Hi People, In this blog, I will be sharing my approach for finding Dependency Confusion bugs.Continue reading on Medium » (https://hetroublemakr.medium.com/how-i-approached-dependency-confusion-272b46f66907?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Crypto Agility: Solving for the Inevitable

The advent of viable quantum computers will threaten today’s encryption standards, which are the basis of Internet security. Cryptographic agility is the key to post-quantum computing security, although implementing it will be a formidable challenge.

Dark Reading: Attacks/Breaches
The Zero Trust Timer Is on for Federal Agencies — How Ready Are They?

A new study coincides with OMB’s finalization of its zero-trust strategy through 2024.

Dark Reading: Attacks/Breaches
7 Privacy Tips for Security Pros

How best to integrate privacy into your organization's security program.

hacking: security in practice
Recover/Bypass Zip File Password

I have a zip file with pictures from many years ago, around 2GB, and I dont remember that password at all. I am sure it has German characters and it is certainly longer than 8 characters. I tried password-online.com recovery, but they didnt yield any result. Also I tried to go through the johntheripper stuff, but I think I dont have enough computing power locally to get anything, and I in general too stupid for this. I am willing to pay for a service. Any help?

EDIT: For clarification. I DO own the files and they are merely old digital pictures of myself.

EDIT 2: I tried this comment "There are a number of them but most of them are geared towards security professionals and only offer options for cracking the hash directly, you would need to manually extract the hash from the ZIP file to enter it in. (e.g. crackstation.net, GPUHASH.me, Hashes.com etc.) This site however seems to offer a more user-friendly approach of simply uploading the ZIP archive."
But my files exceeds 200Mbs, so I cannot use their services.

submitted by /u/Ancestral_Recall
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why?

I posted on here that I had broken the code to a popular site and my post was taken down. I in no way want to break the terms of this community. However, if I can't share the reverse engineering here. I'm at a bit of a loss. What are the ethics I need to keep in mind?

submitted by /u/jaywdice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/nkabzqa9o2f81.jpg?width=640&crop=smart&auto=webp&s=1c51258da19a924d8e9f07cd28a5d1381b93e842 submitted by /u/FocusMinute8783
[link] [comments]

RecoverPy - Interactively Find And Recover Deleted Or Overwritten Files From Your Terminal
http://www.kitploit.com/2022/01/recoverpy-interactively-find-and.html

___________________________
@hacking_Attack
@Hacking_Video

You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request. Demo 🙈 Interactively find and recover deleted or 👉 overwritten 👈 files from your terminal (13)">

___________________________
@hacking_Attack
@Hacking_Video

Installation  RecoverPy is currently only available on Linux (https://www.kitploit.com/search/label/Linux) systems. Dependancies Mandatory: To list and search through your partitions, recoverpy uses grep, dd, and lsblk commands. Optional: To display real time (https://www.kitploit.com/search/label/Real%20Time) grep (https://www.kitploit.com/search/label/GREP) progress, you can install progress. To install all dependencies: Debian-like: apt install grep coreutils util-linux progress Arch: pacman -S grep coreutils util-linux progress Fedora: dnf install grep coreutils util-linux progress Installation from pip python3 -m pip install recoverpy Usage python3 -m recoverpy  You must have root access (https://www.kitploit.com/search/label/Access) to use recoverpy. If you are not logged as root use sudo recoverpy or log in with su - before execution.
1.- Select the system partition in which your file was. If you are out of luck, you can alternatively search in your home partition, maybe your IDE, text editor, etc. made a backup at some point.2.- Type a text string to search. See tips below for better results.Note that searching a string in a whole partition may take a while. (see euphemism (https://en.wikipedia.org/wiki/Euphemism)) Default save path is /tmp/, click on Settings to edit configuration. 3.- Start search, Results will appear in the left-hand box.4.- Select a result to display the corresponding partition block content in the right-hand box.5.- Once you have found your precious, select Save.6.- You can now either save this block individually or explore neighboring blocks for the remaining parts of the file. You could then save it all in one (https://www.kitploit.com/search/label/All%20In%20One) file.Tips Always do backups! Yes, maybe too late... Unmount your partition before you do anything! Although you can search with your partition still mounted, it is highly recommended to unmount your partition to avoid any alteration to your file. Regarding the searched string: Be concise, find something that could be unique to your file. Stay simple, your string is escaped but exotic characters may affect your results. Try to remember the last edit you have made to your file. When you found your file: Use the option to explore neighboring blocks to make sure you do not miss some part of your file. Contributing Thank you for considering contributing to RecoverPy. Any request, bug report or PR are welcome. Please read the contributing guide (https://github.com/PabloLec/RecoverPy/blob/main/CONTRIBUTING.md).

Download RecoverPy (https://github.com/PabloLec/RecoverPy)

___________________________
@hacking_Attack
@Hacking_Video

RecoverPy - Interactively Find And Recover Deleted Or Overwritten Files From Your Terminal

You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request. Demo Installation  RecoverPy is currently only available on Linux systems. Dependancies Mandatory: To list and search through your partitions, recoverpy uses grep, dd, and lsblk commands. Optional: To display real time grep progress, you can install progress. To install all dependencies: Debian-like: apt install grep coreutils util-linux progress Arch: pacman -S grep coreutils util-linux progress Fedora: dnf install grep coreutils util-linux progress Installation from pip python3 -m pip install recoverpy Usage python3 -m recoverpy  You must have root access to use recoverpy. If you are not logged as root use sudo recoverpy or log in with su - before execution. 1.- Select the system partition in which your file was. If you are out of luck, you can alternatively search in your home partition, maybe your IDE, text editor, etc. made a backup at some point.2.- Type a text string to search. See tips below for better results.Note that searching a string in a whole partition may take a while. (see euphemism) Default save path is /tmp/, click on Settings to edit configuration. 3.- Start search, Results will appear in the left-hand box.4.- Select a result to display the corresponding partition block content in the right-hand box.5.- Once you have found your precious, select Save.6.- You can now either save this block individually or explore neighboring blocks for the remaining parts of the file. You could then save it all in one file.Tips Always do backups! Yes, maybe too late... Unmount your partition before you do anything! Although you can search with your partition still mounted, it is highly recommended to unmount your partition to avoid any alteration to your file. Regarding the searched string: Be concise, find something that could be unique to your file. Stay simple, your string is escaped but exotic characters may affect your results. Try to remember the last edit you have made to your file. When you found your file: Use the option to explore neighboring blocks to make sure you do not miss some part of your file. Contributing Thank you for considering contributing to RecoverPy. Any request, bug report or PR are welcome. Please read the contributing guide. Download RecoverPy
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Cherrybomb is a CLI tool that helps you avoid undefined user behavior by validating your API specifications.
https://www.reddit.com/r/Pentesting/comments/shbhac/cherrybomb_is_a_cli_tool_that_helps_you_avoid/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Glass_Guitar1959 (https://www.reddit.com/user/Glass_Guitar1959)
[link] (https://github.com/blst-security/cherrybomb) [comments] (https://www.reddit.com/r/Pentesting/comments/shbhac/cherrybomb_is_a_cli_tool_that_helps_you_avoid/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
RecoverPy - Interactively Find And Recover Deleted Or Overwritten Files From Your Terminal

http://2.bp.blogspot.com/-QCcz82Ww1rU/Yd0M0RbdIyI/AAAAAAAA770/e2xgB8VJvNIiVnLN8odf0ZVIf8uypXIQQCK4BGAYYCw/w640-h204/RecoverPy_1_logo-789317.png You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request. Demohttp://2.bp.blogspot.com/-rrCOjY0xmVI/Yd0M0mSo0HI/AAAAAAAA778/dnPx00CQoAkGZxwCwsbkdNJIAn2KvVDnwCK4BGAYYCw/w640-h318/RecoverPy_6_demo-790484.gif Installation
RecoverPy is currently only available on Linux systems. Dependancies Mandatory: To list and search through your partitions, recoverpy uses grep, dd, and lsblkcommands.

Optional: To display real time grep progress, you can install progress.

To install all dependencies:

* Debian-like: apt install grep coreutils util-linux progress* Arch: pacman -S grep coreutils util-linux progress* Fedora: dnf install grep coreutils util-linux progressInstallation from pip python3 -m pip install recoverpyUsagepython3 -m recoverpy
You must have root access to use recoverpy.
If you are not logged as root use sudo recoverpyor log in with su -before execution.
1.- Select the system partition in which your file was. If you are out of luck, you can alternatively search in your home partition, maybe your IDE, text editor, etc. made a backup at some point.
2.- Type a text string to search. See tips below for better results.

Note that searching a string in a whole partition may take a while. (see euphemism)

Default save path is /tmp/, click on Settings to edit configuration.
3.- Start search, Results will appear in the left-hand box.
4.- Select a result to display the corresponding partition block content in the right-hand box.
5.- Once you have found your precious, select Save.
6.- You can now either save this block individually or explore neighboring blocks for the remaining parts of the file. You could then save it all in one file. Tips* Always do backups! Yes, maybe too late...
* Unmount your partition before you do anything! Although you can search with your partition still mounted, it is highly recommended to unmount your partition to avoid any alteration to your file.

Regarding the searched string:

* Be concise, find something that could be unique to your file.
* Stay simple, your string is escaped but exotic characters may affect your results.
* Try to remember the last edit you have made to your file.

When you found your file:

* Use the option to explore neighboring blocks to make sure you do not miss some part of your file. ContributingThank you for considering contributing to RecoverPy. Any request, bug report or PR are welcome. Please read the contributing guide. Download RecoverPy

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This is my journey into the world of Cyber Security.

https://cdn-images-1.medium.com/max/1600/1*kfSiOhD_iBOLlIP3jihNAw.jpeg
Thank you for taking to read this as I had felt it was finally time for me to put this on paper. This is a testament to how I have gotten…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video