Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Android Pentesting Setup On Macbook M1

Hello hackers,Continue reading on Medium »
Read more...
hacking: security in practice
Emulating a WiFi connection between 2 devices through the internet

Hi everyone !

I am a CTF challenge designer and I like to make wireless related challenges. Sadly, it's hard to make this kind of challenge without either being on-site, or using pcap files which can quickly become redundant.

Which is why I thought, is there a way to emulate a WiFi connection between 2 devices ? Something like opening a socket between a client and a server and have them both treat it as a wireless interface somehow ?

I looked online a lot but I guess that I am the only one on earth to try this stupid idea lol... but I truly believe that if I pull this off, this would be a great addition to a lot of CTFs around the world

Anyone has an idea or a lead on how to do that ?

submitted by /u/PetiteGousseDAil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Kali Linux Live USB Drive Advice

Hey everyone.

I typically use a VM setup for Kali Linux on my own machine, but I have been looking into live boot options.

The main questions I have are for more experienced pentesters.

1.
I’ve looked into placing multiple disk images of kali onto a single USB (e.g. I can boot on a Mac M1 or x86 architecture). Would this be bad practice? Do you do this, have multiple USB’s or just flash a single USB with whatever image you need each time?

2.
If this is a good route: I’ve seen some scripts that appear fairly easy to replicate, but is there a known optimal way?
Before it’s said, I’ve done some googling and other research on it. Just wanting to hear advice/recommendations from some people with experience.

Thanks!

submitted by /u/bhawk22
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Is this Hackable?

Hey guys, I was watching a tutorial for performing login in PHP. This one:

https://www.youtube.com/watch?v=3bGDe0rbImY&ab_channel=CodingPassiveIncome

My question is: is this hackable? Is the real_escape_string() function enough to avoid any SQL injection or any other types of injections? Also, isn't he missing anything? Like the salt to add to the password or something..

Thx in advance!

submitted by /u/okami_xaero
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Dangerously fast dns/network/port scanner, all-in-one.Start with a domain, and we'll find everything about it. Features: Finds subdomains (https://www.kitploit.com/search/label/Subdomains) from root domain Finds IPs for subdomains Checks what ports are open on those IPs (Notice: not yet implemented) Outputs a handy .json file with all the data for further investigation. Runs as fast as your computer/network/DNS resolver (https://www.kitploit.com/search/label/Resolver) allows it to be. Test run for 10.000 subdomains tested all of them in ~20 seconds with concurrency set to 16 on a machine with 16 (logical) cores. Usage skanuvaty --target nmap.org --concurrency 16 --subdomains-file /usr/share/dnsenum/dns.txt The terminal will show all found subdomains + a skanuvaty.scan.json file has been created in your current directory. License MIT 2021

Download Skanuvaty (https://github.com/Esc4iCEscEsc/skanuvaty)

___________________________
@hacking_Attack
@Hacking_Video
Skanuvaty - Dangerously Fast DNS/network/port Scanner

Dangerously fast dns/network/port scanner, all-in-one.Start with a domain, and we'll find everything about it. Features: Finds subdomains from root domain Finds IPs for subdomains Checks what ports are open on those IPs (Notice: not yet implemented) Outputs a handy .json file with all the data for further investigation. Runs as fast as your computer/network/DNS resolver allows it to be. Test run for 10.000 subdomains tested all of them in ~20 seconds with concurrency set to 16 on a machine with 16 (logical) cores. Usage skanuvaty --target nmap.org --concurrency 16 --subdomains-file /usr/share/dnsenum/dns.txt The terminal will show all found subdomains + a skanuvaty.scan.json file has been created in your current directory. License MIT 2021 Download Skanuvaty
Read more...