hacking: security in practice
Steal Credentials & Bypass 2FA Using noVNC

https://external-preview.redd.it/KF-X_Y4JLrBWCdT3TGwXWtks6UtDFutk3aVbsRbuVfs.jpg?width=640&crop=smart&auto=webp&s=d209fb6a6a59073f46ca4f9ae9640e88a0b4d2c7 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cain and Abel

https://web.archive.org/web/20190422030225/http://www.oxid.it/downloads/ca_setup.exe

im moving this to cold storage today. if for some reason it ever falls off, reply to this, ill drop a seed to torrent it.

submitted by /u/manicglowingshaper69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
75 HOUR Ethical Hacking Free Course

https://external-preview.redd.it/tXXSq822KNP3vM7KDv8BnmBmpvHbalQjV9w5wge66T0.jpg?width=640&crop=smart&auto=webp&s=2d9c5e7edbde436cef67095d0cefe5f9d53faaee submitted by /u/originalmetaverse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse engineering/Hacking challenge

I saw someone else had posted a hacking challenge so I figured I'd try one too.

I designed it completely myself and tested/written an algorithm to prove it can be solved.

If any of you have experience with virtual machines/reverse engineering this should be fun for you:

I will give you an input, an output and a set of integers. Your job is to figure out what's happening to the input using those set of integers.

input: 58 ​
8762 9333 21792 5952 9280 30528 22304 14144 17922 4960 0
​ output: 131

I'd like to know your opinion on it and if you'd be willing to try it. PS: I also gave a big hint already.

submitted by /u/mach_vm_write
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beginner Bug Bounty Journey

# Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resulta que los NFTs también se pueden robar: un Phishing se lleva 1,7 millones de dólares de…

https://cdn-images-1.medium.com/max/1478/0*17NPvvBtEFjBqAXI
PUBLICADO EN 23 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Matrix2 Vm WalkThrough

https://cdn-images-1.medium.com/max/643/0*XqODWQZrNl2PCGv9
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This Leadership Hack Will Set You Miles Apart from Your Competition

https://cdn-images-1.medium.com/max/640/1*SB86HJJ5Xf3LVZVQlDthsw.png
Articulate your Vision in a clear and compelling message.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc

http://3.bp.blogspot.com/-DEFGVt3K7Aw/Yd2ZFJS7N8I/AAAAAAAA8qQ/zDP_7M0NPlkOSllos6VPujqfYmiz5u3NgCK4BGAYYCw/s16000/Scylla_1-796309.png Notice For DeprecationThis project is no longer being worked on by the developer. As of today, the program has many flaws and is not up to modern OSINT standards. A lot of APIs utilized within Scylla are no longer working as they did when the project was first released. The developer wrote Scylla out of boredom and as a side project therefore he is no longer working on it. The community is more than welcome to use Scylla's source as a base to improve on it's original capabilities to keep the tool alive. Please do not contact the developer to fix issues as he will not be replying as the project is deprecated. About ScyllaScylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles (main platforms) assigned to a certain username. In continuation, Scylla has shodan support so you can search for devices all over the internet, it also has in-depth geolocation capabilities. Lastly, Scylla has a finance section which allows users to check if a credit/debit card number has been leaked/pasted in a breach and returns information on the cards IIN/BIN. This is the first version of the tool so please contact the developer if you want to help contribute and add more to Scylla. Installation1: git clone https://www.github.com/DoubleThreatSecurity/Scylla2: cd Scylla3: sudo python3 -m pip install -r requirments.txt4: python3 scylla.py --helpUsage1. python3 scylla.py --instagram davesmith --twitter davesmithCommand 1 will return account information of that specified Instagram & Twitter account.

2. python3 scylla.py --username johndoeCommand 2 will return all the social media (main platforms) profiles associated with that username.

3. python3 scylla.py --username johndoe -l="john doe"Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query4. python3 scylla.py --info google.comCommand 4 will return crucial WHOIS information about the webserver/website.
5. python3 scylla.py -r +14167777777Command 5 will dump information on that phone number (Carrier, Location, etc.)

6. python3 scylla.py -s apacheCommand 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.

7. python3 scylla.py -s webcamxpCommand 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcamquery but webcamxpreturns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.

8. python3 scylla.py -g 1.1.1.1Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.

9. python3 scylla.py -c 123456789123456Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will[...]

___________________________
@hacking_Attack
@Hacking_Video

also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option. Menuusage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]

optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER
return the information associated with specified
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHONE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN API NOTICEThe API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com, and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py). Discord Serverhttps://discord.gg/jtZeWek Ethical NoticeThe developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all. LicenseMIT License
Copyright (c) 2020 Josh Schiavone Download Scylla

___________________________
@hacking_Attack
@Hacking_Video

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc
http://www.kitploit.com/2022/02/scylla-simplistic-information-gathering.html

___________________________
@hacking_Attack
@Hacking_Video

About Scylla Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles (main platforms) assigned to a certain username. In continuation, Scylla has shodan support so you can search for devices all over the internet, it also has in-depth geolocation (https://www.kitploit.com/search/label/Geolocation) capabilities. Lastly, Scylla has a finance section which allows users to check if a credit/debit card number has been leaked/pasted in a breach and returns information on the cards IIN/BIN. This is the first version of the tool so please contact the developer if you want to help contribute and add more to Scylla. Installation 1: git clone https://www.github.com/DoubleThreatSecurity/Scylla
2: cd Scylla
3: sudo python3 -m pip install -r requirments.txt
4: python3 scylla.py --help
Usage python3 scylla.py --instagram davesmith --twitter davesmith
Command 1 will return account information of that specified Instagram & Twitter account.
python3 scylla.py --username johndoe
Command 2 will return all the social media (main platforms) profiles associated with that username.
python3 scylla.py --username johndoe -l="john doe"
Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query
python3 scylla.py --info google.com
Command 4 will return crucial WHOIS information about the webserver/website. python3 scylla.py -r +14167777777
Command 5 will dump information on that phone number (https://www.kitploit.com/search/label/Phone%20Number) (Carrier, Location, etc.)
python3 scylla.py -s apache
Command 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -s webcamxp
Command 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcam query but webcamxp returns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -g 1.1.1.1
Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.
python3 scylla.py -c 123456789123456
Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option. Menu usage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]

optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER

___________________________
@hacking_Attack
@Hacking_Video

return the information associated with specified
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHONE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN
API NOTICE The API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com (https://www.numverify.com/), and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API (https://www.kitploit.com/search/label/Shodan%20API) key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py). Discord Server https://discord.gg/jtZeWek Ethical Notice The developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all. License MIT License
Copyright (c) 2020 Josh Schiavone

Download Scylla (https://github.com/MandConsultingGroup/Scylla)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Tales from the Dark Web, Part 3: How Criminals Monetize Ransomware

Ransomware operators rely on cryptocurrency and other payment schemes to keep their activities under the radar and harder to trace.

Dark Reading: Attacks/Breaches
New Data-Wiping Malware Discovered on Systems in Ukraine

Researchers were scrambling to analyze a newly discovered piece of data-wiping malware found in the wild.

Dark Reading: Attacks/Breaches
What Does Least Privilege Access Mean for Cloud Security?

While traditional security controls are necessary at the perimeter, organizations also need to prevent malicious privileged access.