Hacking on Medium
picoCTF 2022- Writeup

https://cdn-images-1.medium.com/max/1609/1*mm1_mK2_AN-pwUgFdCiUVQ.png
So I participated in 2022 picoCTF. I was able to solve some challenges for now, I got busy with some other work during the competition. I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
strcpy vs strncpy

Noob question here. If strcpy is a dangerous function to use, why isn't it mandatory to use functions like strncpy or snprintf in C?

submitted by /u/Tall-Cheesecake-5357
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
[DATA FORENSICS] How to mount an encrypted partition (ecryptfs) using live USB or VirtualBox?

I broke my operating system's libc, and I couldn't put it back because none of the terminal commands are working. The Linux Mint system can no longer boot. The partition is encrypted with ecryptfs, but I know the password.

I don't want to lose all the data on the partition, so what steps should I follow in order to

1. Mount the encrypted volume
2. Decrypt it
3. Fix the libc or extract crucial data

Thank you for reading. I'm thinking about how to solve this. I have a backup PC so I can make any type of bootable USB/recovery disk that I need to. I could also connect my laptop's hard drive to my PC and then try to mount it with VirtualBox. Please help me out with this, I've never done this on an encrypted filesystem before.

submitted by /u/rootmasta420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OOB & Blind Testing using DNS Exfiltration

Previous: Private Burp CollaboratorContinue reading on Medium »
Read more...

Hacking on Medium
What are the steps for hacking?

Hi geeks! Today i am going to tell you about what should be your steps for hacking a pc or anything in the world😁

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

OOB & Blind Testing using DNS Exfiltration
https://takshilp.medium.com/oob-blind-testing-using-dns-exfiltration-54bcc004a0fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Previous: Private Burp CollaboratorContinue reading on Medium » (https://takshilp.medium.com/oob-blind-testing-using-dns-exfiltration-54bcc004a0fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is This Site Safe?

Someone sent me this and I clicked on it. And it says no internet connection retry. I clicked retry but nothing happens. It was on Facebook of Mel Gibson investment method. The link was - volleyball.swrmarlins.com

Wondering is the site down or did something bad just happen? Anyone who has great knowledge please let me know if I am at risk or safe?

submitted by /u/fcuk_the_system
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
NB65 hacked russian construction company today

https://external-preview.redd.it/rV4a6sRoWn_QG_H8RpEszS3tFYni6hk-1_46lafBBCE.jpg?width=108&crop=smart&auto=webp&s=62e68875f97de18d2af4bca26139e5f38fcff866 submitted by /u/volkowip
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where can I find leaked databases for download for free?

Where can I find leaked databases for download for free? In the best case without login

submitted by /u/Schabernack_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Intercept cellular calls

How to intercept a cellular phone call? How to catch a specific call? Any special tools needed to catch those waves?

submitted by /u/CrownOfIce
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Did we want to make something happen on r/place?

Just throwing it out there, might be fun to do a coordinated bot strike and enforce a r/hacking logo somewhere...

submitted by /u/6mythis6
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CobaltBus - Cobalt Strike External C2 Integration With Azure Servicebus, C2 Traffic Via Azure Servicebus
http://www.kitploit.com/2022/04/cobaltbus-cobalt-strike-external-c2.html

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic (https://www.kitploit.com/search/label/Traffic) via Azure Servicebus
Setup Create an Azure Service Bus Create a Shared access policy (Connection string) that can only Send and Listen Edit the static connectionString variable in Beacon C# projects to match the "Primary Connection String" value for the Shared access policy created in step 2. The same variables need to be updated for the CobaltBus project, but the "Primary Connection String" for the "RootManageSharedAccessKey" Shared access policy must be used. (Needs the "manage" permission) Setup Cobalt and start en External C2 listener (https://www.kitploit.com/search/label/Listener) on port 4444, 127.0.0.1 (can be changed by editing the ExternalC2Port ExternalC2Ip vars in the C# project) Demo Video How does it work? Then CobaltBus DotNetCore binary that integrates with CobaltStrikes ExternalC2, will create a local SqliteDB in order to keep track of multiple beacons. The messages inbound to CobaltBus will be captured and written to the database. The database names "CobaltBus.db" and "CobaltBus-log.db" will be created in the directory (https://www.kitploit.com/search/label/Directory) CobaltBus.dll is running from. Once a Beacon binary runs, it will push an "INITIALIZE" message to the baseQueueName queue, with a randomly generated BeaconId and Pipename. The CobaltBus handler will then capture (https://www.kitploit.com/search/label/Capture) this, create and move into the two new queues based on the BeaconId sent, request stager shellcode from the CobaltStrike, and push it back down the new queue as an "INJECT" message. From here, the Beacon project injects the captured shellcode into memory and es tablishes a connection with the CobaltStrike (https://www.kitploit.com/search/label/CobaltStrike) beacon over the generated pipe name. When a command is issued from CobaltBus, it is pushed down the beacon respective queue and into the beacon pipe name. Opsec considerations The current message flow has multiple flaws that would need to be addressed before I would consider using this for real-life operations. Consider this a dirty POC. If only there was a mouse and C2 expert that could make this safe to use.... Credits Major credit to the work done by @ryHanson https://github.com/ryhanson/ExternalC2

Download CobaltBus (https://github.com/Flangvik/CobaltBus)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CC CVV DUMPS BANKS WESTERN UNION PAYPAL TRANSFER AND LOGS ALL COUNTRY PASSPORT DRIVERS LICENSE…

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google Dorking Simple

https://cdn-images-1.medium.com/max/2600/1*SqEICC59PL1VrdefhGEqqg.png
Finding security flaws with only using Google search engine from the basics.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKABLE 3 MAKİNESİ ÇÖZÜMÜ

https://cdn-images-1.medium.com/max/1366/1*mUtnwdXGHXeXpKGkRHH9bA.png
Bu gün sizlerle Hackable 3 Makinesii çözeceğiz. İlk önce Virtualbox üzerinden ayağa kaldırdığımız makinenin ip’sini buluyoruz. Bunun için…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Browser In The Browser(BITB) Attack?

https://cdn-images-1.medium.com/max/2600/1*M2dT90tDTwIYTQcNPkcmvg.jpeg
Social-Engineering has played a key role in digging out information, especially credentials for attackers. With more advancement in tools…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video