hacking: security in practice
I made a tool to find and stream public/misconfigured security cams

Hi everyone,

I made a "hack" tool using python which uses Selenium and OpenCV to find and stream misconfigured/public webcams, security cams, and CCTV cams to your computer.

Check it out at https://github.com/flancast90/camview to learn more about it, and ⭐ it if you like!

Feel free to ask any questions in the comments, I'm sure the code needs some optimisation 😂, and I'm still a beginner compared to many of you.

submitted by /u/Muted_Original
[link] [comments]

hacking: security in practice
I am starting courses

I am new to hacking and I have a $1,000 budget for a PC I'm not sure what to get at all. A laptop like the HP Spectre x360 or a dell xps also looking at a macbook any suggestions. I already ordered a wifi pinapple I also have 16tb's of external storage at home. Because I want something moble plus can be used as a desktop?

submitted by /u/MythicArtifact
[link] [comments]

hacking: security in practice
Grabbing an IP at work

SO.. for some reason, I like to make games for myself with networking.. This week, we are gonna attempt to grab my work's primary IP address!
I work in a factory that has assembly lines. My position, I work at the very end of the assembly line and verify if a part is good or not before boxing it up to be shipped out.

My station has a computer that is ethernet to the internet. Out of boredom, I wanted to see how easy it would be to grab the IP of my work/ the IP my work station runs off of.

I figured it was gonna be very simple. I just opened cmd and did ipconfig, but i was met with a private IP.. so i didn't get anywhere that way. This made me wanna dive deeper into how good our security is lol.

My 2nd attempt was to use powershell and see if i can find the public that way. i put in "Invoke-RestMethod ipinfo.io/ip" but i ran into errors.. not exactly sure what it said cuz i didnt want to leave the screen up too long and get my game busted.
so now.. im on attempt number 3.. but i wanna see what Reddit has to say!

Shortened up: how can i get the public IP(IPv4) of a computer i have access to/ how can I get the public IP(IPv4) of a connection near me?

submitted by /u/RubSumNubs
[link] [comments]

hacking: security in practice
How to tell if my computer is hacked?

So last week I had some mishap on a video game and since then my GPU has been acting up. I'm not going to detail it here but you can read it on my other posts (and please do, I desperately want to fix this issue!)

Anyway though, someone on another website just said "WOW so lesson don't play MP crap games and if this has happened then your PC likey got hacked, I would be fully formatting the the OS drive and doing a clean install of windows and making sure that PC security setting are fully maxed out and up to date. And stay away from in game live chat"

The video game in question was VRchat, and the incident that occurred was someone using a game crashing avatar (intended to crash quest users) that was blasting audio with a very low poly avatar. I highly doubt something like that is capable of hacking my entire computer, seeing as the audio was playing through his microphone, and I only lagged for a moment after it happened. That, and I blocked him about 2 minutes before he made everyone's games mess up (so I'm honestly not sure why I was affected too but whatever).

Anyway, is it even possible for me to get hacked that way?

submitted by /u/logswithdogs
[link] [comments]

hacking: security in practice
How do I figure out someone’s identity through an anonymous app?

There is an app on the app store called “chitter” that is mainly used by children and pedophiles. The pedophiles on there sell/ trade child pornography as well as pray on the children who are also on the app. I’m not even kidding when I say they will have names such as “m 40 for underage” like they aren’t even being sneaky with it. It is extremely disturbing not being able to do anything about it and that they get to live in society with absolutely no fear of getting caught for their actions and a lot of them have jobs that involve children. Most of these pedos live in either the UK, USA, or Canada. Is there anyway at all that I can trace down their identities?

submitted by /u/Early_Ad_4442
[link] [comments]

hacking: security in practice
Can Android phones be hacked by calling

First of all I am from India and today I received a suspicious call that lasted 19 sec.

After I picked up the call no one talked to me for about 10 sec, just when I was about to hang up someone said that they are calling from Bajaj finance and if I wanted a loan, as soon as I said no they themselves hung up the call.

All this looks pretty suspicious to me so I thought any expert on the matter could help because one thing is for sure that it wasn't a call from customer service. Also my phones location was turned off.

submitted by /u/Fabulous_Adeptness_2
[link] [comments]

hacking: security in practice
I know that hackers can access celebrity private pictures even after they’ve been deleted for some months, but is there a timeline where that data eventually expires?

With years later, will those backed up copies just sitting in the cloud just stay there? Or will they expire? I’m simply just curious.

submitted by /u/lavagirl2345
[link] [comments]

Hacking on Medium
Hacking

Definition:

Continue reading on Medium »

Hacking on Medium
Matryoshka doll(PicoCTF)

https://cdn-images-1.medium.com/max/1603/1*m-trKdp5c97NWZ9OPm8oDw.png
Note:- The flag you have to find on your own. This will just tell you the approach.

Continue reading on Medium »

Hacking on Medium
How 1 Hacker Saved Coinbase and the Cryptocurrency Market From Disaster

https://cdn-images-1.medium.com/max/1920/1*8JBCrDrng4Dtxvj6_muUgA.png
And why the Crypto Community looks after its own

Continue reading on Crypto Unchained »

hacking: security in practice
What are the differences between Kali Linux Installer and Kali Linux Everything?

what are the differences? Does Kali Linux Everything have more tools?

submitted by /u/DnD_Junichiro
[link] [comments]

hacking: security in practice
Hi guys and gals, would you recommend Kali or Parrot?

I’m working for a consulting company in cybersecurity and digital protection, but I want to shift to pentesting. I’m a noob but I’m learning with vulnhub, thm etc. I have both distros on my vm and I’m personally feeling good with Parrot, yet I’ve noticed that Kali is like the industry standard. Any recommendations on why one is better than the other?

submitted by /u/Swedish_Massacre
[link] [comments]

hacking: security in practice
For Those Willing to Act Now

submitted by /u/niceblud
[link] [comments]

hacking: security in practice
Files from secured-work laptop to personal email/drive

Hey guys - I work at a consulting firm and I am about to leave and join a competitor.

Issues: 1. My laptop is secured and I can’t put a USB drive to upload some of the files I need to take with me.

1. The emails are monitored and I can’t sent anything without questions.

Any solutions to this?

Any help would be appreciated 😇

submitted by /u/kyennadiou
[link] [comments]

hacking: security in practice
Programmer Vs Hacker Vs Developer

https://external-preview.redd.it/o9w8kzCDhBlHZRalcTQdD3cRWqnnoAVYZ590hBduGtI.jpg?width=640&crop=smart&auto=webp&s=77cca83c3af8bf71d4670d4b4e6e92179747d8d4 submitted by /u/AfroBoyUg
[link] [comments]

Talisman - By Hooking Into The Pre-Push Hook Provided By Git, Talisman Validates The Outgoing Changeset For Things That Look Suspicious
http://www.kitploit.com/2022/02/talisman-by-hooking-into-pre-push-hook.html

A tool to detect and prevent secrets from getting checked in
What is Talisman? Talisman is a tool that installs a hook to your repository to ensure that potential secrets or sensitive information (https://www.kitploit.com/search/label/Sensitive%20Information) do not leave the developer's workstation. It validates the outgoing changeset for things that look suspicious - such as potential SSH keys, authorization (https://www.kitploit.com/search/label/Authorization) tokens, private keys etc.
Installation Talisman supports MAC OSX, Linux and Windows. Talisman can be installed and used in one of the following ways: As a git hook as a global git hook template (https://git-scm.com/docs/git-init#_template_directory) and a CLI utility (for git repo scanning) As a git hook into a single git repository Talisman can be set up as either a pre-commit or pre-push hook on the git repositories. Find the instructions below. Disclaimer: Secrets creeping in via a forced push in a git repository cannot be detected by Talisman. A forced push is believed to be notorious in its own ways, and we suggest git repository admins to apply appropriate measures to authorize such activities. [Recommended approach] Installation as a global hook template We recommend installing Talisman as a pre-commit git hook template, as that will cause Talisman to be present, not only in your existing git repositories, but also in any new repository that you 'init' or 'clone'. Run the following command on your terminal, to download and install the binary at $HOME/.talisman/bin As a pre-commit hook: curl --silent https://raw.githubusercontent.com/thoughtworks/talisman/master/global_install_scripts/install.bash > /tmp/install_talisman.bash && /bin/bash /tmp/install_talisman.bash
OR As a pre-push hook: curl --silent https://raw.githubusercontent.com/thoughtworks/talisman/master/global_install_scripts/install.bash > /tmp/install_talisman.bash && /bin/bash /tmp/install_talisman.bash pre-push
If you do not have TALISMAN_HOME set up in your $PATH, you will be asked an appropriate place to set it up. Choose the option number where you set the profile source on your machine. Remember to execute source on the path file or restart your terminal. If you choose to set the $PATH later, please export TALISMAN_HOME=$HOME/.talisman/bin to the path. Choose a base directory where Talisman should scan for all git repositories, and setup a git hook (pre-commit or pre-push, as chosen in step 1) as a symlink. This script will not clobber pre-existing hooks. If you have existing hooks, look for ways to chain Talisman into them. (https://github.com/thoughtworks/talisman#handling-existing-hooks) Handling existing hooks Installation of Talisman globally does not clobber pre-existing hooks on repositories.
If the installation script finds any existing hooks, it will only indicate so on the console.
To achieve running multiple hooks we suggest (but not limited to) the following two tools 1. Pre-commit (Linux/Unix) Use pre-commit (https://pre-commit.com/) tool to manage all the existing hooks along with Talisman. In the suggestion, it will prompt the following code to be included in .pre-commit-config.yaml - repo: local
hooks:
- id: talisman-precommit
name: talisman
entry: bash -c 'if [ -n "${TALISMAN_HOME:-}" ]; then ${TALISMAN_HOME}/talisman_hook_script pre-commit; else echo "TALISMAN does not exist. Consider installing from https://github.com/thoughtworks/talisman . If you already have talisman installed, please ensure TALISMAN_HOME variable is set to where talisman_hook_script resides, for example, TALISMAN_HOME=${HOME}/.talisman/bin"; fi'
language: system
pass_filenames: false
types: [text]
verbose: true

2. Husky (Linux/Unix/Windows) husky (https://github.com/typicode/husky/blob/master/DOCS.md) is an npm module for managing git hooks. In order to use husky, make sure you have already set TALISMAN_HOME to $PATH. Existing Users If you already are using husky, add the following lines to husky pre-commit in package.json Windows "bash -c '\"%TALISMAN_HOME%\\${TALISMAN_BINARY_NAME}\" --githook pre-commit'"
Linux/Unix $TALISMAN_HOME/talisman_hook_script pre-commit
New Users If you want to use husky with multiple hooks along with talisman, add the following snippet to you package json. Windows {
"husky": {
"hooks": {
"pre-commit": "bash -c '\"%TALISMAN_HOME%\\${TALISMAN_BINARY_NAME}\" --githook pre-commit'" && "other-scripts"
}
}
}
Linux/Unix {
"husky": {
"hooks": {
"pre-commit": "$TALISMAN_HOME/talisman_hook_script pre-commit" && "other-scripts"
}
}
}
Installation to a single project ~/install-talisman.sh chmod +x ~/install-talisman.sh"># Download the talisman installer script
curl https://thoughtworks.github.io/talisman/install.sh > ~/install-talisman.sh
chmod +x ~/install-talisman.sh # Install to a single project
cd my-git-project
# as a pre-push hook
~/install-talisman.sh
# or as a pre-commit hook
~/install-talisman.sh pre-commit Handling existing hooks Talisman will need to be chained with any existing git hooks.You can use pre-commit (https://pre-commit.com/) git hooks framework to handle this. Add this to your .pre-commit-config.yaml (be sure to update rev to point to a real git revision!) - repo: https://github.com/thoughtworks/talisman
rev: '' # Update me!
hooks:
# either `commit` or `push` support
- id: talisman-commit
# - id: talisman-push Disclaimer: Talisman cannot guarantee its functionality in MicroSoft's unsupported versions of Windows. Anyway Taliman is successfully tested on Windows 7 and server 2008 R2, which might not work in future releases. Upgrading Since release v0.4.4, Talisman automatically updates the binary to the latest release, when the hook is invoked (at pre-commit/pre-push, as set up). So, just sit back, relax, and keep using the latest Talisman without any extra efforts. The following environment variables can be set: TALISMAN_SKIP_UPGRADE: Set to true if you want to skip the automatic upgrade check. Default is false TALISMAN_UPGRADE_CONNECT_TIMEOUT: Max connect timeout before the upgrade is cancelled(in seconds). Default is 10 seconds. If at all you need to manually upgrade, here are the steps:
[Recommended] Update Talisman binary and hook scripts to the latest release: curl --silent https://raw.githubusercontent.com/thoughtworks/talisman/master/global_install_scripts/update_talisman.bash > /tmp/update_talisman.bash && /bin/bash /tmp/update_talisman.bash Update only Talisman binary by executing: curl --silent https://raw.githubusercontent.com/thoughtworks/talisman/master/global_install_scripts/update_talisman.bash > /tmp/update_talisman.bash && /bin/bash /tmp/update_talisman.bash talisman-binary Talisman in action After the installation is successful, Talisman will run checks for obvious secrets automatically before each commit or push (as chosen during installation). In case there are any security breaches detected, talisman will display a detailed report of the errors: $ git push
Talisman Report:
+-----------------+-------------------------------------------------------------------------------+
| FILE | ERRORS |
+-----------------+-------------------------------------------------------------------------------+
| danger.pem | The file name "danger.pem" |
| | failed checks against the |