hacking: security in practice
Reverse Engineering BeReal

https://external-preview.redd.it/Zr-qc7mNIpQ0InYLVXql_tAGcXBDqnr-x648KlOua7I.jpg?width=640&crop=smart&auto=webp&s=3790ac05a9af064ccb3735942ee56494af3065e4 submitted by /u/Amazing-Bathroom3829
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Deauthentication attack on a 5G network with aireplay-ng

Hi, I'm in need of some help regarding deauthentication attacks with the tool aireplay-ng.

I'm using a wireless network adapter with the rtl8812bu chipset, which should support packet injection from what I've read online. After enabling Monitor mode (a feature that 100% works on the adapter) the command I try to run is:

sudo aireplay-ng --deauth 200 -a [router MAC address (BSSID)] -c [client MAC address (STATION)] -D wlan0

(Notes: wlan0 is my wireless interface in monitor mode. The targeted wireless network is a 5G one - luckily my adapter supports 5G. I tried running the command without the -Dflag, but then aireplay-ngreplies with: no such BSSID available)

When I check the targetted interface's status, I see that the client is still connected to the same 5G Wi-Fi network that I was attacking. Does anyone know what could be interfering with the attack?

The command output is as follows: https://imgur.com/a/qAvqa8z

What I've tried: I have tried restarting my network manager (airmon-ng) which didn't work, I also tried upgrading my kali distribution to no avail. I also tried using mdk4instead which slowed the connection very slightly - and I'm aiming to disconnect the client.

Many thanks!

submitted by /u/KfirEzer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Affordable implant hardware to gain remote foothold in 802.1x networks?

Hello!

I'm preparing for my first Red Teaming engagement, and I have been tasked with preparing implant devices that will be planted on-site during physical security test engagements. I have the following requirements:

1. Can be plugged in fast and is easy to hide.
1. Prefferably as a MitM between a VOIP/printer and the network.

2. Works in 802.1x networks.
3. Will serve as a backdoor/VPN into the network from outside.
4. Optionally, allows us to connect to the network via 3G/4G.

The most well known solutions I've found are fromHak5 - LAN Turtle and Packet Squirrel. With LAN Turtle, I'm worried that it will not work with 802.1x network auth and that you can not connect it let's say instead of a printer or VOIP, since it only works as Ethernet -> USB.

Packet Squirrel looks a lot better suited for the task. While it lacks 3G, I think since it works as a Ethernet MitM bridge, it should work in place of a printer. I think this is the best out-of-the-box option, and will go with this one, unless I manage to find something better.

Another option I have discovered is using an OpenWRT router with SWORD, as described in this article. I will probably try that route, especially since it should also be easy to use 4G routers and get a connection from the outside, but I am worried about the 802.1x and whether it will work when we connect it as a MitM between a printer and the network. My hope is that I will manage to somehow get it working, since OpenWRT is open source, but I have no idea whether what I want is actually possible.

But that's all I have managed to find as possible implant devices. Does any of you have any experience with using Hak5 products or creating similar implants? Have any of you tried to get the OpenWRT-based backdoor working? I would be glad for any recommandation, DIY tips or ready-made products that you use during Red Teaming engagements, because I am sure that I'm not the first one who encountered this problem. Also, if said product is available in Europe, it would be even better!

Thank you!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Idea for something cool

There is an event organised by one of my friends. He asked me for a music playlist of different genres that I have downloaded onto a USB of mine. He will insert that USB in his laptop to play the music (connected to the loudspeakers). I don't want to do any harm and therefore I don't want to write "friendly" malware. But is there anything nice or prank I can do? Can someone give an idea or a github scripts or other things that make it easier to implement in the USB.

submitted by /u/bruggekiller
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Broken session control leads to access the admin panel even after revoking the access!! — #ZOHO

Hey Guy’sContinue reading on Medium »
Read more...

Euler запускає програму ImmuneFi Bug Bounty на суму 1 мільйон доларів!

Програма ImmuneFi Bug Bounty має на меті посилити безпеку Euler, одночасно посилюючи співпрацю з більшою екосистемою DeFi в рамках нашого…Continue reading on Medium »
Read more...

Broken session control leads to access the admin panel even after revoking the access!! — #ZOHO
https://naveenroy008.medium.com/broken-session-control-leads-to-access-the-admin-panel-even-after-revoking-the-access-zoho-db219b19d2dd?source=rss------bug_bounty-5

Hey Guy’sContinue reading on Medium » (https://naveenroy008.medium.com/broken-session-control-leads-to-access-the-admin-panel-even-after-revoking-the-access-zoho-db219b19d2dd?source=rss------bug_bounty-5)

Euler запускає програму ImmuneFi Bug Bounty на суму 1 мільйон доларів!
https://medium.com/@veralaveraaa/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D1%94-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D1%83-immunefi-bug-bounty-%D0%BD%D0%B0-%D1%81%D1%83%D0%BC%D1%83-1-%D0%BC%D1%96%D0%BB%D1%8C%D0%B9%D0%BE%D0%BD-%D0%B4%D0%BE%D0%BB%D0%B0%D1%80%D1%96%D0%B2-303d291facee?source=rss------bug_bounty-5

Програма ImmuneFi Bug Bounty має на меті посилити безпеку Euler, одночасно посилюючи співпрацю з більшою екосистемою DeFi в рамках нашого…Continue reading on Medium » (https://medium.com/@veralaveraaa/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D1%94-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D1%83-immunefi-bug-bounty-%D0%BD%D0%B0-%D1%81%D1%83%D0%BC%D1%83-1-%D0%BC%D1%96%D0%BB%D1%8C%D0%B9%D0%BE%D0%BD-%D0%B4%D0%BE%D0%BB%D0%B0%D1%80%D1%96%D0%B2-303d291facee?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Building a Cybersecurity Mesh Architecture in the Real World

Like zero trust, the cybersecurity mesh re-envisions the perimeter at the identity layer and centers upon unifying disparate security tools into a single, interoperable ecosystem.

Tarrask malware uses scheduled tasks for defense evasion
https://www.reddit.com/r/redteamsec/comments/u24xog/tarrask_malware_uses_scheduled_tasks_for_defense/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/TarraskMalwareDART) [comments] (https://www.reddit.com/r/redteamsec/comments/u24xog/tarrask_malware_uses_scheduled_tasks_for_defense/)

Kali Linux Tutorials
Nivistealer : Steal Victim Images Exact Location Device Info And Much More

Nivistealer is a tool to Steal Victim Images Exact Location Device Info And Much More.

Features

* Steal Victim Ip
* Steal Device Info
* Steal Network and Battery Info
* Uses Device Gps to steal exact location
* Steal pic from front camera
* Steal text from victim clipboard (added recently)
* Send logs to discord also save them locally in a txt file
* Works on android, windows,linux,mac os
* Uses iframe to load live website to make phishing attack more reliable

How to use?

Method 0

* Click the above button or click here to run on repl.it
* Login/Signup on repl.it
* After it clones the repo edit this line with your repl url
* Now click Run

Method 1

* Clone or Download this repo
* Create a account on any webhosting site that provide ssl . I suggest a free webhosting site called 000webhost.com
* Now upload index.html,sunni.php,post.phpon your webhosting site
* Now open index.html and replace this with your discord webhook url
* Boom !!! . Now send the phishing link to your victim . Logs will be send to your discord webhook and also saved to sensitiveinfo.txtfile

Method 2

* Clone the repo and navigate to python_flaskdirectory
* open your terminal and type pip3 install coloramapip3 install flask
* Now edit this line with your url
* Now type python nivistealer.pyBoom !!!
* Images and log file will be saved locally on your directory

Donate

* BTC

bc1q37nqagapyt7nnu38p4pqu4hq2xgmumwklzn24l

* ETH

0xF3eBc9bA1bCD30C3efbAd298A73663691F4DB803
Download

Deep Web
Dread down for anyone else?

Ive tried both dark.fail and tor.taxi and sm getting the same error screen each time. Havent these sites updated their links to V3 yet? I would think so. I dont know any other safeish clearnet sites that are reputable for links. I tried other links like nitter and got in just fine. Is this just a dread thing?

submitted by /u/findingmewanahelp909
[link] [comments]

Hacking on Medium
Lab: Reflected XSS into HTML context with all tags blocked except custom ones — Portswigger Lab

https://cdn-images-1.medium.com/max/918/1*57xjsfavhFFN6qPSZ2WHQA.png
Portswigger XSS lab

Continue reading on Medium »

Hacking on Medium
The Full Roadmap to become an Ethical Hackers

https://cdn-images-1.medium.com/max/925/1*ImVaRoeVvMQ40sy3D_qkEA.jpeg
Who is an Ethical Hacker ?

Continue reading on Medium »