Going beyond the surface: Vulns that pay well

These days bug bounty hunters have been finding many low hanging fruits and a lot of them want to go beyond those bugs. This blog is for…Continue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
Any resources on hacking solidity contracts?

Mainly interested in learning for white hat purposes and also to hack the scammers, as well as learning about vulnerabilities when writing my own contracts. Thanks!

submitted by /u/North_Advisor_9999
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Stuck on reset

So I have a MacBook, and have created an admin account and a few kid accounts. I cannot access the admin account and am unable to reset it since I cannot access the Apple ID I used to set it up. Everything I have read recommends booting it in single user mode, which I cannot do. How do I create a new admin account without resetting the whole thing?

submitted by /u/scott8533
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MONEYBOX: 1 CTF

https://cdn-images-1.medium.com/max/600/1*_7PvY9Cgifb2A55OAlxU2Q.png
A beginner-friendly CTF hosted on vulnhub.com MONEYBOX: 1 
created by Kirthik_T . Objective of this machine is boot to root, get 2 user…

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 OSINT Tools Hackers Need to Know About

https://cdn-images-1.medium.com/max/1170/0*pyLpbubIerob6shG.jpg
Open source intelligence is a vital task for the red team and blue team alike. Here are some of the most useful OSINT tools.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Going beyond the surface: Vulns that pay well

https://cdn-images-1.medium.com/max/1440/1*SI6jTLRPhA9rFUunyB7q2g.jpeg
These days bug bounty hunters have been finding many low hanging fruits and a lot of them want to go beyond those bugs. This blog is for…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Coin Registration Blockchain

https://cdn-images-1.medium.com/max/892/1*NKEvlJpRkOGoEDdE5kCq0Q.png
Blockchain has revolutionized finance. Immutable, scalable and transparent, it allows the anonymous exchange of digital assets peer to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What do hackers risk by joining the ‘IT Army of Ukraine’?

https://cdn-images-1.medium.com/max/1280/1*1YIejxYspoD81xK2tmqx7w.png
A government-backed push in Ukraine to get grassroots support for hacking Russia is raising legal and ethical questions.

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ukraine continues hacking back, Conti capsizes and a big cyber bill advances

https://cdn-images-1.medium.com/max/2500/1*ly2kazI39gTPkM7OdDKNLg.png
Welcome to Changelog for 3/6/22, published by Synack! Blake Sobczak here, checking in from a new, FBI-friendly D.C. neighborhood. Russia’s…

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Python Cybersecurity — How To Crack Passwords (Dictionary Attack)

https://cdn-images-1.medium.com/max/1280/1*1aoKqW84yXwNPX5tRLAjlg.jpeg
Learn how to build a simple Python script that can be used to Crack hashed Passwords also known as a dictionary attack. This tutorial…

Continue reading on Vinsloev Academy »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Osmedeus - A Workflow Engine For Offensive Security

___________________________
@hacking_Attack
@Hacking_Video

Osmedeus - A Workflow Engine For Offensive Security

A Workflow Engine For Offensive Security Installation NOTE that you need some essential tools like curl, wget, git, zip and login as root to start bash -c "$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)" Build the engine from source Make sure you installed golang >= v1.17 mkdir -p $GOPATH/src/github.com/j3ssiegit clone --depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeuscd $GOPATH/src/github.com/j3ssie/osmedeusmake build Usage osmedeus scan -f flowName -t target osmedeus scan -m modulePath -T targetsFile osmedeus scan -f /path/to/flow.yaml -t target osmedeus scan -m /path/to/module.yaml -t target --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t target -l /tmp/log.log cat targets | osmedeus scan -f sample # Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt # Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug # Cloud Usage: osmedeus cloud -f flowName -t target osmedeus cloud -m modulePath -t target osmedeus cloud -c 10 -f flowName -T targetsFile osmedeus cloud --token xxx -G -c 10 -f flowName -T targetsFile osmedeus cloud --chunk -c 10 -f flowName -t targetsFile # Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'"># Scan Usage: osmedeus scan -f flowName -t target osmedeus scan -m modulePath -T targetsFile osmedeus scan -f /path/to/flow.yaml -t target osmedeus scan -m /path/to/module.yaml -t target --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t target -l /tmp/log.log cat targets | osmedeus scan -f sample# Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt# Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug# Cloud Usage: osmedeus cloud -f flowName -t target osmedeus cloud -m modulePath -t target osmedeus cloud -c 10 -f flowName -T targetsFile osmedeus cloud --token xxx -G -c 10 -f flowName -T targetsFile osmedeus cloud --chunk -c 10 -f flowName -t targetsFile# Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'  Community & Discussion Join Our Discord server here  Donation & Sponsor Check out for a couple of donation methods here to get a premium package License Osmedeus is made with ♥ by @j3ssiejjj and it is released under the MIT license.Download Osmedeus
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Osmedeus - A Workflow Engine For Offensive Security
http://www.kitploit.com/2022/03/osmedeus-workflow-engine-for-offensive.html

___________________________
@hacking_Attack
@Hacking_Video

A Workflow Engine For Offensive Security
Installation NOTE that you need some essential tools like curl, wget, git, zip and login (https://www.kitploit.com/search/label/Login) as root to start bash -c "$(curl -fsSL https://raw.githubusercontent.com/osmedeus/osmedeus-base/master/install.sh)" Build the engine from source Make sure you installed golang >= v1.17 mkdir -p $GOPATH/src/github.com/j3ssie
git clone --depth=1 https://github.com/j3ssie/osmedeus $GOPATH/src/github.com/j3ssie/osmedeus
cd $GOPATH/src/github.com/j3ssie/osmedeus
make build Usage osmedeus scan -f [flowName] -t [target] osmedeus scan -m [modulePath] -T [targetsFile] osmedeus scan -f /path/to/flow.yaml -t [target] osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200' osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log cat targets | osmedeus scan -f sample # Practical Scan Usage: osmedeus scan -T list_of_targets.txt -W custom_workspaces osmedeus scan -t target.com -w workspace_name --debug osmedeus scan -f general -t www.sample.com osmedeus scan -f gdirb -T list_of_target.txt osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt # Provider Usage: osmedeus provider build osmedeus provider build --token xxx --rebuild --ic osmedeus provider create --name 'sample' osmedeus provider health --debug # Cloud (https://www.kitploit.com/search/label/Cloud) Usage: osmedeus cloud -f [flowName] -t [target] osmedeus cloud -m [modulePath] -t [target] osmedeus cloud -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile] osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile] # Utilities Usage: osmedeus health osmedeus version --json osmedeus utils tmux ls osmedeus utils tmux logs (https://www.kitploit.com/search/label/Logs) -A -l 10 osmedeus utils ps osmedeus utils ps --proc 'jaeles' osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60 osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'"># Scan Usage:
osmedeus scan -f [flowName] -t [target]
osmedeus scan -m [modulePath] -T [targetsFile]
osmedeus scan -f /path/to/flow.yaml -t [target]
osmedeus scan -m /path/to/module.yaml -t [target] --params 'port=9200'
osmedeus scan -m /path/to/module.yaml -t [target] -l /tmp/log.log
cat targets | osmedeus scan -f sample

# Practical Scan Usage:
osmedeus scan -T list_of_targets.txt -W custom_workspaces
osmedeus scan -t target.com -w workspace_name --debug
osmedeus scan -f general -t www.sample.com
osmedeus scan -f gdirb -T list_of_target.txt
osmedeus scan -m ~/.osmedeus/core/workflow/test/dirbscan.yaml -t list_of_urls.txt
osmedeus scan --wfFolder ~/custom-workflow/ -f your-custom-workflow -t list_of_urls.txt

# Provider Usage:
osmedeus provider build
osmedeus provider build --token xxx --rebuild --ic
osmedeus provider create --name 'sample'
osmedeus provider health --debug

# Cloud Usage:
osmedeus cloud -f [flowName] -t [target]
osmedeus cloud -m [modulePath] -t [target]
osmedeus cloud -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --token xxx -G -c 10 -f [flowName] -T [targetsFile]
osmedeus cloud --chunk -c 10 -f [flowName] -t [targetsFile]

# Utilities Usage:
osmedeus health
osmedeus version --json
osmedeus utils tmux ls
osmedeus utils tmux logs -A -l 10
osmedeus utils ps
osmedeus utils ps --proc 'jaeles'
osmedeus utils cron --cmd 'osmdeus scan -t example.com' --sch 60
osmedeus utils cron --for --cmd 'osmedeus scan -t example.com'  Community & Discussion Join Our Discord (https://www.kitploit.com/search/label/Discord) server here (https://discord.gg/gy4SWhpaPU)  Donation & Sponsor Check out for a couple of donation methods here to get a premium package (https://docs.osmedeus.org/premium/)

___________________________
@hacking_Attack
@Hacking_Video

License Osmedeus is made with ♥ by @j3ssiejjj (https://twitter.com/j3ssiejjj) and it is released under the MIT license.
Download Osmedeus (https://github.com/j3ssie/osmedeus)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Curious about all the ongoing DDoS attacks due to the conflict in Ukraine? I made a custom status page to track the uptime of Russian services (details in comments)

About

For educational purposes only

I am in the infosec field and have seen many posts and trending projects related to DDoS attacks and Russian sites/services.

I wanted to monitor the trends of these services and see how they are fairing overtime so I created a custom status page with Uptime Kuma to monitor them.

https://borscht.birki.io/status

All the source code for this service is available here and you can request additional domains to be tracked as well -> https://github.com/GrantBirki/borscht

Disclaimer I do not support DDoS attacks as they are illegal in many countries. This page is purely for educational purposes and security minded folks that want to view how things are trending network attack wise over time.

TL;DR:

Status page website that tracks the uptime for over 400+ and counting Russian domains

Link: https://borscht.birki.io/status

The site may take a moment to load because there are so many domains

submitted by /u/LIL_BIRKI
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Aggregated Scripts, Books, and TTPs for Beginners and Experienced Cyber Folks

https://external-preview.redd.it/AP5-QX6ClsABl7AuDvMnhZo2aMPPnD9WTpgrqyFZsLI.jpg?width=320&crop=smart&auto=webp&s=3599287ce55bca3952bc643708c03206ab32bb21 submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What operating system do hackers use?

Is it possible to pull of impressive hacks using Windows 10? Could a hacker use windows 10 to crack at all or is it "Linux or bust"?

submitted by /u/Electronic_Ad_5076
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video