Hacking on Medium
Git Happens: Tryhackme Walkthrough by Akash

https://cdn-images-1.medium.com/max/809/1*sDNehxjg228bGxl_wZ-qGw.jpeg
Boss wanted me to create a prototype, so here it is! We even used something called “version control” that made deploying this really easy…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Network Security

Why Network Security is important

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why You’ll Be Hacked One Day

https://cdn-images-1.medium.com/max/600/1*kxGyD24wl2qp3_DMbVC6Bg.png
Or maybe not, but it’s still interesting to think about the threat of hacking, and what that says about life online

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
digital world.local: Vengeance Vulnhub Walkthrough

Donavan's VENGEANCE (digitalworld.local: VENGEANCE) is a medium level machine designed for Vulnhub. This lab includes a difficult exploitation procedure that is suitable for those experienced CTF players that want to put their talents to the test in these conditions. So, let's get started and find out how to divide things up into reasonable chunks. Pentesting MethodologyNetwork ScanningLevel:MediumNetwork ScanningTo start, we have to use the netdiscover command to scan the network for the IP address of the target machine.netdiscoverIn this scenario, the victim's IP address is 192.168.1.180.nmap -p- -sV 192.168.1.180EnumerationWe'll start by attempting to use HTTP. Let's have a look at port 80 and see if anything interesting comes up. Because the Apache Server is listening on port 80, we can quickly verify this in the browser.enum4linux 192.168.1.180https://blogger.googleusercontent.com/img/a/AVvXsEgjKKX8e_X2JVAbNZRmCBFilx7yR0o3xV_VNLQVGRy_mFaIlCN0qSvUVCP6C0ZIJeJFyso6cWBj9kHL6V2nlanP234T5zNUnZbNdB2kuzPZypepa-_bgV4rXaFnMddnepITHMPaiunseeoAxeyZywkf6ry4SlNCAz03IfalzZ8oyuvROpjlAXGoAZAplg=s16000 In a couple of seconds, we discovered that there is a smb shared directory available on this machine, along with their directory name.___________________________
@hacking_Attack
@Hacking_Video

CD9qcCiq2FuqU4HS5mOMiYwqDUu8LGTusVtWNk1sr1GQR2MiEIBUB94wVY2CoezmwbpSzFzK--8glECpRtvnWaRuxcKSw=s16000 With the help of script, we discovered two users on this system, sara and qinyi.ExploitationNow we must begin our exploitation phase using the information obtained through enumeration. First, we attempt to connect to the smb using smbclient.smbclient -L 192.168.1.180We got the identical page that the enum4linux script gave us. As a result, we must examine these directories. There is a user named Sara, as we already know. Now, we'll start with the sarapublic$ directory.smbclient //192.168.1.180/sarapublic$We found a lot of information in this directory. We used the get command to download all zip and text file into our system so that we could analyze it one at a time.sarapublic$directory.python -m SimpleHTTPServer 80https://blogger.googleusercontent.com/img/a/AVvXsEh0L9YtlYUD4P6aubydmi1KFth376rhPAQp_u_Vz-dMc2qwjq5J6rmD1FZZsNXmGQpH4aNLLQGpoOCzKu2WHBq8MjNGIgCPswbJBbBSaYiDZiVmePgzNjIUg77tMEYym4HtHa72xNv9L8ATzNP9RJwND1RfBH7FnuW9DSI5pT1sJTd9QPR2ADcE3_jBOQ=s16000 Cewl, on the other hand, is used to turn those text files into a word list for brute force. We'll start with profile.txt and then go on to additional text files one at a time.cewl 192.168.1.3/profile.txt -w dict.txtIn this system, we use locate zip2john to determine its exact coordinates.locate zip2johnWe obtained the hash of the gio.zipfile using zip2john. We can now utilize our dict.txtto crack./usr/sbin/zip2john gio.zip > hashhttps://blogger.googleusercontent.com/img/a/AVvXsEjNiRNf911hnq5T2VkDPcrbhwQJFKqVVGRIPsQbtCtSbMfmVS8Xi5YbuS-8GpbYp4uRwZcErPjqdSnRxhJmif59zF8xHP-XNE43LXkfu_EAF7OyDgW6HQbfxjVtjXqFE8XKsHh16iyQnXYGgXti_8SmnczWIfqAbZQJHXXJ5VvL9dP33Pgfl79RTc6IOA=s16000 Because we have a dictionary and a hash value, we can utilize john to crack this hash value. Congratulations!! We obtained the password for the gio.zip file which is nanotechnological.john --wordlist=dict.txt hashhttps://blogger.googleusercontent.com/img/a/AVvXsEikZKKLqJB9LBHasjQx6E3gc1lsuyaxJbaxOR7TL0LEyc7Qdr2iRDj70GnzCKPOKLIWzgQ_GY1sad6G7Y_PtCgTLgym1VcSZS4f6RyslN8GagMy7wY_vAYR6eEiAPi_mbnmqtdAlEF8EUnzwScfzUmVx4oBMXyxV5G6oWgoFKjCgwAq16lGIv-DNwLaJg=s16000 We now have a password that we successfully cracked using the unzip command and received three files: a txt, a png, and a pptx.___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
digital world.local: Vengeance Vulnhub Walkthrough

___________________________
@hacking_Attack
@Hacking_Video

NEED HELP!
https://www.reddit.com/r/Pentesting/comments/rjzul2/need_help/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/j_m_v_r_p (https://www.reddit.com/user/j_m_v_r_p)
[link] (https://www.reddit.com/r/tryhackme/comments/rjyfvn/need_help/) [comments] (https://www.reddit.com/r/Pentesting/comments/rjzul2/need_help/)

___________________________
@hacking_Attack
@Hacking_Video

/redteamsec Subdirect Statistics
https://www.reddit.com/r/redteamsec/comments/rjyvqy/redteamsec_subdirect_statistics/

submitted by /u/_kiminara (https://www.reddit.com/user/_kiminara)
[link] (https://redditpagematrics.com/r/redteamsec) [comments] (https://www.reddit.com/r/redteamsec/comments/rjyvqy/redteamsec_subdirect_statistics/)

___________________________
@hacking_Attack
@Hacking_Video

I made a tool to cover your tracks post-exploitation on Linux machines for Red Teamers
https://www.reddit.com/r/redteamsec/comments/rk0bep/i_made_a_tool_to_cover_your_tracks/

submitted by /u/mufeedvh (https://www.reddit.com/user/mufeedvh)
[link] (https://github.com/mufeedvh/moonwalk) [comments] (https://www.reddit.com/r/redteamsec/comments/rk0bep/i_made_a_tool_to_cover_your_tracks/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to man in the middle Tor exit nodes for Bitcoin wallet.dat theft

https://external-preview.redd.it/Ya0yiPg-RmCPJG_3gsQkJ2pPrusY0F2AlNX9DxifvbY.jpg?width=216&crop=smart&auto=webp&s=6772d9f917bd584c804736c881055e3bc7c976fb submitted by /u/oxagast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Rate my cert path pt2

Pt1: https://www.reddit.com/r/hacking/comments/riqaim/rate_my_cert_path/?utm_medium=android_app&utm_source=share

After some input and further digging I'm reevaluating a path. I still have the same interests from the original post, but I'd rather fast track to security in some way and work my way up while I work on my next cert or one of the other small side interests like OSINT.

So in this order I was thinking:

LPIC-1

Security+?

Cysa+

Cisco CBROPS?

eJPT

OSCP

If an employer on the way wants to help with SANS or GIAC stuff then I'll head with that. Besides this path, my other specific question was can/should I skip security+ and go right for CYSA+ and should I bother with Cisco CBROPS? I'm also not sure if higher LPIC would be of benefit?

My end goal is pentesting of some kind so I imagine some time as a SOC analyst to get in, and from there I'm not sure if I would climb the tiers or look for another type of position?

submitted by /u/JudasRose
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BusKill: A USB dead-man-switch triggered if someone physically yanks your laptop away

https://external-preview.redd.it/8aGVxz7LtPy0QXeITd_Dln_7DICVGXfPniPlBj2ZX1c.jpg?width=640&crop=smart&auto=webp&s=5b5bb77fc2289a0a9f140c8fc267e7db8d3145b0 submitted by /u/maltfield
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
digital world.local: Vengeance Vulnhub Walkthrough

Donavan’s VENGEANCE (digitalworld.local: VENGEANCE) is a medium level machine designed for Vulnhub. This lab includes a difficult exploitation procedure that is suitable for those experienced

The post digital world.local: Vengeance Vulnhub Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video