Best Certificates for Junior Penetration Tester
https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/

I’m a new to the field of Pentesting. I have basic to intermediate knowledge of programming (Python, JavaScript, Django, SQL, PostgreSQL). I also have basic knowledge of networking and Linux. At the moment I’m doing TryHackMe and TCM Courses(Heath Adams) to get the fundamentals of Ethical Hacking. My goal: Become a Ethical hacker/Red Teaming This is something I have always wanted to do and finally I have time in my life to dedicate to learning. My question: Apart from OSCP, what other certs do you guys recommend? Any certs or training that will help me land my first job? I understand OSCP is well respected, however, it’s going to push me to the limits with regards financially because it start at $1,499. Currently, I’m considering eCPPTv2 but if anyone has any other recommendations that would be great. Also, I’m only looking for Practical exams/certs so I can showcase my hacking knowledge to employers. Any recommendations/advice much appreciated. submitted by /u/Dperera121 (https://www.reddit.com/user/Dperera121)
[link] (https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/) [comments] (https://www.reddit.com/r/Pentesting/comments/u55stu/best_certificates_for_junior_penetration_tester/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
best hacker-esque IRC networks?

besides anon & 2600? if they're private then pm me plz.

submitted by /u/hazeyez
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Where do data leaks/spills end up?

As in, which websites or paste bins do data leaks usually end up on after someone has hacked a website or stolen info?

submitted by /u/CheddaSucks
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Threat Actor Profile - ALPHV

https://external-preview.redd.it/IzF1DVULdmsH6LUD2nqQVtzoVDZ3V_yRmQBLV9qJuLY.jpg?width=640&crop=smart&auto=webp&s=521ed26bd494edd3d63f1ab4d5dd4c3b5b8dc91e submitted by /u/RandyMarsh_Lorde
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kraken - A Multi-Platform Distributed Brute-Force Password Cracking System
http://www.kitploit.com/2022/04/kraken-multi-platform-distributed-brute.html

___________________________
@hacking_Attack
@Hacking_Video

Kraken is an online distributed brute force (https://www.kitploit.com/search/label/Brute%20Force) password cracking tool. It allows you to parallelize dictionaries and crunch word generator (https://www.kitploit.com/search/label/Generator) based cracking across multiple machines both as a web app in a web browser and as a standalone electron based client. Kraken aims to be easy to use, fault tolerant and scalable. I wrote Kraken because I wanted to learn more about offensive security and to write an easy solution to overcome the limitation of using a single device when attempting distribute brute force workloads.
Installation Server and Browser Client Kraken is a dockerized application using docker-compose which will launch the db (Postgres), s3 compliant file storage (Minio), the server and the browser client. You can find the docker-compose file at the root directory (https://www.kitploit.com/search/label/Directory) of the repository. You can deploy it using the following command: docker-compose up
Kraken's Browser Client should be accessible at: HTTP : localhost:8080 (http://localhost:8080/) (use server url http://localhost:5000/api [default]) HTTPS : https://localhost:8443 (https://localhost:8443/) (use server url https://localhost:8443/api) Note: To run the Browser Client from a remote machine, you MUST use HTTPS for both server url and browser url. Eg. If you are hosting the server on 192.168.1.2, then browser client will be available at https://192.168.1.2:8443 (https://192.168.1.2:8443/) and the server url should be https://192.168.1.2:8443/api To upload password lists or dictionaries, upload them to Minio Console at localhost:9001 (http://localhost:9001/). Kraken's server runs on localhost:5000 (http://localhost:5000/) and also hosts swagger documentation at localhost:5000/swagger (http://localhost:5000/swagger). Portable Desktop Client The desktop client is an electron based portable application and can be run on Mac, Windows and Linux. Due to sensitive permissions required to function, it is highly recommended that you compile and it yourself by cloning the repo and using : cd kraken-client
npm install
npm run electron-start
Windows Note: Window EXE portable client needs to run in the folder with its hashcat dependencies. Hashcat files can be dowloaded from their home page or here (https://hashcat.net/files/hashcat-5.1.0.7z). Ive included a compressed zip file with the portable executable and required hashcat files. They can be downloaded: Portable Exe (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client.1.2.0.exe) Compressed Zip (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-with-dependencies.zip) Linux Releases include a Linux AppImage which only requires hashcat to be installed. AppImage (https://github.com/arcaneiceman/kraken/releases/download/dockerUpdate/kraken-client-1.2.0.AppImage) Install hashcat: sudo apt-get install hashcat
You will have to give AppImage permission via properties to execute. Note This guide is on-going but please feel free to raise an issue or contact me for any help required.

Download Kraken (https://github.com/arcaneiceman/kraken)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Prime Your Subconscious

https://cdn-images-1.medium.com/max/2600/0*vTiAdgWGKEdYp0MZ
Most people do not achieve their goals. 
 
The reason is not necessarily laziness or lack of willpower; they simply do not see themselves…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox:Catch

https://cdn-images-1.medium.com/max/1400/1*Aoi7b1_YG5V9wq1fhDd9CQ.png
Overview:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The First Big Thing in Web Hacking: Authentication

https://cdn-images-1.medium.com/max/640/0*Tl1MHtD8H-xNCLxp
Web hacking is where experimenting, analyzing, studying, and exploring hacking reaches a different level. The web is where the majority of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Kraken - A Multi-Platform Distributed Brute-Force Password Cracking System

https://blogger.googleusercontent.com/img/a/AVvXsEh4LxtY9GLWW77N1jj4yB-CETIAdcw6FerefSdAu2miQYLxR5_8YVSRMX2xCIbnHDp-Rgkor4TCxra928ocKWvaO69W6pKjE3ARkvESKplLlr0YKq1_LMbnfo0pgDHoZTGt3BJvFlkeSGYQEyX2I4cHOpRW3h988dEz2OmHrNbsfwKKlPMvnzqh8cqC=s320 Kraken is an online distributed brute force password cracking tool. It allows you to parallelize dictionaries and crunch word generator based cracking across multiple machines both as a web app in a web browser and as a standalone electron based client. Kraken aims to be easy to use, fault tolerant and scalable.

I wrote Kraken because I wanted to learn more about offensive security and to write an easy solution to overcome the limitation of using a single device when attempting distribute brute force workloads. InstallationServer and Browser ClientKraken is a dockerized application using docker-compose which will launch the db (Postgres), s3 compliant file storage (Minio), the server and the browser client. You can find the docker-compose file at the root directory of the repository. You can deploy it using the following command: docker-compose up Kraken's Browser Client should be accessible at:

* HTTP : localhost:8080 (use server url http://localhost:5000/api [default])
* HTTPS : https://localhost:8443 (use server url https://localhost:8443/api)

Note: To run the Browser Client from a remote machine, you MUST use HTTPS for both server url and browser url. Eg. If you are hosting the server on 192.168.1.2, then browser client will be available at https://192.168.1.2:8443 and the server url should be https://192.168.1.2:8443/api

To upload password lists or dictionaries, upload them to Minio Console at localhost:9001.

Kraken's server runs on localhost:5000 and also hosts swagger documentation at localhost:5000/swagger. Portable Desktop ClientThe desktop client is an electron based portable application and can be run on Mac, Windows and Linux. Due to sensitive permissions required to function, it is highly recommended that you compile and it yourself by cloning the repo and using : cd kraken-client
npm install
npm run electron-start Windows
Note: Window EXE portable client needs to run in the folder with its hashcat dependencies. Hashcat files can be dowloaded from their home page or here. Ive included a compressed zip file with the portable executable and required hashcat files. They can be downloaded:

* Portable Exe
* Compressed Zip
Linux
Releases include a Linux AppImage which only requires hashcat to be installed.

* AppImage

Install hashcat: sudo apt-get install hashcat You will have to give AppImage permission via properties to execute. NoteThis guide is on-going but please feel free to raise an issue or contact me for any help required. Download Kraken

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What will the scams be that we will fall for when we are older?

I can't imagine falling for the computer virus support scam or the send money to your relative Western Union scam.

But as we get old something new will be designed to catch us. What will it be?

submitted by /u/MushinZero
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Virtual machines

Anyone know any softwares to install virtual machines on an M1 Mac. There don't seem to be any around.

submitted by /u/GlassAd2991
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

[Recommendation] Best Android pentesting Course and Resources ?
https://www.reddit.com/r/Pentesting/comments/u5dtcj/recommendation_best_android_pentesting_course_and/

Hi everyone, Any recommendation for Android pentesting course? I checked TCM course android part, but it doesn't cover all topics. I come from web and network pentesting background. submitted by /u/0xA1MN (https://www.reddit.com/user/0xA1MN)
[link] (https://www.reddit.com/r/Pentesting/comments/u5dtcj/recommendation_best_android_pentesting_course_and/) [comments] (https://www.reddit.com/r/Pentesting/comments/u5dtcj/recommendation_best_android_pentesting_course_and/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Self-Loathing Rant — 1

https://cdn-images-1.medium.com/max/1440/0*fWDvyH3jARbzMqGU.jpg
I actually don’t really hate myself that much right now. I know, surprising because I just created this new rant series(?).

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection in Harvard’s Subdomain
https://nb1b3k.medium.com/sql-injection-in-harvards-subdomain-c3148f8be156?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi there! I’m Bibek Neupane from Nepal. In this first-ever write-up of mine, I’ll try to cover my story of finding a SQL Injection on…Continue reading on Medium » (https://nb1b3k.medium.com/sql-injection-in-harvards-subdomain-c3148f8be156?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection in Harvard’s Subdomain

Hi there! I’m Bibek Neupane from Nepal. In this first-ever write-up of mine, I’ll try to cover my story of finding a SQL Injection on…Continue reading on Medium »
Read more...