Hacking on Medium
Tips and Tricks: Fixing VirtualBox Kali Linux Black Screen

https://cdn-images-1.medium.com/max/2000/0*C4r6RvtzWnbNhkSQ
Hello friends and welcome to HaXeZ. So, you have run in to the VirtualBox Kali Linux Black Screen Bug? After all that effort spent…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
BITB - Browser In The Browser (BITB) Templates

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEji-JRC-NjI_AeU2f5IbeBeot0mntM-etQjryzGoL6bpTlGaRyeldosLOi_91QL-xs7M_3mw6rInsOItll5jrwRhIPX0V5RActj1jtGZu5OANltB6n0gR45z0tTkV0mSf5Xedwxgh-rfEBVoD2g25OpGLBOlj49Q-vH5EhGv2Xu6OKAOtmAn0uQ3upy/w640-h442/real-fake.png
Browser templates for Browser In The Browser (BITB) attack.

More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/
Usage

Each folder has a index.htmlfile which has 4 variables that must be modified:

* XX-TITLE-XX - The title that shows up for the page (e.g. Sign in to your account now)
* XX-DOMAIN-NAME-XX - Domain name you're masquerading as. (e.g. gmail.com)
* XX-DOMAIN-PATH-XX - Domain path (e.g. /auth/google/login)
* XX-PHISHING-LINK-XX - Phishing link which will be embedded into the iFrame (e.g. https://example.com)

Furthermore, if you're using a Windows template you should update the logo.svgwhich is the icon of the website you're masquerading as. The default logo is Microsoft.

Windows-DarkMode-Delay

The Windows-DarkMode-Delay folder makes use of jQuery's fadeIn() function to add a slight delay to the pop-up window as it appears. This is only one way of making the Window appear in a delayed fashion, there's various other ways to do the same.

Demo

https://blogger.googleusercontent.com/img/a/AVvXsEgFeRlDKs8DkcSdIt5XchSPvIKcY4qbMw71Kigd0ZV6I9HVk2f0GfD1HyLMVB1R901Zy0pzf2-20CPw6Wm-doW2zUwta7GSvoAVOUv0ELmwbXSi4BFScOUtb8LfVokgfkbkrZglzWuwGiAyXawQ0QagS00BAiBgcmlt02OxattgCjKFNoUnN3FEWVwS=w640-h496

Detecting Color Preference

To get the most out of this you should determine the OS from the user agent and the color preference and display the appropriate template.

To find out if you should use dark or light templates check out: https://stackoverflow.com/questions/50840168/how-to-detect-if-the-os-is-in-dark-mode-in-browsers

Detecting BITB

Dragging the Window

One way of detecting BITB is by attempting to drag the window to the edge of the browser. If the window cannot escape the browser then it's not a real window.

Browser Extension

@odacavo released a great browser extension that can detect and warn users about embedded iframes. It's available here: https://github.com/odacavo/enhanced-iframe-protection

All credits go to @odacavo.

Disclaimer

Usage of these templates for attacking targets without prior consent is illegal. It's the end user's responsibility to obey all applicable laws. The developer is not responsible for any misuse of these templates.
Download BITB

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Chinese APT Bronze President Mounts Spy Campaign on Russian Military

The war in Ukraine appears to have triggered a change in mission for the APT known as Bronze President (aka Mustang Panda).

Dark Reading: Attacks/Breaches
Doppler Takes on Secrets Management

The startup is the latest company to try to solve the problem of organizing and sharing secrets.

Hacking on Medium
Why do we keep repeating mistakes?

https://cdn-images-1.medium.com/max/2600/1*zJ_bNOJ6DHG6Jng3LP6vfQ.jpeg
A Buddhist philosophy view on how to improve ourselves faster.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/QnqQ70CUhJj3aiSkLUTRilxjBLpPAJPAEPlIEsZktEw.jpg ​

https://preview.redd.it/0wbolv6ys6w81.png?width=466&format=png&auto=webp&s=a1d5c6f74710c2292727d8426f3b1145358aa214

submitted by /u/PSyCHoHaMSTeRza
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
How do I bypass activation lock on an Ipad 2?

To start off, I'm sorry about the support-tier post. However, I believe this does qualify as hacking. My friend asked me to do this. I don't use Apple products much, and I'm kind of unfamiliar with hacking them. The most important thing to me right now is resetting this IPad 2 without getting a virus.

I know there are a lot of videos about how to do this. The hardware is old, so I'm sure it can be done. Unfortunately and much to my confusion, the videos show different ways to bypass activation lock, including doing weird stuff like putting an HTTP request in one of the fields. Here is another video that shows a hacker editing DNS. Other videos like this one tell me to just download and run some tool to fix this. Most videos are dodgy as a back-street hooker. Most of the ones I linked and the ones you'll find on Youtube are probably fake/malicious.

What is the best possible way to bypass activation lock on IPad 2? What is your way, and why is it safe/effective? More importantly, how does it work? Some people on the forums say an older version of ITunes is capable of performing an activation lock bypass.

TODO: Include specific model information and iOS version in future edit

submitted by /u/rootmasta420
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible for someone to find my IP Addressand use it to locate me through Reddit activity?

What says inthe title. I'm about to do some stuff in Reddit that I'd rather not have traced back to me for potential professional backfiring.

I'd appreciate any insight into this.

submitted by /u/MrHeavenTrampler
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can't configure Burpsuite with firefox

I've spent three hours googling and they all have the same fricken answers.

I set HTTP Proxy to 127.0.0.1 :8080 and also used proxy for HTTPS checked. I've deleted anything that would be in the "No proxy for" section. I Have updated burpsuite too and still nothing.

​

Any solutions would be great because I feel like maybe computers aren't my thing. I wanna cry because the frustration is intense.

​

thanks

submitted by /u/SsouthSside
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Authless location share

Hi Friends Good Morning, i have developed one open source project recently, its called share gang locations.

written in Go(Gin, Gorilla Websocket), Vue 3(JSX in Hypertext Tagged Markup), Openstreetmap

leaflet no external api like google or mapbox map api its completly free to use no limit.

​

Usage: Authless location share among with your team in single map live like watsapp live location share

here its anonymious.

​

Source code:

https://github.com/shadowhijackers/share-gang-locations

​

APP Link:

https://share-gang-locations.herokuapp.com

​

Note: Better experience will be in Mobile.

​

Steps to share:

1.
Go to home screen

2.
Click start sharing

3.
application will open to live tracker page

4.
click share tracker link (it will copy into your clipboard)

5.
share throght any medium.

6.
tell them to allow location permission

7.
see them in the map
submitted by /u/shadowHijackers
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
North Koreans Are Jailbreaking Phones to Access Forbidden Media

https://external-preview.redd.it/-nFNodwx6aXH_AvEraNMlQkczaA0-2__kg6g8FH_BMc.jpg?width=640&crop=smart&auto=webp&s=99fe2995eb7a6e17e23d1e4689cab0fcd4da128f submitted by /u/aknalid
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Harassment

I’m being harassed by these racist kids that might go to my school. I don’t want to report or block the insta account cuz then I’ll never know who they are. I want to find out who’s behind the account do you guys know how I can?

submitted by /u/jedi_saiyajin
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PhoneBook [ web challenge — Hack The Box]

https://cdn-images-1.medium.com/max/1920/1*5vvPN5sYchmknIzm9A92pw.png
CHALLENGE DESCRIPTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF 2022 bloat.py writeup

https://cdn-images-1.medium.com/max/960/1*H5LJh7pwP2GkWL2rKz-lFw.png
Hello friends, picoCTF 2022 concluded a month ago and it was a lot of fun, picoCTF is a CTF that mainly targets beginner who are learning…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video