hacking: security in practice
A special compilation of curl that makes it impersonate Firefox

https://external-preview.redd.it/i-dovIViDfhEcMKW_THARvIzqQ8qycdEgGgiE-uP7gw.jpg?width=640&crop=smart&auto=webp&s=bcffb3a34fe562cda51ce2c50c2ae5b2130ccbb9 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone interested in providing justice?

Hey y’all. First off let me apologize if this post isn’t right for this sub, I’m sure there are a lot of requests for this but here it goes anyways.

I’m a programmer, not a network engineer I couldn’t hack someone if my life depended on it. I got an email this morning (4am!) that had one of my passwords as the subject. Of course I opened it. Anyways it’s a standard hacker threat saying “I put malware on this video from a porn site using a key logger got your password and was able to grab all your contacts from your phone, messenger, etc. Give me $3k and I won’t send this video to everyone”

Now frankly, I haven’t watched porn in a VERY long time. So I’m not too worried about what video he has… my laptop has the webcam covered but my phones front camera isn’t so maybe there is a video but I literally can’t even remember the last time I watched porn.

The only concerning part to me is they had my password. Maybe it’s not all bullshit, I have a feeling they were just able to grab a bunch of passwords from a porn site, I think I’ve made like one account I have no idea tbh.

Other than changing my passwords wherever this was used, any one have any tips or ideas or something that can help me scare this fucker back?

Again, sorry to be one of those “omg can u hack my friends Facebook” people

submitted by /u/cr33pz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cool podcast about infosec industry news and career guidance

https://external-preview.redd.it/f4jJG_tWRW-iiAIqYSEj0vvg7gsNRZQ4Jf6vLUF6P3Q.jpg?width=216&crop=smart&auto=webp&s=c466da29a2c333fa11d5e74dbd3ce211cad0bf2e submitted by /u/codingsecurity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Recon and YouTube, is that a thing?

Hey fella hunters, hope you all are doing fine. This is my first ever blog, I will try to keep it as much simple as possible spilling as…Continue reading on Medium »
Read more...

Recon and YouTube, is that a thing?
https://medium.com/@720922/recon-and-youtube-is-that-a-thing-5523b48c32e3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey fella hunters, hope you all are doing fine. This is my first ever blog, I will try to keep it as much simple as possible spilling as…Continue reading on Medium » (https://medium.com/@720922/recon-and-youtube-is-that-a-thing-5523b48c32e3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking the marketplace

Guys! This room it’s great and I had a lot of fun, with this room you can learn this:Continue reading on System Weakness »
Read more...

Hacking on Medium
Cloudflare XSS Bypass Cheat Sheet

Merhaba arkadaşlar, Cloudflare hileleri mi lazım ? o zaman yazıyı takip edelim tüm şifreler burada…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounties in Sri Lanka

https://cdn-images-1.medium.com/max/2600/1*2MiboDYoM80AYZAdYPxaOg.jpeg
tl;dr — Bug Zero is a Sri Lanka based Bug Bounty platform and is here to help secure your organization from cybersecurity threats.

Continue reading on Bug Zero »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El grupo del ransomware Conti se hace cargo de la operación de malware TrickBot

https://cdn-images-1.medium.com/max/1525/0*sT6A5dwSgz0Gp8-V
PUBLICADO EN 18 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking: Types, Working, and its Awareness

https://cdn-images-1.medium.com/max/1280/1*KrEwvInSrnjbdGJE0fryTA.jpeg
The strategies and tactics to protect information and records structures from unauthorized get right of entry to, the disclosure of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Raven 2: VM Walkthrough

https://cdn-images-1.medium.com/max/950/0*ziX6DeAlODNu3LTM
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Zero is Going to Pay Your Security Bill for 2022

https://cdn-images-1.medium.com/max/2600/1*i_v2UW4OXOJJesG3QolrIQ.jpeg
tl;dr — Bug Zero is a Sri Lanka based Bug Bounty platform and is here to help secure your organization from cybersecurity threats.

Continue reading on Bug Zero »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Russian Ministry of Digital Development launched an industry center for cybersecurity

https://cdn-images-1.medium.com/max/1282/1*FBRFG77g-ZwrWGl6cc1-Rg.png
The center’s tasks include protecting government information systems from hacker attacks.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking the marketplace

https://cdn-images-1.medium.com/max/1016/1*hQvy1roMNtwihJHK_M2b-w.png
Guys! This room it’s great and I had a lot of fun, with this room you can learn this:

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Algorithm Hacking: How to Crack the Tik Tok, Instagram Reels, and YouTube Shorts Algorithms

https://cdn-images-1.medium.com/max/768/0*ZDnAcDCSjtPQ_srj
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hedef odaklı subdomain (alt domain) tesbiti

https://cdn-images-1.medium.com/max/600/1*tlHCbw3e7ZToJRxLtQD7NQ.png
hedef odaklı subdomain

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SharpCookieMonster - Extracts Cookies From Chrome

http://1.bp.blogspot.com/-jSnM-zsGl3o/Yd0f1umrntI/AAAAAAAA8mA/1Tcpo8LJ95Q8a338xj8c9OWiCPqQAUyCACK4BGAYYCw/w640-h330/SharpCookieMonster_1_running-758012.png
http://3.bp.blogspot.com/-fAalTG7zIf8/Yd0f1zccxkI/AAAAAAAA8mI/dPq83CXRwYg19zY-zbqhE0t6Mj_UuQqvwCK4BGAYYCw/w640-h342/SharpCookieMonster_2_cookies-759485.png
This is a Sharp port of @defaultnamehere's cookie-crimes module - full credit for their awesome work!

This C# project will dump cookies for all sites, even those with httpOnly/secure/session flags.
Usage

Simply run the binary.

SharpCookieMonster.exe [https://sitename.com] [chrome-debugging-port] [user data dir]


An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com).

An optional second argument specifies the port to launch the chrome debugger on (by default 9142).

Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data).

Building

The binary has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added.

If you want to run this down C2 such as using PoshC2's sharpcookiemonstercommand or via CobaltStrike's execute-assemblythen use ILMerge to merge the built executable with the WebSocket4Net.dll library.

First rename the original binary then run:

ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll

Download SharpCookieMonster

___________________________
@hacking_Attack
@Hacking_Video