Hacking on Medium
This Leadership Hack Will Set You Miles Apart from Your Competition

https://cdn-images-1.medium.com/max/640/1*SB86HJJ5Xf3LVZVQlDthsw.png
Articulate your Vision in a clear and compelling message.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc

http://3.bp.blogspot.com/-DEFGVt3K7Aw/Yd2ZFJS7N8I/AAAAAAAA8qQ/zDP_7M0NPlkOSllos6VPujqfYmiz5u3NgCK4BGAYYCw/s16000/Scylla_1-796309.png Notice For DeprecationThis project is no longer being worked on by the developer. As of today, the program has many flaws and is not up to modern OSINT standards. A lot of APIs utilized within Scylla are no longer working as they did when the project was first released. The developer wrote Scylla out of boredom and as a side project therefore he is no longer working on it. The community is more than welcome to use Scylla's source as a base to improve on it's original capabilities to keep the tool alive. Please do not contact the developer to fix issues as he will not be replying as the project is deprecated. About ScyllaScylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles (main platforms) assigned to a certain username. In continuation, Scylla has shodan support so you can search for devices all over the internet, it also has in-depth geolocation capabilities. Lastly, Scylla has a finance section which allows users to check if a credit/debit card number has been leaked/pasted in a breach and returns information on the cards IIN/BIN. This is the first version of the tool so please contact the developer if you want to help contribute and add more to Scylla. Installation1: git clone https://www.github.com/DoubleThreatSecurity/Scylla2: cd Scylla3: sudo python3 -m pip install -r requirments.txt4: python3 scylla.py --helpUsage1. python3 scylla.py --instagram davesmith --twitter davesmithCommand 1 will return account information of that specified Instagram & Twitter account.

2. python3 scylla.py --username johndoeCommand 2 will return all the social media (main platforms) profiles associated with that username.

3. python3 scylla.py --username johndoe -l="john doe"Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query4. python3 scylla.py --info google.comCommand 4 will return crucial WHOIS information about the webserver/website.
5. python3 scylla.py -r +14167777777Command 5 will dump information on that phone number (Carrier, Location, etc.)

6. python3 scylla.py -s apacheCommand 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.

7. python3 scylla.py -s webcamxpCommand 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcamquery but webcamxpreturns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.

8. python3 scylla.py -g 1.1.1.1Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.

9. python3 scylla.py -c 123456789123456Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will[...]

___________________________
@hacking_Attack
@Hacking_Video

also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option. Menuusage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]

optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER
return the information associated with specified
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHONE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN API NOTICEThe API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com, and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py). Discord Serverhttps://discord.gg/jtZeWek Ethical NoticeThe developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all. LicenseMIT License
Copyright (c) 2020 Josh Schiavone Download Scylla

___________________________
@hacking_Attack
@Hacking_Video

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc
http://www.kitploit.com/2022/02/scylla-simplistic-information-gathering.html

___________________________
@hacking_Attack
@Hacking_Video

About Scylla Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles (main platforms) assigned to a certain username. In continuation, Scylla has shodan support so you can search for devices all over the internet, it also has in-depth geolocation (https://www.kitploit.com/search/label/Geolocation) capabilities. Lastly, Scylla has a finance section which allows users to check if a credit/debit card number has been leaked/pasted in a breach and returns information on the cards IIN/BIN. This is the first version of the tool so please contact the developer if you want to help contribute and add more to Scylla. Installation 1: git clone https://www.github.com/DoubleThreatSecurity/Scylla
2: cd Scylla
3: sudo python3 -m pip install -r requirments.txt
4: python3 scylla.py --help
Usage python3 scylla.py --instagram davesmith --twitter davesmith
Command 1 will return account information of that specified Instagram & Twitter account.
python3 scylla.py --username johndoe
Command 2 will return all the social media (main platforms) profiles associated with that username.
python3 scylla.py --username johndoe -l="john doe"
Command 3 will repeat command 2 but instead it will also perform an in-depth google search for the "-l" argument. NOTE: When searching a query with spaces make sure you add the equal sign followed by the query in quotations. If your query does not have spaces, it will be as such: python3 scylla.py --username johndoe -l query
python3 scylla.py --info google.com
Command 4 will return crucial WHOIS information about the webserver/website. python3 scylla.py -r +14167777777
Command 5 will dump information on that phone number (https://www.kitploit.com/search/label/Phone%20Number) (Carrier, Location, etc.)
python3 scylla.py -s apache
Command 6 will dump all the IP address of apache servers that shodan can grab based on your API key. The query can be anything that shodan can validate.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -s webcamxp
Command 7 will dump all the IP addresses and ports of open webcams on the internet that shodan can grab based on your API key. You can also just use the webcam query but webcamxp returns better results.
A Sample API key is given. I will recommend reading API NOTICE below, for more information.
python3 scylla.py -g 1.1.1.1
Command 8 will geolocate the specified IP address. It will return the longitude & latitude, city, state/province, country, zip/postal code region and the district.
python3 scylla.py -c 123456789123456
Command 9 will retrieve information on the IIN of the credit/debit card number entered. It will also check if the card number has been leaked/pasted in a breach. Scylla will return the card brand, card scheme, card type, currency, country, and information on the bank of that IIN. NOTE: Enter the full card number if you will like to see if it was leaked. If you just want to check data on the first 6-8 digits (a.k.a the BIN/IIN number) just input the first 6,7 or 8 digits of the credit/debit card number. Lastly, all this information generated is public because this is an OSINT tool, and no revealing details can be generated. This prevents malicous use of this option. Menu usage: scylla.py [-h] [-v] [-ig INSTAGRAM] [-tw TWITTER] [-u USERNAME]
[--info INFO] [-r REVERSE_PHONE_LOOKUP] [-l LOOKUP]
[-s SHODAN_QUERY] [-g GEO] [-c CARD_INFO]

optional arguments:
-h, --help show this help message and exit
-v, --version returns scyla's version
-ig INSTAGRAM, --instagram INSTAGRAM
return the information associated with specified
instagram account
-tw TWITTER, --twitter TWITTER

___________________________
@hacking_Attack
@Hacking_Video

return the information associated with specified
twitter account
-u USERNAME, --username USERNAME
find social media profiles (main platforms) associated
with given username
--info INFO return information about the specified website(WHOIS)
w/ geolocation
-r REVERSE_PHONE_LOOKUP, --reverse_phone_lookup REVERSE_PHONE_LOOKUP
return information about the specified phone number
(reverse lookup)
-l LOOKUP, --lookup LOOKUP
performs a google search of the 35 top items for the
argument given
-s SHODAN_QUERY, --shodan_query SHODAN_QUERY
performs a an in-depth shodan search on any simple
query (i.e, 'webcamxp', 'voip', 'printer', 'apache')
-g GEO, --geo GEO geolocates a given IP address. provides: longitude,
latitude, city, country, zipcode, district, etc.
-c CARD_INFO, --card_info CARD_INFO
check if the credit/debit card number has been pasted
in a breach...dumps sites. Also returns bank
information on the IIN
API NOTICE The API used for the reverse phone number lookup (free package) has maximum 250 requests. The one used in the program right now will most definetely run out of uses in the near future. If you want to keep generating API keys, go to https://www.numverify.com (https://www.numverify.com/), and select the free plan after creating an account. Then simply go scylla.py and replace the original API key with your new API key found in your account dashboard. Insert your new key into the keys[] array (at the top of the source). For the Shodan API (https://www.kitploit.com/search/label/Shodan%20API) key, it is just a sample key given to the program. The developer recommends creating a shodan account and adding your own API key to the shodan_api[] array at the top of the source (scylla.py). Discord Server https://discord.gg/jtZeWek Ethical Notice The developer of this program, Josh Schiavone, written the following code for educational and OSINT purposes only. The information generated is not to be used in a way to harm, stalk or threaten others. Josh Schiavone is not responsible for misuse of this program. May God bless you all. License MIT License
Copyright (c) 2020 Josh Schiavone

Download Scylla (https://github.com/MandConsultingGroup/Scylla)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Tales from the Dark Web, Part 3: How Criminals Monetize Ransomware

Ransomware operators rely on cryptocurrency and other payment schemes to keep their activities under the radar and harder to trace.

Dark Reading: Attacks/Breaches
New Data-Wiping Malware Discovered on Systems in Ukraine

Researchers were scrambling to analyze a newly discovered piece of data-wiping malware found in the wild.

Dark Reading: Attacks/Breaches
What Does Least Privilege Access Mean for Cloud Security?

While traditional security controls are necessary at the perimeter, organizations also need to prevent malicious privileged access.

Dark Reading: Attacks/Breaches
CISA Warns of New Malware Framework Used by Russian 'Sandworm' Hacking Team

Russian General Staff Main Intelligence Directorate (GRU) hacking team appears to have swapped its VPNFilter malware platform for the so-called Cyclops Blink malware framework.
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: Do You Need To Be A Programmer?
https://medium.com/@skavans_/bug-bounty-do-you-need-to-be-a-programmer-adaa54679f4?source=rss------bug_bounty-5

Disclaimer: we are talking about the research of web applications only.Continue reading on Medium » (https://medium.com/@skavans_/bug-bounty-do-you-need-to-be-a-programmer-adaa54679f4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does backend server handles multiple clients over single TCP connection from load balancer?

I was reading about desync attack and wondered how multiple client requests are handled over a single TCP or TLS connection. When a poisoned request is smuggled by the attacker and forwarded by proxy server to backend server over single stream, how the backend server differentiates between clients. I guess the proxy server just forwards the coming HTTP requests to respective backend servers.

submitted by /u/killMercy321
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
dnsspoof not working

submitted by /u/ye_sh1thead
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to back trace phishing

Anyone here, what are some ways to trace phishing emails? I've attempted some "whoisthis* and reverse IP searching, but I've come up with the standard ' the ip address.doesnt exists or the end point is nonexistent. With the real constant threat of phishing constantly how are some of you able to avoid getting tricked?

submitted by /u/CiditalCorpse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers iraníes apuntan a fallas de VMware Horizon Log4j para implementar ransomware

https://cdn-images-1.medium.com/max/1437/0*GRnW-WR0GmGJwAsS
PUBLICADO EN 23 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Invasion At The Speed Of Light

https://cdn-images-1.medium.com/max/1920/1*QdL1584bO8rBqRqu6nRf2g.jpeg
The changing face of warfare: Why databases are prime targets for analysis by invaders

Continue reading on The Dock on the Bay »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Automakers Need to Lock Their Doors Against Ransomware

Issues with patch management and other security practices leave auto manufacturers open to attacks.