Hacking on Medium
Hacking the marketplace

https://cdn-images-1.medium.com/max/1016/1*hQvy1roMNtwihJHK_M2b-w.png
Guys! This room it’s great and I had a lot of fun, with this room you can learn this:

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Algorithm Hacking: How to Crack the Tik Tok, Instagram Reels, and YouTube Shorts Algorithms

https://cdn-images-1.medium.com/max/768/0*ZDnAcDCSjtPQ_srj
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hedef odaklı subdomain (alt domain) tesbiti

https://cdn-images-1.medium.com/max/600/1*tlHCbw3e7ZToJRxLtQD7NQ.png
hedef odaklı subdomain

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SharpCookieMonster - Extracts Cookies From Chrome

http://1.bp.blogspot.com/-jSnM-zsGl3o/Yd0f1umrntI/AAAAAAAA8mA/1Tcpo8LJ95Q8a338xj8c9OWiCPqQAUyCACK4BGAYYCw/w640-h330/SharpCookieMonster_1_running-758012.png
http://3.bp.blogspot.com/-fAalTG7zIf8/Yd0f1zccxkI/AAAAAAAA8mI/dPq83CXRwYg19zY-zbqhE0t6Mj_UuQqvwCK4BGAYYCw/w640-h342/SharpCookieMonster_2_cookies-759485.png
This is a Sharp port of @defaultnamehere's cookie-crimes module - full credit for their awesome work!

This C# project will dump cookies for all sites, even those with httpOnly/secure/session flags.
Usage

Simply run the binary.

SharpCookieMonster.exe [https://sitename.com] [chrome-debugging-port] [user data dir]


An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com).

An optional second argument specifies the port to launch the chrome debugger on (by default 9142).

Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data).

Building

The binary has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added.

If you want to run this down C2 such as using PoshC2's sharpcookiemonstercommand or via CobaltStrike's execute-assemblythen use ILMerge to merge the built executable with the WebSocket4Net.dll library.

First rename the original binary then run:

ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll

Download SharpCookieMonster

___________________________
@hacking_Attack
@Hacking_Video

SharpCookieMonster - Extracts Cookies From Chrome

This is a Sharp port of @defaultnamehere's cookie-crimes module - full credit for their awesome work! This C# project will dump cookies for all sites, even those with httpOnly/secure/session flags. Usage Simply run the binary. SharpCookieMonster.exe https://sitename.com chrome-debugging-port user data dir An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com). An optional second argument specifies the port to launch the chrome debugger on (by default 9142). Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data). Building The binary has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added. If you want to run this down C2 such as using PoshC2's sharpcookiemonster command or via CobaltStrike's execute-assembly then use ILMerge to merge the built executable with the WebSocket4Net.dll library. First rename the original binary then run: ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll Download SharpCookieMonster
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking the marketplace
https://systemweakness.com/hacking-the-marketplace-f09b1d936393?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Guys! This room it’s great and I had a lot of fun, with this room you can learn this:Continue reading on System Weakness » (https://systemweakness.com/hacking-the-marketplace-f09b1d936393?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

I made a guide for setting up an at-home Windows Active Directory lab to practice some pentesting techniques. Hope it’s useful!
https://www.reddit.com/r/Pentesting/comments/svqfnj/i_made_a_guide_for_setting_up_an_athome_windows/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Dchox (https://www.reddit.com/user/Dchox)
[link] (https://chox.ca/2022/02/17/creating-a-windows-ad-lab-environment-at-home/) [comments] (https://www.reddit.com/r/Pentesting/comments/svqfnj/i_made_a_guide_for_setting_up_an_athome_windows/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ukraine DDoS: 'Cyberattack' or Not?

The country was hit by a distributed denial-of-service attack earlier this week, but some say that doesn't rise to the level of "cyberattack." Here's why they're wrong.

Dark Reading: Attacks/Breaches
Why You Need An Adversary-First Approach to Threats in the Cloud

Security teams need an adversary-focused approach that automates security controls and compliance and provides visibility into the cloud environment.

Dark Reading: Attacks/Breaches
Free Cybersecurity Tools and Services List Published by CISA

The Cybersecurity & Infrastructure Security Agency (CISA) says this "living repository" is a mix of popular open source and free tools and services from both the private and public sectors.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Axiomatics Introduces Orchestrated Authorization

New enhancements and capabilities help enterprises embrace cloud-native technologies.

___________________________
@hacking_Attack
@Hacking_Video

SharpCookieMonster - Extracts Cookies From Chrome
http://www.kitploit.com/2022/02/sharpcookiemonster-extracts-cookies.html

___________________________
@hacking_Attack
@Hacking_Video