacking" something live for anyone to watch.

My question is, what should I hack?

Ideally, this "hack" would be somewhat easy to understand and perform, be easy to "undo", and bonus points for audience involvement/looking cool.

I thought about perhaps using an old WiFi router and maybe some sort of MiTM attack? I will need to conduct research, however I believe it would be cool to have students join a WiFi network, then demonstrate how their information can be taken without the use of a VPN.

Any other ideas on how to demonstrate a vulnerability/practice to the public?

​

Thank you!

submitted by /u/Mindstorm89
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Wild Credit Interest Rate Calculation Bug Post-Mortem
https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Ante Finance » (https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

I want to MITM-attack SSH connections coming through an OpenVPN server, any advice?
https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/

I am pen testing a small business that tunnels all employee traffic through an OpenVPN server (running on local infrastructure). I want to perform a MITM attack for SSH traffic running through the OpenVPN server by intercepting traffic leaving the OVPN server and going over external networks to the SSH server(s). Ideally, I will run software alongside the OpenVPN server on that machine. This is a basic diagram of the network structure (https://viewer.diagrams.net/?tags=%7B%7D&highlight=0000ff&edit=_blank&layers=1&nav=1&title=VPN-SSH-MITM#R5Vhdc5swEPw1fkzGQsaxHxPiNp1p0jTOtOlTR2MUUC10jBA27q%2BvBOLLxE7ScU2bPplbTiDt7Z5kBtiLsveSxOE1%2BJQPnKGfDfDlwHEQwo7%2BMcimQMauWwCBZL5NqoE5%2B0ktOLRoynyatBIVAFcsboMLEIIuVAsjUsK6nfYIvP3WmAS0A8wXhHfRr8xXYYFOnLMav6IsCO2b3QkubkSkzLULSULiw7oB4dkAexJAFVdR5lFuuCtpKca923G3mpekQr1kQLYUbL36%2FhlFMHtQ93fpzZKejO3c1KZcL%2FX18m0IUoUQgCB8VqMXElLhU%2FPUoY7qnI8AsQaRBn9QpTa2liRVoKFQRdzepRlTD43rb%2BZRp66NLjP75DzYlIFQcvPQDBqjTFgPy6NyXLE%2Bs6idtFkogVQu6B6urJAVkQFVe%2FJGVXG1KShEVM9Hj5OUE8VW7XkQq86gyqsrqC9sEV9RUDvJFeGpfdN8fqUBjzOzYGeIcm0umQhq0zAQua0MC0mYULmiEp0uIBrgc8fpSKQtgHXIFJ3HJOdurZtAu9h2PlQqmu0vQZcyO2BsHWQ7CJraeF37EZUuCxteLMcdnGS3Q3IfNjqgtPGRpJ0PPZeSbBoJMTChksaTbw1Ql9%2BZtOuPtxvdM%2FllXFe8mEFd%2F2opvy8J%2FJzvnBf6zvlrfef07rvyTPB2jDd6ofGmfRjPLY9qpQDc%2Fcbr5KMjGA91d7z%2FRBNoh3uPLIrp60SB8RFEMepo4lNMxZfbGw3O8zZreEqFKNqxbtUn1x%2FurzvCeabHtlVzgI6Lt7euUd8t96zDpFftXVolQyi4rOjdIlBTodqcJUrCknrAQWpEgDD2e2Scb0GEs0DocKGp06%2FAF4ZYpv%2BXndsbEfP93LtPFenglak2v7IyuFuZ8ROFwX%2BqMNNOYZ48urdVbopj5d%2Bz0sdo61A%2F6VvpCO1m1PkHGcXD3hntHorvaJByYjrGvXdrjsfNZvJWe4eLt3pHuSUevnfosP6iVOym9Wc5PPsF), in case it wasn't clear. submitted by /u/social-bleach (https://www.reddit.com/user/social-bleach)
[link] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/) [comments] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Risky Is the Log4J Vulnerability?

Security teams around the world are on high alert dealing with the Log4j vulnerability, but how risky is it, really?

Dark Reading: Attacks/Breaches
Meta Acts Against 7 Entities Found Spying on 50,000 Users

The parent company of Facebook and Instagram has warned some 50,000 account holders they are targets of surveillance.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Things I learned this week about Log4JShell Vulnerability

https://cdn-images-1.medium.com/max/1974/1*hhwqr6Zff3ODN3vNqyxipA.jpeg
Java JNDI Injection, Log4J library, Log4Shell — CVE-2021–44228

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Investigadores descubren nuevos ataques de coexistencia en chips de Wi-Fi y Bluetooth

https://cdn-images-1.medium.com/max/1241/0*777iokIPnqY2OeWP
PUBLICADO EN 17 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to MITM-attack SSH connections coming through an OpenVPN server, any advice?

I am pen testing a small business that tunnels all employee traffic through an OpenVPN server (running on local infrastructure). I want to perform a MITM attack for SSH traffic running through the OpenVPN server by intercepting traffic leaving the OVPN server and going over external networks to the SSH server(s). Ideally, I will run software alongside the OpenVPN server on that machine.

This is a basic diagram of the network structure, in case it wasn't clear.

submitted by /u/social-bleach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Doubts with college project

Hello everyone are new to the subreddit, I am a university student of System Engineering. For the subject of "Networks and computer security" I must perform a "hack" of the Wi-fi network of the old university library with the permission of the director of the school of systems. Due to the fact that I have to present a project about the properties of passwords WPS2-psk I decided to opt for Kali Linux and I am using the tool "aircracking", I think I have followed all the steps but when cracking the password with a dictionary it takes a lot of time the process (I’ve been cracking the password for 5 hours, plus my laptop warms up over time) Do you know why this is taking so long? Excuse me if I ask the "fool" or ambiguous, I’m new to this Kali Linux and hack passwords and take care people.

submitted by /u/Alux-Saku
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video