Hacking on Medium
Amstrong CTF Spoofy Challenge Write Up Step By Step [English But BAD]

So, after I think again it looks like I need to make this article, because in the video below, I don’t just get the right payload just…

Continue reading on Medium »

Hacking on Medium
Top 3 Termux SMS Bombing Tools That You Must Know

https://cdn-images-1.medium.com/max/1280/1*n0NDkEbZRz31ge0oD7k2lA.png
Hey guys 🙋‍♂️, One of the most powerful and Awesome things that you can do is SMS Bombing 💣 because it’s all in your control and you…

Continue reading on Medium »

Hacking on Medium
CISA releases tool to review Microsoft 365 post-compromise activity

https://cdn-images-1.medium.com/max/1600/0*rXk5KmoMN7v6figA.jpg
The Cybersecurity and Infrastructure Security Agency (CISA) has released a companion Splunk-based dashboard that helps review…

Continue reading on Cyber Security News & Updates »

Hacking on Medium
There Is Only One Way This Life Can Play Out

https://cdn-images-1.medium.com/max/2600/0*jsZhvp-ZJkXVeZd9
Idling attitude and the easy life

Continue reading on Work 12 Days in One Year and Live the Life You Want »

Main App Bug Bounty Methodology —  V3
https://thexssrat.medium.com/main-app-bug-bounty-methodology-v3-e6310e21b88e?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://thexssrat.medium.com/main-app-bug-bounty-methodology-v3-e6310e21b88e?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Redcloud - Automated Red Team Infrastructure Deployement Using Docker

https://1.bp.blogspot.com/-fxcXpENKGlw/YGvc31QX1CI/AAAAAAAAVzo/0LQr9e9RziYE8i4d06rv9EAjDmFcCeKKQCNcBGAsYHQ/w640-h340/Redcloud_1.png Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team Infrastructure using Docker. Harness the cloud's speed for your tools. Deploys in minutes. Use and manage it with its polished web interface.

Ideal for your penetration tests, shooting ranges, red teaming and bug bounties!

Self-host your attack infrastructure painlessly, deploy your very own live, scalable and resilient offensive infrastructure in a matter of minutes. Demohttps://1.bp.blogspot.com/-Akqi2ePVaVA/YGvbyQ4NXcI/AAAAAAAAVy4/jXtwskuO1WgjaTfntzF73FK_SpMBqdvUwCNcBGAsYHQ/w640-h376/Redcloud_5.gif The following demo showcases deployment of Redcloud through ssh, followed by Metasploit. We then look at Traefik and a live volume attached to Metasploit. Finally, we check that Metasploit's DB is functional with the web terminal, delete the container, and terminate Redcloud. Features* Deploy Redcloud locally or remotely using the built-in SSH functions, and even docker-machine.
* Deploy Metasploit, Empire, GoPhish, vulnerable targets, a fully stacked Kali, and many more with a few clicks.
* Monitor and manage your infrastructure with a beautiful web interface.
* Deploy redirections, socks or Tor proxy for all your tools.
* Painless network management and volume sharing.
* User and password management.
* Web terminal
* Overall very comfy Quick StartSetup: # If deploying using ssh
> cat ~/.ssh/id_rsa.pub | ssh root@your-deploy-target-ip 'cat >> .ssh/authorized_keys'

# If deploying using docker-machine, and using a machine named "default"
> eval (docker-machine env default)

# Check your Python version
# Use python3 if default python version is 2.x
> python --version Deploy: > git clone https://github.com/khast3x/redcloud.git
> cd redcloud
> python redcloud.pyRedcloud uses PyYAMLto print the list of available templates. It's installed by default on most systems.
If not, simply run: # Use pip3 if default python version is 2.x
> pip install -r requirements.txtRedcloud has 3 different deployment methods:

1. Locally
2. Remotely, using ssh. Requires having your public key in your target's authorized_keysfile.
3. Remotely, using docker-machine. Run the eval (docker-machine env deploy_target)line to preload your env with your docker-machine, and run redcloud.py. Redcloud should automatically detect your docker-machine, and highlight menu items relevant to a docker-machine deployment. Templateshttps://1.bp.blogspot.com/-Cy9kcolw8BA/YGvcD6KyMeI/AAAAAAAAVzA/dSbQ9OuWkfEw2na700oZ2it8_hApnfl8QCNcBGAsYHQ/w640-h636/Redcloud_6.png Briefly, redcloud.pydeploys a Portainer stack, preloaded with many tool templates for your offensive engagements, powered by Docker. Once deployed, control Redcloud with the web interface. Uses Traefik as reverse-proxy. Easy remote deploy to your target server using the system sshor docker-machine.

*

Ever wanted to spin up a Kali in a cloud with just a few clicks?
*

Have clean silos between your tools, technics and stages?
*

Monitor the health of your scans and C2?
*

Skip those sysadmin tasks for setting up a phishing campaign and get pwning faster?
*

Curious how you would build the ideal attack infrastructure?

Use the web UI to monitor, manage, and interact with each container. Use the snappy web terminal just as you would with yours. Create volumes, networks and port forwards using Portainer's simple UI.

Deploy and handle all your favorite tools and technics with the power [...]

of data-center-grade internet Screenshots* Deploying a container https://1.bp.blogspot.com/-oQ1cLPGLWcA/YGvcgSfOhKI/AAAAAAAAVzQ/6YnDA1z6irsTPL0mnvxrgGAB3AAaA0EbgCNcBGAsYHQ/w640-h320/Redcloud_11.png * Using Metasploit's msfconsolethrough the web interface https://1.bp.blogspot.com/-K6w2pA5BMD4/YGvcjV1D1SI/AAAAAAAAVzU/m5WDIoIPZkwgXHscLmS4lbZHJP5XvqOQACNcBGAsYHQ/w640-h330/Redcloud_12.png * Traefik real-time data on reverse-proxy routes https://1.bp.blogspot.com/-5jW190lvLQ4/YGvcnMY7AQI/AAAAAAAAVzY/m94WMoTC9tYC-oXjlakR7SG1aGj9RsmYgCNcBGAsYHQ/w640-h370/Redcloud_13.png * Deploying using ssh https://1.bp.blogspot.com/--7MPWuSy8wo/YGvcr2MiGcI/AAAAAAAAVzc/5YR3CuEJFv0AcsMsFAgr3yYvRyoagXX1QCNcBGAsYHQ/w338-h640/Redcloud_14.png Download Redcloud

Token leaks in response
https://infosecboy18.medium.com/token-leaks-in-response-56a51378e376?source=rss------bug_bounty-5

So there are multiple ways to do it but all are same.Continue reading on Medium » (https://infosecboy18.medium.com/token-leaks-in-response-56a51378e376?source=rss------bug_bounty-5)

Token leaks in response

So there are multiple ways to do it but all are same.Continue reading on Medium »
Read more...

hacking: security in practice
Email hack

Interesting... when someone tries to get into your old yahoo email, yahoo gives you the IP of who tried. Fun!

submitted by /u/The-Savage-Atheist
[link] [comments]

hacking: security in practice
How to capture the motion of a movement on a screen, save it and repeat it with touching a buton?

Im trying to hack this game where you have about a 100 different levels. Im trying to capture the motion Im making when succeing the level. Is there any app or program I can use to help me with this?

submitted by /u/tinkelpeer
[link] [comments]

hacking: security in practice
Is it possible to enter a Russian server from the US?

Okay so i (22f) need help in tracking someone down who’s been posting child p*rn in my town. They’re posting on a Russian website/server and their I P addresses are hidden from US servers. Is there any way around this? My local police station can’t do anything about it. Important to note that the perp is a US citizen who i probably went to highschool with- not a Russian citizen. Lemme know

submitted by /u/bananakeef
[link] [comments]