Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Raspberry Pi Pico as a BadUSB with built in executable storage

Has anyone ever tried using the pi pico as a mass storage device while being an HID device? It would help with running really long scripts fully offline. This could help a lot with for example placing a persistant backdoor with full system access rather than downloading the files on the spot, making our jobs a lot easier.

If you have links to any articles/suggestions on how I coudl figure this out, please comment.

submitted by /u/leavewhileyoucan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Raspberry Pi Pico as a BadUSB with built in executable storage

Has anyone ever tried using the pi pico as a mass storage device while being an HID device? It would help with running really long scripts fully...

7 viewsedited 22:34

hacking: security in practice
What does cracking a hash mean? What am i doing wrong?

Hey everyone, I have been working on this for days. Im really confused, but let me get to the point. Here is what ive done so far. 1.Booted my windows7 hdd to Kali Linux, mounted the drives. 2. Used samdump2 on The system and sam file to get the hashes. Now i got something like this disabled Administrator, disabled Guest Me:1000:aad3b435b51404eeaad3b435b51404ee:-45076b3d0847ae6212e48b2896ac3c01::: Ok so Forget the disabled admin and guest im just trying to get the password for "Me" from what i understand the first "aad3b and so on is an LM hash. two repeating chunks max 7 characters each containing only uppercase letter. The second one is an NT hash. So far im correct i think. Now heres where im having problems. When i use john --format=LM /home/kali/Desktop/hashfile I get the SAME THING Me:1000:aad3b435b51404eeaad3b435b51404ee:-45076b3d0847ae6212e48b2896ac3c01 1 password hashes cracked, 0 left. same thing with john --show --format LM . even when i try to put the output to a john.pot file, it gives me the same thing, for example heres the output for LM in the john.pot $LM$aad3b435b51404ee: same thing with NT $NT$45076b3d0847ae6212e48b2896ac3c01 What exactly is john doing here, It is supposedly "cracking the hashes" all it is doing is reading the first LM and NT hashes that are shown in the hash file. I thought cracking the hash was bruteforcing/wordlist attacks that generated a plaintext password, What am i doing wrong? How can i successfully crack these hashes to get the plaintext password. Any info would be greatly appreciated. If anyone has done this before and understands it and can give me some steps, i would be sooo appreciative. (BTW the second hash is one letter/number different so my password isnt out in the world) Anyone got any ideas/ can explain? Its a windows7 pass

submitted by /u/GuyfromQueensnyc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What does cracking a hash mean? What am i doing wrong?

Hey everyone, I have been working on this for days. Im really confused, but let me get to the point. Here is what ive done so far. 1.Booted my...

7 viewsedited 22:35

Hacking Articles Tips Tricks Videos Tutorials

I found a deal about a laptop
https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/

So i found a Razer blade 15 base model with: I7 10750h (6/12) 16gb ram Rtx3060 512gb ssd For 1469€ And a Asus rog Strix G15 with R9 5900x (8/16) 16hb ram Rtx2060 1tb ssd For 1399€ Which one should i get? Im going to use it for pentesting and gaming And also, which one is worth it? HTB academy subscription Or TryHackeMe VIP submitted by /u/Clyde253 (https://www.reddit.com/user/Clyde253)
[link] (https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/) [comments] (https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/)

___________________________
@hacking_Attack
@Hacking_Video

I found a deal about a laptop

So i found a Razer blade 15 base model with: I7 10750h (6/12) 16gb ram Rtx3060 512gb ssd For 1469€ And a Asus rog Strix G15 with R9 5900x...

10 viewsedited 23:13

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Crocodile HackTheBox Ctf

https://cdn-images-1.medium.com/max/800/1*ymyNebTC85d9gYu8xktbLQ.png
writeup of Crocodile room from hack the box.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Crocodile HackTheBox Ctf

writeup of Crocodile room from hack the box.

9 viewsedited 02:15

Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
3 Easy Ways Your Phone’s SIM Card Can Be Hacked

https://cdn-images-1.medium.com/max/2600/0*VPN9kyeLijzQliZr
SIM cards can be a security risk. Learn how to protect your phone.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

3 Easy Ways Your Phone’s SIM Card Can Be Hacked

SIM cards can be a security risk. Learn how to protect your phone.

10 viewsedited 02:15

Hacking Articles Tips Tricks Videos Tutorials

9 views02:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Github repo of a windows 11 AV bypass with reverse shell

someone shared this on twitter and it came up on my feed and thought that it was interesting enough to leave here. https://github.com/tihanyin/PSSW100AVB

submitted by /u/Apprehensive_Self481
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Github repo of a windows 11 AV bypass with reverse shell

someone shared this on twitter and it came up on my feed and thought that it was interesting enough to leave here....

8 viewsedited 02:36

Hacking Articles Tips Tricks Videos Tutorials

8 views02:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Microsoft Confirms It Was Hacked By Group Involved in Nvidia’s Data Breach

https://external-preview.redd.it/5pKjZjo8nSJdLFwpfGkI0P4XgY7usThsY-3SwRqH7HE.jpg?width=640&crop=smart&auto=webp&s=92745ce29705f747cbb239c9cabe388bd0b85bea submitted by /u/The_Stoned
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Microsoft Confirms It Was Hacked By Group Involved in Nvidia’s...

Posted in r/hacking by u/The_Stoned • 1 point and 1 comment

8 viewsedited 02:36

Hacking Articles Tips Tricks Videos Tutorials

8 views02:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Excel Encryption

I have a problem I can’t seem to solve myself. I am trying to bypass a password for an encrypted Excel file. Not a password protected sheet/workbook, but the entire file. I have tried the convert it to .zip/.ooxml methods. Those do not seem to work. Adding the VBA code to remove the password doesn’t work seeing as how you can’t access the VBA page. My question is, is this even doable? Can the password prompt be removed if you don’t know the password? Is there a way to extract the data without needing the password? Would the data just be encrypted if extracting the data is possible? Brute force is a difficult option because the password isn’t a common password, and also not really the point of the challenge I’m giving myself. Any help you can throw my way would be fantastic.
excel_pw_prompt

submitted by /u/tjones1231
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Excel Encryption

I have a problem I can’t seem to solve myself. I am trying to bypass a password for an encrypted Excel file. Not a password protected...

10 viewsedited 02:36

Hacking Articles Tips Tricks Videos Tutorials

What “if” I can get more reward?

An imcomplete if logic that leads to a catastrophic loss.Continue reading on Medium »
Read more...

10 views04:07

Hacking Articles Tips Tricks Videos Tutorials

What “if” I can get more reward?
https://medium.com/@nnez/what-if-i-can-get-more-reward-1344d09c1534?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

What “if” I can get more reward? — an imcomplete if-else logic allows reward manipulation by attacker

An imcomplete if logic that leads to a catastrophic loss.

10 viewsedited 05:05