Hacking on Medium
TryHackMe — Ninja Skills

https://cdn-images-1.medium.com/max/1280/0*DyDTxgOQlA-i79l9.png
Having fun with TryHackMe again. So, here is the write up and guideline to pass this Bounty Hacker challenge.

Continue reading on Medium »

Hacking on Medium
Backdoor

https://cdn-images-1.medium.com/max/953/1*LhRmw3ZSy22AfuFlwCF9Tw.png
Hackfreaks Official. Author’s content.

Continue reading on Medium »

Hacking on Medium
These are the Dangers of Social Media Hacking

https://cdn-images-1.medium.com/max/2000/1*bblC8aOmsNydyeAle8KttQ.jpeg
People are losing more than money.

Continue reading on Medium »

Hacking on Medium
Why Application Security is the Key to Your App’s Safety

https://cdn-images-1.medium.com/max/2600/0*PzycBFIYM2J9hR2B
Stepping into new era of vulnerabilities & possibilities

Continue reading on Brandlitic »

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient (CVE-2020–25925)
https://ashketchum.medium.com/cross-site-scripting-xss-in-webmail-calender-in-icewarp-webclient-cve-2020-25925-67e1cbc40bd9?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://ashketchum.medium.com/cross-site-scripting-xss-in-webmail-calender-in-icewarp-webclient-cve-2020-25925-67e1cbc40bd9?source=rss------bug_bounty-5)

Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient (CVE-2020–25925)

IntroductionContinue reading on Medium »
Read more...

Deep Web
Baby burger video

I know this topic is quite old but was that baby burger video real because according to other youtubers that video was true. I might sound dumb but I just went through this topic again and i’m quite curios

submitted by /u/OmegaHK1
[link] [comments]

hacking: security in practice
Synchronous and asynchronous encryption difference

Can someone help me understand what is the difference between Synchronous and asynchronous encryption difference?? And give me some idea using an example??

The explanations on google that i see are kinda complex

Thank you

submitted by /u/darkalimdor18
[link] [comments]

hacking: security in practice
Hacking a phone without the users interaction ;)

Hello,

I have a xiaomi phone and its screen and display is broken. I can only power it on. It is coneccted to my wifi, which helps ;) I wonder how could I hack it into remote access thru something like ssh. The problem is that I can not do ANYTHING on the phone except from powering it on. Normally a user would have to click or download something malicious, but in this case this is not posiblle. I am truely clue less. :(

Please Help!

submitted by /u/PaintballAlex
[link] [comments]

hacking: security in practice
can someone he.lp?

Hello, i have a friend, that got one of those xxx viruses, and his wife found it, and she wanted to divorce him because she thinks he did it intentionally, is there some way, to put some software, without her knowing it and downlad some of that, and mess with that??If yes, how ?

submitted by /u/klossenaf421
[link] [comments]

Adfsbrute - A Script To Test Credentials Against Active Directory Federation Services (ADFS), Allowing Password Spraying Or Bruteforce Attacks
http://www.kitploit.com/2021/04/adfsbrute-script-to-test-credentials.html

A script to test credentials (https://www.kitploit.com/search/label/Credentials) against Active Directory (https://www.kitploit.com/search/label/Active%20Directory) Federation Services (ADFS), calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and using a list of proxies or Tor (https://github.com/ricardojoserf/adfsbrute#using-tor) to make the detection by the Blue Team more difficult. Brute force attacks are also possible, or testing credentials with the format username:password (for example from Pwndb (https://github.com/davidtavarez/pwndb)). Tested logins will get stored in a log file to avoid testing them twice.
Usage
./adfsbrute.py -t TARGET [-u USER] [-U USER_LIST] [-p PASSWORD] [-P PASSWORD_LIST] [-UL userpassword_list]
[-m MIN_TIME] [-M MAX_TIME] [-tp TOR_PASSWORD] [-pl PROXY_LIST] [-n NUMBER_OF_REQUESTS_PER_IP]
[-s STOP_ON_SUCCESS] [-r RANDOM_COMBINATIONS] [-d DEBUG] [-l LOG_FILE]
The parameters for the attacks are: * -t: Target domain. Example: test.com

* -u: Single username. Example: agarcia@domain.com

* -U: File with a list of usernames. Example: users.txt

* -p: Single password: Example: Company123

* -P: File with a list of passwords. Example: passwords.txt

* -UP: File with a list of credentials in the format "username:password". Example: userpass.txt

* -m : Minimum value of random seconds to wait between each test. Default: 30

* -M : Maximum value of random seconds to wait between each test. Default: 60

* -tp: Tor password (change IP addresses using Tor)

* -pl: Use a proxy list (change IP addresses using a list of proxy IPs)

* -n: Number of requests before changing IP address (used with -tp or -pl). Default: 1

* -s: Stop on success, when one correct credential is found. Default: False

* -r: Randomize the combination of users and passwords. Default: True

* -d: Show d ebug messages. Default: True

* -l: Log file location with already tested credentials. Default: tested.txt

Examples
Password spraying with password "Company123", tor password is "test123" and changing the IP every 3 requests: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -n 3

  Password spraying with password "Company123", tor password is "test123", changing the IP for every request, random delay time between 10 and 20 seconds and do not randomize the order of users: python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -m 10 -M 20 -r False