hacking: security in practice
(beEf) Default username and password in use!

today I installed beef on Kali Linux with

sudo git clonethe link

then I changed myself to root with

sudo su

then cd'd into beef with

cd beef/

then I installed all the packages and gems with

./install

and finally started beEf with

./beef

but I got this error
[23:14:41][!] ERROR: Default username and password in use! [23:14:41] |_ Change the beef.credentials.passwd in config.yaml
but when I try to edit the user and pass in config.yaml, it shows it's a read-only file and asks me if I want to save it as a different file, if I click yes, it asks me if I want to replace the other one, I click yes and it shows me the same "do u want to save this read-only file?" again...and this cycle goes on

what should I do now to change the read-only file to an editable file

p.s. I tried

sudo vi my/file/path

and clicked ito edit

but it doesn't let me edit

submitted by /u/Aryangsuktekar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Mip22 - An Advanced Phishing Tool

https://blogger.googleusercontent.com/img/a/AVvXsEihPZQPr6BpTCaWNpPnEOG0dXcfDA0G5SK7FinOzqVs9VEJxVGI_DMVIZ-SI4KsvJ_SGAs-qGnsMKIjDfTmVL3IOtfr4VEAIXcT3-fxm6Wuoy8bI-z48kDGnpkQbm5j4O-7Dh46NIW6GtTdLezO_9E2XoWVZ0ULC9zZr7v0vUOWTpg1tj0Y7b6pmpWa=w352-h400 The program is made for educational purposes only for to see how the phishing method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk and avoid any sloppy actions. Installation Instructions https://blogger.googleusercontent.com/img/a/AVvXsEje132RKLedchTTkWw7_V20X8-Z8PQpGi3Lu7gOhxi9l3ZZL5u3mGypHZ_glsuTyPCq50_wB7JD6TkMlYqPhcOI6LCga_6BjRfBO6QaYFLphmRus77TOMR6fFFaYPiPjFESWXp7sN74D8q2s6d8iPS1bjZ6aGHj1qwr9LO8Eg8KxPx0If67TQ9zjUi7=w640-h360 Installation on Gnu / Linux OS.
On terminal sudo su git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22bash mip22.shInstallation on Android OS.
On Termux git clone git://github.com/makdosx/mip22.gitchmod -R 777 mip22 cd mip22 bash mip22.shFeautures and Properties. Mip22 is a modern and advanced cyber security program for computers with Gnu / Linux operating system and mobile phones and tablets with android operating system, for educational purposes.
Details

1. Automatic method
2. Manual Method
3. Tunnels Setup
4. Email Services
5. Vpn instructions
6. Sound Efects (only for pc)
1. Automatic method

Easy to use via terminal.
Automatic cloned services.
It has 69 ready cloned electronic services, including social networks, e-mails, cloud, multumedia etc etc. https://blogger.googleusercontent.com/img/a/AVvXsEgVFfGRsB6x67IRSPWwAbRBp8-0vsI2sq25nAd13_oaV6Q7hhifAnyeb0MCdcsQ9rHFhKumLx93syUp3zPQ6YR54PToNWFuKPqCWAgEff-811wHckok1qb9C_c2YbIgRaGFJTsv9llvq2yWWEBkzu58pi8WzfcxIy8-DkvVAR-wIGVO2mhkj81Rfa3R=w640-h462 1. Manual Method

Cloning services manually by cloning the service you want. Easy to use through browser service. https://blogger.googleusercontent.com/img/a/AVvXsEjs5hPjjqs7NKJ3-fb6f1w_8FERZlsw1xvVWP9UutczWHbwYlqp2VkaEjTvXiawJbEMDDSC2BUzUsaS5L2BfCpqGXWphwWxderQV5r0gQVOcFfR8fLzs1STbQBPmFnJFaKA6STekIaT2zaq4CpowyVl_jXkDgQhjlnBmikenuSIr1Mq5TgSdpEufQvq=w640-h526 1.
Tunnels Setup
It has 3 tunnels to promote these services from the local server to the internet.
It has ready api for the installation of some tunnels.
2.
Email Services
It has 3 well-known external email services found on the internet where you can visit to send an email.
3.
Vpn instructions
It has various instructions fron vpn on Android OS.
4.
Sound Efects (only for pc)
It has various effects such as music in the background. Download Mip22

___________________________
@hacking_Attack
@Hacking_Video

Mip22 - An Advanced Phishing Tool
http://www.kitploit.com/2022/03/mip22-advanced-phishing-tool.html

___________________________
@hacking_Attack
@Hacking_Video

The program is made for educational purposes only for to see how the phishing method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk and avoid any sloppy actions.
Installation Instructions 💻 📱 mip22 is a advanced phishing tool (3)">

___________________________
@hacking_Attack
@Hacking_Video

Installation on Gnu / Linux OS.
On terminal
sudo su git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh

Installation on Android (https://www.kitploit.com/search/label/Android) OS.
On Termux (https://www.kitploit.com/search/label/Termux)
git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh

Feautures and Properties. Mip22 is a modern and advanced cyber (https://www.kitploit.com/search/label/Cyber) security program for computers with Gnu / Linux operating system and mobile phones and tablets with android operating system, for educational purposes.


Details Automatic method Manual Method Tunnels Setup Email Services Vpn instructions Sound Efects (only for pc)


Automatic method Easy to use via terminal.
Automatic cloned services.
It has 69 ready cloned electronic services, including social networks, e-mails, cloud, multumedia etc etc.
💻 📱 mip22 is a advanced phishing tool (7)">

___________________________
@hacking_Attack
@Hacking_Video

Manual Method Cloning services manually by cloning (https://www.kitploit.com/search/label/Cloning) the service you want. Easy to use through browser service. 💻 📱 mip22 is a advanced phishing tool (9)">

___________________________
@hacking_Attack
@Hacking_Video

Tunnels Setup
It has 3 tunnels to promote these services from the local server to the internet.
It has ready api for the installation of some tunnels.
Email Services
It has 3 well-known external email services found on the internet where you can visit to send an email.
Vpn instructions
It has various instructions fron vpn on Android OS.
Sound Efects (only for pc)
It has various effects such as music in the background.


Download Mip22 (https://github.com/makdosx/mip22)

___________________________
@hacking_Attack
@Hacking_Video

Analyzing Malware with Hooks, Stomps, and Return-addresses
https://www.reddit.com/r/redteamsec/comments/tglpje/analyzing_malware_with_hooks_stomps_and/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.arashparsa.com/catching-a-malware-with-no-name/) [comments] (https://www.reddit.com/r/redteamsec/comments/tglpje/analyzing_malware_with_hooks_stomps_and/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
ThreatMapper Updated With New Scanning Tools

ThreatMapper 1.3.0 features secret scanning and the ability to enumerate a software bill of materials (SBOM) at runtime to help secure serverless, Kubernetes, container and multi-cloud environments.

Dark Reading: Attacks/Breaches
6 Reasons Not to Pay Ransomware Attackers

Paying a ransom might appear to be the best option, but it comes with its own costs.

Dark Reading: Attacks/Breaches
Multiple Automotive Manufacturers Infected With Emotet

Telemetry from industrial systems security firm Dragos has spotted the malware command-and-control servers communicating with several automotive manufacturer systems.

___________________________
@hacking_Attack
@Hacking_Video

Bypass confirmation to add payment method.

Summary:Continue reading on Medium »
Read more...

Bypass confirmation to add payment method.

Summary:Continue reading on Medium »
Read more...

Bypass confirmation to add payment method.
https://yajdesu.medium.com/bypass-confirmation-to-add-payment-method-df2772a36561?source=rss------bug_bounty-5

Summary:Continue reading on Medium » (https://yajdesu.medium.com/bypass-confirmation-to-add-payment-method-df2772a36561?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video