hacking: security in practice
Changing Account Info Illegal?

So to make a VERY LONG story short I was given the password to an account that manages internet service that is not my own, think the portal for paying your bill, etc. Well this particular internet service provider allowed you to manage your router in this portal, so I paused a devices WiFi, changed all the login, and contact info, and then logged out. Next day the owner of the account notices WiFi isn't working on a device so they call the ISP, they tell them how all the information was changed etc.

Is what I did technically illegal if I was GIVEN the password to this account a while back and I didn't use any exploits or hacks to gain access or change the info? Just the GUI of the website really lol.

Thank you in advance.

submitted by /u/Fury3879
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Earn Thousands per Hour Hacking Smart Contracts

https://external-preview.redd.it/3fc8jQ-uJ2BGqtT7OeW5n1Vh27ucxj3EIJM8pIhUHdA.jpg?width=640&crop=smart&auto=webp&s=d2330f9008b5cea9970028bd80dbf56f8afd0288 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Canary Tokens

Hey I recently created a custom version of the canary tokens from canarytokens.org which is using the flask restful api library.

I know about 'request.environ' to get the basic data from a users request including IP etc., but is anyone aware of how to implement other calls to get more specific data from users requests?

The tool will be free when complete and I'll follow up with the link to deployed site where you can register and create your own tracking tokens (for educational purposes.....)

submitted by /u/Snoshberry
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GambiConf — Why do we need a new tech event?

https://cdn-images-1.medium.com/max/2600/1*8xK_M1trnkKLP8aHxsL0-w.png
It's the event fitting a specific unmet demand in tech confs: It features projects and ideas that are definitely outside the box

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Detecting and Preventing DLL Hijacking

https://cdn-images-1.medium.com/max/1600/0*3FKIIXvEKUiweXZn
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackathon, Definitely not Evil

https://cdn-images-1.medium.com/max/2600/0*kA598iuI-TgUg_8N
A place for Coders to feel Cool

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Threat Actor Profile - ALPHV
https://www.reddit.com/r/redteamsec/comments/u56z8j/threat_actor_profile_alphv/

submitted by /u/RandyMarsh_Lorde (https://www.reddit.com/user/RandyMarsh_Lorde)
[link] (https://www.overtoperator.com/p/threat-actor-profile-alphv?s=w) [comments] (https://www.reddit.com/r/redteamsec/comments/u56z8j/threat_actor_profile_alphv/)

___________________________
@hacking_Attack
@Hacking_Video

Best Certificates for Junior Penetration Tester
https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/

I’m a new to the field of Pentesting. I have basic to intermediate knowledge of programming (Python, JavaScript, Django, SQL, PostgreSQL). I also have basic knowledge of networking and Linux. At the moment I’m doing TryHackMe and TCM Courses(Heath Adams) to get the fundamentals of Ethical Hacking. My goal: Become a Ethical hacker/Red Teaming This is something I have always wanted to do and finally I have time in my life to dedicate to learning. My question: Apart from OSCP, what other certs do you guys recommend? Any certs or training that will help me land my first job? I understand OSCP is well respected, however, it’s going to push me to the limits with regards financially because it start at $1,499. Currently, I’m considering eCPPTv2 but if anyone has any other recommendations that would be great. Also, I’m only looking for Practical exams/certs so I can showcase my hacking knowledge to employers. Any recommendations/advice much appreciated. submitted by /u/Dperera121 (https://www.reddit.com/user/Dperera121)
[link] (https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/) [comments] (https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
best hacker-esque IRC networks?

besides anon & 2600? if they're private then pm me plz.

submitted by /u/hazeyez
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do data leaks/spills end up?

As in, which websites or paste bins do data leaks usually end up on after someone has hacked a website or stolen info?

submitted by /u/CheddaSucks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Threat Actor Profile - ALPHV

https://external-preview.redd.it/IzF1DVULdmsH6LUD2nqQVtzoVDZ3V_yRmQBLV9qJuLY.jpg?width=640&crop=smart&auto=webp&s=521ed26bd494edd3d63f1ab4d5dd4c3b5b8dc91e submitted by /u/RandyMarsh_Lorde
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kraken - A Multi-Platform Distributed Brute-Force Password Cracking System
http://www.kitploit.com/2022/04/kraken-multi-platform-distributed-brute.html

___________________________
@hacking_Attack
@Hacking_Video

Kraken is an online distributed brute force (https://www.kitploit.com/search/label/Brute%20Force) password cracking tool. It allows you to parallelize dictionaries and crunch word generator (https://www.kitploit.com/search/label/Generator) based cracking across multiple machines both as a web app in a web browser and as a standalone electron based client. Kraken aims to be easy to use, fault tolerant and scalable. I wrote Kraken because I wanted to learn more about offensive security and to write an easy solution to overcome the limitation of using a single device when attempting distribute brute force workloads.
Installation Server and Browser Client Kraken is a dockerized application using docker-compose which will launch the db (Postgres), s3 compliant file storage (Minio), the server and the browser client. You can find the docker-compose file at the root directory (https://www.kitploit.com/search/label/Directory) of the repository. You can deploy it using the following command: docker-compose up
Kraken's Browser Client should be accessible at: HTTP : localhost:8080 (http://localhost:8080/) (use server url http://localhost:5000/api [default]) HTTPS : https://localhost:8443 (https://localhost:8443/) (use server url https://localhost:8443/api) Note: To run the Browser Client from a remote machine, you MUST use HTTPS for both server url and browser url. Eg. If you are hosting the server on 192.168.1.2, then browser client will be available at https://192.168.1.2:8443 (https://192.168.1.2:8443/) and the server url should be https://192.168.1.2:8443/api To upload password lists or dictionaries, upload them to Minio Console at localhost:9001 (http://localhost:9001/). Kraken's server runs on localhost:5000 (http://localhost:5000/) and also hosts swagger documentation at localhost:5000/swagger (http://localhost:5000/swagger). Portable Desktop Client The desktop client is an electron based portable application and can be run on Mac, Windows and Linux. Due to sensitive permissions required to function, it is highly recommended that you compile and it yourself by cloning the repo and using : cd kraken-client
npm install
npm run electron-start
Windows Note: Window EXE portable client needs to run in the folder with its hashcat dependencies. Hashcat files can be dowloaded from their home page or here (https://hashcat.net/files/hashcat-5.1.0.7z). Ive included a compressed zip file with the portable executable and required hashcat files. They can be downloaded: Portable Exe (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client.1.2.0.exe) Compressed Zip (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-with-dependencies.zip) Linux Releases include a Linux AppImage which only requires hashcat to be installed. AppImage (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-1.2.0.AppImage) Install hashcat: sudo apt-get install hashcat
You will have to give AppImage permission via properties to execute. Note This guide is on-going but please feel free to raise an issue or contact me for any help required.

Download Kraken (https://github.com/arcaneiceman/kraken)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Prime Your Subconscious

https://cdn-images-1.medium.com/max/2600/0*vTiAdgWGKEdYp0MZ
Most people do not achieve their goals. 
 
The reason is not necessarily laziness or lack of willpower; they simply do not see themselves…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox:Catch

https://cdn-images-1.medium.com/max/1400/1*Aoi7b1_YG5V9wq1fhDd9CQ.png
Overview:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The First Big Thing in Web Hacking: Authentication

https://cdn-images-1.medium.com/max/640/0*Tl1MHtD8H-xNCLxp
Web hacking is where experimenting, analyzing, studying, and exploring hacking reaches a different level. The web is where the majority of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kraken - A Multi-Platform Distributed Brute-Force Password Cracking System

https://blogger.googleusercontent.com/img/a/AVvXsEh4LxtY9GLWW77N1jj4yB-CETIAdcw6FerefSdAu2miQYLxR5_8YVSRMX2xCIbnHDp-Rgkor4TCxra928ocKWvaO69W6pKjE3ARkvESKplLlr0YKq1_LMbnfo0pgDHoZTGt3BJvFlkeSGYQEyX2I4cHOpRW3h988dEz2OmHrNbsfwKKlPMvnzqh8cqC=s320 Kraken is an online distributed brute force password cracking tool. It allows you to parallelize dictionaries and crunch word generator based cracking across multiple machines both as a web app in a web browser and as a standalone electron based client. Kraken aims to be easy to use, fault tolerant and scalable.

I wrote Kraken because I wanted to learn more about offensive security and to write an easy solution to overcome the limitation of using a single device when attempting distribute brute force workloads. InstallationServer and Browser ClientKraken is a dockerized application using docker-compose which will launch the db (Postgres), s3 compliant file storage (Minio), the server and the browser client. You can find the docker-compose file at the root directory of the repository. You can deploy it using the following command: docker-compose up Kraken's Browser Client should be accessible at:

* HTTP : localhost:8080 (use server url http://localhost:5000/api [default])
* HTTPS : https://localhost:8443 (use server url https://localhost:8443/api)

Note: To run the Browser Client from a remote machine, you MUST use HTTPS for both server url and browser url. Eg. If you are hosting the server on 192.168.1.2, then browser client will be available at https://192.168.1.2:8443 and the server url should be https://192.168.1.2:8443/api

To upload password lists or dictionaries, upload them to Minio Console at localhost:9001.

Kraken's server runs on localhost:5000 and also hosts swagger documentation at localhost:5000/swagger. Portable Desktop ClientThe desktop client is an electron based portable application and can be run on Mac, Windows and Linux. Due to sensitive permissions required to function, it is highly recommended that you compile and it yourself by cloning the repo and using : cd kraken-client
npm install
npm run electron-start Windows
Note: Window EXE portable client needs to run in the folder with its hashcat dependencies. Hashcat files can be dowloaded from their home page or here. Ive included a compressed zip file with the portable executable and required hashcat files. They can be downloaded:

* Portable Exe
* Compressed Zip
Linux
Releases include a Linux AppImage which only requires hashcat to be installed.

* AppImage

Install hashcat: sudo apt-get install hashcat You will have to give AppImage permission via properties to execute. NoteThis guide is on-going but please feel free to raise an issue or contact me for any help required. Download Kraken

___________________________
@hacking_Attack
@Hacking_Video