Download Ostorlab (https://github.com/Ostorlab/ostorlab)

Hacking on Medium
Hacktivismo: ataques cibernéticos con causa

https://cdn-images-1.medium.com/max/1920/1*r7_HGFrCJZTEFir8eVtWVA.jpeg
Cuando un grupo de personas con creencias o preferencias está en desacuerdo acerca de cómo se están manejando ciertos temas políticos o…

Continue reading on Medium »

KitPloit - PenTest Tools!
Ostorlab - A Security Scanning Platform That Enables Running Complex Security Scanning Tasks Involving Multiple Tools In An Easy, Scalable And Distributed Way

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZlatHQU1laDv407hhX_-D_1aGtFqTaDrwLd4sXeAYf45BYEkEQEHJd9UvZP3F1JoWEPS3BWIrXEpxpTFW2bN_L9cHhKh6843G3nJKEHteWqFoMW1gwty4Kvw2Crm23aUgfF_v7CIWSv13WiiyWFey3N6wWVy_bg1KUbeuBwjNn4mwMRGnp6lvQc2c/w592-h640/ostorlab_5_scan_run.gif The Sales PitchIf this is the first time you are visiting the Ostorlab Github page, here is the sales pitch.

Security testing requires often chaining tools together, taking the output from one, mangling it, filtering it and then pushing it to another tool. Several tools have tried to make the process less painful with limited success. Ostorlab addresses the same challenge by simplifying the hardest part and automating the boring and tedious part.
To do that, Ostorlab focuses on the following:

* Ease of use with simple one command-line to perform all tasks
* Developer Experience through project documentation, tutorials, SDK and templates
* Scalability and Performance by using efficient serialisation format and proven industry standard for all of its components

To do that, Ostorlab ships with:

* A simple, yet powerful SDK to make simple cases effortless while supporting the complex one, like distributed locking, QPS limiting, multiple instance parallelization ...
* A battle-tested framework that has been powering Ostorlab Platform for years and used to perform complex dynamic analysis setup and demanding static analysis workloads running on multiple machines.
* Performant and scalable design, thanks to the use of message queue with dynamic routing, binary and compact message serialisation with protbuf, universal file format using docker image, resilient thanks to docker swarm mode to cite a few
* A store of agents that make is to use and discover tools to add your toolset
* An automated builder to take the hassle away of building and publishing.
* A GUI to prepare and write down your tool collection setup
* Focus on documentation, multiple tutorials and upcoming videos and conference presentations
* A ready to use one-click template repo to get started. RequirementsFor some tasks, like running scans locally, Docker is required. To install docker, please see the following instructions. InstallingOstorlab is shipped as a Python package on Pypi. To install, simply run the following command if you have pipalready installed. pip install -U ostorlabGetting StartedTo perform your first scan, simply run the following command: ostorlab scan run --install --agent agent/ostorlab/nmap --agent agent/ostorlab/openvas --agent agent/ostorlab/tsunami --agent agent/ostorlab/nuclei ip 8.8.8.8This command will download and install the following scanning agents:

* agent/ostorlab/nmap* agent/ostorlab/tsunami* agent/ostorlab/nuclei* agent/ostorlab/openvasAnd will scan the target IP address 8.8.8.8To check the scan status: ostrlab scan listOnce the scan has completed, to access the scan results: ostorlab vulnz list --scan-id <scan-id
ostorlab vulnz describe --vuln-id <vuln-idThe StoreOstorlab lists all agents on a public store where you can search and also publish your own agents. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE3JhiBz4jaqf2n-E_GvCakDDIAos0rFWVpwSHSG7fuZEg2LTcFwJALhSDZDdevF2V1S7ImCmr1teSlfUCME74rYuX2A8q-8rW5M2w-hGFCshugvSL9ttsa8nubZKVksrG3XchuJsXYc8v1iw0dAYYCvIOgj4u6dpMokPyRlO6N74J2FCLk5JUxlmR/w640-h492/ostorlab_6_store2.gif In addition, the store, a graphical agent group builder is also available to compose multiple agents and see how they would interact with each other. https://blogger.googleusercontent.com/img/b/R29v[...]

Z2xl/AVvXsEi1c3j9rrC0qnOkqlRVjaHUniqAJRD_4FFeGkTfHQlYOLridGaWtmQBQxZGuQEqUQyXD0s9zUYr7LsQPk8zG0pEqmKYB50Qh9A_Oeg1FV-KI_MSGa_K-fm0qVYK6NpETdw0sDKbebs53P0e2p3msIJOQEr6LOD1J7Sfs_H9bUaAH4-7e_4uAY9RsbLF/w640-h492/ostorlab_7_store.gif The builder also helps with generating the agent group YAML file to set special arguments that can be passed to agents to control their behavior. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiupNGLaocCV-rP77-pP1f9CVl1cdam4s5P38h9DjuhiOfy1ZGdGHfE24HCvMYrMCKE3dck2xVEvqaNoLm-q0joYISPcL5tLp5UoHhko3-Fjm1fXTP7mrGCenFiKU2-03vFQBaHK4C3NTaDucVd0rg1rCH-fDd3PS5SlrMc8KIAXZzsM6FDP93lgHd0/w640-h492/ostorlab_8_agent_group.gif Publish your first AgentTo write your first agent, check out the full tutorial here.

Once you have written your agent, you can publish it on the store for others to use and discover it. The store even handles agent building and will automatically pick up new releases from the git repo. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjERNIfS-pRBzr0FmXDUdf6sfD0RisBfggpTokX7-0aJxc-mFiNrp-oUAYJ-neDq1VUJXz0JXyHxPKEjTjF5dxNgt1PmyKP99LUa-V75DDYdQhMCeDnE54608YvDfE9Fsk2w9f77SrJy4sSp2KVij_FPIebfLKe7kl4zeQagYHdXiGqs4YPT8bO6BMA/w640-h492/ostorlab_9_build.gif Download Ostorlab

hacking: security in practice
How to protect Win10 access password?

There are a ton of videos on YouTube, that claim to show how to bypass a Windows 10 password and get access to the pc (like this https://youtu.be/YBFAzK9mgNI)

I wonder if there is a way to prevent this? Is there a way tomake my password hack proofed and protect my data? Talking only about scenarios when other person may have actual physical access to my computer and it's being turned off.

Thanks for answers.

submitted by /u/redditbrainleszombie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Legit ?

https://external-preview.redd.it/vYmq51PBoYcuoGFmzXzhijntWb5-AfdP0oFeBjc9rrY.jpg?width=320&crop=smart&auto=webp&s=d613f3355a64b53aa999aa61af9af134853b673e submitted by /u/Forsaken-Key-8352
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how to filter packets while trying to capture only the TeamViewer packets on WireShark?

so i've been using "tcp.port==5938 || udp.port==5938" after I saw that teamviewer mostly uses that port that doesn't seem so efficient (I think I miss some packets). I'm pretty new to ws, is there any other way that I can use?

submitted by /u/blindbandid
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Flipper zero alternatives?

Hey everyone, I’ve heard of a new device called flipper zero, marketed as a hackers multi tool. I think I would find it very useful, however I have two issues with it. Mostly I hate the design and dolphin theme, I’d want something more sleek and professional looking, and secondly I feel like it’s a little pricey, although I still think it would be worth the price if there wasn’t cheaper alternatives, a cheaper one would obviously be better. So does anyone know if there are more professional looking and maybe cheaper options to the flipper zero?

submitted by /u/sccount125
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tutorial - Automated WiFi Hacking

After getting lots of positive feedback about my automated WiFi hacking script I decided to make a tutorial that breaks down exactly what this attack is, how to setup, run & a code breakdown. Hope y'all enjoy. https://youtu.be/xFT-1oJLVmo

submitted by /u/BradPittOfTheOffice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How did they do it?

I was on Omegle( I know a mistake in the first place) and as I was talking to someone they said that they were going to turn off my wifi and did a 5-second countdown. Well, my wifi did turn off I'm just wondering what they did.

submitted by /u/studybandit
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pickle Rick — Write up TryHackMe. [PT/BR]

https://cdn-images-1.medium.com/max/1440/1*b4UtS4qKmbsZk_flSfdOGA.png
Este desafio temático de Rick e Morty exige que você explore um servidor da web para encontrar 3 ingredientes que ajudarão Rick a fazer…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking capture the flag

Hey all, I am trying to get a hacking capture the flag thing going in the bay area if anyone is interested? It's essentially capture the flag but with a file stored on a computer that you have to retrieve through hacking.

submitted by /u/onrop4life
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability. CVE-2022-1096 is the second zero-day vulnerability addressed by Google in Chrome since the start of the year.

https://external-preview.redd.it/2U9J_1ec9Sb90d2vXaibCJi-8ZS1EnVsL97HBWLLWVU.jpg?width=640&crop=smart&auto=webp&s=a5785a74f798be2071b0dc339e82d02bf8c8847a submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Google Dork for instant bounties

Google dorks that’ll get you instant bounties, proven and tested multiple times.Continue reading on Medium »
Read more...

Google Dork for instant bounties
https://debprasadbanerjee502.medium.com/google-dork-for-instant-bounties-a332764fc3e2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video