hacking: security in practice
Spoof email

How do I use a spoof mailer? I've tried Emkeis, and a few others, with no success..

How's it done these days? Any simple software or other trick that may fix this?

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploits to use as a demonstration?

Hello all,

I'm a high school senior, and we've started thinking about our senior projects. Being interested in cybersecurity and penetration testing, I was planning on "hacking" something live for anyone to watch.

My question is, what should I hack?

Ideally, this "hack" would be somewhat easy to understand and perform, be easy to "undo", and bonus points for audience involvement/looking cool.

I thought about perhaps using an old WiFi router and maybe some sort of MiTM attack? I will need to conduct research, however I believe it would be cool to have students join a WiFi network, then demonstrate how their information can be taken without the use of a VPN.

Any other ideas on how to demonstrate a vulnerability/practice to the public?

​

Thank you!

submitted by /u/Mindstorm89
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Wild Credit Interest Rate Calculation Bug Post-Mortem
https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Ante Finance » (https://medium.com/ante-finance/wild-credit-interest-rate-calculation-bug-post-mortem-badce0ce32f4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

I want to MITM-attack SSH connections coming through an OpenVPN server, any advice?
https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/

I am pen testing a small business that tunnels all employee traffic through an OpenVPN server (running on local infrastructure). I want to perform a MITM attack for SSH traffic running through the OpenVPN server by intercepting traffic leaving the OVPN server and going over external networks to the SSH server(s). Ideally, I will run software alongside the OpenVPN server on that machine. This is a basic diagram of the network structure (https://viewer.diagrams.net/?tags=%7B%7D&highlight=0000ff&edit=_blank&layers=1&nav=1&title=VPN-SSH-MITM#R5Vhdc5swEPw1fkzGQsaxHxPiNp1p0jTOtOlTR2MUUC10jBA27q%2BvBOLLxE7ScU2bPplbTiDt7Z5kBtiLsveSxOE1%2BJQPnKGfDfDlwHEQwo7%2BMcimQMauWwCBZL5NqoE5%2B0ktOLRoynyatBIVAFcsboMLEIIuVAsjUsK6nfYIvP3WmAS0A8wXhHfRr8xXYYFOnLMav6IsCO2b3QkubkSkzLULSULiw7oB4dkAexJAFVdR5lFuuCtpKca923G3mpekQr1kQLYUbL36%2FhlFMHtQ93fpzZKejO3c1KZcL%2FX18m0IUoUQgCB8VqMXElLhU%2FPUoY7qnI8AsQaRBn9QpTa2liRVoKFQRdzepRlTD43rb%2BZRp66NLjP75DzYlIFQcvPQDBqjTFgPy6NyXLE%2Bs6idtFkogVQu6B6urJAVkQFVe%2FJGVXG1KShEVM9Hj5OUE8VW7XkQq86gyqsrqC9sEV9RUDvJFeGpfdN8fqUBjzOzYGeIcm0umQhq0zAQua0MC0mYULmiEp0uIBrgc8fpSKQtgHXIFJ3HJOdurZtAu9h2PlQqmu0vQZcyO2BsHWQ7CJraeF37EZUuCxteLMcdnGS3Q3IfNjqgtPGRpJ0PPZeSbBoJMTChksaTbw1Ql9%2BZtOuPtxvdM%2FllXFe8mEFd%2F2opvy8J%2FJzvnBf6zvlrfef07rvyTPB2jDd6ofGmfRjPLY9qpQDc%2Fcbr5KMjGA91d7z%2FRBNoh3uPLIrp60SB8RFEMepo4lNMxZfbGw3O8zZreEqFKNqxbtUn1x%2FurzvCeabHtlVzgI6Lt7euUd8t96zDpFftXVolQyi4rOjdIlBTodqcJUrCknrAQWpEgDD2e2Scb0GEs0DocKGp06%2FAF4ZYpv%2BXndsbEfP93LtPFenglak2v7IyuFuZ8ROFwX%2BqMNNOYZ48urdVbopj5d%2Bz0sdo61A%2F6VvpCO1m1PkHGcXD3hntHorvaJByYjrGvXdrjsfNZvJWe4eLt3pHuSUevnfosP6iVOym9Wc5PPsF), in case it wasn't clear. submitted by /u/social-bleach (https://www.reddit.com/user/social-bleach)
[link] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/) [comments] (https://www.reddit.com/r/Pentesting/comments/rirob3/i_want_to_mitmattack_ssh_connections_coming/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Risky Is the Log4J Vulnerability?

Security teams around the world are on high alert dealing with the Log4j vulnerability, but how risky is it, really?

Dark Reading: Attacks/Breaches
Meta Acts Against 7 Entities Found Spying on 50,000 Users

The parent company of Facebook and Instagram has warned some 50,000 account holders they are targets of surveillance.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Things I learned this week about Log4JShell Vulnerability

https://cdn-images-1.medium.com/max/1974/1*hhwqr6Zff3ODN3vNqyxipA.jpeg
Java JNDI Injection, Log4J library, Log4Shell — CVE-2021–44228

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Investigadores descubren nuevos ataques de coexistencia en chips de Wi-Fi y Bluetooth

https://cdn-images-1.medium.com/max/1241/0*777iokIPnqY2OeWP
PUBLICADO EN 17 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I want to MITM-attack SSH connections coming through an OpenVPN server, any advice?

I am pen testing a small business that tunnels all employee traffic through an OpenVPN server (running on local infrastructure). I want to perform a MITM attack for SSH traffic running through the OpenVPN server by intercepting traffic leaving the OVPN server and going over external networks to the SSH server(s). Ideally, I will run software alongside the OpenVPN server on that machine.

This is a basic diagram of the network structure, in case it wasn't clear.

submitted by /u/social-bleach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Doubts with college project

Hello everyone are new to the subreddit, I am a university student of System Engineering. For the subject of "Networks and computer security" I must perform a "hack" of the Wi-fi network of the old university library with the permission of the director of the school of systems. Due to the fact that I have to present a project about the properties of passwords WPS2-psk I decided to opt for Kali Linux and I am using the tool "aircracking", I think I have followed all the steps but when cracking the password with a dictionary it takes a lot of time the process (I’ve been cracking the password for 5 hours, plus my laptop warms up over time) Do you know why this is taking so long? Excuse me if I ask the "fool" or ambiguous, I’m new to this Kali Linux and hack passwords and take care people.

submitted by /u/Alux-Saku
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Spoof emails

Why is it that the main spoofed like Emkei CZ don't work anymore? Is there any good and free methods of sending a spoof mail?

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Create the perfect password

https://cdn-images-1.medium.com/max/2400/1*aFKF8E3gcpgdu7GodGtlEg.jpeg
The best passwords will thwart brute force and dictionary attacks, but it’s also possible to make them easy to remember.

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Finding and Exploiting SSRF Vulnerabilities

I’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!Continue reading on Medium »
Read more...

Finding and Exploiting SSRF Vulnerabilities
https://medium.com/@kaorrosi/finding-and-exploiting-ssrf-vulnerabilities-22006dc739ce?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video