Hacking on Medium
Job Oriented Courses In North Delhi

https://cdn-images-1.medium.com/max/639/0*kWjKxBK7lBmpsy6q
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Creating a Multithreaded Port Scanner in Python
https://www.reddit.com/r/Pentesting/comments/t76enh/creating_a_multithreaded_port_scanner_in_python/

submitted by /u/pythonpsycho1337 (https://www.reddit.com/user/pythonpsycho1337)
[link] (https://tpetersonkth.github.io/2022/03/05/Creating-a-Multithreaded-Port-Scanner-in-Python.html) [comments] (https://www.reddit.com/r/Pentesting/comments/t76enh/creating_a_multithreaded_port_scanner_in_python/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What to do?

Alright this might sound somewhat like a weird question, but I'm really over the moon with it.

What do you do when you find a major security breach in a website? And by major I mean that the whole institution is comprised and all clients and employees data can be easily compromised. And that data falls under the GDPR

My instinct is too tell the head of security about the beach, but I'm not sure if I can get into legal troubles.

I haven't done any attack on the website

If you change just a string between the / in the URL anyone can get access to said data

Cheers,

submitted by /u/brunommpreto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Here for a request.

Hello hackers, I just need a request if that’s cool? If any of u can take down an IG instantly terminate and shit please help me. https://www.instagram.com/bonita_louis___/ this acc. And this https://www.instagram.com/_michael.vla_13_/ first acc is scammer, second is my brother a victim of the scam. Can anyone please help get both accs terminated instantly. Please, please, please.

submitted by /u/The_real_robin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I accidentally got ssh access to thousand of servers

So my country is about to do a nation wide exam (high school). This is accomplished by the central government providing virtual machine image (running Ubuntu LTS) with all configured application to run web based examination. Then all the school can just one click run to get the server running and begin to conduct exam on its local network.

The thing is, all server must have an access to open internet so it can pull the question and answers from the central government server. Which by the way also with an open ssh port.

The VM image shipped with 3 ssh public keys on standard user and i got the private key on one of them. So unfortunately only non privileged user unless i guess the root password.

This affect all the state owned school (around ~1.5k - 2k servers) and i already tested to 10 of them. Its easily accessed by the domain /u/VanillaWaffle_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

IOC Scraper - A Fast And Reliable Service That Enables You To Extract IOCs And Intelligence From Different Data Sources
http://www.kitploit.com/2022/03/ioc-scraper-fast-and-reliable-service.html

___________________________
@hacking_Attack
@Hacking_Video

IOC Scraper (https://www.kitploit.com/search/label/Scraper) utilises IOCPARSER (https://iocparser.com/) service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing (https://www.kitploit.com/search/label/Parsing) IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily.
Features Defanged IOCs : Supports extracting and defanging IOCs. Whitelist IOCs : Supports custom whitlisting of IOCs. Source Types : Supports variety of sources such as Blogs, PDFs, CSV, and much more. Supported IOC (https://www.kitploit.com/search/label/IOC) Types IOC Scraper supports a variety of IOC types. IOC TYPE STATUS ASN Supported IPv4, IPv6 Supported URL, Domain Supported Email Supported MD5, SHA1, SHA256, File Name Supported MAC Address Supported MITRE ATT&CK IDs Supported YARA Rules Supported Installation git clone https://www.github.com/chaitanyakrishna/iocscraper.git
pip3 install -f requirements.txt Usage python IOC_Scraper.py -h
___ ___ ____ ____
|_ _/ _ \ / ___| / ___| ___ _ __ __ _ _ __ ___ _ __
| | | | | | \___ \ / __| '__/ _` | '_ \ / _ \ '__|
| | |_| | |___ ___) | (__| | | (_| | |_) | __/ |
|___\___/ \____| |____/ \___|_| \__,_| .__/ \___|_|
|_|


usage: IOC_Scraper.py [-h] [-u URL] [-uL FILE_CONTAINING_URLS] [-t TIMEOUT] [-th THREADNUMBER] -o OUTPUT

IOC_Scraper v1.0

Optional Arguments:
-h, --help show this help message and exit
-u URL, --url Single URL for Fetching IOCs
-uL FILE_CONTAINING_URLS, --url-list FILE_CONTAINING_URLS File Containing URL, One URL in One Line.
-t TIMEOUT, --timeout TIMEOUT HTTP Request Timeout. default=60
-th THREADNUMBER, --thread THREADNUMBER Parallel HTTP Request Number. default=100

Required Arguments:
-o OUTPUT, --output OUTPUT Output file name.


Sample command line (https://www.kitploit.com/search/label/Command%20Line) arguments python iocscraper.py -u "http://targeturl.com" -o report

python iocscraper.py -uL urls.txt -o report
Output Duplicates ... ==================================================================================================== [Date: 20-01-2022] [Time: 23:03:13] [INFO] Fetched IOCs from the following domains ==================================================================================================== 1. blog.aquasec.com 2. nationalcybersecurity.com 3. cofense.com 4. thehackernews.com 5. blog.sucuri.net 6. threats.amnpardaz.com 7. www.crowdstrike.com 8. www.bleepingcomputer.com 9. forensicitguy.github.io 10. marcusedmondson.com 11. rajhackingarticles.blogspot.com 12. research.checkpoint.com 13. www.reddit.com 14. www.zerofox.com ==================================================================================================== [Date: 20-01-2022] [Time: 23:03:13] [INFO] Indicator of Compromise Stats ==================================================================================================== Domain : 52 URL : 26 IPv4 : 15 IPv6 : 0 ASN : 0 FILE_HASH_MD5 : 24 FILE_HASH_SHA1 : 16 FILE_HASH_SHA256 : 3 MITRE_ATTACK : 4 EMAIL : 3 CVE : 7 FILE_NAME : 59 YARA_RULE : 0 MAC_ADDRESS : 0 ==================================================================================================== [Date: 20-01-2022] [Time: 23:03:13] [INFO] Total IOCs: 209 ==================================================================================================== ">
python IOC_Scraper.py -uL url_list.txt -o report
___ ___ ____ ____
|_ _/ _ \ / ___| / ___| ___ _ __ __ _ _ __ ___ _ __
| | | | | | \___ \ / __| '__/ _` | '_ \ / _ \ '__|
| | |_| | |___ ___) | (__| | | (_| | |_) | __/ |
|___\___/ \____| |____/ \___|_| \__,_| .__/ \___|_|

___________________________
@hacking_Attack
@Hacking_Video

|_|


====================================================================================================
[Date: 20-01-2022] [Time: 23:03:09] [INFO] Initiating IOC Scraper ...
====================================================================================================
[*] ProgressBar: 14/14 [Fethcing IOC from: thehackernews.com] [Errors: 0] ... 0] ... ...
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Removing Duplicates ...



====================================================================================================
[Date: 20-01-2022] [Time: 23:03:13] [I NFO] Fetched IOCs from the following domains
====================================================================================================


1. blog.aquasec.com
2. nationalcybersecurity.com
3. cofense.com
4. thehackernews.com
5. blog.sucuri.net
6. threats.amnpardaz.com
7. www.crowdstrike.com
8. www.bleepingcomputer.com
9. forensicitguy.github.io
10. marcusedmondson.com
11. rajhackingarticles.blogspot.com
12. research.checkpoint.com
13. www.reddit.com
14. www.zerofox.com


====================================================================================================
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Indicator of Compromise Stats
====================================================================================================


Domain : 52
URL : 26
IPv4 : 15
IPv6 : 0
ASN : 0
FILE_HASH_MD5 : 24
FILE_HASH_SHA1 : 16
FILE_HASH_SHA256 : 3
MITRE_ATTACK : 4
EMAIL : 3
CVE : 7
FILE_NAME : 59
YARA_RULE : 0
MAC_ADDRESS : 0


====================================================================================================
[Date: 20-01-2022] [Time: 23:03:13] [INFO] Total IOCs: 209
====================================================================================================


API Reference API Reference (https://docs.iocparser.com/api-reference/parse-api) Authors Chaitanya Krishna (https://www.linkedin.com/in/chaitanyakrishnaa/) Acknowledgements Service Provided by IOCParser- @IOCParser (https://twitter.com/IOCParser)

Download Iocscraper (https://github.com/chaitanyakrishna/iocscraper)

___________________________
@hacking_Attack
@Hacking_Video

Plugins for Persistence (Sublime Text & VS Code)
https://www.reddit.com/r/redteamsec/comments/t77irh/plugins_for_persistence_sublime_text_vs_code/

submitted by /u/hanbei-undying (https://www.reddit.com/user/hanbei-undying)
[link] (https://thevivi.net/blog/pentesting/2022-03-05-plugins-for-persistence/) [comments] (https://www.reddit.com/r/redteamsec/comments/t77irh/plugins_for_persistence_sublime_text_vs_code/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why You Should Delete Your Facebook Profile Today

Facebook owned by Meta Inc. is the social media platform we have been using for almost twenty years. It revolutionized how we connect with…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Im looking for a good hacker

Hello Friends,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Python Cybersecurity For Beginners — Build Anonymous FTP Scanner

https://cdn-images-1.medium.com/max/1280/1*fIUZCVFZLqismr5Iyu8WrQ.jpeg
Learn how to build a simple Python script that can be used to scan a FTP server for anonymous access, allowing general access to the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You Should Change Your Password

https://cdn-images-1.medium.com/max/1920/1*9CLDNNn1bg84XwGOWBo1tQ.jpeg
Ever change your password three times in one week?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Oh My WebServer(MEDIUM) — THM Writeup

https://cdn-images-1.medium.com/max/1321/1*e8FBtuPNXI5We5sqlEHBVA.png
this box on try hack me is teach us about

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
IOC Scraper - A Fast And Reliable Service That Enables You To Extract IOCs And Intelligence From Different Data Sources

___________________________
@hacking_Attack
@Hacking_Video

Insecure Java Deserialization
https://medium.com/@ladecruze/insecure-java-deserialization-4d64d977544f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this content, we’ll be covering serialization and deserialization, how they can be used to cause severe damage to the application when…Continue reading on Medium » (https://medium.com/@ladecruze/insecure-java-deserialization-4d64d977544f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Open season: I have a free pass from Ukrainian government to cyberattack Russia

UA govt just gave my team a legal permission to do anything I want to Russian cyberspace. If you have an idea you hesitated to execute, go ahead. Napalm the mofos.

submitted by /u/msklvsk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video