This is a Sharp port of @defaultnamehere's cookie-crimes (https://github.com/defaultnamehere/cookie_crimes) module - full credit for their awesome work! This C# project will dump cookies (https://www.kitploit.com/search/label/Cookies) for all sites, even those with httpOnly/secure/session flags.
Usage Simply run the binary. SharpCookieMonster.exe [https://sitename.com] [chrome-debugging-port] [user data dir]
An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com (https://www.google.com/)). An optional second argument specifies the port to launch the chrome debugger (https://www.kitploit.com/search/label/Debugger) on (by default 9142). Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access (https://www.kitploit.com/search/label/Access) different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data). Building The binary (https://www.kitploit.com/search/label/Binary) has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added. If you want to run this down C2 such as using PoshC2 (https://github.com/nettitude/PoshC2)'s sharpcookiemonster command or via CobaltStrike's execute-assembly then use ILMerge to merge the built executable with the WebSocket4Net.dll library. First rename the original binary then run: ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll


Download SharpCookieMonster (https://github.com/m0rv4i/SharpCookieMonster)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Is Exploit Development?

submitted by /u/joe691013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create bouncing servers

I have only been doing cybersecurity for 2 years now, just as a hobby. I am kind of new to servers and hiding yourself while hacking, but how do hackers create bouncing servers?

submitted by /u/Kenmorgan202
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CVE-2016-9682: SonicWALL SMA/SRA

https://external-preview.redd.it/URS_9mQLdooMLi9Krpbv79GqrFldxxI4kk-GSX_PGAg.jpg?width=320&crop=smart&auto=webp&s=ddc21b571f0768bcda564b1da61e20d0dc751fbc submitted by /u/Y2Che
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Happens When Russian Hackers Come for the Electric grid?

There have been hundreds of victims since the progressive attack on the US grid silently hijacked by hackers with alleged links to Russia…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Increase my my credit

Honestly has anyone ever got his credit or school grade fixed by a hacker before ? please drop your comments and also refer.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tiempos de operación e infección del malware

https://cdn-images-1.medium.com/max/1526/0*JZZrThggzWOIp4AA
PUBLICADO EN 18 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Protect Your Secure String Data At All Cost!

https://cdn-images-1.medium.com/max/1903/1*l6Xw7ey0bYbIkPBFZsdV9w.png
First of all, let me clear about my self, i am not the security expert just a noob who like playing around the internet, so if you spot…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft advierte sobre la amenaza ‘Ice Phishing’ en Web3 y redes descentralizadas

https://cdn-images-1.medium.com/max/728/0*hnL_c5fXkUb5eGpr.gif
PUBLICADO EN 18 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WordPress Plugin With Over 3 Million Installs Has a Vulnerability

https://cdn-images-1.medium.com/max/2600/0*H9s1ikteMUeY-Q4B
UpdraftPlus, a WordPress plug-in, has a serious bug that puts backups at risk

Continue reading on DataDrivenInvestor »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Key Application Security Metrics Show Few Signs of Improvement

A new study shows that organizations continued to take an inordinately long time to fix vulnerabilities and fixed fewer known issues in their environments last year than in 2020.

Hacking on Medium
Breaking Domain Trusts with Forged Trust Tickets

https://cdn-images-1.medium.com/max/2600/1*-O6D99_2qz_8GU-eIvfrQA.jpeg
Abuse Active Directory domain trusts for privilege escalation to Enterprise Admin

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I made a tool to find and stream public/misconfigured security cams

Hi everyone,

I made a "hack" tool using python which uses Selenium and OpenCV to find and stream misconfigured/public webcams, security cams, and CCTV cams to your computer.

Check it out at https://github.com/flancast90/camview to learn more about it, and ⭐ it if you like!

Feel free to ask any questions in the comments, I'm sure the code needs some optimisation 😂, and I'm still a beginner compared to many of you.

submitted by /u/Muted_Original
[link] [comments]

hacking: security in practice
I am starting courses

I am new to hacking and I have a $1,000 budget for a PC I'm not sure what to get at all. A laptop like the HP Spectre x360 or a dell xps also looking at a macbook any suggestions. I already ordered a wifi pinapple I also have 16tb's of external storage at home. Because I want something moble plus can be used as a desktop?

submitted by /u/MythicArtifact
[link] [comments]

hacking: security in practice
Grabbing an IP at work

SO.. for some reason, I like to make games for myself with networking.. This week, we are gonna attempt to grab my work's primary IP address!
I work in a factory that has assembly lines. My position, I work at the very end of the assembly line and verify if a part is good or not before boxing it up to be shipped out.

My station has a computer that is ethernet to the internet. Out of boredom, I wanted to see how easy it would be to grab the IP of my work/ the IP my work station runs off of.

I figured it was gonna be very simple. I just opened cmd and did ipconfig, but i was met with a private IP.. so i didn't get anywhere that way. This made me wanna dive deeper into how good our security is lol.

My 2nd attempt was to use powershell and see if i can find the public that way. i put in "Invoke-RestMethod ipinfo.io/ip" but i ran into errors.. not exactly sure what it said cuz i didnt want to leave the screen up too long and get my game busted.
so now.. im on attempt number 3.. but i wanna see what Reddit has to say!

Shortened up: how can i get the public IP(IPv4) of a computer i have access to/ how can I get the public IP(IPv4) of a connection near me?

submitted by /u/RubSumNubs
[link] [comments]

hacking: security in practice
How to tell if my computer is hacked?

So last week I had some mishap on a video game and since then my GPU has been acting up. I'm not going to detail it here but you can read it on my other posts (and please do, I desperately want to fix this issue!)

Anyway though, someone on another website just said "WOW so lesson don't play MP crap games and if this has happened then your PC likey got hacked, I would be fully formatting the the OS drive and doing a clean install of windows and making sure that PC security setting are fully maxed out and up to date. And stay away from in game live chat"

The video game in question was VRchat, and the incident that occurred was someone using a game crashing avatar (intended to crash quest users) that was blasting audio with a very low poly avatar. I highly doubt something like that is capable of hacking my entire computer, seeing as the audio was playing through his microphone, and I only lagged for a moment after it happened. That, and I blocked him about 2 minutes before he made everyone's games mess up (so I'm honestly not sure why I was affected too but whatever).

Anyway, is it even possible for me to get hacked that way?

submitted by /u/logswithdogs
[link] [comments]

hacking: security in practice
How do I figure out someone’s identity through an anonymous app?

There is an app on the app store called “chitter” that is mainly used by children and pedophiles. The pedophiles on there sell/ trade child pornography as well as pray on the children who are also on the app. I’m not even kidding when I say they will have names such as “m 40 for underage” like they aren’t even being sneaky with it. It is extremely disturbing not being able to do anything about it and that they get to live in society with absolutely no fear of getting caught for their actions and a lot of them have jobs that involve children. Most of these pedos live in either the UK, USA, or Canada. Is there anyway at all that I can trace down their identities?

submitted by /u/Early_Ad_4442
[link] [comments]