Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
RCLocals - Linux Startup Analyzer

http://1.bp.blogspot.com/-pZ6n3FAVAyc/Ydg4ky5vksI/AAAAAAAA7ns/ARr2StWdejMHCshLORn4Cninhe_zn8rGACK4BGAYYCw/w640-h242/RCLocals_1_1-710961.jpeg
Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more
Things covered:

·List GPG keys trusted by the system

·Installed Packages

·File integrity

·Process integrity (process and libraries loaded in a process that not belongs to any installed package)

·Processes with name spoofed (processes that use prctl() to change their name in /bin/ps)

·CRON entries

·RC files

·X system startup files

·Active Systemd Units

·Systemd Timer Units

·tmpfiles.d

·linger users

USAGE

For only suspicious information:

#python3 rclocals.py --triage

For detailed information:

#python3 rclocals.py --all

Screenshots

http://1.bp.blogspot.com/-pZ6n3FAVAyc/Ydg4ky5vksI/AAAAAAAA7ns/ARr2StWdejMHCshLORn4Cninhe_zn8rGACK4BGAYYCw/w640-h242/RCLocals_1_1-710961.jpeg

http://2.bp.blogspot.com/-9lIuUc6YfWQ/Ydg4lLf_5CI/AAAAAAAA7n0/bHhQJT0iefQz-42CDVCiFGDaJ147vggGgCK4BGAYYCw/w640-h576/RCLocals_2_2-712209.png

http://1.bp.blogspot.com/-_QyTqgOjcbA/Ydg4lSsB8DI/AAAAAAAA7n8/V1YsW7krWvEQpowzApJ1yFa5A0Yo91QPgCK4BGAYYCw/w640-h356/RCLocals_3_3-713220.png

http://3.bp.blogspot.com/-E1JXfSQ7768/Ydg4lnWy1yI/AAAAAAAA7oE/N3GRJ2rpn9IbQKDFBJ15CFaS_g08ntBiQCK4BGAYYCw/w528-h640/RCLocals_4_4-714244.png
Download RCLocals

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Raid forums admin panel

Who else has tried to fuck around and access https://raidforums/admin.php , if you haven’t I’d recommend it for a good laugh.

submitted by /u/AntwerpRaf
[link] [comments]
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Tracking a PDF Attachment

Afternoon All,

I'm having to send a response to an organisation who has been unethical and used underhand tactics.

The deadline is tomorrow (Monday 10th) and I want to be able to see that my response (PDF document) has been received and read.

submitted by /u/DCzy7
[link] [comments]
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Simple php webshell works on DVWA, but not on Mutillidae II ver 2.8.76

The following php webshell is working just fine on DVWA

However, when I tried it on Mutillidae II Version: 2.8.76, I'm getting the following error.
Warning: Undefined array key "cmd" in /tmp/webshell.php on line 1 Deprecated: system(): Passing null to parameter #1 ($command) of type string is deprecated in /tmp/webshell.php on line 1 Fatal error: Uncaught ValueError: system(): Argument #1 ($command) cannot be empty in /tmp/webshell.php:1 Stack trace: #0 /tmp/webshell.php(1): system('') #1 /var/www/mutillidae/index.php(516): require_once('/tmp/1-simple-w...') #2 {main} thrown in /tmp/webshell.php on line 1
What's wrong in this shell and why can't I use it on Mutillidae?

submitted by /u/w0lfcat
[link] [comments]
Sent by @TheFeedReaderBot

___________________________
@hacking_Attack
@Hacking_Video
PHP Type Juggling Vulnerability

بِسْمِ ٱللَّٰهِ ٱلرَّحْمَٰنِ ٱلرَّحِيمِContinue reading on Medium »
Read more...
Host Header Injection Lead To Account Takeover

Hello amazing hacker, Today, I want to talk about one of my finding in private pentest program that lead me takeover other user account by…Continue reading on Medium »
Read more...