Hacking on Medium
How do you spy on someone else’s phone without them knowing?
Phone hacking is the hone of investigating a portable gadget regularly utilizing computer abuses to analyze everything from the least…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How do you spy on someone else’s phone without them knowing?
Phone hacking is the hone of investigating a portable gadget regularly utilizing computer abuses to analyze everything from the least…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How do you spy on someone else’s phone without them knowing?
Phone hacking is the hone of investigating a portable gadget regularly utilizing computer abuses to analyze everything from the least…
Hacking on Medium
CVE-2021–40662 Chamilo LMS 1.11.14 RCE
This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
CVE-2021–40662 Chamilo LMS 1.11.14 RCE
This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
CVE-2021–40662 Chamilo LMS 1.11.14 RCE
This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…
Hacking on Medium
Los piratas informáticos apuntan a las redes bancarias con un nuevo rootkit para robar dinero de…
https://cdn-images-1.medium.com/max/1606/0*-d2alFj_qBLIDWgp
PUBLICADO EN 22 MARZO, 2022 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Los piratas informáticos apuntan a las redes bancarias con un nuevo rootkit para robar dinero de…
https://cdn-images-1.medium.com/max/1606/0*-d2alFj_qBLIDWgp
PUBLICADO EN 22 MARZO, 2022 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Los piratas informáticos apuntan a las redes bancarias con un nuevo rootkit para robar dinero de los cajeros automáticos
PUBLICADO EN 22 MARZO, 2022 POR EHACKING
Hacking on Medium
Hacking Human Connection: the Story of Awedience
https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times
Continue reading on The Airbnb Tech Blog »
___________________________
@hacking_Attack
@Hacking_Video
Hacking Human Connection: the Story of Awedience
https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times
Continue reading on The Airbnb Tech Blog »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking Human Connection: the Story of Awedience
How a home-grown product helps Airbnb employees feel more connected during solitary times
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Idk if this is related to hacking but hear me out....
So Iv'e been seeing these random "text" posts on live streams (pokemon unite) but at 1st glance I thought it was just a random dude tryna act all cool and all. Now I just searched for some unite vid and in one of the comment section I saw multiple "text" written from like 2-3 accounts with weird names. So I decide to check a profile out and I see some random vids with rgb pixels that make no sense....do they mean anything like a secret code or something??? Here's the link to the Youtube channel - https://www.youtube.com/channel/UCmS9H8nIBbyKhBBFhsuQiiQ
submitted by /u/Dark_Phantom2003
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Idk if this is related to hacking but hear me out....
So Iv'e been seeing these random "text" posts on live streams (pokemon unite) but at 1st glance I thought it was just a random dude tryna act all cool and all. Now I just searched for some unite vid and in one of the comment section I saw multiple "text" written from like 2-3 accounts with weird names. So I decide to check a profile out and I see some random vids with rgb pixels that make no sense....do they mean anything like a secret code or something??? Here's the link to the Youtube channel - https://www.youtube.com/channel/UCmS9H8nIBbyKhBBFhsuQiiQ
submitted by /u/Dark_Phantom2003
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Idk if this is related to hacking but hear me out....
So Iv'e been seeing these random "text" posts on live streams (pokemon unite) but at 1st glance I thought it was just a random dude tryna act all...
hacking: security in practice
Videos/Podcasts on Hacking
Not your typical request for ‘how do I do this?’ - but more of a recommendation request for podcasts or videos showcasing impressive exploits
As an example, I love LiveOverflows videos going over in depth binary exploitation, and the likes of Darknet Diaries for podcasts covering interesting subjects
So I’m not specifically interested in tutorials, I guess in line with write ups? A recent example being the story of the guy that recovered the $2m crypto wallet
Any recommendations welcome
submitted by /u/nexiviper
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Videos/Podcasts on Hacking
Not your typical request for ‘how do I do this?’ - but more of a recommendation request for podcasts or videos showcasing impressive exploits
As an example, I love LiveOverflows videos going over in depth binary exploitation, and the likes of Darknet Diaries for podcasts covering interesting subjects
So I’m not specifically interested in tutorials, I guess in line with write ups? A recent example being the story of the guy that recovered the $2m crypto wallet
Any recommendations welcome
submitted by /u/nexiviper
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Videos/Podcasts on Hacking
Not your typical request for ‘how do I do this?’ - but more of a recommendation request for podcasts or videos showcasing impressive exploits As...
hacking: security in practice
Wich would be the best way to exploit a DOM XSS vulnerability?
I have been reading about XSS attacks and how to exploit them but it's unclear to me how could I grab an hipotetic victim's credentials without showing my IP but also as much efficient as possible, I mean, if I want to hide my IP I could use BeeF behind TOR and use a gateway so when the victim clicks on the link with the beef script injected I would be able to grab his password but TOR is really slow so there could be a bottle neck in Wich browser asks the gateway for the script and it returns it 5 seconds later that it's a lot and make it suspicious. If I would care just about efficiency I could just create an script that sends the grabbed password to my email but that could reveal my identity.
Wich would be the best method ?
submitted by /u/Dasemu24
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Wich would be the best way to exploit a DOM XSS vulnerability?
I have been reading about XSS attacks and how to exploit them but it's unclear to me how could I grab an hipotetic victim's credentials without showing my IP but also as much efficient as possible, I mean, if I want to hide my IP I could use BeeF behind TOR and use a gateway so when the victim clicks on the link with the beef script injected I would be able to grab his password but TOR is really slow so there could be a bottle neck in Wich browser asks the gateway for the script and it returns it 5 seconds later that it's a lot and make it suspicious. If I would care just about efficiency I could just create an script that sends the grabbed password to my email but that could reveal my identity.
Wich would be the best method ?
submitted by /u/Dasemu24
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Wich would be the best way to exploit a DOM XSS vulnerability?
I have been reading about XSS attacks and how to exploit them but it's unclear to me how could I grab an hipotetic victim's credentials without...
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction - Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/
submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
DEV-0537 criminal actor targeting organizations for data...
Posted in r/redteamsec by u/dmchell • 2 points and 0 comments
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations
Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.
___________________________
@hacking_Attack
@Hacking_Video
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations
Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations
Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.
FastFinder - Incident Response - Fast Suspicious File Finder
http://www.kitploit.com/2022/03/fastfinder-incident-response-fast.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/03/fastfinder-incident-response-fast.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
FastFinder - Incident Response - Fast Suspicious File Finder
FastFinder is a lightweight tool made for threat hunting, live forensics (https://www.kitploit.com/search/label/Forensics) and triage on both Windows and Linux Platforms. It is focused on endpoint enumeration (https://www.kitploit.com/search/label/Enumeration) and suspicious file finding based on various criterias: file path / name md5 / sha1 / sha256 checksum simple string content match complex content condition(s) based on YARA
Ready for battle! fastfinder has been tested in real cases in multiple CERT, CSIRT and SOC use cases examples directory (https://www.kitploit.com/search/label/Directory) now include real malwares / suspect behaviors or vulnerability (https://www.kitploit.com/search/label/Vulnerability) scan examples Installation Compiled release of this software are available. If you want to compile from sources, it could be a little bit tricky because it strongly depends of go-yara and CGO compilation. Anyway, you'll find a detailed documentation for windows (https://github.com/codeyourweb/fastfinder/blob/master/README.windows-compilation.md) and for linux (https://github.com/codeyourweb/fastfinder/blob/master/README.linux-compilation.md) Usage "] [-b|--build ""] [-o|--output ""] [-n|--no-window] [-u|--no-userinterface] [-v|--verbosity ] [-t|--triage] Incident Response - Fast suspicious file finder Arguments: -h --help Print help information -c --configuration Fastfind configuration file. Default: -b --build Output a standalone package with configuration and rules in a single binary -o --output Save fastfinder logs in the specified file -n --no-window Hide fastfinder window -u --no-userinterface Hide advanced user interface -v --verbosity File log verbosity | 4: Only alert | 3: Alert and errors | 2: Alerts,errors and I/O operations | 1: Full verbosity) . Default: 3 -t --triage Triage mode (infinite run - scan every new file in the input path directories). Default: false'> ___ __ ___ ___ __ ___ __
|__ /\ /__` | |__ | |\ | | \ |__ |__)
| /~~\ .__/ | | | | \| |__/ |___ | \
2021-2022 | Jean-Pierre GARNIER | @codeyourweb
https://github.com/codeyourweb/fastfinder
usage: fastfinder [-h|--help] [-c|--configuration ""] [-b|--build
""] [-o|--output ""] [-n|--no-window]
[-u|--no-userinterface] [-v|--verbosity ]
[-t|--triage]
Incident Response - Fast suspicious file finder
Arguments:
-h --help Print help information
-c --configuration Fastfind configuration file. Default:
-b --build Output a standalone package with configuration and
rules in a single binary
-o --ou tput Save fastfinder logs in the specified file
-n --no-window Hide fastfinder window
-u --no-userinterface Hide advanced user interface
-v --verbosity File log verbosity
| 4: Only alert
| 3: Alert and errors
| 2: Alerts,errors and I/O operations
| 1: Full verbosity)
. Default: 3
-t --triage Triage mode (infinite run - scan every new file in
the input path directories). Default: false
___________________________
@hacking_Attack
@Hacking_Video
Ready for battle! fastfinder has been tested in real cases in multiple CERT, CSIRT and SOC use cases examples directory (https://www.kitploit.com/search/label/Directory) now include real malwares / suspect behaviors or vulnerability (https://www.kitploit.com/search/label/Vulnerability) scan examples Installation Compiled release of this software are available. If you want to compile from sources, it could be a little bit tricky because it strongly depends of go-yara and CGO compilation. Anyway, you'll find a detailed documentation for windows (https://github.com/codeyourweb/fastfinder/blob/master/README.windows-compilation.md) and for linux (https://github.com/codeyourweb/fastfinder/blob/master/README.linux-compilation.md) Usage "] [-b|--build ""] [-o|--output ""] [-n|--no-window] [-u|--no-userinterface] [-v|--verbosity ] [-t|--triage] Incident Response - Fast suspicious file finder Arguments: -h --help Print help information -c --configuration Fastfind configuration file. Default: -b --build Output a standalone package with configuration and rules in a single binary -o --output Save fastfinder logs in the specified file -n --no-window Hide fastfinder window -u --no-userinterface Hide advanced user interface -v --verbosity File log verbosity | 4: Only alert | 3: Alert and errors | 2: Alerts,errors and I/O operations | 1: Full verbosity) . Default: 3 -t --triage Triage mode (infinite run - scan every new file in the input path directories). Default: false'> ___ __ ___ ___ __ ___ __
|__ /\ /__` | |__ | |\ | | \ |__ |__)
| /~~\ .__/ | | | | \| |__/ |___ | \
2021-2022 | Jean-Pierre GARNIER | @codeyourweb
https://github.com/codeyourweb/fastfinder
usage: fastfinder [-h|--help] [-c|--configuration ""] [-b|--build
""] [-o|--output ""] [-n|--no-window]
[-u|--no-userinterface] [-v|--verbosity ]
[-t|--triage]
Incident Response - Fast suspicious file finder
Arguments:
-h --help Print help information
-c --configuration Fastfind configuration file. Default:
-b --build Output a standalone package with configuration and
rules in a single binary
-o --ou tput Save fastfinder logs in the specified file
-n --no-window Hide fastfinder window
-u --no-userinterface Hide advanced user interface
-v --verbosity File log verbosity
| 4: Only alert
| 3: Alert and errors
| 2: Alerts,errors and I/O operations
| 1: Full verbosity)
. Default: 3
-t --triage Triage mode (infinite run - scan every new file in
the input path directories). Default: false
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Depending on where you are looking for files, FastFinder could be used with admin OR simple user rights. Scan and export file match according to your needs configuration examples are available there (https://github.com/codeyourweb/fastfinder/blob/master/examples) input:
path: [] # match file path AND / OR file name based on simple string
content:
grep: [] # match literal string value inside file content
yara: [] # use yara rule and specify rules path(s) for more complex pattern search (wildcards / regex / conditions)
checksum: [] # parse for md5/sha1/sha256 in file content
options:
contentMatchDependsOnPathMatch: true # if true, paths are a pre-filter for content searchs. If false, paths and content both generate matchs
findInHardDrives: true # enumerate hard drive content
findInRemovableDrives: true # enumerate removable drive content
findInNetworkDrives: true # enumerate network drive content
findInCDRomDrives: true # enumerate physical CD-ROM and mounted iso / vhd...
output:
copyMatchingFiles: true # cr eate a copy of every matching file
base64Files: true # base64 matched content before copy
filesCopyPath: '' # empty value will copy matched files in the fastfinder.exe folder
advancedparameters:
yaraRC4Key: '' # yara rules can be (un)/ciphered using the specified RC4 key
maxScanFilesize: 2048 # ignore files up to maxScanFileSize Mb (default: 2048)
cleanMemoryIfFileGreaterThanSize: 512 # clean fastfinder internal memory after heavy file scan (default: 512Mb)
Search everywhere or in specified paths: use '?' in paths for simple char wildcard (eg. powershe??.exe) use '\*' in paths for multiple chars wildcard (eg. \*.exe) regular expressions are also available , just enclose paths with slashes (eg. /[0-9]{8}\.exe/) environment variables can also be used (eg. %TEMP%\myfile.exe) Important notes input path are always case INSENSITIVE content search on string (grep) are always case SENSITIVE backslashes SHOULD NOT be escaped (except with regular expressions) For more informations, take a look at the examples (https://github.com/codeyourweb/fastfinder/blob/master/examples) About this project I initially created this project to automate fast system oriented IOC detection on a wide computer network. It fulfills the needs I have today. Nevertheless if you have complementary ideas, do not hesitate to ask for, I will see to implement them if they can be useful for everyone. On the other hand, pull request will be studied carefully. Future releases I don't plan to add any additional features right now. The next release will be focused on: Unit testing / Code testing coverage / CI Build more examples based on live malwares tradecraft and threat actor campaigns
Download Fastfinder (https://github.com/codeyourweb/fastfinder)
___________________________
@hacking_Attack
@Hacking_Video
path: [] # match file path AND / OR file name based on simple string
content:
grep: [] # match literal string value inside file content
yara: [] # use yara rule and specify rules path(s) for more complex pattern search (wildcards / regex / conditions)
checksum: [] # parse for md5/sha1/sha256 in file content
options:
contentMatchDependsOnPathMatch: true # if true, paths are a pre-filter for content searchs. If false, paths and content both generate matchs
findInHardDrives: true # enumerate hard drive content
findInRemovableDrives: true # enumerate removable drive content
findInNetworkDrives: true # enumerate network drive content
findInCDRomDrives: true # enumerate physical CD-ROM and mounted iso / vhd...
output:
copyMatchingFiles: true # cr eate a copy of every matching file
base64Files: true # base64 matched content before copy
filesCopyPath: '' # empty value will copy matched files in the fastfinder.exe folder
advancedparameters:
yaraRC4Key: '' # yara rules can be (un)/ciphered using the specified RC4 key
maxScanFilesize: 2048 # ignore files up to maxScanFileSize Mb (default: 2048)
cleanMemoryIfFileGreaterThanSize: 512 # clean fastfinder internal memory after heavy file scan (default: 512Mb)
Search everywhere or in specified paths: use '?' in paths for simple char wildcard (eg. powershe??.exe) use '\*' in paths for multiple chars wildcard (eg. \*.exe) regular expressions are also available , just enclose paths with slashes (eg. /[0-9]{8}\.exe/) environment variables can also be used (eg. %TEMP%\myfile.exe) Important notes input path are always case INSENSITIVE content search on string (grep) are always case SENSITIVE backslashes SHOULD NOT be escaped (except with regular expressions) For more informations, take a look at the examples (https://github.com/codeyourweb/fastfinder/blob/master/examples) About this project I initially created this project to automate fast system oriented IOC detection on a wide computer network. It fulfills the needs I have today. Nevertheless if you have complementary ideas, do not hesitate to ask for, I will see to implement them if they can be useful for everyone. On the other hand, pull request will be studied carefully. Future releases I don't plan to add any additional features right now. The next release will be focused on: Unit testing / Code testing coverage / CI Build more examples based on live malwares tradecraft and threat actor campaigns
Download Fastfinder (https://github.com/codeyourweb/fastfinder)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
fastfinder/examples at master · codeyourweb/fastfinder
Incident Response - Fast suspicious file finder. Contribute to codeyourweb/fastfinder development by creating an account on GitHub.
Hacking on Medium
Pequenas anotações sobre o cabeçalho TCP/IP e sua conexão através do Three-way Handshake
https://cdn-images-1.medium.com/max/856/1*oqx14hnvll8OIaQzAmauVA.jpeg
Em palavras simples, o TCP (Transmission Control Protocol) é um protocolo orientado a conexão responsável pela transmissão de dados na…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Pequenas anotações sobre o cabeçalho TCP/IP e sua conexão através do Three-way Handshake
https://cdn-images-1.medium.com/max/856/1*oqx14hnvll8OIaQzAmauVA.jpeg
Em palavras simples, o TCP (Transmission Control Protocol) é um protocolo orientado a conexão responsável pela transmissão de dados na…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Pequenas anotações sobre o cabeçalho TCP/IP e sua conexão através do Three-way Handshake
Em palavras simples, o TCP (Transmission Control Protocol) é um protocolo orientado a conexão responsável pela transmissão de dados na…
Hacking on Medium
HTB: Chatterbox Writeup w/o Metasploit
https://cdn-images-1.medium.com/max/600/0*_hyp1gfsAOazuP02.png
Introduction
Continue reading on System Weakness »
___________________________
@hacking_Attack
@Hacking_Video
HTB: Chatterbox Writeup w/o Metasploit
https://cdn-images-1.medium.com/max/600/0*_hyp1gfsAOazuP02.png
Introduction
Continue reading on System Weakness »
___________________________
@hacking_Attack
@Hacking_Video
Medium
HTB: Chatterbox Writeup w/o Metasploit
Introduction
Hacking on Medium
Hacking Human Connection: the Story of Awedience
https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking Human Connection: the Story of Awedience
https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking Human Connection: the Story of Awedience
How a home-grown product helps Airbnb employees feel more connected during solitary times
Hacking on Medium
Microsoft investiga un supuesto robo de código fuente por parte de Lapsus$
https://cdn-images-1.medium.com/max/1644/0*kZMGqA5i-5fleZlQ
PUBLICADO EN 22 MARZO, 2022POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Microsoft investiga un supuesto robo de código fuente por parte de Lapsus$
https://cdn-images-1.medium.com/max/1644/0*kZMGqA5i-5fleZlQ
PUBLICADO EN 22 MARZO, 2022POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Microsoft investiga un supuesto robo de código fuente por parte de Lapsus$
PUBLICADO EN 22 MARZO, 2022POR EHACKING