VERSION 3.6Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/scrummage-the-ultimate-osint-and-threat-hunting-framework-edd4803d7fcd?source=rss------bug_bounty-5)
carpunk-the-car-hacking-toolkit
https://medium.com/@pentesterclubpvtltd/carpunk-the-car-hacking-toolkit-d2861e644546?source=rss------bug_bounty-5
https://medium.com/@pentesterclubpvtltd/carpunk-the-car-hacking-toolkit-d2861e644546?source=rss------bug_bounty-5
CARPUNK IS VERY SIMILAR TO CANghost, ONLY THE DEFFERENCE IS, IT COMES WITH OPTIONS TO ENABLE OR DISABLE INTERFACE AND BASIC SNIFFING AS…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/carpunk-the-car-hacking-toolkit-d2861e644546?source=rss------bug_bounty-5)
Hacking on Medium
redherd-framework-a-collaborative-and-serverless-framework-for-orchestrating-a-geographically-distri…
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting…
Continue reading on Medium »
redherd-framework-a-collaborative-and-serverless-framework-for-orchestrating-a-geographically-distri…
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting…
Continue reading on Medium »
Medium
redherd-framework-a-collaborative-and-serverless-framework-for-orchestrating-a-geographically-distributed-group-of-assets
RedHerd is a collaborative and serverless framework for orchestrating a geographically distributed group of assets capable of conducting…
Hacking on Medium
Limelighter — A Tool For Generating Fake Code Signing Certificates Or Signing Real Ones
https://cdn-images-1.medium.com/max/640/0*PHa3g_kVAfr5nmQA
A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock…
Continue reading on Medium »
Limelighter — A Tool For Generating Fake Code Signing Certificates Or Signing Real Ones
https://cdn-images-1.medium.com/max/640/0*PHa3g_kVAfr5nmQA
A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock…
Continue reading on Medium »
Medium
Limelighter — A Tool For Generating Fake Code Signing Certificates Or Signing Real Ones
A tool which creates a spoof code signing certificates and sign binaries and DLL files to help evade EDR products and avoid MSS and sock…
Hacking on Medium
How to "Hack" more than 1000 databases (TSDB) in 48 hours and for less than 5 USD
https://cdn-images-1.medium.com/max/600/1*3cfHfGcq6ZC8iCTeOyLayw.jpeg
This article is a quick translation of the original (In Spanish); and has purely educational and security awareness purposes.
Continue reading on Medium »
How to "Hack" more than 1000 databases (TSDB) in 48 hours and for less than 5 USD
https://cdn-images-1.medium.com/max/600/1*3cfHfGcq6ZC8iCTeOyLayw.jpeg
This article is a quick translation of the original (In Spanish); and has purely educational and security awareness purposes.
Continue reading on Medium »
Medium
How to "Hack" more than 1000 databases (TSDB) in 48 hours and for less than 5 USD
This article is a quick translation of the original (In Spanish); and has purely educational and security awareness purposes. No alteration…
Hacking on Medium
BruteLoops — Protocol Agnostic Online Password Guessing API
https://cdn-images-1.medium.com/max/640/0*k4GMlEG9SsbSyrqU
A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces.
Continue reading on Medium »
BruteLoops — Protocol Agnostic Online Password Guessing API
https://cdn-images-1.medium.com/max/640/0*k4GMlEG9SsbSyrqU
A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces.
Continue reading on Medium »
Medium
hacBruteLoops — Protocol Agnostic Online Password Guessing API
A dead simple library providing the foundational logic for efficient password brute force attacks against authentication interfaces.
Hacking on Medium
kubernetes-goat-is-a-vulnerable-by-design-kubernetes-cluster-designed-to-be-an-intentionally-vulnera…
https://cdn-images-1.medium.com/max/600/0*HS_uLduRsDS76-oC
The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.
Continue reading on Medium »
kubernetes-goat-is-a-vulnerable-by-design-kubernetes-cluster-designed-to-be-an-intentionally-vulnera…
https://cdn-images-1.medium.com/max/600/0*HS_uLduRsDS76-oC
The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.
Continue reading on Medium »
Medium
kubernetes-goat-is-a-vulnerable-by-design-kubernetes-cluster-designed-to-be-an-intentionally-vulnerable-cluster-environment-to…
The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
How to unlock dev tools?
I'm trying to find how https://hdtoday.tv/search/euphoria page works. But as soon as I open dev tools, the debugger gets called and the site stops working. These are the methods I've tried:
1. Opening dev tools by shortcut keys
2. Opening dev tools by write click
3. Opening dev tools before opening this page
4. Opening dev tools in separate window
The only possible scenario I'm left with is to go manually through the js files captured using the HTTP Toolkit and connect the dots. Is there another way? Have you guys experienced this?
submitted by /u/nibblesapien
[link] [comments]
How to unlock dev tools?
I'm trying to find how https://hdtoday.tv/search/euphoria page works. But as soon as I open dev tools, the debugger gets called and the site stops working. These are the methods I've tried:
1. Opening dev tools by shortcut keys
2. Opening dev tools by write click
3. Opening dev tools before opening this page
4. Opening dev tools in separate window
The only possible scenario I'm left with is to go manually through the js files captured using the HTTP Toolkit and connect the dots. Is there another way? Have you guys experienced this?
submitted by /u/nibblesapien
[link] [comments]
hacking: security in practice
Expand your practical skills with "capture the flag" game, but interactive with AI-Based assistance during the challenge
The first two challenges are not for introduction. Unknown_game, repache and guess are more interesting
https://platform.interway.ai
submitted by /u/iva3210
[link] [comments]
Expand your practical skills with "capture the flag" game, but interactive with AI-Based assistance during the challenge
The first two challenges are not for introduction. Unknown_game, repache and guess are more interesting
https://platform.interway.ai
submitted by /u/iva3210
[link] [comments]
reddit
Expand your practical skills with "capture the flag" game, but...
The first two challenges are not for introduction. Unknown\_game, repache and guess are more interesting ...
I decided to complete a CTF called Deathnote from Vuln hub while I had some free time.
Here is the Writeup for that CTF *Spoiler Warning*
I first ran netdiscover to find the IP address of the Machine because in this case it was not provided.
https://preview.redd.it/6prcawo1wds81.png?width=624&format=png&auto=webp&s=1e56a2607ed49086c22d2d234479c05f1e4130aa
I found the IP addess as shown above.
I then went to the IP in my Mozilla firefox but was Redirected.
https://preview.redd.it/w3fwmec7wds81.png?width=1355&format=png&auto=webp&s=6646c5c84f5808939361046ee18774aed8557871
I took note that of the wordpress notation in the redirected URL, but other than that this was fruitless.
I then ran nmap using the -sS and -SV flags to get the Server version as well as find out what ports were open.
https://preview.redd.it/uk8u6qdiwds81.png?width=656&format=png&auto=webp&s=cb5adb35a44ed594b6d395a9a4aeb11286b1ff80
I found 2 ports open, One for the website being hosted on port 80, using Apache httpd 2.4.38, and the other a SSH port on port 22.
I then went ahead and ran nikto.
https://preview.redd.it/k0pmsnmtwds81.png?width=614&format=png&auto=webp&s=95602baeeb2caaaac9a5baca2149a229497c2547
I followed the directories listed in the nikto scan but found nothing but standard Apache files.
I then ran Dirbuster to see if I could enumerate any other direcrtories.
https://preview.redd.it/xvz14ri1xds81.png?width=717&format=png&auto=webp&s=7528514c8527fd2e220844593380e898f065744f
I found a Wordpress directory called uploads, and it peaked my curiosity so i went exploring.
https://preview.redd.it/kob1gu17xds81.png?width=1285&format=png&auto=webp&s=d8c7aa21dee2b7af4f0a5527e54ad4ef2e11d34b
https://preview.redd.it/9au2dto8xds81.png?width=1306&format=png&auto=webp&s=c3221bf15baf6da34c63f978efcd034eeea8b4cf
inside I found two files called notes.txt, and user.txt
This was the contents of those files.
https://preview.redd.it/90yc1m4cxds81.png?width=1285&format=png&auto=webp&s=2cfb12506a81388813a7306522e70fc24f5a410f
https://preview.redd.it/fejpbe8exds81.png?width=1291&format=png&auto=webp&s=e4837e06ccd1a7a0bfc068de1a7adaef41a0e5b9
It appeared to be a userlist and possibly passwords, So i used Nano and created a couple text files on my desktop.
https://preview.redd.it/tx5fotmkxds81.png?width=626&forma[...]
Here is the Writeup for that CTF *Spoiler Warning*
I first ran netdiscover to find the IP address of the Machine because in this case it was not provided.
https://preview.redd.it/6prcawo1wds81.png?width=624&format=png&auto=webp&s=1e56a2607ed49086c22d2d234479c05f1e4130aa
I found the IP addess as shown above.
I then went to the IP in my Mozilla firefox but was Redirected.
https://preview.redd.it/w3fwmec7wds81.png?width=1355&format=png&auto=webp&s=6646c5c84f5808939361046ee18774aed8557871
I took note that of the wordpress notation in the redirected URL, but other than that this was fruitless.
I then ran nmap using the -sS and -SV flags to get the Server version as well as find out what ports were open.
https://preview.redd.it/uk8u6qdiwds81.png?width=656&format=png&auto=webp&s=cb5adb35a44ed594b6d395a9a4aeb11286b1ff80
I found 2 ports open, One for the website being hosted on port 80, using Apache httpd 2.4.38, and the other a SSH port on port 22.
I then went ahead and ran nikto.
https://preview.redd.it/k0pmsnmtwds81.png?width=614&format=png&auto=webp&s=95602baeeb2caaaac9a5baca2149a229497c2547
I followed the directories listed in the nikto scan but found nothing but standard Apache files.
I then ran Dirbuster to see if I could enumerate any other direcrtories.
https://preview.redd.it/xvz14ri1xds81.png?width=717&format=png&auto=webp&s=7528514c8527fd2e220844593380e898f065744f
I found a Wordpress directory called uploads, and it peaked my curiosity so i went exploring.
https://preview.redd.it/kob1gu17xds81.png?width=1285&format=png&auto=webp&s=d8c7aa21dee2b7af4f0a5527e54ad4ef2e11d34b
https://preview.redd.it/9au2dto8xds81.png?width=1306&format=png&auto=webp&s=c3221bf15baf6da34c63f978efcd034eeea8b4cf
inside I found two files called notes.txt, and user.txt
This was the contents of those files.
https://preview.redd.it/90yc1m4cxds81.png?width=1285&format=png&auto=webp&s=2cfb12506a81388813a7306522e70fc24f5a410f
https://preview.redd.it/fejpbe8exds81.png?width=1291&format=png&auto=webp&s=e4837e06ccd1a7a0bfc068de1a7adaef41a0e5b9
It appeared to be a userlist and possibly passwords, So i used Nano and created a couple text files on my desktop.
https://preview.redd.it/tx5fotmkxds81.png?width=626&forma[...]