Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
NahamCon 2022 CTF Write-up: “No Space Between Us” Challenge
https://cdn-images-1.medium.com/max/600/0*9RwN2WvoeHwJVRy3.jpg
My approach and learnings from solving the NahamCon 2022 CTF ‘No Space Between Us’ challenge (solved by 62 teams out of over 4000).
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
NahamCon 2022 CTF Write-up: “No Space Between Us” Challenge
https://cdn-images-1.medium.com/max/600/0*9RwN2WvoeHwJVRy3.jpg
My approach and learnings from solving the NahamCon 2022 CTF ‘No Space Between Us’ challenge (solved by 62 teams out of over 4000).
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
Medium
NahamCon 2022 CTF Write-up: “No Space Between Us” Challenge
My approach and learnings from solving the NahamCon 2022 CTF ‘No Space Between Us’ challenge (solved by 62 teams out of over 4000).
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Alfred | TryHackMe
https://cdn-images-1.medium.com/max/1920/1*8Uaxsmh5stTo4ieMN30_Tw.png
Alfred is a Batman themed linux machine. We have to get two flags user and root in order to complete this box. Concept of enumeration…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Alfred | TryHackMe
https://cdn-images-1.medium.com/max/1920/1*8Uaxsmh5stTo4ieMN30_Tw.png
Alfred is a Batman themed linux machine. We have to get two flags user and root in order to complete this box. Concept of enumeration…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Alfred 🦇 | TryHackMe
Alfred is a Batman themed linux machine. We have to get two flags user and root in order to complete this box. Concept of enumeration…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Pourquoi CoinEx n’a connu aucun accident alors que les scandales liés à la sécurité des…
https://cdn-images-1.medium.com/max/1014/1*UKOUGmDTAgrQxcUNOs3-PA.png
En 2019, Binance, une plateforme d’échange de cryptomonnaies de renommée mondiale, a été piratée, entraînant le vol de plus de 7,000 BTC…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Pourquoi CoinEx n’a connu aucun accident alors que les scandales liés à la sécurité des…
https://cdn-images-1.medium.com/max/1014/1*UKOUGmDTAgrQxcUNOs3-PA.png
En 2019, Binance, une plateforme d’échange de cryptomonnaies de renommée mondiale, a été piratée, entraînant le vol de plus de 7,000 BTC…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Pourquoi CoinEx n’a connu aucun accident alors que les scandales liés à la sécurité des cryptomonnaies se sont multipliés ?
En 2019, Binance, une plateforme d’échange de cryptomonnaies de renommée mondiale, a été piratée, entraînant le vol de plus de 7,000 BTC…
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
LDAPFragger - Command And Control Tool That Enables Attackers To Route Cobalt Strike Beacon Data Over LDAP
https://blogger.googleusercontent.com/img/a/AVvXsEjHrAomxQoFfAWxL_cY1NWNCHYRCT-7yoWZ7O_1U1hvQ4TELfGHCoHbUjGGlypfmauB82kv6HWnpC3cNlOduLCej-QxDXBwTTu17gSholsH6C-0DiSfTlXD7fWADQhz0Yj6UemY0Eo1H9mnjh9N0L3Kq8YoJXBRNKta-j8jt5bMG5n-lyicxcVSCr7H=s16000
LDAPFragger is a Command and Control tool that enables attackers to route Cobalt Strike beacon data over LDAP using user attributes.
For background information, read the release blog: http://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes
Dependencies and installation
* Compiled with
Usage
Active Directory domain --ldaps: Use LDAPS instead of LDAP -v: Verbose output -h: Display this message If no AD credentials are provided, integrated AD authentication will be used.">
Example usage:
https://blogger.googleusercontent.com/img/a/AVvXsEjHrAomxQoFfAWxL_cY1NWNCHYRCT-7yoWZ7O_1U1hvQ4TELfGHCoHbUjGGlypfmauB82kv6HWnpC3cNlOduLCej-QxDXBwTTu17gSholsH6C-0DiSfTlXD7fWADQhz0Yj6UemY0Eo1H9mnjh9N0L3Kq8YoJXBRNKta-j8jt5bMG5n-lyicxcVSCr7H=s16000
From network segment A, run
LDAPFragger --cshost
From network segment B, run
LDAPFragger LDAPFragger -u
LDAPS can be used with the
Download LDAPFragger
___________________________
@hacking_Attack
@Hacking_Video
LDAPFragger - Command And Control Tool That Enables Attackers To Route Cobalt Strike Beacon Data Over LDAP
https://blogger.googleusercontent.com/img/a/AVvXsEjHrAomxQoFfAWxL_cY1NWNCHYRCT-7yoWZ7O_1U1hvQ4TELfGHCoHbUjGGlypfmauB82kv6HWnpC3cNlOduLCej-QxDXBwTTu17gSholsH6C-0DiSfTlXD7fWADQhz0Yj6UemY0Eo1H9mnjh9N0L3Kq8YoJXBRNKta-j8jt5bMG5n-lyicxcVSCr7H=s16000
LDAPFragger is a Command and Control tool that enables attackers to route Cobalt Strike beacon data over LDAP using user attributes.
For background information, read the release blog: http://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes
Dependencies and installation
* Compiled with
.NET 4.0, but may work with older and newer .NET frameworks as wellUsage
Active Directory domain --ldaps: Use LDAPS instead of LDAP -v: Verbose output -h: Display this message If no AD credentials are provided, integrated AD authentication will be used.">
_ _ __ | | | | / _| | | __| | __ _ _ __ | |_ _ __ __ _ __ _ __ _ ___ _ __ | |/ _` |/ _` | '_ \| _| '__/ _` |/ _` |/ _` |/ _ \ '__| | | (_| | (_| | |_) | | | | | (_| | (_| | (_| | __/ | |_|\__,_|\__,_| .__/|_| |_| \__,_|\__, |\__, |\___|_| | | __/ | __/ | |_| |___/ |___/ Fox-IT - Rindert Kramer Usage: --cshost: IP address or hostname of the Cobalt Strike instance --csport: Port of the external C2 interface on the Cobalt Strike server -u: Username to connect to Active Directory -p: Password to connect to Active Directory -d: FQDN of the Active Directory domain --ldaps: Use LDAPS instead of LDAP -v: Verbose output -h: Display this message If no AD credentials are provided, integrated AD authentication will be used. Example usage:
https://blogger.googleusercontent.com/img/a/AVvXsEjHrAomxQoFfAWxL_cY1NWNCHYRCT-7yoWZ7O_1U1hvQ4TELfGHCoHbUjGGlypfmauB82kv6HWnpC3cNlOduLCej-QxDXBwTTu17gSholsH6C-0DiSfTlXD7fWADQhz0Yj6UemY0Eo1H9mnjh9N0L3Kq8YoJXBRNKta-j8jt5bMG5n-lyicxcVSCr7H=s16000
From network segment A, run
LDAPFragger --cshost
From network segment B, run
LDAPFragger LDAPFragger -u
LDAPS can be used with the
--LDAPSflag, however, regular LDAP traffic is encrypted as well. Please do note that the default Cobalt Strike payload will get caught by most AVs.Download LDAPFragger
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
LDAPFragger - Command And Control Tool That Enables Attackers To Route Cobalt Strike Beacon Data Over LDAP
Cyberwar In Ukraine Hackers Are Hacking Russia
https://www.reddit.com/r/redteamsec/comments/uia0ng/cyberwar_in_ukraine_hackers_are_hacking_russia/
submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://youtube.com/watch?v=FnJXUpn5tcg&feature=share) [comments] (https://www.reddit.com/r/redteamsec/comments/uia0ng/cyberwar_in_ukraine_hackers_are_hacking_russia/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/uia0ng/cyberwar_in_ukraine_hackers_are_hacking_russia/
submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://youtube.com/watch?v=FnJXUpn5tcg&feature=share) [comments] (https://www.reddit.com/r/redteamsec/comments/uia0ng/cyberwar_in_ukraine_hackers_are_hacking_russia/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Cyberwar In Ukraine Hackers Are Hacking Russia
Posted in r/redteamsec by u/cybersocdm • 1 point and 0 comments
Dark Reading: Attacks/Breaches
New Ransomware Variant Linked to North Korean Cyber Army
Researchers use code, Bitcoin transactions to link ransomware attacks on banks to DPRK-sponsored actors.
___________________________
@hacking_Attack
@Hacking_Video
New Ransomware Variant Linked to North Korean Cyber Army
Researchers use code, Bitcoin transactions to link ransomware attacks on banks to DPRK-sponsored actors.
___________________________
@hacking_Attack
@Hacking_Video
Darkreading
VHD Ransomware Variant Linked to North Korean Cyber Army
Researchers use code, Bitcoin transactions to link ransomware attacks on banks to DPRK-sponsored actors.
hacking: security in practice
Can TryHackMe really teach you how to hack?
So, I've been following a lot of cyber security related content for a couple of years now and i must say i aquired a lot of skills. However, i want to go further. At the moment my financial situation doesn't allow college or any expensive certifications like the one's offered by Offensive Security and most of the things I've learned are from YouTube tutorials and Udemy (Don't judge). So, now i want to go a step further and maybe try for some compTIA certifications in the near future. I joined THM yesterday and got the premium so i can access all the rooms and thought it looks well put together but I'm afraid it will be limited in how deep the knowledge offered goes. So, any experiences? Did it help you advance your skills in a significant way?
submitted by /u/TheN1ght0w1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Can TryHackMe really teach you how to hack?
So, I've been following a lot of cyber security related content for a couple of years now and i must say i aquired a lot of skills. However, i want to go further. At the moment my financial situation doesn't allow college or any expensive certifications like the one's offered by Offensive Security and most of the things I've learned are from YouTube tutorials and Udemy (Don't judge). So, now i want to go a step further and maybe try for some compTIA certifications in the near future. I joined THM yesterday and got the premium so i can access all the rooms and thought it looks well put together but I'm afraid it will be limited in how deep the knowledge offered goes. So, any experiences? Did it help you advance your skills in a significant way?
submitted by /u/TheN1ght0w1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Can TryHackMe really teach you how to hack?
So, I've been following a lot of cyber security related content for a couple of years now and i must say i aquired a lot of skills. However, i...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Chinese hackers stole data undetected from US, European orgs since 2019
https://external-preview.redd.it/cQDldDs2bI2iH3csQ9AhbPGW875Omx2wWDpwuyXIRWA.jpg?width=640&crop=smart&auto=webp&s=585d92f3fd80fd1ecdc6b4bdc5c6a75dbd59e988 submitted by /u/DrinkMoreCodeMore
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Chinese hackers stole data undetected from US, European orgs since 2019
https://external-preview.redd.it/cQDldDs2bI2iH3csQ9AhbPGW875Omx2wWDpwuyXIRWA.jpg?width=640&crop=smart&auto=webp&s=585d92f3fd80fd1ecdc6b4bdc5c6a75dbd59e988 submitted by /u/DrinkMoreCodeMore
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Chinese hackers stole data undetected from US, European orgs since...
Posted in r/hacking by u/DrinkMoreCodeMore • 1 point and 0 comments
hacking: security in practice
I’m getting my laptop back from the police and my usbs
Hey guys just a quick question.
So I’m getting my laptop and usbs back from the British police after around 2 months off them having them and I’m just wondering what should I do with them? Do you guys think they have been tampered with or installed any hidden software? I’m just making sure before I start using them again
Thanks for reading!
submitted by /u/Idontnohow2spel1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
I’m getting my laptop back from the police and my usbs
Hey guys just a quick question.
So I’m getting my laptop and usbs back from the British police after around 2 months off them having them and I’m just wondering what should I do with them? Do you guys think they have been tampered with or installed any hidden software? I’m just making sure before I start using them again
Thanks for reading!
submitted by /u/Idontnohow2spel1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
I’m getting my laptop back from the police and my usbs
Hey guys just a quick question. So I’m getting my laptop and usbs back from the British police after around 2 months off them having them and I’m...
hacking: security in practice
is L3MON a safe for target safety.
By that i m trying to say will the target data be safe or will it be available publicly
submitted by /u/ZoneArchitechture
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
is L3MON a safe for target safety.
By that i m trying to say will the target data be safe or will it be available publicly
submitted by /u/ZoneArchitechture
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
is L3MON a safe for target safety.
By that i m trying to say will the target data be safe or will it be available publicly
hacking: security in practice
DHash
I was wondering, is it possible to find someone’s address through email via hashing? Particularly, DHash?
Heard it floating around from a fella.
submitted by /u/Nik_FTW233
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
DHash
I was wondering, is it possible to find someone’s address through email via hashing? Particularly, DHash?
Heard it floating around from a fella.
submitted by /u/Nik_FTW233
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
DHash
I was wondering, is it possible to find someone’s address through email via hashing? Particularly, DHash? Heard it floating around from a fella.
hacking: security in practice
How to disguise a device as a specific I.P?
Say you have a specific I.P address in mind, maybe of a phone you used to log onto your email with, is there a way to make your computer look as though it's coming from that I.P address?
For instance, I'm locked out of my old hotmail account and one of the things that can help when doing the "Verify Online" thing is apparently filling in the form whilst connected from a familiar device.
Any ideas?
submitted by /u/danwilkie90
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How to disguise a device as a specific I.P?
Say you have a specific I.P address in mind, maybe of a phone you used to log onto your email with, is there a way to make your computer look as though it's coming from that I.P address?
For instance, I'm locked out of my old hotmail account and one of the things that can help when doing the "Verify Online" thing is apparently filling in the form whilst connected from a familiar device.
Any ideas?
submitted by /u/danwilkie90
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How to disguise a device as a specific I.P?
Say you have a specific I.P address in mind, maybe of a phone you used to log onto your email with, is there a way to make your computer look as...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Deep Web
you see me, I see you
I was bored and messing around looking for fun TLDs like the domain .xyz and I found that the domain .icu is working. I tried putting youseeme.icu on my browser and I was stupefied for a moment. I don't know what to make of it. It's probably not deep web but I was scared. Anybody know what this is? What rabbit is it talking about and why should I follow it? There seems to be nothing except matrix type numbers running.
Edit: added screenshots as requested. It's all just numbers running like this. I was thinking if this was not deepweb, maybe some Easter egg website for a movie? https://imgur.com/gallery/3tQOKjp
submitted by /u/semen_in_a_bag
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
you see me, I see you
I was bored and messing around looking for fun TLDs like the domain .xyz and I found that the domain .icu is working. I tried putting youseeme.icu on my browser and I was stupefied for a moment. I don't know what to make of it. It's probably not deep web but I was scared. Anybody know what this is? What rabbit is it talking about and why should I follow it? There seems to be nothing except matrix type numbers running.
Edit: added screenshots as requested. It's all just numbers running like this. I was thinking if this was not deepweb, maybe some Easter egg website for a movie? https://imgur.com/gallery/3tQOKjp
submitted by /u/semen_in_a_bag
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
you see me, I see you
I was bored and messing around looking for fun TLDs like the domain .xyz and I found that the domain .icu is working. I tried putting youseeme.icu...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hire a Hacker to Secure Your Data
https://cdn-images-1.medium.com/max/616/1*K3G4G1AYkP1n4Yf9nTwsIQ.jpeg
If you really want to hire a hacker to secure your data, there are a few things you should know. First of all, you should never rely on one
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hire a Hacker to Secure Your Data
https://cdn-images-1.medium.com/max/616/1*K3G4G1AYkP1n4Yf9nTwsIQ.jpeg
If you really want to hire a hacker to secure your data, there are a few things you should know. First of all, you should never rely on one
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hire a Hacker to Secure Your Data
If you really want to hire a hacker to secure your data, there are a few things you should know. First of all, you should never rely on one