Hacking Articles Tips Tricks Videos Tutorials

Backdoor Hackthebox Write-up| Backdoor Hackthebox Walkthrough

Write Up : backdoor HTB

14 viewsedited 12:28

Big confusion on global variables

hacking: security in practice
Big confusion on global variables

Please help. getBoo1 does not even run as it gets an error, saying that v1 is not defined, but getBoo2 runs perfectly well. why?

def getBoo1():
v1 += "aa"
return v1
def getBoo2():
return v1 + "aa"

v1 = "boo"
print(getBoo1())
print(getBoo2())

submitted by /u/Br3ikros
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Please help. getBoo1 does not even run as it gets an error, saying that v1 is not defined, but getBoo2 runs perfectly well. why? `def getBoo1():`...

16 viewsedited 13:27

Guide to CoverCompared’s Testnet & Bugbounty Programme
https://covercompared.medium.com/guide-to-covercompareds-testnet-bugbounty-programme-5f68054508fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Guide to CoverCompared’s Testnet & Bugbounty Programme

Our community asked and we have answered! We are super excited for our dApp’s testnet launch & bugbounty programme, all set to go live on…

16 viewsedited 15:23

17 views15:23

Our community asked and we have answered! We are super excited for our dApp’s testnet launch & bugbounty programme, all set to go live on…Continue reading on Medium » (https://covercompared.medium.com/guide-to-covercompareds-testnet-bugbounty-programme-5f68054508fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Guide to CoverCompared’s Testnet & Bugbounty Programme

Our community asked and we have answered! We are super excited for our dApp’s testnet launch & bugbounty programme, all set to go live on…

16 viewsedited 15:23

15 views16:29

Hacking on Medium
12 Neovim Themes with Tree-sitter Support

https://cdn-images-1.medium.com/max/700/0*tm_ef6LAaIuzeA4x.png
Let’s check out some great Neovim themes with tree-sitter support!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

12 Neovim Themes with Tree-sitter Support

Let’s check out some great Neovim themes with tree-sitter support!

15 viewsedited 16:29

14 views16:29

Hacking on Medium
Git Happens: Tryhackme Walkthrough by Akash

https://cdn-images-1.medium.com/max/809/1*sDNehxjg228bGxl_wZ-qGw.jpeg
Boss wanted me to create a prototype, so here it is! We even used something called “version control” that made deploying this really easy…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Git Happens: Tryhackme Walkthrough by Akash

Boss wanted me to create a prototype, so here it is! We even used something called “version control” that made deploying this really easy…

14 viewsedited 16:29

12 views16:29

Hacking on Medium
Network Security

Why Network Security is important

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Why Network Security is important

Network Security

13 viewsedited 16:29

13 views16:29

Hacking on Medium
Why You’ll Be Hacked One Day

https://cdn-images-1.medium.com/max/600/1*kxGyD24wl2qp3_DMbVC6Bg.png
Or maybe not, but it’s still interesting to think about the threat of hacking, and what that says about life online

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Why You’ll Be Hacked One Day

Or maybe not, but it’s still interesting to think about the threat of hacking, and what that says about life online

14 viewsedited 16:29

12 views16:56

digital world.local: Vengeance Vulnhub Walkthrough

Hacking Articles|Raj Chandel's Blog
digital world.local: Vengeance Vulnhub Walkthrough

Donavan's VENGEANCE (digitalworld.local: VENGEANCE) is a medium level machine designed for Vulnhub. This lab includes a difficult exploitation procedure that is suitable for those experienced CTF players that want to put their talents to the test in these conditions. So, let's get started and find out how to divide things up into reasonable chunks. Pentesting MethodologyNetwork ScanningLevel:MediumNetwork ScanningTo start, we have to use the netdiscover command to scan the network for the IP address of the target machine.netdiscoverIn this scenario, the victim's IP address is 192.168.1.180.nmap -p- -sV 192.168.1.180EnumerationWe'll start by attempting to use HTTP. Let's have a look at port 80 and see if anything interesting comes up. Because the Apache Server is listening on port 80, we can quickly verify this in the browser.enum4linux 192.168.1.180https://blogger.googleusercontent.com/img/a/AVvXsEgjKKX8e_X2JVAbNZRmCBFilx7yR0o3xV_VNLQVGRy_mFaIlCN0qSvUVCP6C0ZIJeJFyso6cWBj9kHL6V2nlanP234T5zNUnZbNdB2kuzPZypepa-_bgV4rXaFnMddnepITHMPaiunseeoAxeyZywkf6ry4SlNCAz03IfalzZ8oyuvROpjlAXGoAZAplg=s16000 In a couple of seconds, we discovered that there is a smb shared directory available on this machine, along with their directory name.___________________________
@hacking_Attack
@Hacking_Video

Blogspot

Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.

14 viewsedited 16:56

Hacking Articles|Raj Chandel's Blog digital world.local: Vengeance Vulnhub Walkthrough Donavan's VENGEANCE (digitalworld.local: VENGEANCE) is a medium level machine designed for Vulnhub. This lab includes a difficult exploitation procedure that is suitable…

CD9qcCiq2FuqU4HS5mOMiYwqDUu8LGTusVtWNk1sr1GQR2MiEIBUB94wVY2CoezmwbpSzFzK--8glECpRtvnWaRuxcKSw=s16000 With the help of script, we discovered two users on this system, sara and qinyi.ExploitationNow we must begin our exploitation phase using the information obtained through enumeration. First, we attempt to connect to the smb using smbclient.smbclient -L 192.168.1.180We got the identical page that the enum4linux script gave us. As a result, we must examine these directories. There is a user named Sara, as we already know. Now, we'll start with the sarapublic$ directory.smbclient //192.168.1.180/sarapublic$We found a lot of information in this directory. We used the get command to download all zip and text file into our system so that we could analyze it one at a time.sarapublic$directory.python -m SimpleHTTPServer 80https://blogger.googleusercontent.com/img/a/AVvXsEh0L9YtlYUD4P6aubydmi1KFth376rhPAQp_u_Vz-dMc2qwjq5J6rmD1FZZsNXmGQpH4aNLLQGpoOCzKu2WHBq8MjNGIgCPswbJBbBSaYiDZiVmePgzNjIUg77tMEYym4HtHa72xNv9L8ATzNP9RJwND1RfBH7FnuW9DSI5pT1sJTd9QPR2ADcE3_jBOQ=s16000 Cewl, on the other hand, is used to turn those text files into a word list for brute force. We'll start with profile.txt and then go on to additional text files one at a time.cewl 192.168.1.3/profile.txt -w dict.txtIn this system, we use locate zip2john to determine its exact coordinates.locate zip2johnWe obtained the hash of the gio.zipfile using zip2john. We can now utilize our dict.txtto crack./usr/sbin/zip2john gio.zip > hashhttps://blogger.googleusercontent.com/img/a/AVvXsEjNiRNf911hnq5T2VkDPcrbhwQJFKqVVGRIPsQbtCtSbMfmVS8Xi5YbuS-8GpbYp4uRwZcErPjqdSnRxhJmif59zF8xHP-XNE43LXkfu_EAF7OyDgW6HQbfxjVtjXqFE8XKsHh16iyQnXYGgXti_8SmnczWIfqAbZQJHXXJ5VvL9dP33Pgfl79RTc6IOA=s16000 Because we have a dictionary and a hash value, we can utilize john to crack this hash value. Congratulations!! We obtained the password for the gio.zip file which is nanotechnological.john --wordlist=dict.txt hashhttps://blogger.googleusercontent.com/img/a/AVvXsEikZKKLqJB9LBHasjQx6E3gc1lsuyaxJbaxOR7TL0LEyc7Qdr2iRDj70GnzCKPOKLIWzgQ_GY1sad6G7Y_PtCgTLgym1VcSZS4f6RyslN8GagMy7wY_vAYR6eEiAPi_mbnmqtdAlEF8EUnzwScfzUmVx4oBMXyxV5G6oWgoFKjCgwAq16lGIv-DNwLaJg=s16000 We now have a password that we successfully cracked using the unzip command and received three files: a txt, a png, and a pptx.___________________________
@hacking_Attack
@Hacking_Video

14 viewsedited 16:56

digital world.local: Vengeance Vulnhub Walkthrough

Hacking Articles|Raj Chandel's Blog
digital world.local: Vengeance Vulnhub Walkthrough

___________________________
@hacking_Attack
@Hacking_Video

Blogspot

Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.

11 viewsedited 16:56