Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium » (https://medium.com/@hush88/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D0%B5%D1%82-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%83-%D0%B1%D0%B0%D1%83%D0%BD%D1%82%D0%B8-immunefi-%D1%81%D1%82%D0%BE%D0%B8%D0%BC%D0%BE%D1%81%D1%82%D1%8C%D1%8E-1-%D0%BC%D0%BB%D0%BD-187173f58583?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Euler запускает программу “баунти” ImmuneFi стоимостью $1 млн!
Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой экосистемой…
Euler запускает программу “баунти” ImmuneFi стоимостью $1 млн!
Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium »
Read more...
Программа ImmuneFi Bug Bounty направлена на укрепление безопасности Euler, одновременно развивая сотрудничество с более широкой…Continue reading on Medium »
Read more...
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium »
Read more...
Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium »
Read more...
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
Olá meus amigos, como vocês estão? espero que estejam bem.
Olá meus amigos, como vocês estão? espero que estejam bem.Continue reading on Medium » (https://medium.com/@Diegoeducacao404.../xss-armazenado-na-lada-de-aula-virtual-da-faculdade-36b7e1d89b31?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
Olá meus amigos, como vocês estão? espero que estejam bem.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Geowifi : Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases
Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases.
Databases
* Wigle
* Apple
* OpenWifi
* Milnikov
Prerequisites
* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
* In order to use the Wigle service it is necessary to obtain an API and configure the
Installation
Use the package manager pip to install requirements.
python3 -m pip install -r requirements.txt
Usage
usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, –help Show this help message and exit
-s SSID, –ssid SSID Search by SSID
-b BSSID, –bssid BSSID Search by BSSID
-j, –json Json output
-m, –map Map output
Search by BSSID:
python3 geowifi.py -b BSSID
Search by SSID:
python3 geowifi.py -s SSID
It is possible to export the results in json format using the
Json output example
{
“data”:{
“bssid”:”A0:XX:XX:XX:6F:90″,
“vendor”:”TP-LINK TECHNOLOGIES CO.,LTD.”,
“mac_type”:”MA-L”,
“wigle”:{
“lat”:00.000908922099,
“lon”:00.000945220028
},
“apple”:{
“lat”:”not_found”,
“lon”:”not_found”
},
“openwifi”:{
“lat”:00.000808900099,
“lon”:00.000845500028
},
“milnikov”:{
“lat”:”not_found”,
“lon”:”not_found”
}
}
}
Download
___________________________
@hacking_Attack
@Hacking_Video
Geowifi : Search WiFi Geolocation Data By BSSID And SSID On Different Public Databases
Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases.
Databases
* Wigle
* Apple
* OpenWifi
* Milnikov
Prerequisites
* Python3.
* In order to display emojis on Windows, it is recommended to install the new Windows terminal.
* In order to use the Wigle service it is necessary to obtain an API and configure the
utils/API.yamlfile replacing the value of the “wigle_auth” parameter for the “Encoded for use” data provided by Wigle. This is necessary for searching by SSID.Installation
Use the package manager pip to install requirements.
python3 -m pip install -r requirements.txt
Usage
usage: geowifi.py [-h] (-s SSID | -b BSSID) [-j] [-m]
optional arguments:
-h, –help Show this help message and exit
-s SSID, –ssid SSID Search by SSID
-b BSSID, –bssid BSSID Search by BSSID
-j, –json Json output
-m, –map Map output
Search by BSSID:
python3 geowifi.py -b BSSID
Search by SSID:
python3 geowifi.py -s SSID
It is possible to export the results in json format using the
-jparameter and show the locations on html map using -m.Json output example
{
“data”:{
“bssid”:”A0:XX:XX:XX:6F:90″,
“vendor”:”TP-LINK TECHNOLOGIES CO.,LTD.”,
“mac_type”:”MA-L”,
“wigle”:{
“lat”:00.000908922099,
“lon”:00.000945220028
},
“apple”:{
“lat”:”not_found”,
“lon”:”not_found”
},
“openwifi”:{
“lat”:00.000808900099,
“lon”:00.000845500028
},
“milnikov”:{
“lat”:”not_found”,
“lon”:”not_found”
}
}
}
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Geowifi : Search WiFi Geolocation Data By BSSID And SSID
Geowifi is a tool to Search WiFi geolocation data by BSSID and SSID on different public databases. In order to display emojis on Windows.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
GONET-Scanner : Golang Network Scanner With Arp Discovery And Own Parser
GONET-Scanner tool has its own ARP scanner and parser facility.
ScreenShots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYNSut8jwWrLlBeFvcYhXj1pjZKFcxKM6HwbzDADopuPuHL2Z5d-Bep2tBloeA4WRZ7OpncQGABzlljMRwIyTOKfff6leejT6ZAudXS8tAgk4Ok9mFR4NKjPcP9AzssSl67_n5VGYpZcyhh9AEYJ1EMzc7B3CCvOD8a7zhfVjwHrm1pQof-xwQk8Am/s865/145.png
Install
chmod +x install.sh
./install.sh [as root]
Usage
[ARGUMENTS]
-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)
[EXAMPLES]
go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)
Add Ports To Banner Grabbing
Go to file
func Ports() map[int]string {
//Based in well known ports
ports := map[int]string{
1: “echo”,
9: “WOL”,
20: “ftp data”,
21: “ftp control”,
22: “ssh”,
23: “telnet”,
25: “smtp”,
43: “whois”,
49: “TACACS”,
53: “DNS”,
67: “BOOTP”,
69: “TFTP”,
70: “Gopher”,
71: “NETRJS”,
80: “http”,
81: “TorPark”,
82: “TorPark”,
88: “Kerberos”,
110: “POP3”,
115: “sFTP”,
143: “imap”,
220: “imap3”,
123: “NTP”,
135: “RPC”,
443: “https”,
445: “Microsoft-ds, Samba”,
465: “SMTP over TLS”,
514: “Syslog”,
520: “RIP”,
521: “RIPng”,
540: “UUCP”,
543: “klogin”,
544: “kshell”,
587: “submission”,
993: “IMAP over TLS”,
995: “POP3 over TLS”,
1433: “Microsoft SQL Server”,
3306: “MySQL”,
3389: “rdp”,
5432: “postgres”,
6667: “irc”,
25565: “minecraft server”,
}
return ports
Just add port number & name of service Example: Add git
9418: “git”,
Download
___________________________
@hacking_Attack
@Hacking_Video
GONET-Scanner : Golang Network Scanner With Arp Discovery And Own Parser
GONET-Scanner tool has its own ARP scanner and parser facility.
ScreenShots
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYNSut8jwWrLlBeFvcYhXj1pjZKFcxKM6HwbzDADopuPuHL2Z5d-Bep2tBloeA4WRZ7OpncQGABzlljMRwIyTOKfff6leejT6ZAudXS8tAgk4Ok9mFR4NKjPcP9AzssSl67_n5VGYpZcyhh9AEYJ1EMzc7B3CCvOD8a7zhfVjwHrm1pQof-xwQk8Am/s865/145.png
Install
chmod +x install.sh
./install.sh [as root]
Usage
[ARGUMENTS]
-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)
[EXAMPLES]
go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)
Add Ports To Banner Grabbing
Go to file
ports.gofunc Ports() map[int]string {
//Based in well known ports
ports := map[int]string{
1: “echo”,
9: “WOL”,
20: “ftp data”,
21: “ftp control”,
22: “ssh”,
23: “telnet”,
25: “smtp”,
43: “whois”,
49: “TACACS”,
53: “DNS”,
67: “BOOTP”,
69: “TFTP”,
70: “Gopher”,
71: “NETRJS”,
80: “http”,
81: “TorPark”,
82: “TorPark”,
88: “Kerberos”,
110: “POP3”,
115: “sFTP”,
143: “imap”,
220: “imap3”,
123: “NTP”,
135: “RPC”,
443: “https”,
445: “Microsoft-ds, Samba”,
465: “SMTP over TLS”,
514: “Syslog”,
520: “RIP”,
521: “RIPng”,
540: “UUCP”,
543: “klogin”,
544: “kshell”,
587: “submission”,
993: “IMAP over TLS”,
995: “POP3 over TLS”,
1433: “Microsoft SQL Server”,
3306: “MySQL”,
3389: “rdp”,
5432: “postgres”,
6667: “irc”,
25565: “minecraft server”,
}
return ports
Just add port number & name of service Example: Add git
9418: “git”,
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
GONET-Scanner : Golang Network Scanner With Arp Discovery
GONET-Scanner tool has its own ARP scanner and parser facility. Golang Network Scanner With Arp Discovery And Own Parser
Hacking on Medium
All about XSS(Part 1)
https://cdn-images-1.medium.com/max/938/1*3E_1fh41K6v4UzMS3BxSew.png
Introduction to XSS
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
All about XSS(Part 1)
https://cdn-images-1.medium.com/max/938/1*3E_1fh41K6v4UzMS3BxSew.png
Introduction to XSS
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
All about XSS(Part 1)
Introduction to XSS
Hacking on Medium
< XSS ARMAZENADO NA SALA DE AULA VIRTUAL DA FACULDADE />
https://cdn-images-1.medium.com/max/1280/1*akpFYFc2c9Q38qe3rdHVtg.jpeg
Olá meus amigos, como vocês estão? espero que estejam bem.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
< XSS ARMAZENADO NA SALA DE AULA VIRTUAL DA FACULDADE />
https://cdn-images-1.medium.com/max/1280/1*akpFYFc2c9Q38qe3rdHVtg.jpeg
Olá meus amigos, como vocês estão? espero que estejam bem.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
< XSS ARMAZENADO NA SADA DE AULA VIRTUAL DA FACULDADE />
Olá meus amigos, como vocês estão? espero que estejam bem.
Hacking on Medium
The genius marketing hack I never used
https://cdn-images-1.medium.com/max/2600/1*lHc9hretLeppVxzXEJPbsg.jpeg
It’s been over 5 years since I exited my previous startup, so I think it is time to share the story of the most genius marketing hack I…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
The genius marketing hack I never used
https://cdn-images-1.medium.com/max/2600/1*lHc9hretLeppVxzXEJPbsg.jpeg
It’s been over 5 years since I exited my previous startup, so I think it is time to share the story of the most genius marketing hack I…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
The genius marketing hack I never used
It’s been over 5 years since I exited my previous startup, so I think it is time to share the story of the most genius marketing hack I…
Hacking on Medium
Safely Store Your Seed Phrase
https://cdn-images-1.medium.com/max/1196/1*7Nrk_AKVa62E-RYQj6K1bQ.jpeg
So that’s it. You opened a blockchain account using a wallet. Time to learn a few tips on how to keep your seed safe!
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Safely Store Your Seed Phrase
https://cdn-images-1.medium.com/max/1196/1*7Nrk_AKVa62E-RYQj6K1bQ.jpeg
So that’s it. You opened a blockchain account using a wallet. Time to learn a few tips on how to keep your seed safe!
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Safely Store Your Seed Phrase
So that’s it. You opened a blockchain account using a wallet. Time to learn a few tips on how to keep your seed safe!
Hacking on Medium
Is It a Crime To Press F12 And View Source Code of a Website?
https://cdn-images-1.medium.com/max/940/1*iby9IaLqGXR-Gj-4eI76yA.png
Does Pointing Out The Vulnerability of a Website Amount To Cyber Crime?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Is It a Crime To Press F12 And View Source Code of a Website?
https://cdn-images-1.medium.com/max/940/1*iby9IaLqGXR-Gj-4eI76yA.png
Does Pointing Out The Vulnerability of a Website Amount To Cyber Crime?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Is It a Crime To Press F12 And View Source Code of a Website?
Does Pointing Out The Vulnerability of a Website Amount To Cyber Crime?
Hacking on Medium
What’s the Difference between Deep Web and Dark Web?
https://cdn-images-1.medium.com/max/750/1*pxwLEiLTGzuT_iRE_at5yA.jpeg
Many times the two terms are used interchangeably as if they are more or less the same thing.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What’s the Difference between Deep Web and Dark Web?
https://cdn-images-1.medium.com/max/750/1*pxwLEiLTGzuT_iRE_at5yA.jpeg
Many times the two terms are used interchangeably as if they are more or less the same thing.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What’s the Difference between Deep Web and Dark Web?
Many times the two terms are used interchangeably as if they are more or less the same thing. This is very inaccurate, as the deep web just…
Hacking on Medium
What is a difference between payload and a virus? how to scan virus using cmd ?
https://cdn-images-1.medium.com/max/1200/1*-VR6hp5YleBaqz5gQMUZlQ.jpeg
In terms of Software Language, a virus is a program which can harm the
device when the virus is executed. In simple words, virus is a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What is a difference between payload and a virus? how to scan virus using cmd ?
https://cdn-images-1.medium.com/max/1200/1*-VR6hp5YleBaqz5gQMUZlQ.jpeg
In terms of Software Language, a virus is a program which can harm the
device when the virus is executed. In simple words, virus is a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is a difference between payload and a virus? how to scan virus using cmd ?
In terms of Software Language, a virus is a program which can harm the device when the virus is executed. In simple words, virus is a…
Hacking on Medium
Hacking Instagram Scammers
https://cdn-images-1.medium.com/max/600/1*p6bto-Uwi3XSYcMqwGQgew.png
Hacking Instagram Scammers and Takeover Admin Panel
Continue reading on Dev Genius »
___________________________
@hacking_Attack
@Hacking_Video
Hacking Instagram Scammers
https://cdn-images-1.medium.com/max/600/1*p6bto-Uwi3XSYcMqwGQgew.png
Hacking Instagram Scammers and Takeover Admin Panel
Continue reading on Dev Genius »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking Instagram Scammers
Hacking Instagram Scammers and Takeover Admin Panel
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
A Detailed Guide on AMSI Bypass
IntroductionWindows developed the Antimalware Scan Interface (AMSI) standard that allows a developer to integrate malware defense in his application. AMSI allows an application to interact with any anti-virus installed on the system and prevent dynamic, script-based malwares from executing. We’ll learn more about AMSI, implementation in code and some of the well-known bypasses in this article.Table of content· Background· Malware naming convention· How AMSI works· AMSI Bypass methods:· Method 1: Powershell downgrade· Method 2: Obfuscation· Method 3: Forcing an error· Method 4: Memory Hijacking· Method 5: Memory Hijacking (obfuscated opcodes)· Method 6: AMSI bypass by reflection· Method 7: Nishang All in One script· ConclusionIn one sentence, it is a script-based malware scanning API provided by Microsoft that can be integrate in any application to scan and detect integrity of user input in order to safeguard the application and thus, consumers against malwares. For example, a messenger app may scan messages with AMSI for malware before sending it forward to the receiver.Malware naming conventionBefore reading more about the working of AMSI, let’s understand how malwares are named. Often in analysis, Windows detects malware but analysts are unable to identify exact details and behaviour of the malware. Computer Antivirus Research Organisation (CARO) has given a standard naming convention for malwares. For example, a shortcut based caphaw backdoor is named like:How AMSI worksAs a developer you can use AMSI to provide malware defense using AMSI. Let’s say you create an application that inputs a script and executes it using a scripting engine like Powershell. At the point when input is being taken, AMSI can be called in to check for malware first. Windows provides COM and Win32 APIs to call AMSI. The workflow of AMSI is as follows:Explanation: As you can see, the AMSI API is open, so any AV can read the data from its functions. Here, a windows script is being run. When it is passed through AMSI, amsi.dll is injected in the same virtual memory as that of our program. This amsi.dll has various functions that can evaluate code. These functions can be found here. However, the actual scanning task is conducted by these two functions:___________________________
@hacking_Attack
@Hacking_Video
A Detailed Guide on AMSI Bypass
IntroductionWindows developed the Antimalware Scan Interface (AMSI) standard that allows a developer to integrate malware defense in his application. AMSI allows an application to interact with any anti-virus installed on the system and prevent dynamic, script-based malwares from executing. We’ll learn more about AMSI, implementation in code and some of the well-known bypasses in this article.Table of content· Background· Malware naming convention· How AMSI works· AMSI Bypass methods:· Method 1: Powershell downgrade· Method 2: Obfuscation· Method 3: Forcing an error· Method 4: Memory Hijacking· Method 5: Memory Hijacking (obfuscated opcodes)· Method 6: AMSI bypass by reflection· Method 7: Nishang All in One script· ConclusionIn one sentence, it is a script-based malware scanning API provided by Microsoft that can be integrate in any application to scan and detect integrity of user input in order to safeguard the application and thus, consumers against malwares. For example, a messenger app may scan messages with AMSI for malware before sending it forward to the receiver.Malware naming conventionBefore reading more about the working of AMSI, let’s understand how malwares are named. Often in analysis, Windows detects malware but analysts are unable to identify exact details and behaviour of the malware. Computer Antivirus Research Organisation (CARO) has given a standard naming convention for malwares. For example, a shortcut based caphaw backdoor is named like:How AMSI worksAs a developer you can use AMSI to provide malware defense using AMSI. Let’s say you create an application that inputs a script and executes it using a scripting engine like Powershell. At the point when input is being taken, AMSI can be called in to check for malware first. Windows provides COM and Win32 APIs to call AMSI. The workflow of AMSI is as follows:Explanation: As you can see, the AMSI API is open, so any AV can read the data from its functions. Here, a windows script is being run. When it is passed through AMSI, amsi.dll is injected in the same virtual memory as that of our program. This amsi.dll has various functions that can evaluate code. These functions can be found here. However, the actual scanning task is conducted by these two functions:___________________________
@hacking_Attack
@Hacking_Video
Blogspot
A Detailed Guide on AMSI Bypass
Hacking Articles is a very interesting blog about information security, penetration testing and vulnerability assessment managed by Raj Chandel.