hacking: security in practice
VESmail: Open Source Encrypted Email - Transparent IMAP/SMTP Encryption/Decryption Proxy and CLI Utility

https://b.thumbs.redditmedia.com/VgHu3LTtuAJcy5S3kIAEErGg0G_z9HkNZsDOAeRuIFU.jpg VESmail Email Encryption

VESmail is an open source encryption utility and a transparent proxy for IMAP and SMTP.

VESmail works with any IMAP email account, and with any IMAP client. Can be used as a CLI utility, a server-based proxy daemon, or as an end user app. The pre-built app builds for Android, Windows, Mac and iOS are available for open testing on the website.

The IMAP proxy decrypts email messages that have been encrypted through VESmail, and transparently passes through any unencrypted messages.

The SMTP proxy, based on the profile settings, either encrypts all outgoing emails, or only encrypts emails sent to users who have active VESmail accounts and sends plain emails to all others.

One time VESmail account setup is needed for each email address to work with VESmail. The email provider credentials are saved in the end-to-end encrypted VES repository, and the master encryption key is to be used as a password in your email client app, or for the CLI utility.

Any feedback is welcome.

Website: https://vesmail.email

Source Code: https://github.com/vesvault/VESmail

Download App Builds: https://vesmail.email/download

Contact: [support@vesmail.email](mailto:support@vesmail.email)

submitted by /u/vesvault
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PhpMyDomo "Smart Home" automation system - Multiple exploits - remotely control people's homes.

https://external-preview.redd.it/YpPpy-UFnIkEoWh4bAVdrv9NfKto2MX4AJAyGd1yJrk.jpg?width=108&crop=smart&auto=webp&s=41264c519894badcedd592388a7524b95f60f8b9 submitted by /u/0x0MLT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can someone see what i do on my computer by using their office and mcaffe account?

I bought a computer 2 months ago, and a friend has been nice enough and let me on their office and McAfee family pack. But recently I have been loosing some documents and my computer has been doing some weird stuff. Can this friend get in my computer and snoop around? Or is this some other problem? Thank you in advance for feedback!

submitted by /u/littlekidloverMS1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Confused about Bridge Adapter & NAT

Noob question, so I'm a bit confused about vm networking options. from my understanding, bridge adapter is great for pen testing or creating your own vuln box within your network. But what about NAT? If I were to theoretically pen test a target outside of my network, would i still use bridge or would I use NAT?

from my understanding bridge has a different private ip but it also has your your same public ip but NAT has its own ip, so wouldnt I use NAT if targeting outside of my network?

​

Bottom line is .. I do not want my vm to have the same ip address as my main host, to avoid my main host being traced.

​

submitted by /u/Unable_Count_1635
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How are electronic road signs hacked exactly as to modify the text or turn them off etc

This is from a purely educational interest of mine, thanks!

submitted by /u/painterman99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Real world projects

any recommendations for real world projects?

submitted by /u/void02241
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Modify encrypted file

Hey guys,

I'm running through an introduction to Cyber Security and I have a question I'm trying to work out but struggling with.

Question: Your name is Bob and you are a programmer working for Acme Enterprises who wants to increase your salary without actually earning it.

You have access to the encrypted payroll file (salary.bf.enc) that contains annual salaries for each of the employees but has been protected with encryption using the Blowfish algorithm in ECB mode. You do not know the password.

You know that the other employees are Alice, Carol, David and Eve. Each line of the payroll is 16 bytes in length with the first 8 bytes being the name and the remainder the salary. You know the file is sorted alphabetically and that both Alice and Eve earn more than you.

What I am trying to do: Increase Bob's salary to the same as Alice and Eve's. I'm not sure what commands or tool I need to be using.

If you require access to the file, this is it here: https://temp.sh/thVyB/salary.bf.enc

What I have tried: I've looked into John The Ripper, BurpSuite and hex editing tools. A specific wordlist isn't mentioned so I wasn't able to crack the file and I wasn't sure if what I was trying to crack was even the password - I was using the hash of the file which seems wrong. BurpSuite looked promising after finding this link here: https://portswigger.net/blog/breaking-encrypted-data-using-burp which references the 8 and 16 byte sizes but after installing the Windows version I wasn't able to work this out. When adding the file into a hex editor I can't identify common data within the file.

Any help would be greatly appreciated!

submitted by /u/PowerOfTheShell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi quick q

Can someone reverse search a number there’s a lady sending me a minor nudes and saying weird stuff and I tried telling the police but they said I’d have to make a report and they would have to come to my house and it’s 12 am. Any help would be appreciated

submitted by /u/UwUsmasher
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Complete Guide To Start Bug Bounty In 2022
https://technicalsurendra.medium.com/complete-guide-to-start-bug-bounty-in-2022-5036630e5d98?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Everyone ! Today we learn how you can start your bug bounty journey and how you can make a successful bug bounty hunter !Continue reading on Medium » (https://technicalsurendra.medium.com/complete-guide-to-start-bug-bounty-in-2022-5036630e5d98?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Privacy Disclosure on Facebook Lite after Creating a Post
https://medium.com/@RheyJuls/privacy-disclosure-on-facebook-lite-after-creating-a-post-b12a1cad8d8a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello,Continue reading on Medium » (https://medium.com/@RheyJuls/privacy-disclosure-on-facebook-lite-after-creating-a-post-b12a1cad8d8a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Complete Guide To Start Bug Bounty In 2022

Hey Everyone ! Today we learn how you can start your bug bounty journey and how you can make a successful bug bounty hunter !Continue reading on InfoSec Write-ups »
Read more...

Privacy Disclosure on Facebook Lite after Creating a Post

Hello,Continue reading on Medium »
Read more...

Hacking on Medium
FSB detains Yalta resident for cyber attacks on Russian information resources

https://cdn-images-1.medium.com/max/600/0*-1Lc5eQlCg586jC_.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Complete Guide To Start Bug Bounty In 2022

https://cdn-images-1.medium.com/max/1280/1*94i5cBESpmMlIumeHX3D2A.png
Hey Everyone ! Today we learn how you can start your bug bounty journey and how you can make a successful bug bounty hunter !

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
John the ripper

i am workig on kali linux , is john the ripper supose to take so long ? i have waited more than 2 hours for a password thats 8 letters only.

i am using the shadow file and passwd and i use the command : unshadow passwd shadow > combined

submitted by /u/imaGallex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exposing Thousands of Indian Railways Outlets’ private data.

Don’t just use the features, try to exploit them. — UnknownContinue reading on Medium »
Read more...