CTF players https://s.w.org/images/core/emoji/13.1.0/72x72/1f3f4-200d-2620-fe0f.png who were given a script to run. The target oracle is a local shell script.

Scripts allow you to run attacks against local oracles or more exotic services. Or you can use script mode to customize and extend rustpad‘s features. However, if you’re missing a feature, feel free to open an issue on GitHub!

rustpad script –help
rustpad-script 1.8.0
Question a script-based oracle
USAGE:
rustpad {script, –script, -S} [OPTIONS] –oracle –block-size –decrypt
OPTIONS:
-B, –block-size
Block size used by the cypher
[options: 8, 16]
-D, –decrypt
Original cypher text, received from the target service, which is to be decrypted
–delay
Delay between requests within a thread, in milliseconds
[default: 0]
-e, –encoding
Specify encoding used by the oracle to encode the cypher text
[options: auto, hex, base64, base64url]
[default: auto]
-E, –encrypt
Plain text to encrypt. Note: encryption mode requires a cypher text to gather necessary data
-h, –help
Print help information
-n, –no-iv
Cypher text does not include an Initialisation Vector
–no-cache
Disable reading and writing to the cache file
–no-url-encode
Disable URL encoding and decoding of cypher text
-o, –output
File path to which log output will be written
-O, –oracle
The oracle to question with forged cypher texts. This can be a URL or a shell script.
See the subcommands web --helpand script --helprespectively for further help.
-t, –threads
Amount of threads in the thread pool
[default: 64]
-v, –verbose
Increase verbosity of logging
-V, –version
Print version information
Script must respond with exit code 0 for correct padding, and any other code otherwise. Cypher text is
passed as the 1st argument. Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Log4J-Detect : Script To Detect The “Log4j” Java Library Vulnerability For A List Of URLs With Multithreading

Log4J-Detect is a script “log4j-detect.py” developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228.

To do so, it sends a GET request using threads (higher performance) to each of the URLs in the specified list. The GET request contains a payload that on success returns a DNS request to Burp Collaborator / interactsh. This payload is sent in a test parameter and in the “User-Agent” / “Referer” / “X-Forwarded-For” / “Authentication” headers. Finally, if a host is vulnerable, an identification number will appear in the subdomain prefix of the Burp Collaborator / interactsh payload and in the output of the script, allowing to know which host has responded via DNS.

It should be noted that this script only handles DNS detection of the vulnerability and does not test remote command execution.

Downloading log4j-detect.py

wget https://github.com/takito1812/log4j-detect/raw/main/log4j-detect.py

Running log4j-detect.py

python3 log4j-detect.py
https://blogger.googleusercontent.com/img/a/AVvXsEhqFKJHdlOcMRHGhHd_6TNDY8nU5c8pM3zYXRuXfovrJFynfKaDed5xpjY22SxC300G0zNC2WP8F_DZn9wNQp0IzdlSE1e7vzCtut9hEkuhAowlSxXNAAsMoFUYpc8CbZIbfa-lX4FRxSl9lV8_jziPU47xS-uvFO6BFvubxLD5fzgcyS8E12iJrk8x=s1241

Download

___________________________
@hacking_Attack
@Hacking_Video

How anyone could have gotten a free pass to attended @IWCON2022

Recently I attended InfoSec Community (@InfoSecComm) ‘s security conference IWCON2022. Awesome conference and awesome experience attending…Continue reading on Medium »
Read more...

How anyone could have gotten a free pass to attended @IWCON2022

Recently I attended InfoSec Community (@InfoSecComm) ‘s security conference IWCON2022. Awesome conference and awesome experience attending…Continue reading on Medium »
Read more...

Hacking on Medium
Robot followers? The impact of social media bots

https://cdn-images-1.medium.com/max/2600/0*4_GaZoOu0122I29f
Continue reading on Netacea »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Improve your Cybersecurity Skill with best Books.

https://cdn-images-1.medium.com/max/1920/1*WgwH5FBhT3HVyuP9pDFBaw.jpeg
Today’s rapidly developing world, cybersecurity is booming.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Load vs Stress Testing: Expect the Unexpected

https://cdn-images-1.medium.com/max/1920/0*nE2GVT08naZ9dbAM.jpg
At Cyrex, we like to break down the complexities and keep things simple.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How anyone could have gotten a free pass to attended @IWCON2022
https://medium.com/@irajkumar/how-anyone-could-have-got-a-free-pass-to-attended-iwcon2022-374cd016a96e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Recently I attended InfoSec Community (@InfoSecComm) ‘s security conference IWCON2022. Awesome conference and awesome experience attending…Continue reading on Medium » (https://medium.com/@irajkumar/how-anyone-could-have-got-a-free-pass-to-attended-iwcon2022-374cd016a96e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hacking stories: MafiaBoy, the hacker who took down the Internet

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hacking stories: MafiaBoy, the hacker who took down the InternetPost Views: 26
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 6 Minutes
In 2000, a high school student named Michael Calce, aka MafiaBoy, paralyzed the websites of e-commerce, and media giants including eBay, Amazon, CNN, Dell, and Yahoo with a series of denial-of-service attacks (DDoS).
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/hacker-michael-calce-1024x693.jpg
Early years

Michael Calce was born in the West Island area of Montreal, Quebec, Canada.

At a very young age, his parents got divorced, and he eventually moved to live with his mother, while his father had also his custody on the weekends.

The young Michael, at around the age of 6 felt isolated from his friends, and his father make sure to preoccupy him with a personal computer he brought from work

The digital world instantly had a hold of him. In his own words,

“There was something intoxicating about the idea of dictating everything the computer did, down to the smallest of functions”.
The computer gave him a sense of control and command which nothing in his world operated that way.

Over the first few weeks of using the computer, Michael went from not knowing anything to using DOS commands. He spent countless days on manuals gaining knowledge and putting it into work.

Few years later he got his first free trial of AOL, and it was his first time on the Internet. A few days later, the 9-year-old managed to hack AOL’s systems so he could stay up online past the 30-day trial period, pretty remarkable for his age.
First steps into Hacking

As a teenager, Michael began chatting with people using AOL’s chat function. He was getting kicked off from the chat rooms, in other words, “punting”, where someone would have knocked him offline by hitting him with so much data that his connection was severed.

It didn’t bother him, but instead, he was intrigued by the idea that an individual was able to “attack” someone else, regardless of the distance between them, using the Internet.

After gaining the knowledge needed, he was making fun by “punting” people who got on his nerves in the chat.

Michael was one of the first members that got involved in the first online hacking communities. As he got more and more involved in online hacker groups his hacking skills and knowledge got even deeper.

When joined the IWC (a hacker’s group), he found out that other people online had the power to shut down the computer, erase data, build malicious tools, steal personal information, disrupt credit ratings, and much more.

Michael was taught by the leader of the group and other members on how the IRC network works, and how to exploit certain vulnerabilities in order to compromise machines or networks, ideally with root access.

During the next couple of months, and all of a sudden, the leader of the group vanished into thin air leaving Michael and the members of IWC worried about what happened to him and how to continue running the group.
Eventually, Michael decided to leave the group as the backbone of IWC was gone and no other seemed to know what to do next.

He then proceeded to join another hacking group, the TNT/PHORCE group which was even bigger than what IWC used to be. TNT was considered the elite among the other hacking groups on IRC.

It was the first time that he used his alias, MafiaBoy, which was originated from his brother, who was downloading music i[...]

___________________________
@hacking_Attack
@Hacking_Video

llegally under the same alias.

After learning and practicing on small targets for some months, Michael finally broke to Outlawnet Inc, an ISP in Oregon which its network was operated by students at Sisters High School.

Using their server, he was able to spoof his IP address and route himself through Outlawnet, then enter an IRC chat room and make it appear as he was connected from anywhere, he wanted. He used that server also to cover his tracks.

He managed to hack over a handful of university networks and then by harnessing their combined computing power, he attacked outside websites.

In other words, he was able to perform DDoS attacks using the university networks to overwhelm with traffic outside websites by just clicking enter on his keyboard.
Project Rivolta – The attacks

As time passed, Michael had enough using the tools of other hackers and wanted more. He had the idea to build his own powerful DDoS tool with the help of his fellow hackers to establish dominance for himself and his hacking group in the cyberworld.

After a couple of months of developing their tool in combination with Michael’s compromised machines on various networks, it was time to test it on a major, well-known target.

On February 7, 2000, and while still being a High School student, Michael launches the first DDoS attack using his tool on Yahoo!. The attack was a part of a series of attacks under the project name Rivolta, meaning “uprising” in Italian. At the time, Yahoo!, was a multibillion-dollar company and the top search engine. He managed to shut down their website for an hour.
The next day someone also shut down Buy.com in response to the attack. Michael took it as a message to him, as someone was challenging him, suggesting that anyone could do what he did on Yahoo!. He saw it as a contest and armed with his powerful botnet, he chose his next target, which was eBay.

On the next day, on February 8th, he launched his attack on eBay, which fell harder and faster than Yahoo!.

While chatting with his fellow hackers on IRC, one suggested that CNN would be impossible to bring down because of its advanced networks, etc. MafiaBoy took it again as a challenge and managed to shut down CNN’s and a couple of days later he took down Dell’s website as well.

After people on the IRC chats saw that CNN was down, he would then push for another suggestion from them. Their suggestion was Amazon.com, which he attacked over the next week and took it down rather easily.
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/CNN_Down_Internet1-1024x473.jpg
Meanwhile the attacks were on the first page of every news media.
Aftermath
The FBI and the Canadian police department first notice Michael when undercover agents in the IRC chatrooms found out that MafiaBoy was claiming that he was responsible for the attacks. After that, he became the chief suspect.

Agents began searching the Internet for clues about his identity and soon found out an account in the name of MabiaBoy registered to an ISP in Canada. The data from the Dell attack also pointed to another ISP in Montreal and started to look as though Mafiaboy was located in Canada.

They managed to track him down when they executed warrants at Delphi Supernet and TotalNet in Montreal, the two ISP’s that had linked to multiple Mafiaboy accounts. By connecting the attacks from the incident at Outlawnet in Seattle, soon realized what it was about the TotalNet account information. It had the same telephone number and address.

After a couple of days of combining the information they found, they started monitoring his house and eventually arrested Michael.
He initially denied responsibility but later pleaded guilty in January 2000 to most of the charges brought against him, 55 in total. He got charged with 55 out 66 counts of mischief in connection with last year’s denial-service attacks. The cost of all the damages he caused was estimated at $1.1 bil[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hacking stories: MafiaBoy, the hacker who took down the Internet

___________________________
@hacking_Attack
@Hacking_Video

Jax.Network weekly update
https://medium.com/jax-network/jax-network-weekly-update-44b4d7862cb2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

by Maryna Trifonova, Head of Content at Jax.NetworkContinue reading on Jax.Network Blog » (https://medium.com/jax-network/jax-network-weekly-update-44b4d7862cb2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to earn money by hacking a walking for money app

https://external-preview.redd.it/RKSMva_ttXzPF-J9yCZkDOCl7WprP8rYLdPzXs9_cxc.jpg?width=216&crop=smart&auto=webp&s=799c7e1550dc27133bb65fbb3f83c3601d78609d submitted by /u/DEADFOOD
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
USB Bootable Kali Linux

Hi,

I'm very new to this though am playing around with Kali. Every time I select my USB to boot from the whole OS has been reset. I need to install all my tools again, and everything on the (~8GB) partition is reset.

I followed some directions for 'persistence' and managed to make the remaining ~110 GB persistent though this isn't of much help if I need to download tools, update OS after every boot.

Any suggestions?

FYI:

I used BalenaEtcher to flash my USB.

When booting I have tried multiple options though each time I am presented with a Kali Boot selection (Live, Persistence, Encrypted Persistence, etc.) I have recently selected 'encrypted-persistence' each time though it still resets everything except for the persistent partition each boot.

Thanks again = )

submitted by /u/Expriser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video