Supports AES-256-GCM cryptography Supports Standard LSB steganography Supports LSB-LPS steganography Supports FLIF lossless compression Cipher data logs as json Analytics support for your experiments Supports json to csv conversions Highly verbose cipher data logs Workspace Cleaner Easy installer for initial setup Comes with easy updater Changelogs Changelog (main channel): https://github.com/xerohackcom/Chaya/blob/main/CHANGELOG.md Changelog (dev channel): https://github.com/xerohackcom/Chaya/blob/dev/CHANGELOG.md Installation One Line Setup Use the following command for faster setup: Command For Ubuntu Based Distros sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt-add-repository ppa:linuxuprising/libpng12 && sudo apt update && sudo apt install -y libpng12-0 Command For Debian Based Distros sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt install build-essential devscripts && cd ~/ && sudo touch /etc/apt/sources.list.d/libpng12.list && echo "deb https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && echo "deb-src https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 1CC3D16E460A94EE17FE581CEA8CACC073C3DB2A && sudo apt update && sudo apt install -y libpng12-0 Using Installer.py You can install the dependencies using installer.py script. Run the following commands in terminal: sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya Ubuntu Based Distros python3 installer.py --ubuntu Debian Based Distros python3 installer.py --debian Usage Help Menu python3 chaya.py --help Automatic Operations First add few images (png format) to /autoexp/image_raw/ Remove the txt file from all autoexp sub-folders to avoid errors! Run the following command python3 chaya.py -enc Output Data Enc + Steg images -> /autoexp/image_steg/ Enc + Steg + Comp images -> /autoexp/image_steg_comp/ Cipher data -> /appdata/cipher_data.json Analysis data -> /appdata/analysis_results_enc.json Issues - v1.2.3 Issue with numpy import (solution under issues) Known bug with image-quality library (not fixed) Future Plan The plan is to build this into a modular framework where users can also add their custom scripts for encryption (https://www.kitploit.com/search/label/Encryption) and steganography part. Support for multiple compression algorithms is being added. During the experiments, FLIF was supported, but now JpegXL (JXL) is the new best lossless raster based compression. Support for payload execution and other interesting stuff underway. Can be done combining commands, but not inbuilt. Video steganography using ffmpeg is being tested. Please refer to the PLANLOG for detailed feature plans: https://github.com/xerohackcom/Chaya/blob/main/PLANLOG.md License Chaya is licensed under AGPLv3 (https://github.com/xerohackcom/Chaya/blob/main/LICENSE) Contributions Helping to report bugs and fix issues is appreciated. Support Chaya! You can support Chaya by Monero XMR donations: https://xerohack.com/support.php
Address: 4BJLkV4GyaHCYgGSqYBAe418jzaUz6FPe8M14U49SzL5GG81YyoVtWABgJszGUdpUf6MNoWL4kJu7KqQFnWxDvXi34QeA7n

Download Chaya (https://github.com/xerohackcom/chaya)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybersecurity Mesh Architecture: Hope or Hype?

Gartner has touted CSMA as one of the top technology trends for this year. But what is it really?

Host Header Injection Leads To Pre-Account Takeover Worth 100$

Self Introduction :Continue reading on Medium »
Read more...

Ukrayna’nın Siber Savunması Hacken’ın Rolü: Dyma Budorin ile En Son AMA

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi…Continue reading on Medium »
Read more...

hacking: security in practice
Cybersecurity: Why Blue Team Alone Isn't Enough

https://external-preview.redd.it/RZhQ61lhixSQgyBOALB1JVQCCv2jI1tkJTnW-iAGfo8.jpg?width=320&crop=smart&auto=webp&s=9778b7ea97d2716a391dec78636d59055c10b745 submitted by /u/rocklandreject
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does the hacker group Anonymous work?

How are they able to hack into Russian places when other intelligence agencies were also likely trying to hack into the same places even before the Ukraine invasion? What makes Anonymous uniquely able to do this hacking? Also how does membership, recruitment, and organization work if the whole movement is based on anonymity?

submitted by /u/JarJarAwakens
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
trouble using qusuar RAT

so I'm using quasar rat to experiment with (on my own machines) if i use a virtual machine with the correct ip and ports , when the infected clicks and executes the file i still cannot connect. anyone with experience plz help , i am using windows 10 on both machines

submitted by /u/combester007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection Leads To Pre-Account Takeover Worth 100$
https://medium.com/@rupachandransangothi22/host-header-injection-leads-to-pre-account-takeover-worth-100-1bd8f2d51876?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Self Introduction :Continue reading on Medium » (https://medium.com/@rupachandransangothi22/host-header-injection-leads-to-pre-account-takeover-worth-100-1bd8f2d51876?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection Leads To Pre-Account Takeover Worth 100$

Self Introduction :Continue reading on Medium »
Read more...

Ukrayna’nın Siber Savunması Hacken’ın Rolü: Dyma Budorin ile En Son AMA

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi…Continue reading on Medium »
Read more...

Ukrayna’nın Siber Savunması Hacken’ın Rolü: Dyma Budorin ile En Son AMA
https://hackenturkiye.medium.com/ukraynan%C4%B1n-siber-savunmas%C4%B1-hacken-%C4%B1n-rol%C3%BC-dyma-budorin-ile-en-son-ama-545413c1e1e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi…Continue reading on Medium » (https://hackenturkiye.medium.com/ukraynan%C4%B1n-siber-savunmas%C4%B1-hacken-%C4%B1n-rol%C3%BC-dyma-budorin-ile-en-son-ama-545413c1e1e5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers escogen bandos en invasión de Rusia a Ucrania

https://cdn-images-1.medium.com/max/1200/1*iBgbHO2KDVWDbFXJ4W0_DA.jpeg
Desde que comenzó la invasión de Rusia a Ucrania muchos han tomado partido, los hackers no son la excepción.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
eCPPTv2 Review

https://cdn-images-1.medium.com/max/1062/1*O1xEEJzm-ndTVlBcVH-tww.png
This week, I completed the eCPPTv2 as part of my “All the certs!” journey. (You can read about my other reviews here).

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los exploits Log4shell ahora se usan principalmente para botnets DDoS

https://cdn-images-1.medium.com/max/1595/0*qskbHu8z0y_YT7lV
PUBLICADO EN 3 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Django: steal passwords and cookies using packet sniffing

https://cdn-images-1.medium.com/max/1200/1*HzdZnM8W7B7kUmrG9d5_Fg.png
Packet sniffing can be used to steal passwords from insecure Django websites. Here’s a demo of such an attack:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Accelerated Ransomware Attacks Pressure Targeted Companies to Speed Response

Threat actors have focused on two ends of the spectrum — quick, impactful attacks or stealthy intrusions — making strong prevention and faster response more important for enterprises.