Hacking with Rake
https://medium.com/@michaelmeade3/hacking-with-rake-319005da6ad9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Rake is a utility that can be used to automate tasks. For a example, if program needs to be set up in a certain way. Rake could be used to…Continue reading on Medium » (https://medium.com/@michaelmeade3/hacking-with-rake-319005da6ad9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

NMAP Scan gets slower over time
https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/

___________________________
@hacking_Attack
@Hacking_Video

Hey there i'm a beginner in the field of pentesting and i'm starting out on easy boxes atm. I learned it's wise to scan ALL ports on the target so whenever i scan a target i run nmap like this: sudo nmap -A -p- IP -oN nmap_out ​ https://preview.redd.it/tojhcs181vg81.png?width=675&format=png&auto=webp&s=cf44413330b9861ab081082afaee01d93514fa26 As you can see it gets slower over time, it will finish the scans after approximately 1 and a half hour +-.
Can you explain me why it's slows down after 90% and if there is a better way to scan my target? Thanks :) submitted by /u/Flexerinoh (https://www.reddit.com/user/Flexerinoh)
[link] (https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/) [comments] (https://www.reddit.com/r/Pentesting/comments/solxkm/nmap_scan_gets_slower_over_time/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
AWS-Loot - Pull Secrets From An AWS Environment

http://4.bp.blogspot.com/-GBWG_98dpKU/Yd0eNQaTu0I/AAAAAAAA8i8/FRaX4CPYMtoPGFgGrqHXPCGYUmz300RnACK4BGAYYCw/w640-h376/AWS-Loot_1_tool-741500.gif

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services.
Install

pip install -r requirements.txt


An AWS credential file (.aws/credentials) is required for authentication to the target environment

* Access Key
* Access Key Secret

How it works

Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets.

Usage

Python3 awsloot.py


Next Features

* Allow users to specify an ARN to scan
* Looter for additional services
Download AWS-Loot

___________________________
@hacking_Attack
@Hacking_Video

AWS-Loot - Pull Secrets From An AWS Environment
http://www.kitploit.com/2022/02/aws-loot-pull-secrets-from-aws.html

___________________________
@hacking_Attack
@Hacking_Video

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration (https://www.kitploit.com/search/label/Enumeration) over large sets of AWS instances and services.
Install pip install -r requirements.txt
An AWS credential file (.aws/credentials) is required for authentication (https://www.kitploit.com/search/label/Authentication) to the target environment Access Key Access Key Secret How it works Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy (https://www.kitploit.com/search/label/Entropy) strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda (https://www.kitploit.com/search/label/Lambda) looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans (https://www.kitploit.com/search/label/Scans) the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets. Usage Python3 awsloot.py
Next Features Allow users to specify an ARN to scan Looter for additional services

Download AWS-Loot (https://github.com/sebastian-mora/AWS-Loot)

___________________________
@hacking_Attack
@Hacking_Video

Basic Web Technologies Knowledge required for starting with the web Exploitation Part 1
https://medium.com/@mananaggarwal2001/basic-web-technologies-knowledge-required-for-starting-with-the-web-exploitation-part-1-87634514ec72?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Guys Myself Manan Aggarwal BTech Student is here Present you the information about the Basic Technology which you need to require…Continue reading on Medium » (https://medium.com/@mananaggarwal2001/basic-web-technologies-knowledge-required-for-starting-with-the-web-exploitation-part-1-87634514ec72?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
U.S Authorities Seize $3.6 Billion in Bitcoin From Hacker Couple

https://external-preview.redd.it/qEWwX5tKJj7XfbujlVRtvau5K1LYRjiGSi0tETC6cKA.jpg?width=640&crop=smart&auto=webp&s=329c5041ca58c28b9a48f7d5be464661e8420a84 submitted by /u/ChangeNow_io
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the most common hacks on cryptocurrencies

I mean i keep hearing about these giants hacks at crypto and all im wondering is how that technology can be compromised

PS: I dont know shit about hacking

submitted by /u/bebesitabrrr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My campus has blocked almost all pages and VPNs as well

I don't know to what extent I can post this on this subreddit, but since I've seen a similar question, so I've decided to post it here.

​

For starters, no, I'm not that typical person who uses campus wifi to "waste time".

I study biomedicine and the internet is super capped. Even google scholar. This situation is extremely frustrating because although we have complained, we are only 40 people affected out of over 2,000 people studying (at least as far as I know).

​

I decided to use a VPN (NordVPN) and at first it worked, but the IT guy who controls the network has blocked it. In fact of all the protocols at the beginning only IKEv2 worked. UDT and TDP did not.

​

What I currently do is to pass the data from my mobile to my PC. Problem?

1.- I don't have infinite data.

2.- There is bad coverage, which makes that my speed is approximately 2mb/s which is quite desperate.

3.- It uses a lot of battery of my cell phone.

​

I just want to be able to access wikipedia or google scholar papers.

​

I don't know much about computers, but I had thought about looking into connecting remotely to my home router through the campus wifi so I can get back access to all the internet. I don't know if I'm saying something super complicated or impossible, but any solution is welcome.

​

Thanks in advance

submitted by /u/Ax180_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A California database was breached and medical/COVID19 info leaked

https://external-preview.redd.it/5rcnwazl5ATBhoUVSHoFH1KXUMSTYEsaBZB_wsipL30.jpg?width=320&crop=smart&auto=webp&s=8d90ee4277a79dea3cf9f5151589a07c905b715e submitted by /u/dwappo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PowerShell vs VBScript/JScript malware?

What are the advantages of malwares written in VBScript/JScript rather than in PowerShell? I'm talking about more advanced malwares than simple droppers, like RATs and cryptojackers.

I personally find the WSH languages to be very primitive and syntax to not be so pleasant. Is there any specific reason why attackers are choosing to write their malwares in WSH language? I have come up with some thoughts:

* WSH languages works pretty much in every windows platforms. There is no problems with version incapability like with powershell and .NET.
* There is less logging capabilites compared to powershell, no scriptblock logging for example.
* While powershell might be blocked, WSH is often overlooked.
* Various LOLBins offer fileless execution (mshta, regsvr32, rundll32)

WSH languages are quite unknown topic for me and I would like to learn more about prevention of WSH based malware. I have a few questions I'm hoping to get answered by:

* Does JScript offer more functionality over VBScript or are they just different by syntax?
* What are the most efficient ways of blocking and logging WSH based malware?

submitted by /u/2002020
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video