Hacking on Medium
Bounty Hacker Walkthrough

https://cdn-images-1.medium.com/max/808/0*w6ZrhpUTQJ2Lm6cP
Pentest Metodolojisi

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Raspberry Pi Pico as a BadUSB with built in executable storage

Has anyone ever tried using the pi pico as a mass storage device while being an HID device? It would help with running really long scripts fully offline. This could help a lot with for example placing a persistant backdoor with full system access rather than downloading the files on the spot, making our jobs a lot easier.

If you have links to any articles/suggestions on how I coudl figure this out, please comment.

submitted by /u/leavewhileyoucan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What does cracking a hash mean? What am i doing wrong?

Hey everyone, I have been working on this for days. Im really confused, but let me get to the point. Here is what ive done so far. 1.Booted my windows7 hdd to Kali Linux, mounted the drives. 2. Used samdump2 on The system and sam file to get the hashes. Now i got something like this disabled Administrator, disabled Guest Me:1000:aad3b435b51404eeaad3b435b51404ee:-45076b3d0847ae6212e48b2896ac3c01::: Ok so Forget the disabled admin and guest im just trying to get the password for "Me" from what i understand the first "aad3b and so on is an LM hash. two repeating chunks max 7 characters each containing only uppercase letter. The second one is an NT hash. So far im correct i think. Now heres where im having problems. When i use john --format=LM /home/kali/Desktop/hashfile I get the SAME THING Me:1000:aad3b435b51404eeaad3b435b51404ee:-45076b3d0847ae6212e48b2896ac3c01 1 password hashes cracked, 0 left. same thing with john --show --format LM . even when i try to put the output to a john.pot file, it gives me the same thing, for example heres the output for LM in the john.pot $LM$aad3b435b51404ee: same thing with NT $NT$45076b3d0847ae6212e48b2896ac3c01 What exactly is john doing here, It is supposedly "cracking the hashes" all it is doing is reading the first LM and NT hashes that are shown in the hash file. I thought cracking the hash was bruteforcing/wordlist attacks that generated a plaintext password, What am i doing wrong? How can i successfully crack these hashes to get the plaintext password. Any info would be greatly appreciated. If anyone has done this before and understands it and can give me some steps, i would be sooo appreciative. (BTW the second hash is one letter/number different so my password isnt out in the world) Anyone got any ideas/ can explain? Its a windows7 pass

submitted by /u/GuyfromQueensnyc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I found a deal about a laptop
https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/

So i found a Razer blade 15 base model with: I7 10750h (6/12) 16gb ram Rtx3060 512gb ssd For 1469€ And a Asus rog Strix G15 with R9 5900x (8/16) 16hb ram Rtx2060 1tb ssd For 1399€ Which one should i get? Im going to use it for pentesting and gaming And also, which one is worth it? HTB academy subscription Or TryHackeMe VIP submitted by /u/Clyde253 (https://www.reddit.com/user/Clyde253)
[link] (https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/) [comments] (https://www.reddit.com/r/Pentesting/comments/tljdxr/i_found_a_deal_about_a_laptop/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crocodile HackTheBox Ctf

https://cdn-images-1.medium.com/max/800/1*ymyNebTC85d9gYu8xktbLQ.png
writeup of Crocodile room from hack the box.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
3 Easy Ways Your Phone’s SIM Card Can Be Hacked

https://cdn-images-1.medium.com/max/2600/0*VPN9kyeLijzQliZr
SIM cards can be a security risk. Learn how to protect your phone.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Github repo of a windows 11 AV bypass with reverse shell

someone shared this on twitter and it came up on my feed and thought that it was interesting enough to leave here. https://github.com/tihanyin/PSSW100AVB

submitted by /u/Apprehensive_Self481
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft Confirms It Was Hacked By Group Involved in Nvidia’s Data Breach

https://external-preview.redd.it/5pKjZjo8nSJdLFwpfGkI0P4XgY7usThsY-3SwRqH7HE.jpg?width=640&crop=smart&auto=webp&s=92745ce29705f747cbb239c9cabe388bd0b85bea submitted by /u/The_Stoned
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Excel Encryption

I have a problem I can’t seem to solve myself. I am trying to bypass a password for an encrypted Excel file. Not a password protected sheet/workbook, but the entire file. I have tried the convert it to .zip/.ooxml methods. Those do not seem to work. Adding the VBA code to remove the password doesn’t work seeing as how you can’t access the VBA page. My question is, is this even doable? Can the password prompt be removed if you don’t know the password? Is there a way to extract the data without needing the password? Would the data just be encrypted if extracting the data is possible? Brute force is a difficult option because the password isn’t a common password, and also not really the point of the challenge I’m giving myself. Any help you can throw my way would be fantastic.
excel_pw_prompt

submitted by /u/tjones1231
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What “if” I can get more reward?

An imcomplete if logic that leads to a catastrophic loss.Continue reading on Medium »
Read more...

What “if” I can get more reward?
https://medium.com/@nnez/what-if-i-can-get-more-reward-1344d09c1534?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

An imcomplete if logic that leads to a catastrophic loss.Continue reading on Medium » (https://medium.com/@nnez/what-if-i-can-get-more-reward-1344d09c1534?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Discovering Bluetooth Devices w/ Python

https://cdn-images-1.medium.com/max/1116/1*ccelDGkcKVGduO7Mi6NWPw.png
Do you turn your Bluetooth off when you are not using it? It’s a quick click to miss and you might think its not a big deal. However…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Anti-Virus Software Is Usually A Scam

https://cdn-images-1.medium.com/max/1493/1*x6jX58anqFxnnKsZQw5nOw.jpeg
Uncovering the truth about anti-virus software, are you really protected?

Continue reading on empeastories »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Am I able to sniff traffic from a different subnet?

I feel like I already know the answer but I just sort of want a sanity check. I was participating in an ICS security challenge earlier today and the way the organizers had it set up, competitors connected via Wi-Fi and were given DHCP addresses in the 10.88.0.0/24 range. We were told that there was a target subnet in the 10.88.5.0/24 range that was populated by various PLCs and modbus devices. Nmap was against the rules as it could brick the equipment. I was able to browse to an address in the target subnet in my browser and it was a PeakHMI server web interface, so I’m able to at least send requests to that subnet.

The issue is, how can I set up wireshark to be able to sniff out modbus traffic to help me target other devices in that range? My initial tests seem to not show anything coming through in the capture. Am I just dumb or did the organizers misconfigure things and segmented the competitors off from the traffic they were meant to capture?

submitted by /u/tsuto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why is Stack Randomization on 32 bit is not so effective? Can we brute force the addresses ?

So, I'm trying to learn more about buffer overflows and one common fix is Stack Randomization or ASLR. But I read that on a 32 bit machine they're not that effective? Why is that?

Let's say I want to perform a simple buffer overflow and execute a shell code. Jmp esp is disabled so the only way to get the esp address is brute forcing. How hard is it in a 32 bit machine as compared to 64 bits.

submitted by /u/reddotname
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to approach Burp Suite academy and certification

Hello folks, I currently study web vulnerabilities on Burp Suite academy with the next opportunity to pass the certification exam as well as gain skills and understanding for OWASP TOP 10 vulnerabilities testing for the future job.

The question is how to make notes that helped me in the job/certification exam?

I literally copy the whole page text to my Obsidian editor... Just don't want to lose some information that causes me to misunderstand something. It is like a whole Burp Academy website in my Obsidian, just without pictures, this probably makes no sense as I can not find or define needed information for vulns finding and exploitation. (just a bunch of info: what vulnerability is about, how it impact a business, types of vulns, etc. )

I want to make like cheatsheet for myself based on the content regarding vulnerabilities identification/testing/exploitation, that helps me in an exam environment and the real world.

Any tips are appreciated, thank you in advance.

submitted by /u/TRYH0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video