Watch "C0V3RT - Social Engineering Pt1 "Perspective" (Hacking $#!+÷¥ Spaces)" on YouTube
https://www.reddit.com/r/redteamsec/comments/sto1ov/watch_c0v3rt_social_engineering_pt1_perspective/

submitted by /u/Can0pen3r (https://www.reddit.com/user/Can0pen3r)
[link] (https://youtu.be/LSdfjI5JAFA) [comments] (https://www.reddit.com/r/redteamsec/comments/sto1ov/watch_c0v3rt_social_engineering_pt1_perspective/)

___________________________
@hacking_Attack
@Hacking_Video

Watch "C0V3RT - Social Engineering Pt1 "Perspective" (Hacking $#!+÷¥ Spaces)" on YouTube
https://www.reddit.com/r/Pentesting/comments/sto1a5/watch_c0v3rt_social_engineering_pt1_perspective/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Can0pen3r (https://www.reddit.com/user/Can0pen3r)
[link] (https://youtu.be/LSdfjI5JAFA) [comments] (https://www.reddit.com/r/Pentesting/comments/sto1a5/watch_c0v3rt_social_engineering_pt1_perspective/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploiting printers

Not sure how to exploiting printers. Is PRET the most viable option?

submitted by /u/void02241
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Trying to make an html login website for captive portal attack.

I want to see how a wifi evil twin attack works and I really want to make even the fake login website or the captive portal myself. I have seen fluxion have templates but I don't really want to be a "kali linux" "hacker" and want to start from scratch. Do you people have an idea of a tool with a gui for making html websites or do I need to learn HTML for this?

submitted by /u/forseeninkboi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How easy is it to hack someone’s gmail?

Just out of curiosity, I was wondering how secure gmail was and if you are pretty vulnerable to getting your email hacked if you really wanted to.

submitted by /u/coeus_42
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Just wondering what I can do to someone's ip.

My disocrd got hack lol. Got his ip found out he lives in Russia.

submitted by /u/Ravenfield1000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Salted Hashes

First, I am astounded that windows doesn't salt passwords. However, my question is more on practicality really. I know that I can see my own salt string in /etc/shadow. Since linux and other web platforms salt their passwords, are the only real ways to crack passwords with salts by:

A. Finding the salt (salt based off time/session/privilege escalation)

B. Crack the salt too (which would take way too long and is probably not practical/possible)

I guess salted hashes seem to make password cracking practically impossible or are there ways around salts?

submitted by /u/LazerSpartanChief
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

ImmuneFi y Octopus Network Lanzan Jugoso Bug Bounty
https://incio.medium.com/immunefi-y-octopus-network-lanzan-jugoso-bug-bounty-d4dbc88ff2f1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Octopus Network 🐙Continue reading on Medium » (https://incio.medium.com/immunefi-y-octopus-network-lanzan-jugoso-bug-bounty-d4dbc88ff2f1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Minu-1-Walkthrough

https://cdn-images-1.medium.com/max/600/0*kaajIhVUX59AQX2b
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Attack Surface Monitoring using Open-Source Intelligence

The paper introduces the case study for attack surface analysis and monitoring with practical application of open-source intelligence…
Read more...

My First Reflected XSS Bug Bounty — Google Dork — $xxx

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks…Continue reading on InfoSec Write-ups »
Read more...

My First Reflected XSS Bug Bounty — Google Dork — $xxx
https://infosecwriteups.com/my-first-reflected-xss-bug-bounty-google-dork-xxx-92ac1180e0d0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Today I will share a Reflected XSS vulnerability that was reported by me and i found this with google dorks…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/my-first-reflected-xss-bug-bounty-google-dork-xxx-92ac1180e0d0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is CSRF Attack ?
https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5

Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they…Continue reading on Medium » (https://medium.com/@teambbh.offical/what-is-csrf-attack-16aa4f49848a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New tool can uncover redacted, pixelated text to reveal sensitive data

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png New tool can uncover redacted, pixelated text to reveal sensitive dataPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Researchers have demonstrated how a new tool can uncover redacted text from documents, potentially exposing sensitive information to nefarious actors.
The tool, called Unredacter, was released by Bishop Fox on February 15.

To demonstrate that pixilation is “a no-good, bad, insecure, surefire way to get your sensitive data leaked”, it was designed to take redacted pixelized text and reverse it back into its reveal the supposedly hidden “clear text”.

In a blog post, lead researcher Dan Petro, who wrote the tool, explained that it was created in order to complete a challenge set by Jumspec, and also due to the use of pixilation being a “pet peeve” of his.
See Also: Complete Offensive Security and Ethical Hacking Course InsecureBishop Fox has a “long-standing policy” to only redact information using black bars, which the company says is the only secure way technique.

“Sometimes, people like to be clever and try some other redaction techniques like blurring, swirling, or pixilation,” lead researcher Dan Petro wrote. “But this is a mistake.”

He told The Daily Swig: “It’s just not a secure way to redact information,” he explained. “But you see it all the time out there on the internet, often by journalists.

“Clearly the community needed to be convinced that pixilation is bad, and a tool to un-redact is the best way to do it.” The toolPetro explained that assuming one already knows the font type for the original information and of the redacted text, “since the attacker in a realistic scenario would likely have received a full report”, his tool can be used to circumvent common issues when it comes to revealing redacted information.

These issues include character bleed over, when a letter shares more than one pixilation column, variable widths between letters, and font inconsistency, which can all make using an algorithm difficult.

Petro wrote: “…there’s an existing tool called Depix that tries to do exactly this through a really clever process of looking up what permutations of pixels could have resulted in certain pixelated blocks, given a De Bruijn sequence of the correct font.”

“I like the theory of this tool a lot,” he said, but added that it “doesn’t work as well in practice as you’d like”.

The blog post contains more technical detail on how the Unredacter tool was built, as well as a proof of concept.
See Also: Windows vulnerability with new public exploits lets you become admin WarningPetro said that the tool is aimed at being used by “possibly Red Teams”, but added that it “is mostly a proof-of-concept to drive home a point – never redact text with anything other than black bars fully covering the text”.

The researcher added: “Redacted data can be almost anything from passwords in a pen test report to victim names in a criminal report.

“The consequences to insecurely redacting information is highly context-dependent, but generally, someone redacts information because they don’t want it to be read.” See Also: Offensive Security Tool: Stratus Red Team
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to e[...]

___________________________
@hacking_Attack
@Hacking_Video