Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
vulnerabilityMultiple vulnerability leading to account takeover in TikTok SMB subdomain.

I’m here to tell you how I account takeover in TikTok I submitted this bug in HackerOne and I got 1000$ for this bugContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
A Detailed Guide on Cewl

Hi, Pentesters! In this article we are going to focus on the Kali Linux tool “Cewl” which will basically help you to create a wordlist. Let’s explore this tool and learn about what all other options this tool provides.

Table of Contents:Introduction to Cewl: A custom wordlist generator is a ruby program that crawls a specific URL to a defined depth and returns a list of keywords, which password crackers like John the Ripper, Medusa, WFuzz can use to crack the passwords. Cewl also has an associated command line app FAB, which uses same metadata extraction techniques to generate author/producer lists from already downloaded files using information extraction algorithms like CeWL.Syntax: cewl ___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Hacking Articles|Raj Chandel's Blog A Detailed Guide on Cewl Hi, Pentesters! In this article we are going to focus on the Kali Linux tool “Cewl” which will basically help you to create a wordlist. Let’s explore this tool and learn about what all other options…
Proxy port, default 8080.Default Procedure:Use the following command to generate a list of words which will spider the given URL to specified depth and we can use it as directory for cracking the passwords.Store this wordlist in a file:Now to save this all wordlist in file for record keeping, efficiency and readability we will use  -w option to save the output in a text file.Generating wordlists of certain length:If you want to create a wordlist of specific length than you can choose to use option -m and provide the minimum length for the keyword and hence it will create wordlists for certain length.Retrieval of Emails from website:In order to retrieve emails from the website we can use -e option, while -n option will hide the lists of created while crawling the provided website. As you can see in the screenshot attached it has found 1 email-id from the website.To count number of words repeated in website:If you want to count number of times a word is repeated in a website, then use -c option that will enable count parameter.Increase Spider depth:You can use -d option with depth number to activate depth parameter for more quick and intense crawling so that a large list of words is created. The depth level is set to 2 as default.___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Proxy port, default 8080.Default Procedure:Use the following command to generate a list of words which will spider the given URL to specified depth and we can use it as directory for cracking the passwords.Store this wordlist in a file:Now to save this all…
TFxG6GNaAA2Pd1b2ZnaVhRFh8n-L1E6OGSt_SNq2ktctYAyJCzqdPfFpzqEv4goxvmMj_18lStAPKKp5TpjxA/s16000/8.png Verbose Mode:We have a -v option for the verbose mode to extend the website crawling result and retrieving complete detail of website. Alphanumeric Wordlist:Sometimes it may happen that you may need a alpha-numeric wordlist for that you can use –with-numbers option to get a alpha-numeric wordlist.https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMM2RyA99wESJEydORlpN52PTw7UQ4_fjz0OzYouBmvJIBH5yosOjZ1zGqbHTOsMkLlTa-6MoNEdgcUk2cqhUjbD94ywqdON81AWUoshDtS1olrJh67vQPlmG0-_TXnLYNRIKto3rUCIHoqXkH2FD5m0d_JSq7_vRBOZIOtvl3cK8CPg09QAwV6a0VvA/s16000/11.png Cewl with Digest/Basic Authentication:It may happen sometime that some web application may have a authentication page for login and for that the above basic command will not give desired results. So for that you need to bypass the authentication page by using command given below.Lowercase all parsed words:When you need the keywords to be generated in lowercase for that you can use --lowercase option to generate the words in lowercase.Proxy Support:This default command for cewl will not work properly  if you have attached a proxy server. We tried to access the application through ip address but proxy server is attached hence this gave us Forbidden Error page.___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Making a hacking game

I'm in the middle of making a hacking game and I want to make it as realistic as possible. Basically a simulation. I don't have much experience at all with hacking(i only know a couple of things) So i came here for some advice:

-What are the things that a hacking simulator must have?

-Are there any urban legends about hacking that i should avoid?

-And some general advices that would make the game better.

Ps: the game is a terminal-based game, just like hacking with linux no-gui

submitted by /u/MikeSupp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Bounty Program

Just wondering if anyone here has used or participated in a hacking bounty program? Would love to know about the good or bad of your experience. And if anyone has any idea of what the bounties could look like (in terms of value).

submitted by /u/liquefire81
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
I think my router was hacked, it's an old model. If I change it to a newer one will that fix the problem?

My router is very old.

I can't pay for antivirus, so I'm currently using free versions.

If I just change the router will that fix my privacy issue? Will I get back my full privacy and internet security? Or once the router is taken all my computers are infected?

submitted by /u/Green_Engineer_391
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video