Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Facebook Leak? เกิดอะไรขึ้นและเราทำอะไรเพื่อป้องกันตัวได้บ้าง?
https://cdn-images-1.medium.com/max/600/1*6W2ZkZfI-YOHCRH--HDLlQ.jpeg
ปัญหาความเป็นส่วนตัว, การเก็บข้อมูลและการรักษาความลับดูจะเป็นปัญหาของเฟซบุ๊กมาทุกยุคทุกสมัย นับตั้งแต่ข้อมูลหลุดบ่อยครั้งในปี 2017-2018…
Continue reading on Medium »
Facebook Leak? เกิดอะไรขึ้นและเราทำอะไรเพื่อป้องกันตัวได้บ้าง?
https://cdn-images-1.medium.com/max/600/1*6W2ZkZfI-YOHCRH--HDLlQ.jpeg
ปัญหาความเป็นส่วนตัว, การเก็บข้อมูลและการรักษาความลับดูจะเป็นปัญหาของเฟซบุ๊กมาทุกยุคทุกสมัย นับตั้งแต่ข้อมูลหลุดบ่อยครั้งในปี 2017-2018…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Polkatrain hacking incident is a malicious attack by hacker using problem similar with…
According to the latest official news, Polkatrain team has identified and verified that the hacking incident is a malicious attack by…
Continue reading on Medium »
The Polkatrain hacking incident is a malicious attack by hacker using problem similar with…
According to the latest official news, Polkatrain team has identified and verified that the hacking incident is a malicious attack by…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
SecuriElite, la falsa società di sicurezza offensiva di un gruppo di hacker nordcoreani
https://cdn-images-1.medium.com/max/1600/1*TFgZVtH7D7EZ4LWTJWrtRg.jpeg
Lo scorso gennaio, il Threat Analysis Group (TAG) di Google, specialisti nel monitoraggio di gruppi APT (Advanced Persistent Threat)…
Continue reading on BV TECH Group »
SecuriElite, la falsa società di sicurezza offensiva di un gruppo di hacker nordcoreani
https://cdn-images-1.medium.com/max/1600/1*TFgZVtH7D7EZ4LWTJWrtRg.jpeg
Lo scorso gennaio, il Threat Analysis Group (TAG) di Google, specialisti nel monitoraggio di gruppi APT (Advanced Persistent Threat)…
Continue reading on BV TECH Group »
Burp Suite: Match And Replace
https://thexssrat.medium.com/burp-suite-match-and-replace-babac6415cad?source=rss------bug_bounty-5
https://thexssrat.medium.com/burp-suite-match-and-replace-babac6415cad?source=rss------bug_bounty-5
IntroductionContinue reading on Medium » (https://thexssrat.medium.com/burp-suite-match-and-replace-babac6415cad?source=rss------bug_bounty-5)
hacking: security in practice
Trying to get unlimited amounts of primogems to troll my friends
How do I get an infinite amount of primogems in genshin impact because im looking for ways to troll my friends by getting every character the second the banner starts
submitted by /u/MeatballHinata
[link] [comments]
Trying to get unlimited amounts of primogems to troll my friends
How do I get an infinite amount of primogems in genshin impact because im looking for ways to troll my friends by getting every character the second the banner starts
submitted by /u/MeatballHinata
[link] [comments]
reddit
Trying to get unlimited amounts of primogems to troll my friends
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
hacking: security in practice
[Android Hacking] How does Lucky Patcher work? And how to manually patch apks?
I wanted to learn more about how LuckyPatcher patches apks and removes ads and in app purchases and how it does various other custom patches. I want to learn the procedure for manually patching apks. I couldn't find any useful resources online. Most places just teach you how to use LuckyPatcher.
submitted by /u/GamerWael
[link] [comments]
[Android Hacking] How does Lucky Patcher work? And how to manually patch apks?
I wanted to learn more about how LuckyPatcher patches apks and removes ads and in app purchases and how it does various other custom patches. I want to learn the procedure for manually patching apks. I couldn't find any useful resources online. Most places just teach you how to use LuckyPatcher.
submitted by /u/GamerWael
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
hacking: security in practice
How to get started?
My sister recently got scammed in an online game and I wish to get back at the scammer and to get her stuff back. How do I get started?
The game is Animal Jam and the accounts are not very secure.
submitted by /u/BorkiDoggo0w0
[link] [comments]
How to get started?
My sister recently got scammed in an online game and I wish to get back at the scammer and to get her stuff back. How do I get started?
The game is Animal Jam and the accounts are not very secure.
submitted by /u/BorkiDoggo0w0
[link] [comments]
reddit
How to get started?
A subreddit dedicated to hacking and hackers. Constructive collaboration and learning about exploits, industry standards, grey and white hat...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc...
http://www.kitploit.com/2021/04/scylla-simplistic-information-gathering.html
http://www.kitploit.com/2021/04/scylla-simplistic-information-gathering.html
Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles (main platforms) assigned to a certain username. In continuation, Scylla has shodan support so you can search for devices all over the internet, it also has in-depth geolocation (https://www.kitploit.com/search/label/Geolocation) capabilities. Lastly, Scylla has a finance section which allows users to check if a credit/debit card number has been leaked/pasted in a breach and returns information on the cards IIN/BIN. This is the first version of the tool so please contact the developer if you want to help contribute and add more to Scylla.
Installation
1: git clone https://www.github.com/DoubleThreatSecurity/Scylla
2: cd Scylla
3: sudo python3 -m pip install -r requirments.txt
4: python3 scylla.py --help
Usage
python3 scylla.py --instagram davesmith --twitter davesmith
Command 1 will return account information of that specified Instagram & Twitter account.
python3 scylla.py --username johndoe
Command 2 will return all the social media (main platforms) profiles associated with that username.
python3 scylla.py --username johndoe -l="john doe"
Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query
python3 scylla.py --info google.com
Command 4 will return crucial WHOIS information about the webserver/website. python3 scylla.py -r +14167777777
Command 5 will dump information on that phone number (https://www.kitploit.com/search/label/Phone%20Number) (Carrier, Location, etc.)
python3 scylla.py -s apache
Command 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -s webcamxp
Command 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcam query but webcamxp returns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -g 1.1.1.1
Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.
python3 scylla.py -c 123456789123456
Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option.
Menu
usage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]
optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER
Installation
1: git clone https://www.github.com/DoubleThreatSecurity/Scylla
2: cd Scylla
3: sudo python3 -m pip install -r requirments.txt
4: python3 scylla.py --help
Usage
python3 scylla.py --instagram davesmith --twitter davesmith
Command 1 will return account information of that specified Instagram & Twitter account.
python3 scylla.py --username johndoe
Command 2 will return all the social media (main platforms) profiles associated with that username.
python3 scylla.py --username johndoe -l="john doe"
Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query
python3 scylla.py --info google.com
Command 4 will return crucial WHOIS information about the webserver/website. python3 scylla.py -r +14167777777
Command 5 will dump information on that phone number (https://www.kitploit.com/search/label/Phone%20Number) (Carrier, Location, etc.)
python3 scylla.py -s apache
Command 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -s webcamxp
Command 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcam query but webcamxp returns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -g 1.1.1.1
Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.
python3 scylla.py -c 123456789123456
Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option.
Menu
usage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]
optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER
return the information associated with specified
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHO NE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN
API NOTICE
The API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com (https://www.numverify.com/), and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API (https://www.kitploit.com/search/label/Shodan%20API) key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py).
Discord Server
https://discord.gg/jtZeWek
Ethical Notice
The developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all.
Download Scylla (https://github.com/DoubleThreatSecurity/Scylla)
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHO NE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN
API NOTICE
The API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com (https://www.numverify.com/), and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API (https://www.kitploit.com/search/label/Shodan%20API) key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py).
Discord Server
https://discord.gg/jtZeWek
Ethical Notice
The developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all.
Download Scylla (https://github.com/DoubleThreatSecurity/Scylla)