Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
BITB - Browser In The Browser (BITB) Templates

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji-JRC-NjI_AeU2f5IbeBeot0mntM-etQjryzGoL6bpTlGaRyeldosLOi_91QL-xs7M_3mw6rInsOItll5jrwRhIPX0V5RActj1jtGZu5OANltB6n0gR45z0tTkV0mSf5Xedwxgh-rfEBVoD2g25OpGLBOlj49Q-vH5EhGv2Xu6OKAOtmAn0uQ3upy/w640-h442/real-fake.png
Browser templates for Browser In The Browser (BITB) attack.

More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/
Usage

Each folder has a index.htmlfile which has 4 variables that must be modified:

* XX-TITLE-XX - The title that shows up for the page (e.g. Sign in to your account now)
* XX-DOMAIN-NAME-XX - Domain name you're masquerading as. (e.g. gmail.com)
* XX-DOMAIN-PATH-XX - Domain path (e.g. /auth/google/login)
* XX-PHISHING-LINK-XX - Phishing link which will be embedded into the iFrame (e.g. https://example.com)

Furthermore, if you're using a Windows template you should update the logo.svgwhich is the icon of the website you're masquerading as. The default logo is Microsoft.

Windows-DarkMode-Delay

The Windows-DarkMode-Delay folder makes use of jQuery's fadeIn() function to add a slight delay to the pop-up window as it appears. This is only one way of making the Window appear in a delayed fashion, there's various other ways to do the same.

Demo

https://blogger.googleusercontent.com/img/a/AVvXsEgFeRlDKs8DkcSdIt5XchSPvIKcY4qbMw71Kigd0ZV6I9HVk2f0GfD1HyLMVB1R901Zy0pzf2-20CPw6Wm-doW2zUwta7GSvoAVOUv0ELmwbXSi4BFScOUtb8LfVokgfkbkrZglzWuwGiAyXawQ0QagS00BAiBgcmlt02OxattgCjKFNoUnN3FEWVwS=w640-h496

Detecting Color Preference

To get the most out of this you should determine the OS from the user agent and the color preference and display the appropriate template.

To find out if you should use dark or light templates check out: https://stackoverflow.com/questions/50840168/how-to-detect-if-the-os-is-in-dark-mode-in-browsers

Detecting BITB

Dragging the Window

One way of detecting BITB is by attempting to drag the window to the edge of the browser. If the window cannot escape the browser then it's not a real window.

Browser Extension

@odacavo released a great browser extension that can detect and warn users about embedded iframes. It's available here: https://github.com/odacavo/enhanced-iframe-protection

All credits go to @odacavo.

Disclaimer

Usage of these templates for attacking targets without prior consent is illegal. It's the end user's responsibility to obey all applicable laws. The developer is not responsible for any misuse of these templates.
Download BITB

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

Kitploit – Maintenance in Progress

Kitploit is temporarily under maintenance. We’ll be back shortly with improvements.

14 viewsedited 00:28

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Chinese APT Bronze President Mounts Spy Campaign on Russian Military

The war in Ukraine appears to have triggered a change in mission for the APT known as Bronze President (aka Mustang Panda).

12 views02:30

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Doppler Takes on Secrets Management

The startup is the latest company to try to solve the problem of organizing and sharing secrets.

14 views02:30

Source

Hacking Articles Tips Tricks Videos Tutorials

10 views04:19

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Why do we keep repeating mistakes?

https://cdn-images-1.medium.com/max/2600/1*zJ_bNOJ6DHG6Jng3LP6vfQ.jpeg
A Buddhist philosophy view on how to improve ourselves faster.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Why do we keep repeating mistakes?

A Buddhist philosophy view on how to improve ourselves faster.

10 viewsedited 04:19

Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/QnqQ70CUhJj3aiSkLUTRilxjBLpPAJPAEPlIEsZktEw.jpg

https://preview.redd.it/0wbolv6ys6w81.png?width=466&format=png&auto=webp&s=a1d5c6f74710c2292727d8426f3b1145358aa214

submitted by /u/PSyCHoHaMSTeRza
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

11 views06:36

Hacking Articles Tips Tricks Videos Tutorials

9 views06:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
How do I bypass activation lock on an Ipad 2?

To start off, I'm sorry about the support-tier post. However, I believe this does qualify as hacking. My friend asked me to do this. I don't use Apple products much, and I'm kind of unfamiliar with hacking them. The most important thing to me right now is resetting this IPad 2 without getting a virus.

I know there are a lot of videos about how to do this. The hardware is old, so I'm sure it can be done. Unfortunately and much to my confusion, the videos show different ways to bypass activation lock, including doing weird stuff like putting an HTTP request in one of the fields. Here is another video that shows a hacker editing DNS. Other videos like this one tell me to just download and run some tool to fix this. Most videos are dodgy as a back-street hooker. Most of the ones I linked and the ones you'll find on Youtube are probably fake/malicious.

What is the best possible way to bypass activation lock on IPad 2? What is your way, and why is it safe/effective? More importantly, how does it work? Some people on the forums say an older version of ITunes is capable of performing an activation lock bypass.

TODO: Include specific model information and iOS version in future edit

submitted by /u/rootmasta420
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

How do I bypass activation lock on an Ipad 2?

To start off, I'm sorry about the support-tier post. However, I believe this does qualify as hacking. My friend asked me to do this. I don't use...

8 viewsedited 06:37

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is it possible for someone to find my IP Addressand use it to locate me through Reddit activity?

What says inthe title. I'm about to do some stuff in Reddit that I'd rather not have traced back to me for potential professional backfiring.

I'd appreciate any insight into this.

submitted by /u/MrHeavenTrampler
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Is it possible for someone to find my IP Addressand use it to...

What says inthe title. I'm about to do some stuff in Reddit that I'd rather not have traced back to me for potential professional backfiring....

7 viewsedited 06:37

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Can't configure Burpsuite with firefox

I've spent three hours googling and they all have the same fricken answers.

I set HTTP Proxy to 127.0.0.1 :8080 and also used proxy for HTTPS checked. I've deleted anything that would be in the "No proxy for" section. I Have updated burpsuite too and still nothing.

Any solutions would be great because I feel like maybe computers aren't my thing. I wanna cry because the frustration is intense.

thanks

submitted by /u/SsouthSside
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit

Explore this post and more from the hacking community

7 viewsedited 06:37

Hacking Articles Tips Tricks Videos Tutorials

8 views06:37

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Authless location share

Hi Friends Good Morning, i have developed one open source project recently, its called share gang locations.

written in Go(Gin, Gorilla Websocket), Vue 3(JSX in Hypertext Tagged Markup), Openstreetmap

leaflet no external api like google or mapbox map api its completly free to use no limit.

Usage: Authless location share among with your team in single map live like watsapp live location share

here its anonymious.

Source code:

https://github.com/shadowhijackers/share-gang-locations

APP Link:

https://share-gang-locations.herokuapp.com

Note: Better experience will be in Mobile.

Steps to share:

1.
Go to home screen

2.
Click start sharing

3.
application will open to live tracker page

4.
click share tracker link (it will copy into your clipboard)

5.
share throght any medium.

6.
tell them to allow location permission

7.
see them in the map
submitted by /u/shadowHijackers
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Authless location share

Hi Friends Good Morning, i have developed one open source project recently, its called share gang locations. written in Go(Gin, Gorilla...

7 viewsedited 06:37

Hacking Articles Tips Tricks Videos Tutorials

9 views06:37

Hacking Articles Tips Tricks Videos Tutorials

Photo