Hacking Articles Tips Tricks Videos Tutorials
hacking: security in practice Tor bridges from 2022-02-19 to 2022-02-26 - all up & running and reachable in Russia for now… Basically all of the bridges are up and running: https://metrics.torproject.org/rs.html#details/A0872A7FABF80812D29CA8AD18FA0415E73F05CE…
opensea.io
bridges of ukraine - Collection | OpenSea
this is a collection of 42 bridges mostly named after Ukrainian cities
hacking: security in practice
Is it illegal to possess data leaked from a breach?
Let's say Company X was breached, and the attackers leaked the data publicly (or to the dark web). Could you get in legal trouble for downloading that data? I guess it's like possession of stolen goods, which is a crime, but what if you're a security researcher? Of if you're a customer of Company X, and want to see if any of your data is included in the breach?
submitted by /u/bigmetsfan
[link] [comments]
Is it illegal to possess data leaked from a breach?
Let's say Company X was breached, and the attackers leaked the data publicly (or to the dark web). Could you get in legal trouble for downloading that data? I guess it's like possession of stolen goods, which is a crime, but what if you're a security researcher? Of if you're a customer of Company X, and want to see if any of your data is included in the breach?
submitted by /u/bigmetsfan
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
hacking: security in practice
Am I the only one that feels like NetworkChuck is overrated?
When I started my hacking journey, I came across NetworkChuck a couple times in Youtube. When you look at their titles, they look very promising, but when you actually check the content of the video and try it out practically, around 80% of things often don't work or doesn't work you expect to do so.
I don't know if it's a good place to talk about it here, but I'm just wondering what you guys think about that
submitted by /u/407PrxAuthReq
[link] [comments]
Am I the only one that feels like NetworkChuck is overrated?
When I started my hacking journey, I came across NetworkChuck a couple times in Youtube. When you look at their titles, they look very promising, but when you actually check the content of the video and try it out practically, around 80% of things often don't work or doesn't work you expect to do so.
I don't know if it's a good place to talk about it here, but I'm just wondering what you guys think about that
submitted by /u/407PrxAuthReq
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Password Reset to Admin Access
https://hogarth45.medium.com/password-reset-to-admin-access-3b2a649bdc3?source=rss------bug_bounty-5
https://hogarth45.medium.com/password-reset-to-admin-access-3b2a649bdc3?source=rss------bug_bounty-5
While testing a web application that used a web GUI over the top of an API, I noted the calls to the API where authorized with a JWT token…Continue reading on Medium » (https://hogarth45.medium.com/password-reset-to-admin-access-3b2a649bdc3?source=rss------bug_bounty-5)
Hacking on Medium
Who Has Been Hacked and What Did You Do About It?
https://cdn-images-1.medium.com/max/2600/0*uUeGJhAtDpeSNpBd
I noticed 2 hacks and scam messages this morning.
Continue reading on Medium »
Who Has Been Hacked and What Did You Do About It?
https://cdn-images-1.medium.com/max/2600/0*uUeGJhAtDpeSNpBd
I noticed 2 hacks and scam messages this morning.
Continue reading on Medium »
Medium
Who Has Been Hacked and What Did You Do About It?
I noticed 2 hacks and scam messages this morning.
Hacking on Medium
Password Reset to Admin Access
https://cdn-images-1.medium.com/max/703/1*mOQbWkx9DjPO3g1vEt2rHQ.png
While testing a web application that used a web GUI over the top of an API, I noted the calls to the API where authorized with a JWT token…
Continue reading on Techiepedia »
Password Reset to Admin Access
https://cdn-images-1.medium.com/max/703/1*mOQbWkx9DjPO3g1vEt2rHQ.png
While testing a web application that used a web GUI over the top of an API, I noted the calls to the API where authorized with a JWT token…
Continue reading on Techiepedia »
Medium
Password Reset to Admin Access
While testing a web application that used a web GUI over the top of an API, I noted the calls to the API where authorized with a JWT token…
Hacking on Medium
How to install Kali Linux on Android using termux without root
https://cdn-images-1.medium.com/max/640/1*50DpMpzwHq5j7bUil-_JJg.png
Linux / Unix is an open-source operating system. It is one of the most used OS for hacking and provides adequate tools for hackers. Kali…
Continue reading on Medium »
How to install Kali Linux on Android using termux without root
https://cdn-images-1.medium.com/max/640/1*50DpMpzwHq5j7bUil-_JJg.png
Linux / Unix is an open-source operating system. It is one of the most used OS for hacking and provides adequate tools for hackers. Kali…
Continue reading on Medium »
Medium
How to install Kali Linux on Android using termux without root
Linux / Unix is an open-source operating system. It is one of the most used OS for hacking and provides adequate tools for hackers. Kali…
Hacking on Medium
$1.7m stolen from simple email phishing: 3 essential security takeaways from the OpenSea attack
https://cdn-images-1.medium.com/max/1312/0*ooY0Q0hwrk0iOyDz.jpg
On Saturday, February 19, attackers tricked OpenSea users using a basic email phishing attack.
Continue reading on The Harpie Blog »
$1.7m stolen from simple email phishing: 3 essential security takeaways from the OpenSea attack
https://cdn-images-1.medium.com/max/1312/0*ooY0Q0hwrk0iOyDz.jpg
On Saturday, February 19, attackers tricked OpenSea users using a basic email phishing attack.
Continue reading on The Harpie Blog »
Medium
$1.7m stolen from simple email phishing: 3 essential security takeaways from the OpenSea attack
On Saturday, February 19, attackers tricked OpenSea users using a basic email phishing attack. Users were emailed and asked to sign a smart…
BruteShark - Network Analysis Tool
http://www.kitploit.com/2022/03/bruteshark-network-analysis-tool.html
http://www.kitploit.com/2022/03/bruteshark-network-analysis-tool.html
BruteShark is a Network Forensic Analysis (https://www.kitploit.com/search/label/Forensic%20Analysis) Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack. The main goal of the project is to provide solution to security researchers and network administrators (https://www.kitploit.com/search/label/Administrators) with the task of network traffic analysis (https://www.kitploit.com/search/label/Traffic%20Analysis) while they try to identify weaknesses that can be used by a potential attacker to gain access to critical points on the network. Two BruteShark versions are available, A GUI based application (Windows) and a Command Line Interface tool (Windows and Linux).
The various projects in the solution can also be used independently as infrastructure for analyzing network traffic on Linux or Windows machines. For further details see the Architecture section. The project was developed in my spare time to address two main passions of mine: software architecture and analyzing network data. I love to get feedbacks from BruteShark users, your opinion is important to me! Feel free to contact me on contact.oded.shimon@gmail.com (mailto:contact.oded.shimon@gmail.com) or create new issue (https://github.com/odedshimon/BruteShark/issues).
What it can do Extracting and encoding usernames and passwords (HTTP, FTP, Telnet, IMAP, SMTP...) Extract authentication (https://www.kitploit.com/search/label/Authentication) hashes and crack them using Hashcat (Kerberos, NTLM, CRAM-MD5, HTTP-Digest...) Build visual network diagram (Network nodes, Open Ports, Domain Users) Extract DNS queries Reconstruct all TCP & UDP Sessions File Carving Extract Voip calls (SIP, RTP) Download Windows Prerequisites: Npcap driver (Wireshark (https://www.wireshark.org/download.html) installs one of this by default) .NET Core Runtime (https://dotnet.microsoft.com/download/dotnet/3.1/runtime) (Note that you have to install the proper runtime regard to your needs, that means .NET Core Desktop Runtime for BruteSharkDesktop and .NET Core Runtime for BruteSharkCli). For desktop version download BruteSharkDesktop Windows Installer (64 Bit) (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkDesktopInstaller_x64.msi). For CLI version download BruteSharkCli Windows 10 Executable (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli.exe). Linux Prerequisites: libpcap driver Download BruteSharkCli (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli) and just run it: wget https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli
./BruteSharkCli Examples Videos Building a network map
https://user-images.githubusercontent.com/18364847/131922221-5714f351-85f7-4490-bec9-8da4339b66b3.mp4
BruteSharkCli Usage Example - Extract Multiple Passwords and Hashes (also available at youtube) (https://youtu.be/GjGV5vwIGi8)
https://user-images.githubusercontent.com/18364847/131924013-8b2aa18b-0941-456e-a09d-799902554166.mp4 Hashes Extracting
The various projects in the solution can also be used independently as infrastructure for analyzing network traffic on Linux or Windows machines. For further details see the Architecture section. The project was developed in my spare time to address two main passions of mine: software architecture and analyzing network data. I love to get feedbacks from BruteShark users, your opinion is important to me! Feel free to contact me on contact.oded.shimon@gmail.com (mailto:contact.oded.shimon@gmail.com) or create new issue (https://github.com/odedshimon/BruteShark/issues).
What it can do Extracting and encoding usernames and passwords (HTTP, FTP, Telnet, IMAP, SMTP...) Extract authentication (https://www.kitploit.com/search/label/Authentication) hashes and crack them using Hashcat (Kerberos, NTLM, CRAM-MD5, HTTP-Digest...) Build visual network diagram (Network nodes, Open Ports, Domain Users) Extract DNS queries Reconstruct all TCP & UDP Sessions File Carving Extract Voip calls (SIP, RTP) Download Windows Prerequisites: Npcap driver (Wireshark (https://www.wireshark.org/download.html) installs one of this by default) .NET Core Runtime (https://dotnet.microsoft.com/download/dotnet/3.1/runtime) (Note that you have to install the proper runtime regard to your needs, that means .NET Core Desktop Runtime for BruteSharkDesktop and .NET Core Runtime for BruteSharkCli). For desktop version download BruteSharkDesktop Windows Installer (64 Bit) (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkDesktopInstaller_x64.msi). For CLI version download BruteSharkCli Windows 10 Executable (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli.exe). Linux Prerequisites: libpcap driver Download BruteSharkCli (https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli) and just run it: wget https://github.com/odedshimon/BruteShark/releases/latest/download/BruteSharkCli
./BruteSharkCli Examples Videos Building a network map
https://user-images.githubusercontent.com/18364847/131922221-5714f351-85f7-4490-bec9-8da4339b66b3.mp4
BruteSharkCli Usage Example - Extract Multiple Passwords and Hashes (also available at youtube) (https://youtu.be/GjGV5vwIGi8)
https://user-images.githubusercontent.com/18364847/131924013-8b2aa18b-0941-456e-a09d-799902554166.mp4 Hashes Extracting