Olá hacker, hoje vou contar sobre como encontrei meu primeiro bug (vulnerabilidade)em apenas 5 minutosContinue reading on Medium » (https://medium.com/@viniciusreisofficial823/meu-primeiro-bug-em-apenas-5-minutos-898e8331b1a4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Could SolarWinds “Setback” Be Relevant today?

Given recent news, and I don’t recall patch updates. Has anyone else had these thoughts?

submitted by /u/Su_doNymm
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Unlock a model phone to use it for sim/network

I have no idea where to turn to, so I'm turning to the hacking community to see if anyone has any ideas: my mom was sold a display demo unit of Samsung s21 however upon coming to home we realize that it doesnt read any sim cards, is there a way to unlock it or hack it?

submitted by /u/lasttomatillo_1990
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Cartography of Sighs

https://cdn-images-1.medium.com/max/600/1*gix3LQF6b35iHy6HtGQpQw.jpeg
What could make the guilty hyperpowerful feel safe with their servants after the world’s end began? Nothing short of ownership of their…

Continue reading on data-driven fiction »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top Courses After 12th In North Delhi

https://cdn-images-1.medium.com/max/612/0*Moie_Bbh4PXhAQJG
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Alan c2 Framework v6.0: Alan + JavaScript = ♡
https://www.reddit.com/r/redteamsec/comments/t1ssoz/alan_c2_framework_v60_alan_javascript/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (https://antonioparata.blogspot.com/2022/02/alan-c2-framework-v60-alan-javascript.html) [comments] (https://www.reddit.com/r/redteamsec/comments/t1ssoz/alan_c2_framework_v60_alan_javascript/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux: Top 5 tools for information gathering

What is information gathering?Continue reading on Medium »
Read more...

Kali Linux: Top 5 tools for information gathering

What is information gathering?Continue reading on Medium »
Read more...

hacking: security in practice
Using civilian mobile phones to detect enemy vehicle position

Proposition 1: develop an app that detects via smartphone sensors vibrations of heavy vehicles. When a vibration is detected, camera is activated. Smartphone must be connected to a power supply (e.g. in a house) streaming videos to the military to bombard via indirect fire (missiles, mortars)

Proposition 2: use smartphones as surveillance cameras placed in windows of houses, use AI directly to identify potential military vehicles, send gps data to military

Proposition 3: detect rocket artillery positions by combining position data from multiple smartphones when rocket flies over their positions (temporary correlation of sound profiles)

Thoughts? Anyone willing for a github project?

submitted by /u/intestinalvapor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to explore open ports in a network running these services?

How to explore open ports in a network running these services? 21: ftp 22: ssh 23: telnet 80: http 135: msrpc 443: https 5900: vnc xxx: Printers Etc

submitted by /u/napraticaautomacao
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Geofence

Anybody knows any nongeofenced Russian websites or a cool way to go arounf the geofence? My VPN doesn't have russian servers unfortunately.

submitted by /u/Hub_Pli
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux: Top 5 tools for information gathering
https://mactress535.medium.com/kali-linux-top-5-tools-for-information-gathering-bcc1c75827f6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is information gathering?Continue reading on Medium » (https://mactress535.medium.com/kali-linux-top-5-tools-for-information-gathering-bcc1c75827f6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

NTLMRecon - Enumerate Information From NTLM Authentication Enabled Web Endpoints
http://www.kitploit.com/2022/02/ntlmrecon-enumerate-information-from.html

___________________________
@hacking_Attack
@Hacking_Video

A fast and flexible NTLM reconnaissance (https://www.kitploit.com/search/label/Reconnaissance) tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CIDR range or combination of all of it all put in a single input file? No problem! NTLMRecon got you covered. Read on.
Demo 🔎 (5)">

___________________________
@hacking_Attack
@Hacking_Video

TODO Implement aiohttp based solution for sending requests Integrate a spraying library Add other authentication (https://www.kitploit.com/search/label/Authentication) schemes found to the output Automatic detection of autodiscover domains if domain Overview NTLMRecon looks for NTLM enabled web endpoints, sends a fake authentication request and enumerates the following information from the NTLMSSP response: AD Domain Name Server name DNS Domain Name FQDN Parent DNS Domain Since NTLMRecon leverages a python implementation of NTLMSSP, it eliminates the overhead of running Nmap NSE http-ntlm-info for every successful discovery. On every successful discovery (https://www.kitploit.com/search/label/Discovery) of a NTLM enabled web endpoint, the tool enumerates and saves information about the domain as follows to a CSV file : URL Domain Name Server Name DNS Domain Name FQDN DNS Domain https://contoso.com/EWS/ XCORP EXCHANGE01 xcorp.contoso.net EXCHANGE01.xcorp.contoso.net contoso.net Installation BlackArch NTLMRecon is already packaged for BlackArch (https://www.kitploit.com/search/label/BlackArch) and can be installed by running pacman -S ntlmrecon Arch If you're on Arch Linux (https://www.kitploit.com/search/label/Arch%20Linux) or any Arch linux based distribution, you can grab the latest build from the Arch User Repository (https://aur.archlinux.org/packages/ntlmrecon/). Build from source Clone the repository : git clone https://github.com/sachinkamath/ntlmrecon/ RECOMMENDED - Install virtualenv : pip install virtualenv Start a new virtual environment : virtualenv venv and activate it with source venv/bin/activate Run the setup file : python setup.py install Run ntlmrecon : ntlmrecon --help Usage $ ntlmrecon --help

_ _ _____ _ ___ _________
| \ | |_ _| | | \/ || ___ \
| \| | | | | | | . . || |_/ /___ ___ ___ _ __
| . ` | | | | | | |\/| || // _ \/ __/ _ \| '_ \
| |\ | | | | |____| | | || |\ \ __/ (_| (_) | | | |
\_| \_/ \_/ \_____/\_| |_/\_| \_\___|\___\___/|_| |_| - @pwnfoo

v.0.4 beta - Y'all still exposing NTLM endpoints?

Bug Reports, Feature Requests : https://git.io/JIR5z


usage: ntlmrecon [-h] [--input INPUT | --infile INFILE] [--wordlist WORDLIST]
[--threads THREADS] [--output-type] [--outfile OUTFILE]
[--random-user-agent] [--force-all] [--shuffle] [-f]

optional arguments:
-h, --help show this help message and exit
--input INPUT, -i INPUT
Pass input as an IP address, URL or CIDR to enumerate
NTLM endpoints
--infile INFILE, -I INFILE
Pass input from a local file
--wordlist WORDLIST Override the internal wordlist with a custom wordlist
--threads THREADS Set number of threads (Default: 10)
--output-type, -o Set output type. JSON (TODO) and CSV supported
(Default: CSV)
--outfile OUTFILE, -O OUTFILE
Set output file name (Default: ntlmrecon.csv)
--random-user-agent TODO: Randomize user agents when sending requests
(Default: False)
--force-all Force enumerate all endpoints even if a valid endpoint
is found for a URL (Default : False)
--shuffle Break order of the input files
-f, --force Force replace output file if it already exists

Example Usage Recon on a single URL $ ntlmrecon --input https://mail.contoso.com --outfile ntlmrecon.csv Recon on a CIDR range or IP address $ ntlmrecon --input 192.168.1.1/24 --outfile ntlmrecon-ranges.csv Recon on an input file The tool automatically detects the type of input per line and gives you results automatically. CIDR ranges are expanded automatically even when read from a text file. Input file can be

___________________________
@hacking_Attack
@Hacking_Video

something as mixed up as : mail.contoso.com
CONTOSOHOSTNAME
10.0.13.2/28
192.168.222.1/24
https://mail.contoso.com
To run recon with an input file, just run : $ ntlmrecon --infile /path/to/input/file --outfile ntlmrecon-fromfile.csv Acknowledgements @nyxgeek (https://github.com/nyxgeek) for the idea behind ntlmscan (https://github.com/nyxgeek/ntlmscan). Feedback If you'd like to see a feature added into the tool or something doesn't work for you, please open a new issue (https://github.com/sachinkamath/ntlmrecon/issues/new).

Download NTLMRecon (https://github.com/pwnfoo/NTLMRecon)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to securely browse the Internet | Prevent data leaks while connecting to public WiFi networks

https://cdn-images-1.medium.com/max/1280/1*_HX2YtEDy8aVKMb59GbFuw.jpeg
Feeling insecure while browsing on public WiFi? This blog is for you — Gourav Dhar, Software Developer at pulselabs…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video