Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How to unlock dev tools?

I'm trying to find how https://hdtoday.tv/search/euphoria page works. But as soon as I open dev tools, the debugger gets called and the site stops working. These are the methods I've tried:

1. Opening dev tools by shortcut keys
2. Opening dev tools by write click
3. Opening dev tools before opening this page
4. Opening dev tools in separate window

The only possible scenario I'm left with is to go manually through the js files captured using the HTTP Toolkit and connect the dots. Is there another way? Have you guys experienced this?

submitted by /u/nibblesapien
[link] [comments]

3 views00:39

hacking: security in practice
Expand your practical skills with "capture the flag" game, but interactive with AI-Based assistance during the challenge

The first two challenges are not for introduction. Unknown_game, repache and guess are more interesting

https://platform.interway.ai

submitted by /u/iva3210
[link] [comments]

Expand your practical skills with "capture the flag" game, but...

The first two challenges are not for introduction. Unknown\_game, repache and guess are more interesting ...

2 views00:39

Hacking Articles Tips Tricks Videos Tutorials

2 views00:39

Hacking Articles Tips Tricks Videos Tutorials

I decided to complete a CTF called Deathnote from Vuln hub while I had some free time.

Here is the Writeup for that CTF *Spoiler Warning*

I first ran netdiscover to find the IP address of the Machine because in this case it was not provided.

https://preview.redd.it/6prcawo1wds81.png?width=624&format=png&auto=webp&s=1e56a2607ed49086c22d2d234479c05f1e4130aa

I found the IP addess as shown above.

I then went to the IP in my Mozilla firefox but was Redirected.

https://preview.redd.it/w3fwmec7wds81.png?width=1355&format=png&auto=webp&s=6646c5c84f5808939361046ee18774aed8557871

I took note that of the wordpress notation in the redirected URL, but other than that this was fruitless.

I then ran nmap using the -sS and -SV flags to get the Server version as well as find out what ports were open.

https://preview.redd.it/uk8u6qdiwds81.png?width=656&format=png&auto=webp&s=cb5adb35a44ed594b6d395a9a4aeb11286b1ff80

I found 2 ports open, One for the website being hosted on port 80, using Apache httpd 2.4.38, and the other a SSH port on port 22.

I then went ahead and ran nikto.

https://preview.redd.it/k0pmsnmtwds81.png?width=614&format=png&auto=webp&s=95602baeeb2caaaac9a5baca2149a229497c2547

I followed the directories listed in the nikto scan but found nothing but standard Apache files.

I then ran Dirbuster to see if I could enumerate any other direcrtories.

https://preview.redd.it/xvz14ri1xds81.png?width=717&format=png&auto=webp&s=7528514c8527fd2e220844593380e898f065744f

I found a Wordpress directory called uploads, and it peaked my curiosity so i went exploring.

https://preview.redd.it/kob1gu17xds81.png?width=1285&format=png&auto=webp&s=d8c7aa21dee2b7af4f0a5527e54ad4ef2e11d34b

https://preview.redd.it/9au2dto8xds81.png?width=1306&format=png&auto=webp&s=c3221bf15baf6da34c63f978efcd034eeea8b4cf

inside I found two files called notes.txt, and user.txt

This was the contents of those files.

https://preview.redd.it/90yc1m4cxds81.png?width=1285&format=png&auto=webp&s=2cfb12506a81388813a7306522e70fc24f5a410f

https://preview.redd.it/fejpbe8exds81.png?width=1291&format=png&auto=webp&s=e4837e06ccd1a7a0bfc068de1a7adaef41a0e5b9

It appeared to be a userlist and possibly passwords, So i used Nano and created a couple text files on my desktop.

https://preview.redd.it/tx5fotmkxds81.png?width=626&forma[...]

3 views00:39

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Plume WiFi Limiter

My parents have limited my wifi on something called Plume, I have successfully gotten rid of this on the iPad but am not sure how to get rid of it on Windows 10 laptop Any thoughts?

submitted by /u/XGasterBOI
[link] [comments]

Plume WiFi Limiter

My parents have limited my wifi on something called Plume, I have successfully gotten rid of this on the iPad but am not sure how to get rid of it...

3 views00:39

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
My friend's elderly father's FB was hacked by a scumbag.

Firstlu, I'm very sorry to post this should this be the wrong subreddit, if so, could someone please point me into the right direction as I am DESPERATE to turn this around.

So as the title goes. My friend's father has become a victim to someone who's attempted to hack into many private channels, such as eBay, FB, AOL, etc. He's an England citizen so some English based accounts to things such as local business was also attempted but broken off soon enough.

Upon noticing this, my friend has tried to take control, by doing such things on FB as "recovery email" getting the code, and entering it. Sadly, it seems hacker and friend were both doing the same thing over and over. Tonight, the hacker has now changed primary, secondary and recovery phone numbers & emails, to fake ones through Yahoo.

Facebook's section on hacked accounts, is beyond useless. They insist you upload ID to their email, which has been done, and nothing. It's been two days and there is a complete lack of urgency from Facebook regarding this issue, despite knowing it belongs to an elderly man. Tonight, I've attempted my best skills (very few compared to you all) to recover this account, and the account has now been assigned a new Yahoo email, with a number I cannot ever access to recover.

The hacker has applied 2FA to the Facebook account, which is recent, as earlier today it was back and forth password changes. Now, without access to this code generator, I am stuck, as I can't even try to help anyone with no code to go off.

Now to wrap this up, I am in NO WAY asking for any hacking to be done, but would anyone have any idea what sort of avenue I could explore to even if not get access, alert Facebook to a quicker response and check? or any sort of help would be more help than you'll know.

Thank You for reading none the less.

submitted by /u/boggyonetwo
[link] [comments]

My friend's elderly father's FB was hacked by a scumbag.

Firstlu, I'm very sorry to post this should this be the wrong subreddit, if so, could someone please point me into the right direction as I am...

3 views00:39

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Product recommendation request

I've got a client looking for pen testing to be done at his facility, one of the security measures he has in place is an HID locking mechanism. the kind where you do a card that's pressed up against the black box and it unlocks the door.

I managed to capture some HID signatures, however, what i didn't know when i bought my device is that it doesn't clone, it only reads.

Do any of you have personal experience with a device that will clone and copy HID and RFID devices? I'm looking to buy and utilize such a product.

submitted by /u/Captain-Crunch1989
[link] [comments]

Product recommendation request

I've got a client looking for pen testing to be done at his facility, one of the security measures he has in place is an HID locking mechanism....

1 view00:40

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
VM or Docker image

So... I've been messing around with HtB in a kali vm. I feel lik kali is too bloated and would rather build my system from scratch, installing the tools i need along the way. If i switch to darkarch should I use a VM, or run it in a docker instance forwarding the xorg applications to my host?

submitted by /u/thomasc_
[link] [comments]

VM or Docker image

So... I've been messing around with HtB in a kali vm. I feel lik kali is too bloated and would rather build my system from scratch, installing the...

1 view00:40

Hacking Articles Tips Tricks Videos Tutorials

https://external-preview.redd.it/0Vqxo1abqiZZbB9cMpV6JY18hNqrGR36LSHO5J9udKM.jpg?width=640&crop=smart&auto=webp&s=c09f8b9ffa7e84007f2474dd90f1e608b81409fe submitted by /u/kasitacambro
[link] [comments]

1 view00:40

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Google Removes Dangerous Banking Malware From Play Store

SharkBot was hidden in apps masquerading as antivirus tools.

1 view01:37

Source

About

Blog

Apps

Platform