Dark Reading: Attacks/Breaches
F-Secure Rebrands as WithSecure, Spins Off Consumer Products

Attempting to catch up with CrowdStrike, Microsoft, and Trend Micro, the Helsinki-based endpoint-protection firm "de-merges" its consumer-security business to focus on businesses.

Multiple ways to find sql and cheatsheet

Comments out rest of the query.  Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…Continue reading on Medium »
Read more...

Multiple ways to find sql and cheatsheet
https://thenurhabib.medium.com/multiple-ways-to-find-sql-and-cheatsheet-45f17fed7b59?source=rss------bug_bounty-5

Comments out rest of the query. 
Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…Continue reading on Medium » (https://thenurhabib.medium.com/multiple-ways-to-find-sql-and-cheatsheet-45f17fed7b59?source=rss------bug_bounty-5)

Hacking on Medium
Te ensinando a bugar/hackear/enganar o cérebro para transformar sentimentos e sensações

Você está se sentindo mal, com uma sensação ruim, ansioso, agitado, por quê? Não há motivos aparentes. O psicólogo Frederico Yamada…

Continue reading on Medium »

Hacking on Medium
My husband told me he was going to stay late at work when he was really going home to see his…

I found out around my husband’s undertaking final year when I found an mail on his phone from the lady he was cheating with. We had been…

Continue reading on Medium »

Hacking on Medium
Multiple ways to find sql and cheatsheet

Comments out rest of the query. 
Line comments are generally useful for ignoring rest of the query so you don’t have to deal with fixing…

Continue reading on Medium »

Hacking on Medium
Malware Analysis Bootcamp

https://cdn-images-1.medium.com/max/1200/1*IQVHoVgmb7n08IlTp6PKtw.jpeg
What Is Malware Analysis?

Continue reading on Medium »

Hacking on Medium
Método de Phishing “Browser in the Browser”

https://cdn-images-1.medium.com/max/1567/0*i05UazNBW8kN_2t6
PUBLICADO EN 23 MARZO, 2022POR EHACKING

Continue reading on Medium »

Hacking on Medium
1337up CTF — Mirage

https://cdn-images-1.medium.com/max/789/1*iWpMl_uLnyP6bSEwNwnQAg.png
Here’s a quick walkthrought I found while playing for a little bit the 1337UP CTF from #intigriti .

Continue reading on Medium »

Hacking on Medium
The Man Who Hacked Big Names with Zero Code Knowledge?

https://cdn-images-1.medium.com/max/2600/1*Ltu9XV-AbXU2aOmg4SdJiw.jpeg
That’s a true story!

Continue reading on Checkmate »

hacking: security in practice
smbclient not found windows

sorry if this is the wrong sub but I'm having a bit of trouble getting the smbclient command to work. iv activated it in the installer in control panel but the terminal says it isn't found. help?

submitted by /u/ollietron3
[link] [comments]

hacking: security in practice
Can cyberattacks disrupt plane travel?

Is it possible that plane travel could be disrupted in some catastrophic way by cyberattacks?

submitted by /u/favelarising
[link] [comments]

Hacking Articles
A Detailed Guide on Crunch

IntroductionOften times attackers have the need to generate a wordlist based on certain criteria which are required for pentest scenarios like password spraying/brute-forcing. Other times it could be a trivial situation like directory enumeration. Crunch is a tool developed in C by bofh28 that can create custom, highly modifiable wordlists that may aid an attacker in the situations mentioned above. It takes in min size, max size and alphanumeric character sets as input and generates any possible combination of words with or without meaning and writes it out in a text file. In this article, we’ll demonstrate crunch filters in detail. Table of Content* Installation and first run
* Different character sets
* Default alphanumeric wordlist
* Defined alphanumeric wordlist
* Space character wordlist
* View character sets available
* Using codename character sets
* Startblock in wordlists
* Creating patterns
* Case 1: Fixed word + 3 numbers
* Case 2: Fixed word + 3 uppercase alphabets
* Case 3: Fixed word + 3 lowercase alphabets
* Case 4: Fixed word + 3 symbols
* Case 5: Placeholder fixed pattern
* Case 6: Lowercase alphabet (a,b or c) + number (1,2 or 3) + symbol (ANY)
* Case 7: Two number (1,2 or 3) + lowercase alphabet (ANY) + symbol (ANY)
* Case 8: Treating symbols as literals

* Inverting wordlist
* Limit duplicate patterns
* Putting early stop on wordlists
* Word permutations
* Splitting wordlist based on word count
* Splitting wordlist based on size
* Compressing wordlist

* Conclusion Installation and first runCrunch is installed by default on Kali Linux but can be installed using apt package manager using
apt install crunch
After it is installed, we can run crunch to generate a wordlist. When we input the min and max size of the word to be generated and just the output file, it automatically takes in small case alphabets as character sets and generates words.

For example, here 1 character to 3 characters per word is being generated in smallcase and stored in file dict.txt
crunch 1 3 -o dict.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2ixE2u5rPTTOiED4SWZQiX4Li-U3ylaOKOX-2ypO2749cxmDqf0aqayrIRsm1iAxK7vQ9udUimuEhQx3Y_tSU8hcuK8LuA1W8bf7la1kNGZv3s6-xF-oUVTF4sfSziLMQslAz2uLA4IDT-DmIjZ4T5OZOGlKStLPK4x4DMzASGR0onGak8kA30e18Qw/s16000/1.png?w=640&ssl=1 Defined Alphanumeric CharactersA user can also define the selected characters to be used while generating a wordlist. Here, min size 5 and max size 7 characters per words is being generated while using the characters “p, a, s, s, 1, 2, and 3” as input. Hence the dictionary starts with “ppppp, ppppa ….” And ends with “3333333” and contains combinations like pass213, pass1 etc.
crunch 5 7 pass123 -o dict.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqlN7kjagoFQz8WB6S94xYoOlmyCxoEieqQYeCqJlTnLxZ0VpplZ1GteUBmJvSoU65WCrwNAZwoqS6By9YWyT0WaGHs89knGd29B8cXg8evv0jyS4E_0RxbUuw9_P0v4mmnrSiQY2TxiSsApObb3IqMH1qg651JhN-xRGPjMlWJD0ySShuYEaNRBnhdA/s16000/2.png?w=640&ssl=1 Space character wordlistOne neat trick is to include space in the wordlist. Often times we need spaces in scenarios for passwords and many generic wordlists or tools don’t have this feature. In crunch, we can define space as a character by putting space after the characterset to be used. For 1 to 3 characters per word including space we can do this:
crunch 1 3 "raj " -o space.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjB5ogkH174nxijeee10ucNhI65nNArSP5AS5N9d3RvBso0bOKpg3HTn0vPo2zDaHloB9j_41nzv5qErsk-gkO8mRXW48y1OalBi4qdz1YZ6D1jzSDaJ7fC9UES_t045v1T1tL16QQuXa6DaFA6pNyJUNO6eJOxK7IOYo0kd8kn5l9JHr23MqYCG7Onyg/s16000/3.png?w=640&ssl=1 View character sets availableIn the /usr/share/crunch directory, one may find a list file (charset.lst) [...]

mentioning all the different character sets supported by crunch. This is highly useful as a ready reference. One may manually specify character sets or can even use the codenames written on the left. It is quite simple to understand though. Description of each charset is given below:

https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEvgRSwWrQRNlM-Iavx70I_hwryGIL-ucFT1LiBh9WqJ-yHHoVn_pOfDQy-nyMxXT39mm26wHwN04yNDtJwpL_GiSVPXjF2aL8uxI2ELmX0H_9hvhVoQvaYWspG_3k1M1Nb0UEFaNay-Aj0Lh9gr00PLLKIzjgpC6ZXyCHSADTb2w4_sVxdS_nPV8Blw/s16000/4.1.png?w=640&ssl=1

To view the charset file:
cat /usr/share/crunch/charset.lst
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd-MHS44HpJ9gh16ouBo1GJX037H0htYD-I40156CHliJb_2cLtgrVy4v1BZ411kREu5Dsu_9chAgUlB9dj0zW_mg8znIG_P0ZI0J4btsWOrIJ0GGRPUHrW6SXpMB7ZKcO408rLd3gd-p1hosc2Pp0-52UVGUpvUkrb5XcErrHoIeifIoyTbmjpNaxbw/s16000/4.png?w=640&ssl=1 Using codename character setsThese codenames can be used while creating dictionary files. For example, to create a wordlist of 4 characters per word using a mixture of alphabets, numeric and special characters, one can specify the charset.lst file using the “-f” option and then specify code word “mixalpha-numeric-all”
crunch 4 4 -f charset.lst mixalpha-numeric-all -o wordlist.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinLz3zYNUUVEHshfIMR2SxarC7GF2ZcpD46kuoyU7Bw7AQawouo9MUeSjhfcFOIVJPhwrIasjUQIs75_i8GRFrlE-12GUxsvPdb03XNgUiyIvAG5RhuqSAXll3PIXcgSXVuNun07KiGdIc2SP3MNO5f4pdi9zzsC4bs_qRIsv9Uemrek8uRmRmibbJrA/s16000/5.png?w=640&ssl=1 Startblock in wordlistsA startblock can be defined using the “-s” filter. By using this, we can define from where a wordlist should start generating. This is helpful in discarding unwanted combinations. For example, to start a wordlist from abc1, and having 4 characters per word including alphanumeric and special characters can be created like below. This way, the dictionary starts with “abc1, abc2,..abd1, abd2…” and ends at “////”
crunch 4 4 -f charset.lst mixalpha-numeric-all -o wordlist.txt -s abc1
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhialpoDPiVkOv2fn2yB3ezfytUqFqlI8xbDfAX8i0niU7Q8qOVtRzOXKgf1CNPFqslalJKvpyoFDGNFlFHDWHhhBWs5EdLdDYhuqzyWqh1ZneXWUFL6fCJ0cen3r1i6I6CP8m8paNZXZk8ajhYNkektRU64Clt1HJBrywJit79l3dklOSuFVSP-cmXSg/s16000/6.png?w=640&ssl=1 Creating Dictionary with various patternsPlease note that the following symbols when defined as input in character sets mean the following:

@ will insert lower case characters

, will insert upper case characters

% will insert numbers

^ will insert symbols

Now, if a user wants to create a word with 3 characters with first character lowercase, number as second character and symbol as third, he can specify this:
crunch -t @%^ -o dict.txt
With “-t” as the flag to provide the symbols. If you aren’t going to use a particular character set you use a plus sign as a placeholder.

+ operator positioning: The + operator can be used where no specific character sets are used and any value can be replaced for the same. But this is in the following order:

Lowercase alphabets, uppercase alphabets, numbers, symbols

For example,
crunch 3 3 + + 123 +
This would take in the following input:

Lowercase: abcdefghijklmnopqrstuvwxyz

Uppercase: ABCDEFGHIJKLMNOPQRSTUVWXYZ

Numbers: 123

Symbols: !@#$%^&*()-_+=~`[]{}|\:;”‘,.?/

Case 1: Fixed word + 3 numbers

Lets say if we want to fix first 3 letters as “raj” and insert random combinations of digits at the last 3 places in a 6 character per word wordlist, it can be done by specifying the pattern without the use of commas like above in “-t” filter.
crunch 6 6 -t raj%%% -o num.txt
https://i0.wp.com/blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaD6OyQD1X9TWM7EYtj76tJdde6DhWohHBJQ_PRhXdQIu2XUL0ZZBmwzTCcXCph707_zHlamCk86tU5t3IrOfkL_qbc1cQgvvz9pxh8rsQ05KrDpMFCvevjq_ECMG2wR7sjasThFNYVU_JR3p[...]