Hacking on Medium
Introduction To Buffer Overflows from absolute beginning

https://cdn-images-1.medium.com/max/800/0*GoJKaxQp_ujtfAWi.jpg
Hey There, if you are a absolute beginner and wanted to learn about buffer overflow then this blog is perfect for you because, I’m going…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Software Supply Chain Attack and 6 Steps to Protect Your Software Supply Chain

https://cdn-images-1.medium.com/max/2440/0*Ol_Z8qqdEO8OyH6j
Term: Software Supply Chain Attacks, Malicious Code or Components into a Trusted Piece of Software or Hardware

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Social Engineering: Most Neglected Human Vulnerability

https://cdn-images-1.medium.com/max/800/0*yLWaOl8zcpPdcGNz.jpg
It’s frequently observed that humans are the weakest link when it comes to cybersecurity. To exploit that vulnerability, numerous hackers…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Response Manipulation leads to Account Takeover

https://cdn-images-1.medium.com/max/2600/0*agJqu_7vDEanOdtV
This is a short story about my recent bug hunting on a private program. This program mainly relies on OTP to check user’s authentication…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Response Manipulation leads to Account Takeover

This is a short story about my recent bug hunting on a private program. This program mainly relies on OTP to check user’s authentication…Continue reading on Medium »
Read more...

HOF In 3 Minute Using Low Hanging Fruits
https://akash0x0.medium.com/hof-in-3-minute-using-low-hanging-fruits-81f4f855ebb7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, Security Guys & Hacker In this Write Up I am Going to tell you aboutContinue reading on Medium » (https://akash0x0.medium.com/hof-in-3-minute-using-low-hanging-fruits-81f4f855ebb7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

HOF In 3 Minute Using Low Hanging Fruits

Hello, Security Guys & Hacker In this Write Up I am Going to tell you aboutContinue reading on Medium »
Read more...

Response Manipulation leads to Account Takeover

This is a short story about my recent bug hunting on a private program. This program mainly relies on OTP to check user’s authentication…Continue reading on Medium »
Read more...

HOF In 3 Minute Using Low Hanging Fruits

Hello, Security Guys & Hacker In this Write Up I am Going to tell you aboutContinue reading on Medium »
Read more...

hacking: security in practice
Nounce in cipher?

I got a question on AES encryption, and have been given something called a ciphernounce. What exactly is a ciphernounce? Is it cipher+nounce, where nounce is appended to the end of the ciphertext?

Can you please explain in brief what exactly is nounce and why is it actually used in AES

submitted by /u/ultimate_smash
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My account got hacked

Welp as the title says my google acc got hacked the password and reovery mail is changed what do I do now?

submitted by /u/LawStrict
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Narthex : Modular Personalized Dictionary Generator

Narthex (Greek: Νάρθηξ, νάρθηκας) is a modular & minimal dictionary generator for Unix and Unix-like operating system written in C and Shell. It contains autonomous Unix-style programs for the creation of personalized dictionaries that can be used for password recovery & security assessment. The programs make use of Unix text streams for the collaboration with each other, according to the Unix philosophy. It is licensed under the GPL v3.0. Currently under development!

The tools

* nchance – A capitalization tool that appends the results to the bottom of the dictionary.
* ninc – A incrementation tool that multiplies alphabetical lines and appends an n++ at the end of each line.
* ncom – A combination tool that creates different combinations between the existing lines of the dictionary.
* nrev – A reversing tool, that appends the reserved versions of the lines at the end of the dictionary.
* nleet – A leetifier. Replaces characters with Leet equivalents, such as @ instead of a, or 3 instead of e.
* nclean – A tool for removing passwords that don’t meet your criteria (too short, no special characters etc.)
* napp – A tool that appends characters or words before or after the lines of the dictionary.
* nwiz – A wizard that asks for the infromation and combines the tools together to create a final dictionary.

Screenshots
https://blogger.googleusercontent.com/img/a/AVvXsEjhkqtTaQVdXiC5tXHT2j6cojQY6g5fo7FDNekBXgF2aEm8htKL9hWGLoDRbQCo8kEhg4M2o6XUOQ0fjbLQS-QtrzHNYgOC4tIlppQawBQTECMnG4hzqTpVxM4qway2ctLspoVoWRUCLJUwK33YV-86cSCvXHi1i24s3gJJR8pwb5BRXYw3Ysyh3K2O=s973
Dependencies

Narthex has no hard dependencies, however there are two building dependencies, GCCand Make, which are both required in order to easily compile and install the binaries, but not to run them.

Install

In order to install, execute the following commands:

$ git clone https://github.com/MichaelDim02/Narthex.git && cd Narthex
$ sudo make install

Usage

For easy use, there is a wizard program, nwiz, that you can use. Just run

$ nwiz

And it will ask you for the target’s information & generate the dictionary for you.

Advanced Usage

If you want to make full use of Narthex, you can read the manpages of each tool. What they all do, really, is enhance small dictionaries. They are really minimal, and use Unix text streams to read and output data. For example, save a couple keywords into a textfile words.txtin a different line each, and run the following

$ cat words.txt | nhance -f | ncom | nrev | nleet | ninc 1 30 > dictionary.txt
Download

___________________________
@hacking_Attack
@Hacking_Video

WhatsApp Bug Bounty: Bypassing biometric authentication using voip

Bypassing biometric authentication just by making a call and access the app completelyContinue reading on Medium »
Read more...

Hacking on Medium
Hacking the Vaccine machine— Hack the box

https://cdn-images-1.medium.com/max/1011/0*Ob4VCcxY5lM18wGT
In this article we will be hacking the Vaccine machine in Hack The Box. I assume you have a hack the box account.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PyShell - Multiplatform Python WebShell

https://blogger.googleusercontent.com/img/a/AVvXsEi0ZB4SbZnwWiFr0b5GhimZnxH2jDspxdeDaKMdh94iGpY93MNGW-z5VxJfZRggyhwZKVMJ07UrrL6jsneKcFOAuQg42QddV_2XvbuR_p5BMuCgM2doMfS5_NxxitaEhCGFGzTuQi7w-eaaIcO2JqWjUJPOFSL0imccvO3aINPhCLfZoIqHh2gLQd0Y=w640-h546 PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operating system of the server.

Thanks to this, you can use different types of shells (aspx, php, jsp, sh, py...) both in Windows and Linux, with command history, upload and download files and even, moving through directories as if it were a standard shell. Requirements* Python 3
* Install requirements.txt DownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PyShell UsageAuthorization header to use on each request -c COOKIES, --cookies COOKIES Cookie header to use on each request -p PARAM, --param PARAM Parameter to use with custom WebShell -pi, --pipe Pipe all commands after parameter -su, --sudo Sudo command execution (Only on Linux hosts) -ps, --PowerShell PowerShell command execution (Only on Windows hosts)">./PyShell.py -h
██████ ▓██ ░██ ██████ ██░ ██ ▓█████ ██▓ ██▓
▓██░ ██▒██░ ██▒██ ▒ ▓██ ██▒▓██ ▓██▒ ▓██▒
▓██░ ██▒ ██ ██░░ ▓███ ▒██████░▒████ ▒██░ ▒██░
▒██████ ▒ ░████▓░ ▒ ██▒░██ ░██ ▒██ ▒██░ ▒██░
▒██▒ ░ ░ ░ ██▒▓░▒██████▒▒░██▒░██▓░█████▒░██████▒░██████▒
▒██░ ░ ░ ██▒▒▒ ▒ ▒▓▒ ▒ ░ ▒ ░░▒░▒░░ ▒░ ░░ ▒░▓ ░░ ▒░▓ ░
░▒ ρ 7; ▓██ ░▒░ ░ ░▒ ░ ▒ ░ ░ ░ ░ ░ ░░ ░ ▒ ░░ ░ ▒ ░
░░ ░ ▒ ▒ ░░ ░ ░ ░ ░ ░░ ░ ░ ░ ░ ░
░ ░ ░ ░ ░ ░ ░

-------------- by @JoelGMSec & @3v4Si0N ---------------

usage: pyshell.py [-h] [-a AUTH] [-c COOKIES] [-p PARAM] [-pi] [-su] [-ps] url method

positional arguments:
url Webshell URL
method HTTP Method to execute command (GET or POST)

optional arguments:
-h, --help show this help message and exit
-a AUTH, --auth AUTH Authorization header to use on each request
-c COOKIES, --cookies COOKIES
Cookie header to use on each request
-p PARAM, --param PARAM
Parameter to use with custom WebShell
-pi, --pipe Pipe all commands after parameter
-su, --sudo Sudo command execution (Only on Linux hosts)
-ps, --PowerShell PowerShell command execution (Only on Windows hosts) The detailed guide of use can be found at the following link:https://darkbyte.net/pyshell-multiplatform-python-webshell LicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina (@JoelGMSec) and Héctor de Armas Padrón (@3v4si0n).

Special thanks to @Davidc96 for dynamic path function. ContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find us on Twitter as @JoelGMSec, @3v4si0n and on my blog darkbyte.net. Download PyShell

___________________________
@hacking_Attack
@Hacking_Video

WhatsApp Bug Bounty: Bypassing biometric authentication using voip
https://infosecwriteups.com/whatsapp-bug-bounty-bypassing-biometric-authentication-using-voip-87548ef7a0ba?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video