What hacking is and why it matters!

When people hear about hacking, there are different connotations to it! But the common interpretations of the term “hacking” in many…Continue reading on Medium »
Read more...

hacking: security in practice
Is there a tool or modified version of teamviewer that I can use to Reverse teamviewer connections?

I think you can guess why I want to do that.
I've got everything else that I need. I just need a way inside.

submitted by /u/Draygoes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Gitcolombo : Extract And Analyze Contributors Info From Git Repos

Git colombo is an OSINT tool to extract info about persons from git repositories: common names, emails, matches between different (as it may seems) accounts.

Using

* Install git
* Run:

from any git url
./gitcolombo.py -u https://github.com/Kalanchyovskaia16/newlps
from directory, recursively
./gitcolombo.py -d ./newlps -r
from all GitHub personal/org repos by nickname
./gitcolombo.py –nickname LubyRuffy

For batch cloning from Gitlab and Bitbucket group repos you can use ghorg.

Output:

* verbose persons info
* name
* email
* number of appearences as author/committer
* other persons that person can be

* emails used for the same name
* different names for the same person
* general statistics

What’s the difference between git author and committer?

TL;DR

* author wrote the code (make the patch)
* commiter commit it to the repo (rewrite history, make pull/merge requests…)

Nice explanation: https://stackoverflow.com/questions/18750808/difference-between-author-and-committer-in-git

Very often developers make inaccurate commits with the one name/email (e.g. work account), then change to the right (e.g. personal account) and make git commit --amend, but forget to change the author of the commit. This way we can use it for OSINT as match of names/emails from git history.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Socid-Extractor : Extract Accounts Info From Personal Pages On Various Sites For OSINT Purpose

Socid-Extractor Extracts information about a user from profile webpages / API responses and save it in machine-readable format.

Usage

As a command-line tool:

$ socid_extractor –url https://www.deviantart.com/muse1908
country: France
created_at: 2005-06-16 18:17:41
gender: female
username: Muse1908
website: www.patreon.com/musemercier
links: [‘https://www.facebook.com/musemercier’, ‘https://www.instagram.com/muse.mercier/’, ‘https://www.patreon.com/musemercier’]
tagline: Nothing worth having is easy…

Without installing:

$ ./run.py –url https://www.deviantart.com/muse1908

As a Python library:

import socid_extractor, requests
r = requests.get(‘https://www.patreon.com/annetlovart’)
socid_extractor.extract(r.text)
{‘patreon_id’: ‘33913189’, ‘patreon_username’: ‘annetlovart’, ‘fullname’: ‘Annet Lovart’, ‘links’: “[‘https://www.facebook.com/322598031832479’, ‘https://www.instagram.com/annet_lovart’, ‘https://twitter.com/annet_lovart’, ‘https://youtube.com/channel/UClDg4ntlOW_1j73zqSJxHHQ’]”}

Installation

$ pip3 install socid-extractor

The latest development version can be installed directly from GitHub:

$ pip3 install -U git+https://github.com/soxoj/socid_extractor.git

Sites and Methods

More than 100 methods for different sites and platforms are supported!

* Google (all documents pages, maps contributions), cookies required
* Yandex (disk, albums, znatoki, music, realty, collections), cookies required to prevent captcha blocks
* Mail.ru (my.mail.ru user mainpage, photo, video, games, communities)
* Facebook (user & group pages)
* VK.com (user page)
* OK.ru (user page)
* Instagram
* Reddit
* Medium
* Flickr
* Tumblr
* TikTok
* GitHub

…and many others.

You can also check tests file for data examples, schemes file to expore all the methods.

When it may be useful

* Getting all available info by the username or/and account UID. Examples: Week in OSINT, OSINTCurious
* Users tracking, checking that the account was previously known (by ID) even if all public info has changed. Examples: Aware Online
* Searching by commonly used cross-service UIDs (GAIA ID, Facebook UID, Yandex Public ID, etc.)
* DB leaks of forums and platforms in SQL format
* Indexed links that contain target profile ID

* Searching for tracking data by comparison with other IDs – how it works, how can it be used.
* Law enforcement online requests

Testing

python3 -m pytest tests/test_e2e.py -n 10 -k ‘not cookies’ -m ‘not github_failed and not rate_limited’
Download

___________________________
@hacking_Attack
@Hacking_Video

CLV Wallet Bug Bounty Campaign

Reward Pool of 100,000 CLV!Continue reading on Medium »
Read more...

Vaas - Verdict-as-a-Service SDKs: Analyze Files For Malicious Content
http://www.kitploit.com/2022/05/vaas-verdict-as-service-sdks-analyze.html

___________________________
@hacking_Attack
@Hacking_Video

Verdict-as-a-Service (VaaS) is a service that provides a platform for scanning files for malware and other threats. It allows easy integration in your application. With a few lines of code, you can start scanning files for malware. ATTENTION: All SDKs are currently prototypes and under heavy construction! Integration of Malware Detection Easily integrate malware detection (https://www.kitploit.com/search/label/Malware%20Detection) into any kind of application, service or platform. Create a command line (https://www.kitploit.com/search/label/Command%20Line) scanner to find malware with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples/gscan) 

___________________________
@hacking_Attack
@Hacking_Video

Create a KDE Dolphin plugin to scan for malicious content with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples/kde_dolphin)

___________________________
@hacking_Attack
@Hacking_Video

Create a WordPress plugin that scans all file uploads for malware with a few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/php/examples/wordpress) 

___________________________
@hacking_Attack
@Hacking_Video

Create a Discord bot that scans and deletes malicious files uploaded on your Discord server with few lines of code: Example (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript/examples/discordbot)

___________________________
@hacking_Attack
@Hacking_Video

I'm interested in VaaS You need credentials (https://www.kitploit.com/search/label/Credentials) to use the service in your application. If you are interested in using VaaS, please contact us (mailto:oem@gdata.de). SDKs At the moment SDKs for Rust (https://github.com/GDATASoftwareAG/vaas/blob/main/rust), Java (https://github.com/GDATASoftwareAG/vaas/blob/main/java), Typescript (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript) and PHP (https://github.com/GDATASoftwareAG/vaas/blob/main/php) are available. Functionality Rust Java PHP TypeScript Check SHA256 ✅ ✅ ✅ ✅ Check SHA256 list ✅ ❌ ❌ ✅ Check file ✅ ✅ ✅ ✅ Check file list ✅ ❌ ❌ ✅ Documentation Documentation for the SDKs is available in the corresponding SDK folder. Rust SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/rust), Examples (https://github.com/GDATASoftwareAG/vaas/blob/main/rust/examples) Java SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/java) PHP SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/php), Examples (https://github.com/GDATASoftwareAG/vaas/blob/main/php/examples) TypeScript SDK (https://github.com/GDATASoftwareAG/vaas/blob/main/typescript) Planned SDKs The following SDKs are planned but not yet available: Swift and Perl. If you need SDKs for other languages, please create an issue or contribute an SDK with a pull request.

Download Vaas (https://github.com/GDATASoftwareAG/vaas)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You’ve Been Hacked!

https://cdn-images-1.medium.com/max/722/1*2tbGk37GbhiVMvHCaiZItA.png
Something you think will never happen to you, or so I foolishly assumed. I was prepared, even though I never expected it to happen. My…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video