hacking: security in practice
JuiceWRLD VEVO Hacked!

https://external-preview.redd.it/rsJmahy-qAgEmMm6XTpNvZt4zfdj5sjLWPaKw-O_Mmc.jpg?width=320&crop=smart&auto=webp&s=4cb4a1213b931761f89124d021492235e6bfa7e9 submitted by /u/SpaceBurn_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Shielder - A Sneak Peek into Smart Contracts Reversing and Emulation

https://external-preview.redd.it/eTpLpeSpcbxsPZqfqtgUq_z4VMKVGp1xqK0Znt9l3qg.jpg?width=320&crop=smart&auto=webp&s=17a30939bc615b686a7d81c6cdede170ef7cbe1c submitted by /u/smaury
[link] [comments]

hacking: security in practice
Leaks database

A few weeks ago I found an incredible website that shows the leaks files where a specific email has been used. The website is https://intelx.io

However it is not that user friendly, is there any other alternative to said website? Or in alternative a resource that contains leaked passwords? Kinda like the rockyou list?

The alternative would be somehow download every possible file from https://intelx.io and use a script to fetch the passwords into a wordlist.

Cheers bP

submitted by /u/brunommpreto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: How to get private invites

Now I know that a lot of people will not like this answer and you certainly do not have to follow this method if you don’t wish to.Continue reading on Medium »
Read more...

DirtyPipe for Android
https://medium.com/@reconshell.com/dirtypipe-for-android-413dd03d773?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Dirty Pipe (CVE-2022–0847) temporary root PoC for Android. Dirty Pipe root exploit for Android (Pixel 6)
TargetsContinue reading on Medium » (https://medium.com/@reconshell.com/dirtypipe-for-android-413dd03d773?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
A Comprehensive Backup Strategy Includes SaaS Data, Source Code

Backups aren't just limited to hard drives, databases and servers. This Tech Tip describes how organizations should expand their backup strategies.

DarthSidious - Building An Active Directory Domain And Hacking It
http://www.kitploit.com/2022/04/darthsidious-building-active-directory.html

___________________________
@hacking_Attack
@Hacking_Video

The goal is simple
To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security experts to build secure Active Directory (https://www.kitploit.com/search/label/Active%20Directory) environments and monitor them for malicious activity. There are three major parts in this book Building a lab Hacking it Defending it I have structured this book so it can be followed more or less sequentally. To practice many of these things, a lab is necessary. That is why I have made a few guides on how to build a lab, with varying degrees of comprehensiveness and size. Getting started GETTING STARTED (https://github.com/chryzsh/DarthSidious/blob/master/getting-started/getting-started.md) Getting the Source Code The source for this book is available in the book's github repository (https://github.com/chryzsh/DarthSidious). Changelog Date Who What May 2017 chryzsh Book created March 2018 chryzsh Restructured book 30.03.2018 bufferov3rride Added article Pivoting Through Exchange (https://github.com/chryzsh/DarthSidious/blob/master/initial-access/initial-access-through-exchange.md) 02.04.2018 chryzsh Restructured book again and removed some unfinished articles 11.04.2018 chryzsh Added the article Building a (https://github.com/chryzsh/DarthSidious/tree/fdd707cf9dbbc2faf3cf3dbbcd712b06fceeee87/labs/labs/cuckoo-malware-analysis-lab.md)malware analysis (https://www.kitploit.com/search/label/Malware%20Analysis) lab 14.04.2018 chryzsh Added the article Password (https://github.com/chryzsh/DarthSidious/blob/master/credential-access/password-cracking-and-auditing.md)cracking (https://www.kitploit.com/search/label/Cracking) and auditing 23.04.2018 filippos Added the article CrackMapExec (https://github.com/chryzsh/DarthSidious/blob/master/execution/crackmapexec.md) 06.05.2018 chryzsh Fixed a link messup and some restructuring Questions/Suggestions: Ping me on Twitter @chryzsh (https://twitter.com/chryzsh)

Download DarthSidious (https://github.com/chryzsh/DarthSidious)

___________________________
@hacking_Attack
@Hacking_Video

Process Injection via Component Object Model (COM) IRundown::DoCallback() @MDSecLabs
https://www.reddit.com/r/redteamsec/comments/twx0uk/process_injection_via_component_object_model_com/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mdsec.co.uk/2022/04/process-injection-via-component-object-model-com-irundowndocallback/) [comments] (https://www.reddit.com/r/redteamsec/comments/twx0uk/process_injection_via_component_object_model_com/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hi Robert, nice to meet you virtually!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
When you health can be hacked

https://cdn-images-1.medium.com/max/864/1*xrr6rwQGFP2ULIG_CGpgtA.png
If you’ve read some of my previous articles on the Daedalus blog, you may know that I am diabetic (type 1.5). My overeager immune system…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
DarthSidious - Building An Active Directory Domain And Hacking It

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNqHK3M2bbVYYgon7HLQelOgEJO_DimClCLX80AVnt-UwNkgLAhk-jQ-jHdNwAwzaU6GlH7vPLVjAjLrxG6MfbRFUSJDK6acKTy5FnUTxfjzMEI4l72S1FNlXzRgVP-a36QbEESJIqcxpkWRmFM5i76uzEt64RLy2PwKBpQNP80xRvvSm7bM3F_6q2/w640-h516/DarthSidious.png
The goal is simple
To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security experts to build secure Active Directory environments and monitor them for malicious activity.

There are three major parts in this book

1. Building a lab
2. Hacking it
3. Defending it

I have structured this book so it can be followed more or less sequentally. To practice many of these things, a lab is necessary. That is why I have made a few guides on how to build a lab, with varying degrees of comprehensiveness and size.

Getting started

GETTING STARTED

Getting the Source Code

The source for this book is available in the book's github repository.

Changelog
Date Who What May 2017 chryzsh Book created March 2018 chryzsh Restructured book 30.03.2018 bufferov3rride Added article Pivoting Through Exchange 02.04.2018 chryzsh Restructured book again and removed some unfinished articles 11.04.2018 chryzsh Added the article Building a malware analysis lab 14.04.2018 chryzsh Added the article Password cracking and auditing 23.04.2018 filippos Added the article CrackMapExec 06.05.2018 chryzsh Fixed a link messup and some restructuring
Questions/Suggestions: Ping me on Twitter @chryzsh
Download DarthSidious

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Decided to transform my notes into a project for others to learn from

submitted by /u/b4ckslash0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are wordlist attacks towards WPA2 even practical when pen testing a company?

Assuming that this company doesn’t have a password like “abc123” would a wordlist/dictionary attack be practical when trying to gain access to their network? What other ways could one go about cracking WPA2 ?

submitted by /u/MojoSiwa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/6uO2j_vLF7JcdST3ZkA162eQuoDHwAqWf6sTulUD1Jc.jpg This is the growtopia exe that you can open multiple window/instance of growtopia

​

made possible through reverse engineering.

You can use this for farming bot purposes , DDOSING the growtopia server if you have to LOL

​

and run multiple account :)

to use this just download this exe and replace the exe at the growtopia folder with

https://preview.redd.it/cqk34rva5qr81.png?width=1365&format=png&auto=webp&s=37450879092d6e24e31df6746481c0582fe335b3

the new exe

​

This is not a virus, you can check it through virustotal.com

​

[Download link](https://drive.google.com/file/d/1d9zrPqdvbp5XZxZkePM4OMqPbaDSKjH9/view?usp=sharing)

​

Credit : (open the credit window in growtopia)

submitted by /u/minotokagumi
[link] [comments]