authentication workflow (None for random selection, specify multiple in a comma-separated string) (default: None) -eID / --aad_endpoint <string: Endpoint ID to use during authentication workflow (None for random selection, specify multiple in a comma-separated string) (default: None) -S / --shuffle_auth_order: Shuffle order of authentication attempts so that each iteration (User1:Pass1, User2:Pass1, User3:Pass1) will be sprayed in a random order, and with a random arrangement of passwords, e.g. (User4:Pass16, User13:Pass25, User19:Pass40). Be aware this option introduces the possibility that the time between consecutive authentication attempts for a given user may occur as quickly as DELAYseconds apart. Consider using the -mD / --min_cred_loop_delayoption to enforce a minimum delay between authentication attempts for any given user. (default: False) -SO / --shuffle_optimization_attempts <int: Number of random execution plans to generate for identifying the fastest execution plan (default: 10) -mD / --min_cred_loop_delay <int: Minimum time to wait between authentication attempts for a given user. This option takes into account the time one spray iteration will take, so a pre-authentication delay may not occur every time (disable with 0) (default: 0) -cUA / --custom_user_agent <string: Set custom user agent for authentication requests (default: None) -rUA, --random_user_agent: Randomize user agent for authentication requests (default: False) Spray Mode Options--lockout <int: Number of account lockouts to observe before aborting spraying session (disable with 0) (default: 5) --proxy <string: HTTP Proxy URL (format: http[s]://proxy.address:port) (default: None) -R / --resume_index <int: Resume spraying passwords from this position in the execution plan (default: 0) AcknowledgementsAuthorTool / OtherLink@__TexasRangermsspray: Conduct password spray attacks against Azure AD as well as validate the implementation of MFA on Azure and Office 365 endpointshttps://github.com/SecurityRiskAdvisors/msspray DisclaimerUsage of this software for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state and federal laws, in addition to any applicable acceptable use policies. Using this software releases the author(s) of any responsiblity for misuse or damage caused. Download Spray365

Hacking on Medium
TomGhost — TryHackMe Challenge

https://cdn-images-1.medium.com/max/1606/1*x9Qx9m6I3bFEkKIj88lJsw.png
TL;DR: This machine teaches exploitation of CVE-2020–1938, a serious vulnerability in Tomcat that takes advantage of a flat in AJP…

Continue reading on Medium »

Hacking on Medium
What is Networking? Try Hack Me -CTF

https://cdn-images-1.medium.com/max/909/1*MSKctMWDGlBwjLyhUkgCUQ.jpeg
So, let’s solve What is Networking room. Let’s go!

Continue reading on Medium »

Hacking on Medium
Apache Log4j Vulnerability

https://cdn-images-1.medium.com/max/1920/1*Ls5dBsbdH1mC6eO-SiI6Xw.jpeg
If you are remotely related to or interested in Cyber security, Software engineering or IT you must have recently heard the buzz words i.e…

Continue reading on Medium »

hacking: security in practice
Ratted but no trace?

Hi Today my pc got infected with something. I was watching Netflix and a window popped up and said:“ratted by coazy“. I didn’t think anything about this, but some seconds later I heard sounds not coming from Netflix. Over time they increased and after like 2 minutes my browser was closed and multiple popups showed up and said: „ ratted by coazy“. Seconds later a Jeff the killer image was shown full screen and screams were played. I immediately shut down my pc and booted my Kaspersky cd and did a full scan, but it did not find anything. I started my pc again and checked with malewarebytes, this time it found a folder for RiskWare.KeyLogger in c:\ProgramData\BFKData. I have no idea what BFKData is and how I got ratted without Kaspersky finding anything. Please help me.

submitted by /u/Hallolollmao
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Did you ever try a Log4J exploit over a bluetooth speaker? What do you think is possible here..

I know many bluetooth speakers with java at its core, how do you think you can inject your log expression or did you ever try it?

submitted by /u/IAmAPureGamer
[link] [comments]

Information Disclosure leads to sensitive credential($$$)
https://medium.com/@mamunwhh/information-disclosure-leads-to-sensitive-credential-35e779f6f4db?source=rss------bug_bounty-5

Hi Hackers, hope you are fine.my name is khan mamun(white hat hacker) This is my 3rd write up.Continue reading on Medium » (https://medium.com/@mamunwhh/information-disclosure-leads-to-sensitive-credential-35e779f6f4db?source=rss------bug_bounty-5)

Information Disclosure leads to sensitive credential($$$)

Hi Hackers, hope you are fine.my name is khan mamun(white hat hacker) This is my 3rd write up.Continue reading on Medium »
Read more...

SQL Injection — 1st Dose

An Injection that is not used for treatment!Continue reading on Medium »
Read more...

SQL Injection — 1st Dose
https://medium.com/@ARON.IN/sql-injection-1st-dose-24aee1c2bf38?source=rss------bug_bounty-5

An Injection that is not used for treatment!Continue reading on Medium » (https://medium.com/@ARON.IN/sql-injection-1st-dose-24aee1c2bf38?source=rss------bug_bounty-5)

hacking: security in practice
PiZW2 + P4WNP1?

Anyone tried P4wnp1 on the new Pi Zero W 2 yet? I absolutely Love how flexible P4wnp1 is and with the new ZW2 being 3 times faster than the 1 I'm really interested in seeing how plug and play it is without modification. Anyone give it a try yet? Im hoping not have my ZW2 within the next week to give it a shot.

submitted by /u/EEPROM1605
[link] [comments]

Spamscanner - Spam Scanner Is The Best Anti-Spam, Email Filtering, And Phishing Prevention Service
http://www.kitploit.com/2021/12/spamscanner-spam-scanner-is-best-anti.html

sudo apt-get install build-essential clamav-daemon clamav-freshclam clamav-unofficial-sigs -qq
sudo service clamav-daemon startYou may need to run sudo freshclam -v if you receive an error when checking sudo service clamav-daemon status, but it is unlikely and depends on your distro.Configure ClamAV:sudo vim /etc/clamav/clamd.conf-Example
+#Example

-#StreamMaxLength 10M
+StreamMaxLength 50M

+# this file path may be different on your OS (that's OK)

\-#LocalSocket /tmp/clamd.socket
\+LocalSocket /tmp/clamd.socketsudo vim /etc/clamav/freshclam.conf-Example
+#ExampleEnsure that ClamAV starts on boot:systemctl enable freshclamd
systemctl enable clamd
systemctl start freshclamd
systemctl start clamdmacOSInstall ClamAV:brew install clamavConfigure ClamAV:# if you are on Intel macOS
sudo mv /usr/local/etc/clamav/clamd.conf.sample /usr/local/etc/clamav/clamd.conf

# if you are on M1 macOS (or newer brew which installs to `/opt/homebrew`)
sudo mv /opt/homebrew/etc/clamav/clamd.conf.sample /opt/homebrew/etc/clamav/clamd.conf# if you are on Intel macOS
sudo vim /usr/local/etc/clamav/clamd.conf

# if you are on M1 macOS (or newer brew which installs to `/opt/homebrew`)
sudo vim /opt/homebrew/etc/clamav/clamd.conf-Example
+#Example

-#StreamMaxLength 10M
+StreamMaxLength 50M

+# this file path may be different on your OS (that's OK)

\-#LocalSocket /tmp/clamd.socket
\+LocalSocket /tmp/clamd.socket# if you are on Intel macOS
sudo mv /usr/local/etc/clamav/freshclam.conf.sample /usr/local/etc/clamav/freshclam.conf

# if you are on M1 macOS (or newer brew which installs to `/opt/homebrew`)
sudo mv /opt/homebrew/etc/clamav/freshclam.conf.sample /opt/homebrew/etc/clamav/freshclam.conf# if you are on Intel macOS
sudo vim /usr/local/etc/clamav/freshclam.conf

# if you are on M1 macOS (or newer brew which installs to `/opt/homebrew`)
sudo vim /opt/homebrew/etc/clamav/freshclam.conf-Example
+#ExamplefreshclamEnsure that ClamAV starts on boot:sudo vim /Library/LaunchDaemons/org.clamav.clamd.plistIf you are on Intel macOS: <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> Label org.clamav.clamd KeepAlive Program /usr/local/sbin/clamd ProgramArguments clamd RunAtLoad '><?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">


Label
org.clamav.clamd
KeepAlive

Program
/usr/local/sbin/clamd
ProgramArguments

clamd

RunAtLoad


If you are on M1 macOS (or newer brew which installs to /opt/homebrew) <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> Label org.clamav.clamd KeepAlive Program /opt/homebrew/sbin/clamd ProgramArguments clamd RunAtLoad '><?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">


Label
org.clamav.clamd
KeepAlive

Program
/opt/homebrew/sbin/clamd
ProgramArguments

clamd

RunAtLoad


Enable it and start it on boot:sudo launchctl load /Library/LaunchDaemons/org.clamav.clamd.plist
sudo launchctl start /Library/LaunchDaemons/org.clamav.clamd.plistYou may want to periodically run freshclam to update the config, or configure a similar plist configuration for launchctl.Installnpm (https://www.npmjs.com/):npm install spamscannerUsage { try { const scan = await scanner.scan(source); console.log('scan', scan); } catch (err) { console.error(err); } }); // then/catch usage scanner .scan(source) .then(scan => console.log('scan', scan)) .catch(console.error); // callback usage if (err) return console.error(err); scanner.scan(source, (err, scan) => { if (err) return console.error(err); console.log('scan', scan); }); ">const fs = require('fs');
const path = require('path');