hacking: security in practice
We are trying to fix the internet connection
Can someone help me and my friend? We are trying to access the admin account so we can try fix the Ethernet connection.
submitted by /u/januario99
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
We are trying to fix the internet connection
Can someone help me and my friend? We are trying to access the admin account so we can try fix the Ethernet connection.
submitted by /u/januario99
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
We are trying to fix the internet connection
Can someone help me and my friend? We are trying to access the admin account so we can try fix the Ethernet connection.
hacking: security in practice
Any ideas for a Capstone Project?
I'm in my last year of a 3 year / 6 semester Computer Systems Technology course and one of my classes include a Capstone Project. I'll assume that anyone reading this will know what a Capstone is. Let's say there are no "parameters" for this project other than it having to be completed within 14 weeks. I was initially thinking to do something related to a Raspberry Pi network monitoring tool or network vulnerability scanner, but that's just an idea at the moment. Would like to know if anyone has any suggestions for something relating to cybersecurity/networking.
submitted by /u/HellishOccupant
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Any ideas for a Capstone Project?
I'm in my last year of a 3 year / 6 semester Computer Systems Technology course and one of my classes include a Capstone Project. I'll assume that anyone reading this will know what a Capstone is. Let's say there are no "parameters" for this project other than it having to be completed within 14 weeks. I was initially thinking to do something related to a Raspberry Pi network monitoring tool or network vulnerability scanner, but that's just an idea at the moment. Would like to know if anyone has any suggestions for something relating to cybersecurity/networking.
submitted by /u/HellishOccupant
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Any ideas for a Capstone Project?
I'm in my last year of a 3 year / 6 semester Computer Systems Technology course and one of my classes include a Capstone Project. I'll assume that...
goCabrito - Super Organized And Flexible Script For Sending Phishing Campaigns
http://www.kitploit.com/2022/01/gocabrito-super-organized-and-flexible.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/01/gocabrito-super-organized-and-flexible.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
goCabrito - Super Organized And Flexible Script For Sending Phishing Campaigns
Super organized and flexible script for sending phishing campaigns. Features Sends to a single email Sends to lists of emails (text) Sends to lists emails with first, last name (csv) Supports attachments Splits emails in groups Delays sending emails between each group Support Tags to be placed and replaced in the message's body Add {{name}} tag into the HTML message to be replaced with name (used with --to CSV). Add {{track-click}} tag to URL in the HTML message. Add {{track-open}} tag into the HTML message. Add {{num}} tag to be replaced with a random phone number. Supports individual profiles for different campaigns to avoid mistakes and confusion. Supports creating database for sent emails, each email with its unique hash (useful with getCabrito (https://github.com/KINGSABRI/getCabrito)) Supports dry test, to run the script against your profile without sending the email to test your campaign before the launch.
Qs & As Why not use goPhish? goPhish is a gerat choice too. But I prefer flexibility and simplicity at the same time. I used goPhish various times but at somepoint, I'm either find it overwhelming or inflexible. Most of the time, I don't need all these statistics, I just need a flixable way to prepare my phishing campaigns and send them. Each time I use goPhish I've to go and check the documentations about how to add a website, forward specific requests, etc. So I created goCabrito (https://github.com/KINGSABRI/goCabrito) and getCabrito (https://github.com/KINGSABRI/getCabrito). getCabrito optionally generates unique URL for email tracking. Email Opening tracking: Tracking Pixel Email Clicking tracking by generate a hash for each email and append it to the end of the URL or image URL and store these information along with other things that are useful for getCabrito to import and servering. This feature is the only thing connects goCabrito with getCabrito script, so no panic!. What's with the "Cabrito" thing? It's just a name of once of my favorit resturants and the name was chosen by one of my team. Prerequisites Install gems' dependencies sudo apt-get install build-essential libsqlite3-dev
Install gems gem install mail sqlite3
Usage Hi{{track-open}} Add {{name}} tag into the HTML message to be replaced with name (used with --to CSV). eg: Dear {{name}}, Add {{num}} tag to be replaced with a random phone number. -a, --attachments FILE1,FILE2 One or more files to be attached seperated by comma. -S, --subject TITLE The mail subject/title. --no-ssl Do NOT use SSL connect when connect to the server (default: false). -g, --groups NUM Number of receivers to send mail to at once. (default all in one group) -d, --delay NUM The delay, in seconds, to wait after sending each group. -P, --profile FILE A json file contains all the the above settings in a file -D, --db FILE Create a sqlite database file (contains emails & its tracking hashes) to be imported by 'getCabrito' server. --dry Dry test, no actual email sending. -h, --help Show this message. Usage: goCabrito.rb Examples: $goCabrito.rb -s smtp.office365.com:587 -u user1@domain.com -p P@ssword1 \ -f user1@domain.com -t targets1.csv -c targets2.lst -b targets3.lst \ -B msg.html -S "This's title" -a file1.docx,file2.xlsx -g 3 -d 10 $goCabrito.rb --profile prf.json">goCabrito.rb — A simple yet flexible email sender.
Help menu:
-s, --server HOST:PORT SMTP server and its port.
e.g. smtp.office365.com:587
-u, --user USER Username to authenticate.
___________________________
@hacking_Attack
@Hacking_Video
Qs & As Why not use goPhish? goPhish is a gerat choice too. But I prefer flexibility and simplicity at the same time. I used goPhish various times but at somepoint, I'm either find it overwhelming or inflexible. Most of the time, I don't need all these statistics, I just need a flixable way to prepare my phishing campaigns and send them. Each time I use goPhish I've to go and check the documentations about how to add a website, forward specific requests, etc. So I created goCabrito (https://github.com/KINGSABRI/goCabrito) and getCabrito (https://github.com/KINGSABRI/getCabrito). getCabrito optionally generates unique URL for email tracking. Email Opening tracking: Tracking Pixel Email Clicking tracking by generate a hash for each email and append it to the end of the URL or image URL and store these information along with other things that are useful for getCabrito to import and servering. This feature is the only thing connects goCabrito with getCabrito script, so no panic!. What's with the "Cabrito" thing? It's just a name of once of my favorit resturants and the name was chosen by one of my team. Prerequisites Install gems' dependencies sudo apt-get install build-essential libsqlite3-dev
Install gems gem install mail sqlite3
Usage Hi{{track-open}} Add {{name}} tag into the HTML message to be replaced with name (used with --to CSV). eg: Dear {{name}}, Add {{num}} tag to be replaced with a random phone number. -a, --attachments FILE1,FILE2 One or more files to be attached seperated by comma. -S, --subject TITLE The mail subject/title. --no-ssl Do NOT use SSL connect when connect to the server (default: false). -g, --groups NUM Number of receivers to send mail to at once. (default all in one group) -d, --delay NUM The delay, in seconds, to wait after sending each group. -P, --profile FILE A json file contains all the the above settings in a file -D, --db FILE Create a sqlite database file (contains emails & its tracking hashes) to be imported by 'getCabrito' server. --dry Dry test, no actual email sending. -h, --help Show this message. Usage: goCabrito.rb Examples: $goCabrito.rb -s smtp.office365.com:587 -u user1@domain.com -p P@ssword1 \ -f user1@domain.com -t targets1.csv -c targets2.lst -b targets3.lst \ -B msg.html -S "This's title" -a file1.docx,file2.xlsx -g 3 -d 10 $goCabrito.rb --profile prf.json">goCabrito.rb — A simple yet flexible email sender.
Help menu:
-s, --server HOST:PORT SMTP server and its port.
e.g. smtp.office365.com:587
-u, --user USER Username to authenticate.
___________________________
@hacking_Attack
@Hacking_Video
GitHub
GitHub - KINGSABRI/getCabrito: Email open & click tracking server for goCabrito
Email open & click tracking server for goCabrito. Contribute to KINGSABRI/getCabrito development by creating an account on GitHub.
e.g. user@domain.com
-p, --pass PASS Password to authenticate
-f, --from EMAIL Sender's email (mostly the same as sender email)
e.g. user@domain.com
-t, --to EMAIL|LIST|CSV The receiver's email or a file list of receivers.
e.g. user@domain.com or targets.lst or targets.csv
The csv expected to be in fname,lname,email format without header.
-c, --copy EMAIL|LIST|CSV The CC'ed receiver's email or a file list of receivers.
-b, --bcopy EMAIL|LIST|CSV The BCC'ed receiver's email or a file list of receivers.
-B, --body MSG|FILE The mail's body string or a file contains the body (not attachements.)
For click and message opening and other trackings:
Add {{track-click}} tag to URL in the HTML message.
eg: http://phisher.com/file.exe/{{track-click}}
Add {{track-open}} tag into the HTML message.
eg: Hi{{track-open}}
Add {{name}} tag into the HTML message to be replaced with name (used with --to CSV).
eg: Dear {{name}},
Add {{num}} tag to be replaced with a random phone number.
-a, --attachments FILE1,FILE2 One or more files to be attached seperated by comma.
-S, --subject TITLE The mail subject/title.
--no-ssl Do NOT use SSL connect when connect to the server (default: false).
-g, --groups NUM Number of receivers to send mail to at once. (default all in one group)
-d, --delay NUM The delay, in seconds, to wait after sending each group.
-P, --profile FILE A json file contains all the the above settings in a file
-D, --db FILE Create a sqlite database file (contains emails & its tracking hashes) to be imported by 'getCabrito' server.
--dry Dry test, no actual email sending.
-h, --help Show this message.
Usage:
goCabrito.rb
Examples:
$goCabrito.rb -s smtp.office365.com:587 -u user1@domain.com -p P@ssword1 \
-f user1@domain.com -t targets1.csv -c targets2.lst -b targets3.lst \
-B msg.html -S "This's title" -a file1.docx,file2.xlsx -g 3 -d 10
$goCabrito.rb --profile prf.json
How you really use it? I create directory for each customer Under the customer's directory, I create a directory for each campaign. This sub directory contains The profile The To, CC & BCC lists in CSV format The message body in HTML format I configure the profile and prepare my HTML Execute the campaign profile in dry mode first (check the profile file dry value) ruby goCabrito.rb -P CUSTOMER/3/camp3.json --dry
I remove the --dry switch and make sure the dry value is false in the config file Send to a test email Send to the real lists Troublesheooting SMTP authentication (https://www.kitploit.com/search/label/Authentication) issues Nowadays, many cloud-based email vendors block SMTP authentication by default (e.g. Office365, GSuite). This of course will cause an error. To solve this, here are some steps to help you enabling AMTP authentication on different vendors. Enable SMTP Auth Office 365 To globally enabling SMTP Auth, use powershell. Support SSL For Linux/Nix (run pwsh as sudo required) $ sudo pwsh Install PSWSMan Install-Module -Name PSWSMan -Scope AllUsers
___________________________
@hacking_Attack
@Hacking_Video
-p, --pass PASS Password to authenticate
-f, --from EMAIL Sender's email (mostly the same as sender email)
e.g. user@domain.com
-t, --to EMAIL|LIST|CSV The receiver's email or a file list of receivers.
e.g. user@domain.com or targets.lst or targets.csv
The csv expected to be in fname,lname,email format without header.
-c, --copy EMAIL|LIST|CSV The CC'ed receiver's email or a file list of receivers.
-b, --bcopy EMAIL|LIST|CSV The BCC'ed receiver's email or a file list of receivers.
-B, --body MSG|FILE The mail's body string or a file contains the body (not attachements.)
For click and message opening and other trackings:
Add {{track-click}} tag to URL in the HTML message.
eg: http://phisher.com/file.exe/{{track-click}}
Add {{track-open}} tag into the HTML message.
eg: Hi{{track-open}}
Add {{name}} tag into the HTML message to be replaced with name (used with --to CSV).
eg: Dear {{name}},
Add {{num}} tag to be replaced with a random phone number.
-a, --attachments FILE1,FILE2 One or more files to be attached seperated by comma.
-S, --subject TITLE The mail subject/title.
--no-ssl Do NOT use SSL connect when connect to the server (default: false).
-g, --groups NUM Number of receivers to send mail to at once. (default all in one group)
-d, --delay NUM The delay, in seconds, to wait after sending each group.
-P, --profile FILE A json file contains all the the above settings in a file
-D, --db FILE Create a sqlite database file (contains emails & its tracking hashes) to be imported by 'getCabrito' server.
--dry Dry test, no actual email sending.
-h, --help Show this message.
Usage:
goCabrito.rb
Examples:
$goCabrito.rb -s smtp.office365.com:587 -u user1@domain.com -p P@ssword1 \
-f user1@domain.com -t targets1.csv -c targets2.lst -b targets3.lst \
-B msg.html -S "This's title" -a file1.docx,file2.xlsx -g 3 -d 10
$goCabrito.rb --profile prf.json
How you really use it? I create directory for each customer Under the customer's directory, I create a directory for each campaign. This sub directory contains The profile The To, CC & BCC lists in CSV format The message body in HTML format I configure the profile and prepare my HTML Execute the campaign profile in dry mode first (check the profile file dry value) ruby goCabrito.rb -P CUSTOMER/3/camp3.json --dry
I remove the --dry switch and make sure the dry value is false in the config file Send to a test email Send to the real lists Troublesheooting SMTP authentication (https://www.kitploit.com/search/label/Authentication) issues Nowadays, many cloud-based email vendors block SMTP authentication by default (e.g. Office365, GSuite). This of course will cause an error. To solve this, here are some steps to help you enabling AMTP authentication on different vendors. Enable SMTP Auth Office 365 To globally enabling SMTP Auth, use powershell. Support SSL For Linux/Nix (run pwsh as sudo required) $ sudo pwsh Install PSWSMan Install-Module -Name PSWSMan -Scope AllUsers
___________________________
@hacking_Attack
@Hacking_Video
Install-WSMan Install ExchangeOnline Module Install-Module -Name ExchangeOnlineManagement Load ExchangeOnline Module Import-Module ExchangeOnlineManagement Connect to Office365 exchange using the main admin user, it will prompt you to enter credentials. Connect-ExchangeOnline -InlineCredential The above command will prompt you to enter Office365 admin's credentials PowerShell credential request
Enter your credentials.
User: admin@domain.onmicrosoft.com
Password for user admin@domain.onmicrosoft.com: **********
Or us this to open web browser to enter your credentils incase of 2FA. Connect-ExchangeOnline -UserPrincipalName admin@pifsaudi.onmicrosoft.com Enable SMTP AUTH Gloabally Set-TransportConfig -SmtpClientAuthenticationDisabled $false To Enable for SMTP Auth for specific email Set-CASMailbox -Identity uuu@ccc.com -SmtpClientAuthenticationDisabled $false
Get-CASMailbox -Identity uuu@ccc.com | Format-List SmtpClientAuthenticationDisabled Confirm Get-TransportConfig | Format-List SmtpClientAuthenticationDisabled Then follow the following steps Go to Asure portal (https://aad.portal.azure.com/) from admin panel (https://www.kitploit.com/search/label/Admin%20Panel) (https://admin.microsoft.com/) Select All Services Select Tenant Properties Click Manage Security defaults Select No Under Enable Security defaults Resources Enable or disable SMTP AUTH | Microsoft Docs (https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) Azure (https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults)Active Directory (https://www.kitploit.com/search/label/Active%20Directory) security defaults | Microsoft Docs Exchange online plan 1 504 5.7.4 Unrecognized authentication type - Microsoft Q&A (https://docs.microsoft.com/en-us/answers/questions/132991/exchange-online-plan-1-504-574-unrecognized-authen.html) How to set up a multifunction device or application to send email using Microsoft 365 or Office 365 | Microsoft Docs (https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365) Google GSuite Resources Send email from a printer, scanner, or app - Google Workspace Admin Help (https://support.google.com/a/answer/176600?hl=en) Contribution By fixing bugs By enhancing the code By reporting issues By requesting features By spreading the script By click star :)
Download goCabrito (https://github.com/KINGSABRI/goCabrito)
___________________________
@hacking_Attack
@Hacking_Video
Enter your credentials.
User: admin@domain.onmicrosoft.com
Password for user admin@domain.onmicrosoft.com: **********
Or us this to open web browser to enter your credentils incase of 2FA. Connect-ExchangeOnline -UserPrincipalName admin@pifsaudi.onmicrosoft.com Enable SMTP AUTH Gloabally Set-TransportConfig -SmtpClientAuthenticationDisabled $false To Enable for SMTP Auth for specific email Set-CASMailbox -Identity uuu@ccc.com -SmtpClientAuthenticationDisabled $false
Get-CASMailbox -Identity uuu@ccc.com | Format-List SmtpClientAuthenticationDisabled Confirm Get-TransportConfig | Format-List SmtpClientAuthenticationDisabled Then follow the following steps Go to Asure portal (https://aad.portal.azure.com/) from admin panel (https://www.kitploit.com/search/label/Admin%20Panel) (https://admin.microsoft.com/) Select All Services Select Tenant Properties Click Manage Security defaults Select No Under Enable Security defaults Resources Enable or disable SMTP AUTH | Microsoft Docs (https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission) Azure (https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults)Active Directory (https://www.kitploit.com/search/label/Active%20Directory) security defaults | Microsoft Docs Exchange online plan 1 504 5.7.4 Unrecognized authentication type - Microsoft Q&A (https://docs.microsoft.com/en-us/answers/questions/132991/exchange-online-plan-1-504-574-unrecognized-authen.html) How to set up a multifunction device or application to send email using Microsoft 365 or Office 365 | Microsoft Docs (https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365) Google GSuite Resources Send email from a printer, scanner, or app - Google Workspace Admin Help (https://support.google.com/a/answer/176600?hl=en) Contribution By fixing bugs By enhancing the code By reporting issues By requesting features By spreading the script By click star :)
Download goCabrito (https://github.com/KINGSABRI/goCabrito)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Kenobi — Writeup
https://cdn-images-1.medium.com/max/600/1*sYBHxKNBVCHZvJpSDD8dbQ.png
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Kenobi — Writeup
https://cdn-images-1.medium.com/max/600/1*sYBHxKNBVCHZvJpSDD8dbQ.png
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Kenobi | Write-up
O serviço FTP é afetado por uma vulnerabilidade de information disclosure no módulo mod_copy devido ao SITE CPFR e SITE CPTO, comandos disponíveis para clientes não autenticados. Um invasor remoto…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What do I do if my bitcoin abruptly vanishes from my bitcoin wallet into a wallet address I don’t…
https://cdn-images-1.medium.com/max/2600/1*MOR2GcO4s05bcHd1H84uyA.jpeg
Clearly you have an infection on your machine or somebody got information on your seed/private key(s). In the event that there are more…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What do I do if my bitcoin abruptly vanishes from my bitcoin wallet into a wallet address I don’t…
https://cdn-images-1.medium.com/max/2600/1*MOR2GcO4s05bcHd1H84uyA.jpeg
Clearly you have an infection on your machine or somebody got information on your seed/private key(s). In the event that there are more…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What do I do if my bitcoin abruptly vanishes from my bitcoin wallet into a wallet address I don’t have any idea?
Clearly you have an infection on your machine or somebody got information on your seed/private key(s). In the event that there are more…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Boas práticas de segurança em sites React
https://cdn-images-1.medium.com/max/1200/1*YJkRKPEsM7h9rbzHSuY3oQ.png
Este wiki é uma coletânea com 10 dicas práticas e recomendadas de segurança para apps escritos com React.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Boas práticas de segurança em sites React
https://cdn-images-1.medium.com/max/1200/1*YJkRKPEsM7h9rbzHSuY3oQ.png
Este wiki é uma coletânea com 10 dicas práticas e recomendadas de segurança para apps escritos com React.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Boas práticas de segurança em sites React
Este wiki é uma coletânea com 10 dicas práticas e recomendadas de segurança para apps escritos com React.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
FartKnocker Vm Walkthrough
https://cdn-images-1.medium.com/max/618/0*njo0e8wlXMvqz8g_.png
Makineyi indirebilirsiniz.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
FartKnocker Vm Walkthrough
https://cdn-images-1.medium.com/max/618/0*njo0e8wlXMvqz8g_.png
Makineyi indirebilirsiniz.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
FartKnocker Vm Walkthrough
Makineyi indirebilirsiniz.