hacking: security in practice
Wordlist for password cracking

Hello, i am looking for a wordlist to perform a dictionary attack on 2 users.

am looking for a word list to crack these 2 password , can be done separatly in order to increase speed

User1 -> 8 characters long (lowercase)

User 2 -> 4 characters long (Upper case + lower case + symbols)

i am using kali linux.

submitted by /u/imaGallex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is this friendly challenge legal?

I am staying in a hotel with an unsecured wifi. A colleague of mine is there too but we are not on the same floor.We were joking about this unsecured network and he challenge me to get something from him across this network.

I didn't plan to get something else but am I allowed to perform some scan and more or is this forbidden?

Plus if someone have a source I can relay on about laws and restrictions to not ask the next time

Ty

​

Edit : I will not do it because of comments (thanks you mates) and also because I found something I was not supposed to found

submitted by /u/chanoir2303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Going Passwordless? Here Are 6 Steps to Get Started

High costs and user reluctance have stood in the way of passwordless adoption, but conversion can be simplified if you take it in more gradual steps.

Dark Reading: Attacks/Breaches
Creating a Security Culture Where People Can Admit Mistakes

In cybersecurity, user error is the symptom, not the disease. A healthy culture acknowledges and addresses the underlying causes of lapses.

Dark Reading: Attacks/Breaches
10 Signs of a Good Security Leader

Strong leadership can lead to motivated and loyal employees. Here's what that looks like.

Dark Reading: Attacks/Breaches
SafeGuard Cyber Provides Security Advice for Defending Against Browser-in-the-Browser (BitB) Attacks

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Imprivata Acquires SecureLink to Deliver a Single-Vendor Platform to Manage and Secure All Enterprise and Third-Party Digital Identities

Imprivata will unlock further value for customers by unifying, integrating, and automating digital identity to enable autonomous identity systems.

___________________________
@hacking_Attack
@Hacking_Video

Euler запускает программу “баунти” ImmuneFi стоимостью $1 млн!
https://medium.com/@hush88/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D0%B5%D1%82-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%83-%D0%B1%D0%B0%D1%83%D0%BD%D1%82%D0%B8-immunefi-%D1%81%D1%82%D0%BE%D0%B8%D0%BC%D0%BE%D1%81%D1%82%D1%8C%D1%8E-1-%D0%BC%D0%BB%D0%BD-187173f58583?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium » (https://medium.com/@hush88/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D0%B5%D1%82-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%83-%D0%B1%D0%B0%D1%83%D0%BD%D1%82%D0%B8-immunefi-%D1%81%D1%82%D0%BE%D0%B8%D0%BC%D0%BE%D1%81%D1%82%D1%8C%D1%8E-1-%D0%BC%D0%BB%D0%BD-187173f58583?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Euler запускает программу “баунти” ImmuneFi стоимостью $1 млн!

Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium »
Read more...

< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />

Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium »
Read more...

< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium » (https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Geowifi : Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases

Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases.

Databases

* Wigle
* Apple
* OpenWifi
* Milnikov

Prerequisites

* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
* In order to use the Wigle service it is necessary to obtain an API and configure the utils/API.yamlfile replacing the value of the “wigle_auth” parameter for the “Encoded for use” data provided by Wigle. This is necessary for searching by SSID.

Installation

Use the package manager pip to install requirements.

python3 -m pip install -r requirements.txt

Usage

usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, –help Show this help message and exit
-s SSID, –ssid SSID Search by SSID
-b BSSID, –bssid BSSID Search by BSSID
-j, –json Json output
-m, –map Map output

Search by BSSID:

python3 geowifi.py -b BSSID

Search by SSID:

python3 geowifi.py -s SSID

It is possible to export the results in json format using the -jparameter and show the locations on html map using -m.

Json output example

{
“data”:{
“bssid”:”A0:XX:XX:XX:6F:90″,
“vendor”:”TP-LINK TECHNOLOGIES CO.,LTD.”,
“mac_type”:”MA-L”,
“wigle”:{
“lat”:00.000908922099,
“lon”:00.000945220028
},
“apple”:{
“lat”:”not_found”,
“lon”:”not_found”
},
“openwifi”:{
“lat”:00.000808900099,
“lon”:00.000845500028
},
“milnikov”:{
“lat”:”not_found”,
“lon”:”not_found”
}
}
}
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
GONET-Scanner : Golang Network Scanner With Arp Discovery And Own Parser

GONET-Scanner tool has its own ARP scanner and parser facility.

ScreenShots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYNSut8jwWrLlBeFvcYhXj1pjZKFcxKM6HwbzDADopuPuHL2Z5d-Bep2tBloeA4WRZ7OpncQGABzlljMRwIyTOKfff6leejT6ZAudXS8tAgk4Ok9mFR4NKjPcP9AzssSl67_n5VGYpZcyhh9AEYJ1EMzc7B3CCvOD8a7zhfVjwHrm1pQof-xwQk8Am/s865/145.png
Install

chmod +x install.sh
./install.sh [as root]

Usage

[ARGUMENTS]
-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)
[EXAMPLES]
go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)

Add Ports To Banner Grabbing

Go to file ports.go

func Ports() map[int]string {
//Based in well known ports
ports := map[int]string{
1: “echo”,
9: “WOL”,
20: “ftp data”,
21: “ftp control”,
22: “ssh”,
23: “telnet”,
25: “smtp”,
43: “whois”,
49: “TACACS”,
53: “DNS”,
67: “BOOTP”,
69: “TFTP”,
70: “Gopher”,
71: “NETRJS”,
80: “http”,
81: “TorPark”,
82: “TorPark”,
88: “Kerberos”,
110: “POP3”,
115: “sFTP”,
143: “imap”,
220: “imap3”,
123: “NTP”,
135: “RPC”,
443: “https”,
445: “Microsoft-ds, Samba”,
465: “SMTP over TLS”,
514: “Syslog”,
520: “RIP”,
521: “RIPng”,
540: “UUCP”,
543: “klogin”,
544: “kshell”,
587: “submission”,
993: “IMAP over TLS”,
995: “POP3 over TLS”,
1433: “Microsoft SQL Server”,
3306: “MySQL”,
3389: “rdp”,
5432: “postgres”,
6667: “irc”,
25565: “minecraft server”,
}
return ports

Just add port number & name of service Example: Add git

9418: “git”,
Download

___________________________
@hacking_Attack
@Hacking_Video