Kali Linux Tutorials
Slyther : AWS Security Tool

Slyther is AWS Security tool to check read/write/delete access for S3 buckets.

Requirements

aws-cli

Installation

pip3 install -r requirements.txt

Usage example

python3 slyther.py -b flaws.cloud
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to juice jack your own device for research?

I’ve been searching around and I haven’t really found much on juice jacking on the clear web, I’ve seen stuff about how it works and how to protect yourself against it but I’ve been looking at juice jacking one of my devices to see how dangerous it is. If anyone has any docs or can help me that would be great!

submitted by /u/0x6C2b709e58d7280b82
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
دورة استهداف الاجهزة للمبتدئين نجرات من الالف الى الياء 2022

https://external-preview.redd.it/Lr50CyC7T-dHBJGLJrxagvXgWX5gjspas2EIPlhyZKQ.jpg?width=320&crop=smart&auto=webp&s=c03446a157657fff9debcf4fe796d4292467ebbb submitted by /u/egybeest
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ranges of ips from hosted servers?

Hi, i wanted to ask about ips coming from hosted servers.I started one month ago and i've learned a lot of things, but i still dont know how to discover a range of ips from the original domain im trying to scan, not his hosting company.

I mean, if i run a nslookup, that brings me to a linode ip, and a whois search, that gives me to a big range of ips located far from the official ofices, how should i try to get those real ips?

I know about email headers that are supposed to show a real ip, but not ranges of ips.

Excuse my english, i know writing is not my strong suit, and my question too, i dont even know if i made that clear.

submitted by /u/Feeling_Beautiful_85
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for Cloud Mail Service for Malware Delivery

First off: I am based in the UK. I am looking to set up a demo attack to show off to people. The assets being targeted are my assets. Therefore this is legal.

I have a payload ready to deploy in the form of a word doc that executes macros to drop malware. I have the victim account set up using O365 to test MDFO365. I want to send the payload to the, account, I don’t want another E3 license. What cloud services can I used to deliver the payload? Would like to keep on the good side of ToS. Is there a specific service for this. Or is it just the wild west? Just use protonmail?

submitted by /u/melatone1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Apartment Gate

I’m moving into my first apartment next week and decided not to put my fiancé on the lease (long story) however she will be staying with me and because she’s not on the lease I am only being given one garage opening fob. Does anyone know of a good tool to capture and replicate the signal my fob gives off so we can have a 2nd garage opener? The fob is not like a normal garage door opener. There is a little square dish above the garage door and it detects when this fob is in range/line of site. Any suggestions are welcome

submitted by /u/nolimitzack
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create fake zip file listening to password?

Hi everyone, so I have a zip file which is encrypted with password, but there's a windows program which is able to access the zip file. I think the password is being saved inside the binary of the program. Is there a way to create a fake zip file which could record the password which is being tried, so that I could know the password that the program used?

submitted by /u/AltruisticMaize656
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
which site/app gives you phishing link for free?

My friend recently pranked me through a call and he recorded the conversation, the recording is embarrassing and he also showed it to other fellow friends , so I'm thinking of doing something similar , so for that I'll be needing a phishing link .....

submitted by /u/nutspee
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–43798 Grafana | Vulnerabilidade de leitura arbitrária não autorizada de arquivos
https://medium.com/@luisfelipe146_/cve-2021-43798-grafana-vulnerabilidade-de-leitura-arbitr%C3%A1ria-n%C3%A3o-autorizada-de-arquivos-2bfd6ee9dfcb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Versão 8.3.0Continue reading on Medium » (https://medium.com/@luisfelipe146_/cve-2021-43798-grafana-vulnerabilidade-de-leitura-arbitr%C3%A1ria-n%C3%A3o-autorizada-de-arquivos-2bfd6ee9dfcb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–43798 Grafana | Vulnerabilidade de leitura arbitrária não autorizada de arquivos

Versão 8.3.0Continue reading on Medium »
Read more...

Alan c2 Framework v7.0: Hyper-Pivoting
https://www.reddit.com/r/redteamsec/comments/utzfop/alan_c2_framework_v70_hyperpivoting/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (https://antonioparata.blogspot.com/2022/05/alan-c2-framework-v70-hyper-pivoting.html) [comments] (https://www.reddit.com/r/redteamsec/comments/utzfop/alan_c2_framework_v70_hyperpivoting/)

Wormhole Uninitialized Proxy Bugfix Review
https://medium.com/immunefi/wormhole-uninitialized-proxy-bugfix-review-90250c41a43a?source=rss------bug_bounty-5

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/wormhole-uninitialized-proxy-bugfix-review-90250c41a43a?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Authentication Is Static, Yet Attackers Are Dynamic: Filling the Critical Gap

To succeed against dynamic cybercriminals, organizations must go multiple steps further and build a learning system that evolves over time to keep up with attacker tactics.

Dark Reading: Attacks/Breaches
Microsoft Rushes a Fix After May Patch Tuesday Breaks Authentication

Two of Microsoft's Patch Tuesday updates need a do-over after causing certificate-based authentication errors.

Hacking on Medium
Wifi Pentest Aircrack-ng Kullanımı 101

https://cdn-images-1.medium.com/max/600/1*3ml9Dv9iOPGZAyHrPcBPoA.png
Aircrack-ng, Kali Linux’ta yüklenmiş olarak gelen ve wifi ağ güvenliği , bilgisayar korsanlığı ve siber güvenlik uzmanları için kullanılan…

Continue reading on Medium »