hacking: security in practice
Debrid-sites...

Does anyone know any good FREE sites for "premium file downloads" such as keep2share or bitflash.cc, linksnappy looks good but it's a paid site.

submitted by /u/Weoli1
[link] [comments]

hacking: security in practice
Remote hack and delete applications

Is there a way I could do a remote hack and once in secretly delete apps on Win. 10

submitted by /u/Heston_TEA
[link] [comments]

hacking: security in practice
Professional Opinion Required, password was taken in data breach, curious if anyone knows the potential endgame of the hacker

My mothers password which unfortunately was used for multiple accounts for various things was breached. The hacker got into yahoo mail, amazon, Facebook, LinkedIn, and PayPal from what I can see so far. I've already gone ahead and changed every password, made the accounts tighter with two step verification and what not, as well as closed all open sessions for each account and logged them out. The hacker messaged every single connection on linked, and would of had access to all of the previously sent emails. I have the hackers IP from multiple websites and it seems to be Nigerian, As well as a phone number and email used.

Is there any red flags here, with all the LinkedIn messages, as well as some pretty sensitive websites. Should I be looking out for something more, or is what I've done enough? I'm a first year software engineer so I'm definitely capable with technology and have a strong sense with computers. Seems odd to me a scammer would message all her contacts, maybe with the info he received there are more attacks to come?

​

Any opinion would be much appreciated, Thanks so much.

submitted by /u/LeafyQueefy
[link] [comments]

hacking: security in practice
WAF bypassing using tamper scripts

Is it possible to bypass a WAF using a tamper script? Using sqlmap for penetration testing it says to use a tamper script. I looked into it and I would like to know how to write the appropriate tamper script for the right WAF.

submitted by /u/Electronic_Ad_5076
[link] [comments]

Blind-XSS Disappointment

Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator.Continue reading on Medium »
Read more...

Hacking on Medium
Account Enumeration Hacking Tool Created By Python For Finding Username Of Your Target Websits…

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NFT Security 101

https://cdn-images-1.medium.com/max/1884/1*teUgp9mVSJWHKWpNoW1FVQ.jpeg
An example-based analysis

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I managed to make a DDoS attack by exploiting a company’s service — Bug Bounty

https://cdn-images-1.medium.com/max/1200/0*lXKlSpKoqZpwW_aH
Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
LFI & RFI para servidores Windows

https://cdn-images-1.medium.com/max/716/1*f3XlmNrwg4pNaJqMkqwHyw.png
La inclusión de archivos locales (LFI) es la vulnerabilidad que se encuentra principalmente en los servidores web. Esta vulnerabilidad se…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blind-XSS Disappointment

https://cdn-images-1.medium.com/max/2600/1*rPHZT2Ql-riu-gce2D9zpA.jpeg
Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Blind-XSS Disappointment
https://adamwize.medium.com/blind-xss-disappointment-f122d48cbb0a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator.Continue reading on Medium » (https://adamwize.medium.com/blind-xss-disappointment-f122d48cbb0a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

($$$) IDOR via GET Request which can SOLD all User Products
https://aidilarf.medium.com/idor-via-get-request-which-can-sold-all-user-products-2f5bc3ea1650?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi everyone,Continue reading on Medium » (https://aidilarf.medium.com/idor-via-get-request-which-can-sold-all-user-products-2f5bc3ea1650?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

($$$) IDOR via GET Request which can SOLD all User Products

Hi everyone,Continue reading on Medium »
Read more...

Kali Linux Tutorials
Registry-Spy : Cross-platform Registry Browser For Raw Windows Registry Files

Registry-Spy is a free, open-source cross-platform Windows Registry viewer. It is a fast, modern, and versatile explorer for raw registry files.

Features include:

* Fast, on-the-fly parsing means no upfront overhead
* Open multiple hives at a time
* Searching
* Hex viewer
* Modification timestamps

Requirements

* Python 3.8+

Installation

Download the latest version from the releases page. Alternatively, use one of the following methods.

pip (recommended)

* pip install registryspy
* registryspy

Manual

* pip install -r requirements.txt
* python setup.py install
* registryspy

Standalone

* pip install -r requirements.txt
* python registryspy.py

Screenshots

Main Window
https://blogger.googleusercontent.com/img/a/AVvXsEjPzPE3NIv7DJIrZd_7YHEvT9ZKqiu-yes82AyF5iwQStvdX3WEuUsebzx2X-Hx2WSMvqnNcjp66a4roK-IR4tRqwriwHUksbD9kX94HysY9cmc9_10v6zx3Ex_sO_0bp8WRGHmVqy7zD75fVoaH4kz8czuWuQ62F1v2Vn1kfw7tX0oAsvwqj0Mrh_L=s791
Find Dialog
https://blogger.googleusercontent.com/img/a/AVvXsEj73-tSNeitt7bjIVKW7U5ZpIhzzqleQywF8-XCXmq5Pc4kqZ9MFI4KfWC7QVSHrNfx9ZT2uoJ3w4zM5KrWj8mTo4cN2EYEL8w_uO5AyunrD6kGGCFiY3w2qv1OhoblNNic3fTrKIv-SE9zlotL-5E-Lbxj8pBerhDJn8PwJg9xCZxZxXKTbDrzX5B4=s402
Building

Dependencies:

* PyInstaller 4.5+

Regular building: pyinstaller registryspy_install.spec

Creating a single file: pyinstaller registryspy_onefile.spec
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Inject-Assembly : Inject .NET Assemblies Into An Existing Process

Inject-Assembly is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon, similar to the behavior of execute-assembly.

There are two components of inject-assembly:

* BOF initializer: A small program responsible for injecting the assembly loader into a remote process with any arguments passed. It uses Beacon Inject Process to perform the injection, meaning this behavior can be customized in a Malleable C2 profile or with process injection BOFs (as of version 4.5).
* PIC assembly loader: The bulk of the project. The loader will initialize the .NET runtime, load the provided assembly, and execute the assembly. The loader will create a new App Domain in the target process so that the loaded assembly can be totally unloaded when execution is complete.

Communication between the remote process and Beacon occurs through a named pipe. The Aggressor script generates a pipe name and then passes it to the BOF initializer.

Notable Features

* Patches Environment.Exit() to prevent the remote process from exiting.
* .NET assembly header stomping (MZ bytes, e_lfanew, DOS Header, Rich Text, PE Header).
* Random pipe name generation based on SourcePoint.
* No blocking of the Beacon, even if the assembly is loaded into the current process.

Usage

Download and load the inject-assembly.cna Aggressor script into Cobalt Strike. You can then execute assemblies using the following command:

inject-assembly pid assembly [args…]

Specify 0 as the PID to execute in the current Beacon process.

It is recommended to use another tool, like FindObjects-BOF, to locate a process that already loads the .NET runtime, but this is not a requirement for inject-assembly to function.
Download

___________________________
@hacking_Attack
@Hacking_Video