Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is it possible to hack someone’s devices (phone, computer, etc) remotely by using an IP address?

Someone that I know is being accused of impersonating someone on tinder and selling their images off of it. The person claims that tinder corporate released the IP address to them, and then they had their brother (who is allegedly an IT in the military) use the IP address to remotely hack his devices to prove that he is the one who did this. When I research it, most of what I find is that you can’t remotely hack someone’s devices by using an IP address.

submitted by /u/Creepycurious
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is it possible to hack someone’s devices (phone, computer, etc)...

Someone that I know is being accused of impersonating someone on tinder and selling their images off of it. The person claims that tinder...

14 viewsedited 15:12

Dark Reading: Attacks/Breaches
5 Reasons Why M&A Is the Engine Driving Cybersecurity

Consistent acquisition of key technologies and talent is a proven strategy for growth.

14 views15:36

Source

Hacking Articles Tips Tricks Videos Tutorials

14 views16:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
ThreatBox : A Standard And Controlled Linux Based Attack Platform

ThreatBox is a standard and controlled Linux based attack platform. I’ve used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of ansible playbooks. Why Ansible? Why not? This seemed to be the next natural evolution to the configuration of standard attack platforms.

This project uses ansible playbooks and roles to perform post deployment configuration on a linux target (Tested on Ubuntu 18.04).

The project is designed to be used as a starter process in creating, managing, and using a standard attack platform for red teaming or penetration testing.

Detail on the concept of a Standard Attack Platform can be found it the book Red Team Development and Operations – A practical guide, written by Joe Vest and James Tubberville.

Features

* Standard tools defined as ansible roles
* Customizations designed to make security testing easier
* Variable list to add or remove git repositories, OS packages, or python modules. (threatbox.yml)
* Version tracking of the deployed instance version and the deploy tool version. This is helpful it meeting compliance rules and can help minimize fear by actively tracking all tools.
* Threatbox version created at deployment and displayed in desktop wallpaper
* Deployed software tracked in ~/Desktop/readme

* SSH port auto-switching. The deployment starts on port 22, but reconfigures the target system to the desired SSH port using the ansible_portvariable in threatbox.yml* Download and compile several .net toolkits (i.e. SeatBelt.exe from Ghostpack https://github.com/GhostPack/Seatbelt)
* Most python projects installed using pipenv. Use pipenv shellin the project directory to access. See https://realpython.com/pipenv-guide/ for pipenv usage guidance Project Files

The following list highlights key components of this project.
File/DirectoryDescriptionUsagehostAnsible hosts fileUpdate with IP addresses of target ansible systemsgroup_vars/threatbox.ymlcommon variablesvariable used for the project. update as needed.threatbox_playbox.ymlPrimary ansible playbookUpdate as need to add additional roles or featuresroles/commonCommon OS platform configurationSetup common OS settings (i.e set version in background or build)roles/.other specific roles to configure or deploy toolsadd or modify roles in roles/ Quickstart Provision

Provision one or more targets.

Note: This project was tested on Ubuntu 18.04 deployed in Digitalocean Configuration

1. Copy hosts.sampleto hosts2. Edit hostswith the IP(s) of your target systems
3. Copy group_vars\threatbox.yml.sampleto group_vars\threatbox.yml4. Edit group_vars\threatbox.ymlwith the updated variables you would like to use
* Don’t forget to update SSH key with a key that has access to the remote target Ansible commands

#OSX issue https://github.com/ansible/ansible/issues/32499
if [[ “$(uname)” == “Darwin” ]]
then
export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=yes;
fi
#Ansible Logging
rm ./ansible.log
export ANSIBLE_LOG_PATH=”ansible.log”
#Ansible Debugging
export ANSIBLE_DEBUG=False
#Execute playbook
ansible-playbook -e ansible_python_interpreter=/usr/bin/python3 -i hosts threatbox_playbook.yml

Tested with this ansible.cfg

[defaults]
host_key_checking = False
pipelining = True
forks = 100
timeout = 600
stdout_callback = yaml
bin_ansible_callbacks = True
callback_whitelist = profile_roles, profile_tasks, timer
mitogen
strategy_plugins = ~/Documents/mitogen-0.2.9/ansible_mitogen/plugins/strategy
strategy = mitogen_linear

Remotely Access the system Console access with SSH

Note: SSH may be set to a non-standard[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

ThreatBox : A Standard And Controlled Linux Based Attack Platform

ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years.

13 viewsedited 16:47

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials ThreatBox : A Standard And Controlled Linux Based Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I’ve used a version of this for years. It started as a collection of scripts, lived as a rolling virtual…

port during setup. This value is set in the group_vars/threatbox.ymlfiles

threatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa root@$threatboxip

GUI Access with VNC over SSH

Note: VNC is setup but not allowed over the network. You must use an SSH tunnel to access.

threatboxip=10.10.10.10
sshport=52222
ssh -p $sshport -i ~/.ssh/threatbox_id_rsa -L 5901:localhost:5901 root@$threatboxip Download

___________________________
@hacking_Attack
@Hacking_Video

12 viewsedited 16:47

Hacking Articles Tips Tricks Videos Tutorials

11 views16:47

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
UDP-Hunter : Network Assessment Tool For Various UDP Services Covering Both IPv4 And IPv6 Protocols

UDP-Hunter is a UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing auditing of widely known UDP protocols for IPv6 and IPv4 hosts. As of today, UDP Hunter supports 19 different service probes. The tool allows you to do bulk scanning of large networks as well as targeted host scanning for specific ports and more. Once an open service is discovered, UDP Hunter takes it one step further and even provides you guidance on how you can possibly exploit the discovered services. UDP Hunter provides reports in a neat text format, however, support for more formats is under way. How does UDP Hunter work?

UDP Hunter creates a list of IPs when any IP range is provided to it. It also supports domain names which will be resolved and the IP will be added to the list. Once the list has been created internally by UDP Hunter, it will send UDP probes to all listed IPs. If the host is running a UDP service, it will respond. UDP Hunter basically sniffs network particularly for UDP traffic, then reads all UDP packets coming to the target host. All UDP probes received after running UDP Hunter will be reported. However, there is an option (by setting –noise=false) to ignore irrelevant UDP packets and only observe the UDP traffic of interest originated from the hosts and services/ports which are mentioned in the target list. The idea behind creating UDP Hunter was initially inspired by udp-proto-scanner. I heartily thank Portcullis Labs for it and also Anant and Sumit Siddharth(Sid) for their valuable inputs while working on UDP Hunter. Supported UDP Probes

As of today, we support the following UDP service probes on their default ports:

* ike – 500 port
* rpc / RPCCheck – 111 port
* ntp / NTPRequest – 123 port
* snmp-public / SNMPv3GetRequest – 161 port
* ms-sql / ms-sql-slam – 1434 port
* netop – 6502 port
* tftp – 69 port
* db2 – 523 port
* citrix – 1604 port
* echo – 7 port
* chargen – 19 port
* systat – 11 port
* daytime / time – 13 port
* DNSStatusRequest / DNSVersionBindReq – 53 port
* NBTStat – 137 port
* xdmcp – 177 port
* net-support – 5405 port
* mdns-zeroconf – 5353 port
* gtpv1 – 2123 port

Setup

Requirements

* Python 3.x
* Python Modules – also mentioned in “requirements.txt” file
* netaddr
* colorama
* argparse
* ifaddr
* datetime This should help you with the initial setup:

Install all required modules: pip3 install -r requirements.txt Configuration files required

* udp.txt – This file contains UDP probes
* udphelp.txt – This file contains list of tools, suggestions for each UDP probes or services You can also change configuration files by using command line argument:

“–configfile ” and “–probehelp ” Verify the configurations by running following command:

python udp-hunter.py

Note: It should display following help details, if this throws any error check your configurations or connect with me for any tool specific errors. Features / Options UDP Hunter v0.1beta has the following features: Mandatory Options

* –host – Single Host – Required or
* –file – File of ips – Required Optional

* –output – Output file – Required
* –probes – Name of probe or ‘all’ (default: all probes) (Optional)
* Probe list – ike, rpc, ntp, snmp-public, ms-sql, ms-sql-slam, netop, tftp, db2, citrix, echo, chargen, systat, daytime, time, RPCCheck, DNSStatusRequest, DNSVersionBindReq, NBTStat, NTPRequest, SNMPv3GetRequest, xdmcp, net-support, mdns-zeroconf, gtpv1

* –ports – List of ports or ‘all’ (default: all ports) (Optional)
* –retries – Number of packets to send to each host. Default[...]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

UDP-Hunter : Network Assessment Tool For Various UDP Services

UDP-Hunter is a UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices .

11 viewsedited 16:47

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials UDP-Hunter : Network Assessment Tool For Various UDP Services Covering Both IPv4 And IPv6 Protocols UDP-Hunter is a UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty…

2 (Optional)
* –noise – To filter output from non-listed IPs (Optional)
* –verbose – verbosity, will show sniffer output also — please keep this a true, by default this is true. This will help us to analyze output.
* –timeout – Timeout 1.0, 2.0 in minutes (Optional)
* –lhost6 – Provide IPv6 of listner interface
* –lhost4 – Provide IPv4 of listner interface
* –configfile – Configuration file location – default is ‘udp.txt’ in same directory
* –probehelp – Help file location – default is ‘udphelp.txt’ in same directory Usage

Usage: python udp-hunter.py –file=inputfile.txt –output=outputfile.txt [optional arguments] Usage: python udp-hunter.py –file=inputfile.txt –output=outputfile.txt [–probes=NTPRequest,SNMPv3GetReques] [–ports=123,161,53] [–retries=3] [–noise=true] [–verbose=false] [–timeout=1.0] [–configfile] Download

___________________________
@hacking_Attack
@Hacking_Video

10 viewsedited 16:47

Hacking Articles Tips Tricks Videos Tutorials

Bug Bounty Program — Earn Up to 100,000 PTP
https://medium.com/platypus-finance/bug-bounty-program-earn-up-to-100-000-ptp-b6a913c2c8f1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Bug Bounty Program — Earn Up to 100,000 PTP

Learn more about bug bounty program.

11 viewsedited 17:10

Hacking Articles Tips Tricks Videos Tutorials

10 views17:10

Hacking Articles Tips Tricks Videos Tutorials

Learn more about bug bounty program.Continue reading on Platypus.finance » (https://medium.com/platypus-finance/bug-bounty-program-earn-up-to-100-000-ptp-b6a913c2c8f1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium