Hacking on Medium
A N00b’s Perspective on Red Teaming: DIY Implant Part 2

https://cdn-images-1.medium.com/max/936/1*fLe_Pp8X6Xcs2NQEUCBSbg.png
Welcome to part two of my three-part series on a n00bs perspective on red teaming. If you’d like to start from the beginning, check out…

Continue reading on Medium »

Hacking on Medium
Genesis Block Ventures invests in disBalancer

https://cdn-images-1.medium.com/max/1200/1*NzX4QhaB9rcIYyQYlzZ4kA.png
disBalancer keeps sharing great news with you! Genesis Block Ventures (GBV) has invested in our project! It is a great step towards our…

Continue reading on Medium »

HOW I GOT MY NAME IN BBC’S HALL OF FAME
https://faiyazhacks.medium.com/how-i-got-my-name-in-bbcs-hall-of-fame-54f7898521ad?source=rss------bug_bounty-5

Hi Everyone, Hope you all are doing well and hunting bugs ;)Continue reading on Medium » (https://faiyazhacks.medium.com/how-i-got-my-name-in-bbcs-hall-of-fame-54f7898521ad?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
NtHiM - Super Fast Sub-domain Takeover Detection

https://1.bp.blogspot.com/-Bv04vr0Tezg/YGvZrp6IXTI/AAAAAAAAVyQ/-QOm4suW2_4fVMUGL_sAfQpAOvyTT1GYwCNcBGAsYHQ/w640-h228/header.png NtHiM - Super Fast Sub-domain Takeover Detection InstallationMethod 1: Using Pre-compiled BinariesThe pre-compiled binaries for different systems are available in the Releases page. You can download the one suitable for your system, unzip the file and start using NtHiM. Method 2: Using Crates.ioNtHiM is available on Crates.io. So, if you have Rust installed on your system, you can simply install NtHiM with the following command: cargo install NtHiMMethod 3: Manual BuildYou will need Cargo to perform the manual build for NtHiM. If you have Cargo installed, you can simply follow the steps below:

1. Clone this repository, git clone https://github.com/TheBinitGhimire/NtHiM;
2. Go inside the folder, cd NtHiM;
3. Use the cargo buildcommand,
4. Go inside the newly-created target folder, and open the debug folder inside it, cd target/debug;
5. You will find NtHiM.exe (on Microsoft Windows) or NtHiM binary (on Linux).

The installation walkthrough for NtHiM has been uploaded to YouTube, covering all of these three methods, and you can watch the video here: How to Install and Use NtHiM (Now, the Host is Mine!)? Super Fast Sub-domain Takeover Detection! UsageFlag Description Example -h Display help related to usage! NtHiM -h -t Scan a single target! NtHiM -t https://example.example.com -f Scan a list of targets from a file! NtHiM -f hostnames.txt -c Number of Concurrent Threads! NtHiM -c 100 -f hostnames.txt -V Display the version information! NtHiM -V Use Case 1 (Single Target):NtHiM -t https://example.example.comUse Case 2 (Multiple Targets):NtHiM -f hostnames.txtUsage Demonstration:https://1.bp.blogspot.com/-JD0wAIHSiNg/YGvZ0d96cPI/AAAAAAAAVyU/40kqQv8ss9sTcz4i5aIV5z-3cgqyQO2vwCNcBGAsYHQ/w640-h360/NtHiM_9_demonstration.gif ExamplesSingle Targethttps://1.bp.blogspot.com/-iHiSdyAQtxM/YGvZ4qPQ-zI/AAAAAAAAVyY/EY-q4fZGMs8Ae8So7HFeR83oZMOz8T5xwCNcBGAsYHQ/w640-h120/NtHiM_10_example1.png Multiple Targets using Concurrent Threadshttps://1.bp.blogspot.com/-fffvPUdMId8/YGvZ8iBr38I/AAAAAAAAVyg/Qq0BiFSgLecOarV_IfSFkcBAoGMi1wvpgCNcBGAsYHQ/w640-h272/NtHiM_11_example2.png WorkflowPlatform IdentificationNtHiM uses the data provided in EdOverflow/can-i-take-over-xyz for the platform identification. Frequently Asked Questions (FAQs)If you have any questions regarding NtHiM, please raise an issue by going to the Issues page.

Some of your queries might have been answered in one of the existing issues, so please make sure to check the Issues with the FAQ label before raising an issue on your own. Contributions and Feature RequestsIf you are interested in contributing in the development of NtHiM, you can feel free to create a Pull Request with modifications in the original code, or you shall open up a new issue, and I will try to include the feature as requested.

There is no restriction on anyone for contributing to the development of NtHiM. If you would like to contribute, you can feel free to do so. Download NtHiM

Playing The Chain Game
https://un1b1c.medium.com/playing-the-chain-game-c894018ddd1d?source=rss------bug_bounty-5

HeyContinue reading on Medium » (https://un1b1c.medium.com/playing-the-chain-game-c894018ddd1d?source=rss------bug_bounty-5)

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/Pentesting/comments/mmukme/a_new_postexploitation_framework_for_kubernetes/)

Deep Web
Where are the mods?

Allowing all this spamming!?

submitted by /u/ColaManiac1
[link] [comments]

🔥🔥 A new post-exploitation framework for Kubernetes: Kubesploit 🔥🔥
https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/kubesploit) [comments] (https://www.reddit.com/r/redteamsec/comments/mmujvr/a_new_postexploitation_framework_for_kubernetes/)

hacking: security in practice
Is there a way of getting a wifi password with an IP Address. Just with an android device?

Im not into hacking that much but i would like to know if its possible and how it works.

submitted by /u/Fanco14
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
Where are the news of US hacking other countries?

I have been reading daily CyberSec (Dark Reading and SANS) news for about 4 months now (a little before the SolarWinds attack). I have seen coverage of different threat agency's and names of different hacker groups. Majority seem to be from Russia or China. However, I have not seen a single news piece in regards to US hacking something. What is the reason for this?

submitted by /u/swtbstrd
[link] [comments]

hacking: security in practice
This squirrel.exe buisness

So I recently saw this squirrel.exe updater for ms teams and wondered what was up with it. I know it's an updater but I saw that there was a vulnerability with it as well, how would I utilize this vulnerability?

submitted by /u/jesus-da-wizard
[link] [comments]