hacking: security in practice
CTF challenge: HackThisAI

https://external-preview.redd.it/MlAq5xv-5G7DHRlod8Aw7eXJ1rE7etchfMqTs780jHA.jpg?width=640&crop=smart&auto=webp&s=17a63e174310e5492760cedcfe1469e90b4a12a3 submitted by /u/Lucan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Gotta put this out there

https://external-preview.redd.it/QDx-j4y9viwogA202g9xwztPS_SqD0jKZLMTMcAwC0c.jpg?width=640&crop=smart&auto=webp&s=28a2014e3a8dce89783b17f7bfa65361d35b31fe submitted by /u/grim_keys
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where is a working, 2021 email bomber

I need to send a very large volume of emails to an address. I've tried all the software programs online, zero with success.

How can this be done?

Is there a site that can allow me to sign up an email for a variety of online sources like globe and mail n pay for play kinda stuff

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Koppeling : Adaptive DLL Hijacking / Dynamic Export Forwarding

Koppeling is a demonstration of advanced DLL hijack techniques. It was released in conjunction with the “Adaptive DLL Hijacking” blog post. I recommend you start there to contextualize this code.

This project is comprised of the following elements:

* Harness.exe: The “victim” application which is vulnerable to hijacking (static/dynamic)
* Functions.dll: The “real” library which exposes valid functionality to the harness
* Theif.dll: The “evil” library which is attempting to gain execution
* NetClone.exe: A C# application which will clone exports from one DLL to another
* PyClone.py: A python 3 script which mimics NetClone functionality

The VS solution itself supports 4 build configurations which map to 4 different methods of proxying functionality. This should provide a nice scalable way of demonstrating more techniques in the future.

* Stc-Forward: Forwards export names during the build process using linker comments
* Dyn-NetClone: Clones the export table from functions.dll onto theif.dll post-build using NetClone
* Dyn-PyClone: Clones the export table from functions.dll onto theif.dll post-build using PyClone
* Dyn-Rebuild: Rebuilds the export table and patches linked import tables post-load to dynamically prepare for function proxying

The goal of each technique is to successfully capture code execution while proxying functionality to the legitimate DLL. Each technique is tested to ensure static and dynamic sink situations are handled. This is by far not every primitive or technique variation. The post above goes into more detail.

Example

Prepare a hijack scenario with an obviously incorrect DLL

copy C:\windows\system32\whoami.exe .\whoami.exe
1 file(s) copied.

copy C:\windows\system32\kernel32.dll .\wkscli.dll
1 file(s) copied.

Executing in the current configuration should result in an error

whoami.exe
“Entry Point Not Found”

Convert kernel32 to proxy functionality for wkscli

NetClone.exe –target C:\windows\system32\kernel32.dll –reference C:\windows\system32\wkscli.dll –output wkscli.dll
[+] Done.
whoami.exe
COMPUTER\User
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Ddosify : High-performance Load Testing Tool

Ddosify is a High-performance load testing tool

Features

* Protocol Agnostic – Currently supporting HTTP, HTTPS, HTTP/2. Other protocols are on the way.

* Scenario-Based – Create your flow in a JSON file. Without a line of code!

* Different Load Types – Test your system’s limits across different load types. Installation ddosifyis available via Docker, Homebrew Tap, and downloadable pre-compiled binaries from the releases page for macOS, Linux and Windows. Docker

docker run -it –rm ddosify/ddosify

Homebrew Tap (macOS and Linux)

brew install ddosify/tap/ddosify

apk, deb, rpm, Arch Linux packages

* For arm architectures change ddosify_amd64to ddosify_arm64or ddosify_armv6.
* Superuser privilege is required.

For Redhat based (Fedora, CentOS, RHEL, etc.)
rpm -i https://github.com/ddosify/ddosify/releases/latest/download/ddosify_amd64.rpm
For Debian based (Ubuntu, Linux Mint, etc.)
wget https://github.com/ddosify/ddosify/releases/latest/download/ddosify_amd64.deb
dpkg -i ddosify_amd64.deb
For Alpine
wget https://github.com/ddosify/ddosify/releases/latest/download/ddosify_amd64.apk
apk add –allow-untrusted ddosify_amd64.apk
For Arch Linux
git clone https://aur.archlinux.org/ddosify.git
cd ddosify
makepkg -sri

Using the convenience script (macOS and Linux)

* The script requires root or sudo privileges to move ddosify binary to /usr/local/bin.
* The script attempts to detect your operating system (macOS or Linux) and architecture (arm64, x86, amd64) to download the appropriate binary from the releases page.
* By default, the script installs the latest version of ddosify.
* If you have problems, check common issues
* Required packages: curland sudocurl -sSfL https://raw.githubusercontent.com/ddosify/ddosify/master/scripts/install.sh | sh

Go install from source (macOS, Linux, Windows)

go install -v go.ddosify.com/ddosify@latest

Easy Start

This section aims to show you how to use Ddosify without deep dive into its details easily.

* Simple load test

ddosify -t target_site.com

The above command runs a load test with the default value that is 100 requests in 10 seconds.

Using some of the features

ddosify -t target_site.com -n 1000 -d 20 -p HTTPS -m PUT -T 7 -P http://proxy_server.com:80

Ddosify sends a total of 1000 PUT requests to https://target_site.com over proxy http://proxy_server.com:80 in 20 seconds with a timeout of 7 seconds per request.

Scenario based load test

ddosify -config config_examples/config.json

1. Ddosify first sends HTTP/2 POST request to https://test_site1.com/endpoint_1 using basic auth credentials test_user:12345 over proxy http://proxy_host.com:proxy_port and with a timeout of 3 seconds. Once the response is received, HTTPS GET request will be sent to https://test_site1.com/endpoint_2 along with the payload included in config_examples/payload.txt file with a timeout of 2 seconds. This flow will be repeated 20 times in 5 seconds and response will be written to stdout. Details

You can configure your load test by the CLI options or a config file. Config file supports more features than the CLI. For example, you can’t create a scenario-based load test with CLI options. CLI Flags

ddosify [FLAG]
FlagDescriptionTypeDefaultRequired?-tTarget website URL. Example: https://ddosify.comstring–Yes-nTotal request countint100No-dTest duration in seconds.int10No-pProtocol of the request. Supported protocols are HTTP, HTTPS. HTTP/2 support is only available by using a config file as described. More protocols will be added.stringHTTPSNo-mRequest[...]

___________________________
@hacking_Attack
@Hacking_Video

method. Available methods for HTTP(s) are GET, POST, PUT, DELETE, UPDATE, PATCHstringGETNo-bThe payload of the network packet. AKA body for the HTTP.string–No-aBasic authentication. Usage: -a username:passwordstring–No-hHeaders of the request. You can provide multiple headers with multiple -hflag.string–No-TTimeout of the request in seconds.int5No-PProxy address as host:port. -P http://user:pass@proxy_host.com:port'string–No-oTest result output destination. Other output types will be added.stringstdoutNo-lType of the load test. Ddosify supports 3 load types.stringlinearNo-configConfig File of the load test.string–No-versionPrints version, git commit, built date (utc), go information and quit––No
Load Types Linear

ddosify -t target_site.com -l linear

Result:
https://blogger.googleusercontent.com/img/a/AVvXsEgSzGDO3_pbPEgID66LkvX88fOTnv4L-sl8P2k7BlcNeSzL3qxR2zvpm-sH0jgjs6Mf_k0cfkYIuGGipLQr1ryKcFcJ1-GnR5oPHgrFI6274QUXfD4juIeWj2nl9NtdDZW2lpXLRRBWu7H0PnC-Cl-OwX1_CakvDKnnIFA7jo0UKp13vkmjX_mYKqAs=s600
Waved

ddosify –t target_site.com -l waved

Result:
https://blogger.googleusercontent.com/img/a/AVvXsEiuKDOPzquq3b63DtbRzhw2BO9xQkuVVbwVPcCF_lVj6-kA4BIKEcTcUDL48mSMdMTpfW2bz2T_yX-sDQ6hdCPLCcHuNtfkjeA5TzvtKk_WZ_0amG1TGJC87s4C_u4w40z3zuA98INOtYs-aHLUPCuetY6UjEV6b3Q6wpkm_N3NqmSAQhKZOxPKh4Lb=s600
Config File

Config file lets you use all capabilities of Ddosify.

The features you can use by config file;

* Scenario creation
* Custom load type creation
* Payload from a file
* Extra connection configuration, like keep-alive enable/disable logic
* HTTP2 support

Usage;

ddosify -config

There is an example config file at config_examples/config.json. This file contains all of the parameters you can use. Details of each parameter;

* request_countoptionalThis is the equivalent of the -nflag. The difference is that if you have multiple steps in your scenario, this value represents the iteration count of the steps.
* load_typeoptionalThis is the equivalent of the -lflag.
* durationoptionalThis is the equivalent of the -dflag.
* manual_loadoptionalIf you are looking for creating your own custom load type, you can use this feature. The example below says that Ddosify will run the scenario 5 times, 10 times, and 20 times, respectively along with the provided durations. request_countand durationwill be auto-filled by Ddosify according to manual_loadconfiguration. In this example, request_countwill be 35 and the durationwill be 18 seconds. Also manual_loadoverrides load_typeif you provide both of them. As a result, you don’t need to provide these 3 parameters when using manual_load.

“manual_load”: [
{“duration”: 5, “count”: 5},
{“duration”: 6, “count”: 10},
{“duration”: 7, “count”: 20}
]

* proxyoptionalThis is the equivalent of the -Pflag.
* outputoptionalThis is the equivalent of the -oflag.
* stepsmandatoryThis parameter lets you create your scenario. Ddosify runs the provided steps, respectively. For the given example file step id: 2 will be executed immediately after the response of step id: 1 is received. The order of the execution is the same as the order of the steps in the config file.Details of each parameter for a step;
* idmandatoryEach step must have a unique integer id.
* urlmandatoryThis is the equivalent of the -tflag.
* protocoloptionalThis is the [...]

___________________________
@hacking_Attack
@Hacking_Video

equivalent of the -pflag.
* methodoptionalThis is the equivalent of the -mflag.
* headersoptionalList of headers with key:value format.
* payloadoptionalThis is the equivalent of the -bflag.
* payload_fileoptionalIf you need a long payload, we suggest using this parameter instead of payload.
* authoptionalBasic authentication.
“auth”: {
“username”: “test_user”,
“password”: “12345”
} othersoptional

This parameter accepts dynamic key: value pairs to configure connection details of the protocol in use.

“others”: {
“keep-alive”: true, // Default false
“disable-compression”: false, // Default true
“h2”: true, // Enables HTTP/2. Default false.
“disable-redirect”: true // Default false
}

Common Issues macOS Security Issue

“ddosify” can’t be opened because Apple cannot check it for malicious software.

* Open /usr/local/bin* Right click ddosifyand select Open
* Select Open
* Close the opened terminal Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding and Exploiting SSRF Vulnerabilities

https://cdn-images-1.medium.com/max/2600/1*0BuGmfZQfO--cFzhnhrIaQ.jpeg
I’ve completed TryHackMe’s SSRF room and completed PortSwigger’s SSRF labs and here’s what I’ve learned!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing like a Hacker

https://cdn-images-1.medium.com/max/911/1*g2d7panRNAlq82Ynl1-saA.png
When I think of a hacker phishing, I imagine someone on a boat waiting all day for a fish to bite.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking क्या होती है ?

दोस्तो अगर आपको hacking में इंटरेस्ट है और आप जानना चाहते है की Hacking क्या है ? और कैसे करे तो निचे दिए गए लिंक पर क्लिक करे

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do you successfully flood an email address?

All the online programs don't work. A y ideas om how I can figure this out?

submitted by /u/Clats9713
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to connect to 2 networks through CLI?

I'm making a script for a usbducky that steals known wifi ssid's and passwords from the target and basically I need the target pc to connect to my mini router while keeping the connection with its original network. so I need to know 2 things.

How would I make a virtual wireless interface without the use of sudo? (if possible)

How would I connect the new virtual interface to my router also without sudo?

I need them to be on the same network because the attack uses netcat.

submitted by /u/Background_Gene_3657
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So I have a really old iMac mini that still works. What’s the most creative way you can think of to break it?

So this thing is like 10 or 12 years old. I’ve nothing important on it, so it doesn’t need to be recoverable. To clarify, literally anything is on the table to mess with, and break this poor old computer. My Dad is on the team that writes IOS. I need a good Christmas project for me and my Dad. Go internet go!

submitted by /u/Kalistropha
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why is Log4Shell so bad?

https://cdn-images-1.medium.com/max/1600/0*OwDh2bpKcwh4ZrY0
Apache Log4j is an open-source logging library used in millions of JAVA projects, including a substantial percentage of enterprise…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video