PORTSWIGGER WEB SECURITY - WEBSOCKETS LAB ÇÖZÜMLERİ

WebSocket, client ile server arasında veri aktarımını sağlayan çift yönlü ve modern web uygulamalarında yaygın olarak kullanılan HTTP gibi…Continue reading on Medium »
Read more...

PORTSWIGGER WEB SECURITY - CORS (CROSS-ORIGIN RESOURCE SHARING) LAB ÇÖZÜMLERİ

CORS (Cross-Origin Resource Sharing / Kökenler Arası Kaynak Paylaşımı), belli bir domainin dışındaki kaynaklara kontrollü erişim sağlayan…Continue reading on Medium »
Read more...

PORTSWIGGER WEB SECURITY - WEBSOCKETS LAB ÇÖZÜMLERİ

WebSocket, client ile server arasında veri aktarımını sağlayan çift yönlü ve modern web uygulamalarında yaygın olarak kullanılan HTTP gibi…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Offensive Security Tool: Scapy

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: ScapyPost Views: 11 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png Reading Time: 2 Minutes

Offensive Security Tool: Scapy GitHub Link ScapyScapy is a powerful Python-based interactive packet manipulation program and library.

It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work.

It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, wireshark, p0f, etc.). It also performs very well at a lot of other specific tasks that most other tools can’t handle, like sending invalid frames, injecting your own 802.11 frames, combining techniques (VLAN hopping+ARP cache poisoning, VoIP decoding on WEP protected channel, …), etc.

Scapy supports Python 2.7 and Python 3 (3.4 to 3.9). It’s intended to be cross platform, and runs on many different platforms (Linux, OSX, *BSD, and Windows).

This tool is very powerful for Pentesters and Red Teams for performing highly sophisticated and quick action when inside a network. From Capturing VoIP and decoding conversation, to poisoning techniques and wireless injection attacks – in order to assess someone’s internal network infrastructure and how exposed they can be.
See Also: Complete Offensive Security and Ethical Hacking Course Getting startedScapy is usable either as a shell or as a library. For further details, please head over to Getting started with Scapy, which is part of the documentation.
Scapy can easily be used as an interactive shell to interact with the network. The following example shows how to send an ICMP Echo Request message to github.com, then display the reply source IP address:
sudo ./run_scapy Welcome to Scapy >>> p = IP(dst="github.com")/ICMP() >>> r = sr1(p) Begin emission:
.Finished to send 1 packets. * Received 2 packets, got 1 answers, remaining 0 packets >>> r[IP].src
'192.30.253.113'
See Also: Offensive Security Tools Collection: Red Teaming Tactics and Techniques ResourcesThe documentation contains more advanced use cases, and examples.

Other useful resources:

* Scapy in 20 minutes
* Interactive tutorial (part of the documentation)
* The quick demo: an interactive session (some examples may be outdated)
* HTTP/2 notebook
* TLS notebooks InstallationScapy works without any external Python modules on Linux and BSD like operating systems. On Windows, you need to install some mandatory dependencies as described in the documentation.

On most systems, using Scapy is as simple as running the following commands:
git clone https://github.com/secdev/scapy cd scapy
./run_scapy
To benefit from all Scapy features, such as plotting, you might want to install Python modules, such as matplotlib or cryptography. See the documentation and follow the instructions to install them.
See Also: Hacking stories: MafiaBoy, the hacker who took down the Internet
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Red-Teaming-Tactics-and-Techniques-90x90.png Offensive Security Tools Collection: Red Teaming Tactics and Techniques7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/metagoofil-90x90.png Recon Tool: Metagoofil1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/[...]

___________________________
@hacking_Attack
@Hacking_Video

02/swaks-1-90x90.png Offensive Security Tool: Swaks – Swiss Army Knife for SMTP2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Odin-90x90.png OSINT & Recon Tool: Odin2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/pre-90x90.png Offensive Security Tool: Sandbox Defender3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/unknown-90x90.png Offensive Security Tool: Stratus Red Team4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Working-of-Digital-Steganography-90x90.png Offensive Security Tool: Crypto Steganography1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/86676611-2c44d500-bfd1-11ea-87fd-faf874a2dcf2-90x90.png Recon Tool: WitnessMe1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/sqlmap-90x90.png Offensive Security Tool: SQLMap1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/comit_stream-90x90.png OSINT Tool: Commit Stream1 month ago
The post Offensive Security Tool: Scapy first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found ~1,000 user/pass combinations on multiples computers at a business center in Tampa Resort/Casino

submitted by /u/BAFrase
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Teardroid v4 easy to use android botnet work without port forwarding, VPS and android studio

https://external-preview.redd.it/jjr4yBFu5GRUQy5zi4ugLN9MT99cSAOZLU6jJIsG3H0.jpg?width=640&crop=smart&auto=webp&s=9ffa4ac04fdb566ccf098ea3505be49341583ad8 submitted by /u/Way_Tough
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any reports of Reddit iOS app compromise?

I hope this is in keeping with this sub's rules. It isn't intended to be an "I got hacked" post (as honestly I don't know if I did), but rather curious to know about what the community may be aware is actively happening.

So this may be me being super paranoid, but moments after I posted this, mildly anti-Russian, comment on the Ukraine live news post, the Reddit iPhone app that I was then using closed and installed an update.

I can't remember an app ever before closing and updating whilst in use (albeit I do have automatic updates enabled, the latest Reddit app in the App Store is a few days old now).

Are there any reports of the app having been compromised—or, worse, being actively exploited by pro-Russian elements?

submitted by /u/eggyal
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking my own YouTube channel I lost an year ago

Hello. I may be really off here asking this question in this subreddit but if so please let me know and I'll take down the post and perhaps you can share me an appropriate subreddit for these kinds of questions. The deal is I've lost both my gmail and password for a Youtube channel I created an year ago. I've done everything a person can in such situation and have concluded that the only way to regain my account is by hacking it. And was wondering if anyone could possibly help with the process. I haven't hacked anything in my life before. AGAIN, IMPORTANT NOTE: please let me know if this post is completely out of line to post in this subreddit, I will take it down and if you are kind enough, please let me know a subreddit that could perhaps help. Thank you for reading.

submitted by /u/crypto_dababy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Raven : Advanced Cyber Threat Map (Simplified, Customizable, Responsive)

Raven – Advanced Cyber Threat Map (Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, ~100,000 cities, and can be used in an isolated environment without external lookups!.

Features

* Uses D3.js (Not Anime.js)
* Active threat map (Live and replay)
* IP, country, city, and port info for each attack
* Attacks stats for countries (Only known attacks)
* Responsive interface (Move, drag, zoom in and out)
* Customize options for countries and cites
* 247 countries are listed on the interface (Not 174)
* Optimized worldmap for faster rendering
* Includes IP lookup, port information
* Random simulation (IP, country, city)
* Can be used online or offline (Static)
* Theme picker module Data

You have different options ip, name, and coordinates* ipprivate or public ip -> any of these IPs -> 0.0.0.0or 8.8.8.8as {'from':'0.0.0.0','to':'8.8.8.8'}* namecity,state,country -> any of these formats work -> seattle,wa,usor 0,usas {'from':'seattle,wa,us','to':'0,in'}* coordinatesLatitude and Longitude as {'from':['-11.074920','-51.648929'],'to':['51.464957','-107.583864']}Method 1 – Embed it and interact with it

//You only need to embed this iframe in your project.

//Then, run the initialization script with your custom settings – That’s all!
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘multi-output’, ‘single-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’],
‘disable’: [],
‘verbose’: true
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
});
//After that, you can plot any data you want
raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
Plotting data (functions)

raven.add_marker_by_name() //Plot info by country or city name
raven.add_marker_by_ip() //Plot data by IP address
raven.add_marker_by_coordinates() //Plot data by coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker

Plotting data (As line, from -> to)

raven.add_marker_by_name({‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’])
raven.add_marker_by_ip({‘from’:’0.0.0.0′,’to’:’0.0.0.0:53′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’])

Plotting data (As point)

raven.add_marker_by_name({‘from’:’portland,or,us’,’to’:null},{‘line’:{‘from’:null,’to’:null}},2000,[‘point’])
raven.add_marker_by_ip({‘from’:’8.8.8.8′,’to’:null},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘point’])
raven.add_marker_by_coordinates({‘from’:[‘-11.074920′,’-51.648929′],’to’:null},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘point’])

[...]

___________________________
@hacking_Attack
@Hacking_Video

Plotting data + adding it to the output table (function)

raven.add_to_data_to_table() //Plot info and add them to the output table
method //Name, IP or coordinates
marker_object //An object {‘from’:”,’to’:””} see examples
colors_object //An object {‘line: {‘from’: ”#FF0000′,’to’: ‘FF0000’}} this the color of the line between 2 points – (if null, then a random color will be picked)
timeout //Animation time out
options = [] //A list of options such as animation marker ‘line’, and plot place ‘multi-output’ or ‘single-out’ table or both

Plotting data + adding it to the output table (As line, from -> to)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Plotting data + adding it to the output table (As point)

raven.add_to_data_to_table(‘name’,{‘from’:’seattle,wa,us’,’to’:’delhi,in’},{‘line’:{‘from’:null,’to’:null}},2000,[‘line’,’multi-output’,’single-output’])
raven.add_to_data_to_table(‘ip’,{‘from’:’0.0.0.0′,’to’:’0.0.0.0:3389′},{‘line’:{‘from’:’#FF0000′,’to’:’#FF0000′}},1000,[‘line’,’multi-output’])
raven.add_to_data_to_table(‘coordinates’,{‘from’:[‘-11.074920′,’-51.648929′],’to’:[‘51.464957′,’-107.583864′]},{‘line’:{‘from’:null,’to’:’#FFFF00′}},1000,[‘line’,’single-output’])

Method 2 – Embed it, and use websocket for plotting

Raven Map

You only need to embed this iframe in your project.
iframe id=”raven-iframe” src=”src/raven.html” frameborder=”0″ width=”100%” height=”100%” scrolling=”auto”>
script type=”text/javascript”>
document.getElementById(‘raven-iframe’).addEventListener(“load”, function() {
var raven_options = {
‘world_type’: null,
‘selected_countries’: [],
‘remove_countries’: [‘aq’],
‘height’: window.innerHeight,
‘width’: window.innerWidth,
‘backup_background_color’: ‘#212222’,
‘orginal_country_color’: ‘#737373’,
‘clicked_country_color’: ‘#6c4242’,
‘selected_country_color’: ‘#ff726f’,
‘attack_output’: true,
‘global_timeout’: 2000,
‘global_stats_limit’: 10,
‘db_length’: 1000,
‘location’: ‘scripts’,
‘panels’: [‘single-output’],
‘disable’: [‘multi-output’,’tooltip’, ‘random’, ‘insert’,’taskbar’,’move_to_country’],
‘websocket’:{‘server’:’ws://localhost:5678′,
‘request_timeout’:3000},
‘verbose’: false
}
window[‘raven’] = document.getElementById(‘raven-iframe’).contentWindow.raven
window[‘raven’].init_all(raven_options)
window[‘raven’].init_world()
window[‘raven’].fetch_data_from_server()
});
Plotting data – Send the json object using Websocket ws://localhost:5678

{
“function”:”marker”,
“method”: “ip”,
“object”: {
“from”: “0.0.0.0”,
“to”: “0.0.0.0”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Plotting data and add to table – Send the json object using Websocket ws://localhost:5678

{
“function”:”table”,
“method”: “name”,
“object”: {
“from”: “0,us”,
“to”: “0,br”
},
“color”: {
“line”: {
“from”: “#977777”,
“to”: “#17777”,
}
},
“timeout”: 1000,
“options”: [
“line”,
“single-output”,
“multi-output”
]
}

Run simulation (Isolated)

sudo docker build -t simulation . && sudo docker run -p 5678:5678 -p 8080:8080 -it simulation Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tips for looking for internship/job while in college!

When I got into college I had it in my head that you had be a senior/junior to get an internship. This is not the case, you can apply to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How DeFiHelper Keeps Your Funds Safe

https://cdn-images-1.medium.com/max/1280/1*NKltu-VceJDBD1YS_ncpZA.jpeg
Security is a matter of life and death for all cryptocurrency users. How do we address it in DeFiHelper?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Backdoor Lockpick

https://cdn-images-1.medium.com/max/1920/1*Rw4-RtU8X-RkKlc0LElhIw.png
Reversing and Subverting Phicomm’s Backdoor Protocols

Continue reading on Tenable TechBlog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CEH or eJPT? After 12th!

https://cdn-images-1.medium.com/max/640/1*D5FE3rtRMx2fYcDGge9KGQ.jpeg
Yes! you believe it or not but there is really a huge difference between these courses, even if we talk about practical knowledge or the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Ethical Hacking right for you? Read this.

https://cdn-images-1.medium.com/max/1000/1*VnFXt9nToOS2qj7orBsDZg.jpeg
Today’s question of the day is that, Is Ethical Hacking right for you? In this blog, I will be discussing with you in full detail…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video