Hacking on Medium
MEPMS (Mission-Extensive-Profile-Management-System)-A concept Model

https://cdn-images-1.medium.com/max/1556/1*gpiRGJbMskFZ2_FHjz1fWg.png
Problem-statement

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Ways to Protect Your Phone’s SIM Card From Being Hacked

https://cdn-images-1.medium.com/max/2600/0*YwW-A-416ZiBMslX
If you are worried that someone could hack your phone’s SIM card, you need to follow some precautionary measures. Here are some of them:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Coca-Cola Investigates Data-Theft Claims After Ransomware Attack

The Stormous ransomware group is offering purportedly stolen Coca-Cola data for sale on its leak site, but the soda giant hasn't confirmed that the heist happened.

Dark Reading: Attacks/Breaches
Tenable's Bit Discovery Buy Underscores Demand for Deeper Visibility of IT Assets

The four-year-old firm, started by two industry veterans, focuses on gaining visibility into Internet-facing services as more companies seek insight into what attackers see.

Dark Reading: Attacks/Breaches
CISA: Log4Shell Was the Most-Exploited Vulnerability in 2021

Internet-facing zero-day vulnerabilities were the most commonly used types of bugs in 2021 attacks, according to the international Joint Cybersecurity Advisory (JCSA).

Dark Reading: Attacks/Breaches
Synopsys to Acquire WhiteHat Security from NTT

Acquisition expands security software-as-a-service capabilities.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Suddenlink, anti consumer practices. blocking all port forwarding

So I have had Suddenlink in one of the southern states in the past, and currently a friend of mine is going through a nightmare, with trying to port forward his home security cameras.

First off we are both experienced PC technicians, I am a system admin for both windows and Linux, and he owns a PC consulting company.

So far we have identified that Suddenlink constantly flashes both the modem and router, and does setting resets often as well. I personally have had my old account "wall gardened" for simply using multiple ftp connections. I know first hand how unscrupulous this company behaves.

He has his own router and we have tried many workarounds. Finally he bought his own modem and they still are blocking his port forwarding.

Basically this all started when he tried to port forward for the first time after setting up some cameras. He called them and they told him that they don't allow customers access to the modem at all (wether they own it or not) so therefore port forwarding and dmz is not possible for any customer. When enquiring about a business account and wether or not this would change the access to these features, they said the only thing a business account provides is a static IP and preferred voip traffic.

We have done port scans from outside, and all ports show blocked, other than standard internet use ports like 80. We have tried setting up a wrt and express VPN, and although it actually worked for a few minutes, the router suddenly attempted a firmware flash on its own and was bricked. We tried again using a Netgear router instead of the linksys one and the exact same thing happened. My theory is that they are constantly scanning for non approved router firmware and flashing over them, but since this was custom firmware the attempted rom flash bricked the modems.

They have a policy page https://www.suddenlink.com/disclosure

That sounds extremely ambiguous, as well as very anti consumer.

What I don't understand is, that they are the sole cable provider for a very large rural area in the southern u.s. and if they block all port forwarding and dmz activity, how would a business set up reasonable functions that are common and required for normal operations. Furthermore if they are flashing equipment they do not own and purposefully not disclosing certain activities, shouldn't this be illegal?

Finally is there some work around I am missing. Has any ody heard of another isp blocking all port forwarding before. It just seems so nuts.

submitted by /u/Boring_Oil_3506
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Password hash cracking length

I have recently been experimenting with hashcat. I made some password hashes and was then trying to decrypt them with a mask attack.

From my understanding these attack generate all the probable hashes and then compares that hash to the one provided, it it matches then we cracked it.

However when I added 5 more hashes to the program the time increased around 5x. As if it now has to make 5 more time computations.

Why’s is this this way? I thought the labor intensive part is creating the hashes from the mask. Why isn’t it just comparing the hash to now two hashes instead of one.

submitted by /u/jorged702
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BITB - Browser In The Browser (BITB) Templates
http://www.kitploit.com/2022/04/bitb-browser-in-browser-bitb-templates.html

___________________________
@hacking_Attack
@Hacking_Video

Browser templates for Browser In The Browser (BITB) attack. More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Usage Each folder has a index.html file which has 4 variables that must be modified: XX-TITLE-XX - The title that shows up for the page (e.g. Sign in to your account now) XX-DOMAIN-NAME-XX - Domain name you're masquerading as. (e.g. gmail.com) XX-DOMAIN-PATH-XX - Domain path (e.g. /auth/google/login) XX-PHISHING-LINK-XX - Phishing (https://www.kitploit.com/search/label/Phishing) link (https://www.kitploit.com/search/label/Link) which will be embedded (https://www.kitploit.com/search/label/Embedded) into the iFrame (e.g. https://example.com (https://example.com/)) Furthermore, if you're using a Windows (https://www.kitploit.com/search/label/Windows) template you should update the logo.svg which is the icon of the website (https://www.kitploit.com/search/label/Website) you're masquerading as. The default logo is Microsoft. Windows-DarkMode-Delay The Windows-DarkMode-Delay folder makes use of jQuery's fadeIn() function to add a slight delay to the pop-up window as it appears. This is only one way of making the Window appear in a delayed fashion, there's various other ways to do the same. Demo

___________________________
@hacking_Attack
@Hacking_Video

Detecting Color Preference To get the most out of this you should determine the OS from the user agent and the color preference and display the appropriate template. To find out if you should use dark or light templates check out: https://stackoverflow.com/questions/50840168/how-to-detect-if-the-os-is-in-dark-mode-in-browsers Detecting BITB Dragging the Window One way of detecting BITB is by attempting to drag the window to the edge of the browser. If the window cannot escape the browser then it's not a real window. Browser Extension @odacavo released a great browser extension that can detect and warn users about embedded iframes. It's available here: https://github.com/odacavo/enhanced-iframe-protection All credits go to @odacavo. Disclaimer Usage of these templates for attacking targets without prior consent is illegal. It's the end user's responsibility to obey all applicable laws. The developer is not responsible for any misuse of these templates.

Download BITB (https://github.com/mrd0x/BITB)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Build a wifi scanner with Python

https://cdn-images-1.medium.com/max/2600/1*9E8KG_oic7JVKdxMvXqZVg.png
A story of revenge and terminal commands.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Hack Any Whatsapp Account Without Touching Their Phone

Wondering how to hack any WhatsApp account without touching their phone? Don’t worry, because we have got you covered! In this article, we…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video