python hash table Data Structures & Algorithms Python3
Code :Continue reading on Medium »
Read more...
Code :Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Poro : Scan Publicly Accessible Assets On Your AWS Cloud Environment
Poro is a tool to Scan for publicly accessible assets on your AWS environment
Services covered by this tool:
* AWS ELB
* API Gateway
* S3 Buckets
* RDS Databases
* EC2 instances
* Redshift Databases
Poro also check if a tag you specify is applied to identified public resources using –tag-key and –tag-value arguments.
Prequisites
* AWS account with Read Only Access to services listed above.
* Python 3.X
* requests>=2.22.0
* boto3>=1.20
* botocore>= 1.20
* enlighten>=1
Usage
* Clone this repository
* Configure your envionment with active credentials -> aws configure [sso]
* Run python poro.py [-h] [–profile PROFILE] [–export FILE_NAME] [–verbose] [–tag-key KEY] [–tag-value VALUE]
optional arguments:
-h, –help show this help message and exit
–profile PROFILE Specify the aws profile (default is default)
–export FILE_NAME Specify the file name if you want to expport the results
–verbose, -v
–tag-key KEY Specify the tag key that you want to check if it exists in public resources
–tag-value VALUE Specify the tag value that you want to check if it exists in public resources
Poro prints the scanning results at the end of it’s execution in a json file if no export option is not specified.
Download
___________________________
@hacking_Attack
@Hacking_Video
Poro : Scan Publicly Accessible Assets On Your AWS Cloud Environment
Poro is a tool to Scan for publicly accessible assets on your AWS environment
Services covered by this tool:
* AWS ELB
* API Gateway
* S3 Buckets
* RDS Databases
* EC2 instances
* Redshift Databases
Poro also check if a tag you specify is applied to identified public resources using –tag-key and –tag-value arguments.
Prequisites
* AWS account with Read Only Access to services listed above.
* Python 3.X
* requests>=2.22.0
* boto3>=1.20
* botocore>= 1.20
* enlighten>=1
Usage
* Clone this repository
* Configure your envionment with active credentials -> aws configure [sso]
* Run python poro.py [-h] [–profile PROFILE] [–export FILE_NAME] [–verbose] [–tag-key KEY] [–tag-value VALUE]
optional arguments:
-h, –help show this help message and exit
–profile PROFILE Specify the aws profile (default is default)
–export FILE_NAME Specify the file name if you want to expport the results
–verbose, -v
–tag-key KEY Specify the tag key that you want to check if it exists in public resources
–tag-value VALUE Specify the tag value that you want to check if it exists in public resources
Poro prints the scanning results at the end of it’s execution in a json file if no export option is not specified.
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Poro : Scan Publicly Accessible Assets On Your AWS Cloud Environment
Poro is a tool to Scan for publicly accessible assets on your AWS environment. Poro also check if a tag you specify is applied to identified.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
LDAP shell : AD ACL Abuse
LDAP shell repository contains a small tool inherited from ldap_shell.
Installation
These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to go:
git clone https://github.com/z-Riocool/ldap_shell.git
cd ldap_shell
python3 setup.py install
Usage
Connection options
ldap_shell domain.local/user:password
ldap_shell domain.local/user:password -dc-ip 192.168.1.2
ldap_shell domain.local/user -hashes aad3b435b51404eeaad3b435b51404ee:aad3b435b51404eeaad3b435b51404e1
export KRB5CCNAME=/home/user/ticket.ccache
ldap_shell -k -no-pass domain.local/user
Functionality
Get Info
dump – Dumps the domain.
search query [attributes,] – Search users and groups by name, distinguishedName and sAMAccountName.
get_user_groups user – Retrieves all groups this user is a member of.
get_group_users group – Retrieves all members of a group.
get_laps_password computer – Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
get_maq user – Get ms-DS-MachineAccountQuota for current user.
Abuse ACL
add_user_to_group user group – Adds a user to a group.
del_user_from_group user group – Delete a user from a group.
change_password user [password] – Attempt to change a given user’s password. Requires LDAPS.
set_rbcd target grantee – Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
clear_rbcd target – Clear the resource based constrained delegation configuration information.
set_dcsync user – If you have write access to the domain object, assign the DS-Replication right to the selected user.
del_dcsync user – Delete DS-Replication right to the selected user.
set_genericall target grantee – Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
set_owner target grantee – Abuse WriteOwner privilege.
dacl_modify – Modify ACE (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified.
set_dontreqpreauth user true/false – Set the don’t require pre-authentication flag to true or false.
get_ntlm user – Shadow Credentials method to abuse GenericAll, GenericWrite and AllExtendedRights privilege
write_gpo_dacl user gpoSID – Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
Misc
add_computer computer [password] – Adds a new computer to the domain with the specified password. Requires LDAPS.
del_computer computer – Remove a new computer from the domain.
add_user new_user [parent] – Creates a new user.
disable_account user – Disable the user’s account.
enable_account user – Enable the user’s account.
exit – Terminates this session.
Download
___________________________
@hacking_Attack
@Hacking_Video
LDAP shell : AD ACL Abuse
LDAP shell repository contains a small tool inherited from ldap_shell.
Installation
These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to go:
git clone https://github.com/z-Riocool/ldap_shell.git
cd ldap_shell
python3 setup.py install
Usage
Connection options
ldap_shell domain.local/user:password
ldap_shell domain.local/user:password -dc-ip 192.168.1.2
ldap_shell domain.local/user -hashes aad3b435b51404eeaad3b435b51404ee:aad3b435b51404eeaad3b435b51404e1
export KRB5CCNAME=/home/user/ticket.ccache
ldap_shell -k -no-pass domain.local/user
Functionality
Get Info
dump – Dumps the domain.
search query [attributes,] – Search users and groups by name, distinguishedName and sAMAccountName.
get_user_groups user – Retrieves all groups this user is a member of.
get_group_users group – Retrieves all members of a group.
get_laps_password computer – Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
get_maq user – Get ms-DS-MachineAccountQuota for current user.
Abuse ACL
add_user_to_group user group – Adds a user to a group.
del_user_from_group user group – Delete a user from a group.
change_password user [password] – Attempt to change a given user’s password. Requires LDAPS.
set_rbcd target grantee – Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
clear_rbcd target – Clear the resource based constrained delegation configuration information.
set_dcsync user – If you have write access to the domain object, assign the DS-Replication right to the selected user.
del_dcsync user – Delete DS-Replication right to the selected user.
set_genericall target grantee – Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
set_owner target grantee – Abuse WriteOwner privilege.
dacl_modify – Modify ACE (add/del). Usage: target, grantee, add/del and mask name or ObjectType for ACE modified.
set_dontreqpreauth user true/false – Set the don’t require pre-authentication flag to true or false.
get_ntlm user – Shadow Credentials method to abuse GenericAll, GenericWrite and AllExtendedRights privilege
write_gpo_dacl user gpoSID – Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
Misc
add_computer computer [password] – Adds a new computer to the domain with the specified password. Requires LDAPS.
del_computer computer – Remove a new computer from the domain.
add_user new_user [parent] – Creates a new user.
disable_account user – Disable the user’s account.
enable_account user – Enable the user’s account.
exit – Terminates this session.
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
LDAP shell : AD ACL Abuse !!! Kali Linux Tutorials 2022
LDAP shell repository contains a small tool inherited from ldap_shell. These tools are only compatible with Python 3.5+.
https://a.thumbs.redditmedia.com/8FsELy9VwQLDlNfh5PBDtArBMoySoFxx8AwaBbksvD4.jpg CVE-2021-3393 is one of the postgresql vulnerability. This is vulnerability of information leak.
As a matter of fact, using internally vulnerable apps may not be a big problem.
However, This IP open 5432 port outside. These IPs are at risk of being targeted by hackers.
https://preview.redd.it/nzrg4bp2tx191.png?width=1493&format=png&auto=webp&s=f2aa2b7607fb1390d20b1c010e01c4c23aaee899
https://preview.redd.it/htluxjbotx191.png?width=1342&format=png&auto=webp&s=4538062bc4d7b95aa7924ff297f8ebb6d20a729f
submitted by /u/kevin02561
[link] [comments]
As a matter of fact, using internally vulnerable apps may not be a big problem.
However, This IP open 5432 port outside. These IPs are at risk of being targeted by hackers.
https://preview.redd.it/nzrg4bp2tx191.png?width=1493&format=png&auto=webp&s=f2aa2b7607fb1390d20b1c010e01c4c23aaee899
https://preview.redd.it/htluxjbotx191.png?width=1342&format=png&auto=webp&s=4538062bc4d7b95aa7924ff297f8ebb6d20a729f
submitted by /u/kevin02561
[link] [comments]
hacking: security in practice
Favorite GitHub projects?
Any GitHub projects you're a fan of? Any self promotion?
Here's a couple of my favorites.
https://github.com/tmux/tmux/wiki
Terminal multiplexing
https://github.com/AlessandroZ/LaZagne
Interesting password puller.
I am not associated with either of these projects.
submitted by /u/zanep0
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Favorite GitHub projects?
Any GitHub projects you're a fan of? Any self promotion?
Here's a couple of my favorites.
https://github.com/tmux/tmux/wiki
Terminal multiplexing
https://github.com/AlessandroZ/LaZagne
Interesting password puller.
I am not associated with either of these projects.
submitted by /u/zanep0
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Favorite GitHub projects?
Any GitHub projects you're a fan of? Any self promotion? Here's a couple of my favorites. https://github.com/tmux/tmux/wiki Terminal...
hacking: security in practice
How does one obtain an MD5 hash from a computer using a USB stick?
I remember a couple years ago there was a tool called mastercontrol.exe (LaZagnaProject) and needed admin rights to run the program. It was a tool that would snatch all the saved passwords on the computer with the username, password and URL. Along with it would also snatch the hashes of the local users passwords on that computer. Is there any other tool like this? It was meant for password recovery. I think the saved passwords are usually cached somewhere and the program would snatch the SAM file as well.
submitted by /u/geegol
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How does one obtain an MD5 hash from a computer using a USB stick?
I remember a couple years ago there was a tool called mastercontrol.exe (LaZagnaProject) and needed admin rights to run the program. It was a tool that would snatch all the saved passwords on the computer with the username, password and URL. Along with it would also snatch the hashes of the local users passwords on that computer. Is there any other tool like this? It was meant for password recovery. I think the saved passwords are usually cached somewhere and the program would snatch the SAM file as well.
submitted by /u/geegol
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How does one obtain an MD5 hash from a computer using a USB stick?
I remember a couple years ago there was a tool called mastercontrol.exe (LaZagnaProject). It was a tool that would snatch all the saved passwords...
hacking: security in practice
If a public key is prime*prime and a private key is those primes why is it hard to crack?
This is probably a pretty dumb question, but if you just need to know the primes why can’t you test a whole list of known primes? It still might take a while but it seems a whole lot quicker than factoring everything.. I’d also imagine you could index your primes to purge everything that would be way out of range to avoid wasting cycles.
Why is this idea wrong exactly?
submitted by /u/GuyInTheYonder
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
If a public key is prime*prime and a private key is those primes why is it hard to crack?
This is probably a pretty dumb question, but if you just need to know the primes why can’t you test a whole list of known primes? It still might take a while but it seems a whole lot quicker than factoring everything.. I’d also imagine you could index your primes to purge everything that would be way out of range to avoid wasting cycles.
Why is this idea wrong exactly?
submitted by /u/GuyInTheYonder
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
If a public key is prime*prime and a private key is those primes...
This is probably a pretty dumb question, but if you just need to know the primes why can’t you test a whole list of known primes? It still might...
hacking: security in practice
Is hacking on a virtual machine still hacking?
So basically at school we have out teacher that is teaching us about "hacking" of course ethics and all, he told us about web security and held Cisco courses about the ways people can use hacking to dos, Ddos or just enter your computer.
With that said, I would like to enter my school's website, without doing anything of course, I just want to show some possible weaknesses of the site to my teacher, because he's also the sysadmin.
I don't think i will be using Windows for that lol, and I only have kali Linux on a virtual machine, so the question is, can i still do it? Is there anything that i miss by virtualizing kali?
And also, what are your suggestions on how to do it? Because this would be a summer project of mine, to just try and learn a bit about hacking to see if i like it, even though it would be just with thise premade tools and nothing on my own, which i dislike since i would want to learn on my own, but since i don't have lots of time I'll have to do it with the tools that kali offers
submitted by /u/s-cardi
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is hacking on a virtual machine still hacking?
So basically at school we have out teacher that is teaching us about "hacking" of course ethics and all, he told us about web security and held Cisco courses about the ways people can use hacking to dos, Ddos or just enter your computer.
With that said, I would like to enter my school's website, without doing anything of course, I just want to show some possible weaknesses of the site to my teacher, because he's also the sysadmin.
I don't think i will be using Windows for that lol, and I only have kali Linux on a virtual machine, so the question is, can i still do it? Is there anything that i miss by virtualizing kali?
And also, what are your suggestions on how to do it? Because this would be a summer project of mine, to just try and learn a bit about hacking to see if i like it, even though it would be just with thise premade tools and nothing on my own, which i dislike since i would want to learn on my own, but since i don't have lots of time I'll have to do it with the tools that kali offers
submitted by /u/s-cardi
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is hacking on a virtual machine still hacking?
So basically at school we have out teacher that is teaching us about "hacking" of course ethics and all, he told us about web security and held...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
LinkedIn bug bounty program goes public with rewards of up to $18k
LinkedIn bug bounty program goes public with rewards of up to $18kPost Views: 10
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
LinkedIn has launched a public bug bounty program to replace the invite-only program that has been running since 2014.
Critical security vulnerabilities discovered on the business-oriented social media platform will net researchers bounties ranging from $5,000 up to $15,000, while high severity issues will command rewards of between $2,500 and $5,000, and medium severity flaws will net bug hunters between $250 and $2,500.
The program, which is hosted by HackerOne, invites hackers to probe the main web domain, LinkedIn.com, for security flaws, as well as the LinkedIn API plus Android and iOS mobile apps. Going publicIn scope on the Microsoft-owned platform are “implementation and design issues that substantially impact LinkedIn members’ data or LinkedIn infrastructure” such as cross-site scripting (XSS), cross-site request forgery (CSRF), SQL injection, authentication, access control, and server-side code execution vulnerabilities.
“Our security team strives to provide a safe and secure experience for our 830 million members and customers by quickly addressing security vulnerabilities, constantly improving our defenses, and safeguarding our product development process,” said LinkedIn in a blog post announcing the news.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png The private program had since its launch “awarded more than $250,000 across nearly 500 submissions covering the LinkedIn member platform and mobile applications,” it added.
“Because of the program’s success, we have decided to make the program public and expand participation to anyone wanting to report potential security vulnerabilities.”
LinkedIn, which connects business professionals with each other and job opportunities, was the source of two enormous data leaks in 2021, affected 500 million and 700 million users respectively, but these were attributed to scraping of public web pages rather than cyber-attacks.
See Also: Kali Linux 2022.2 released with new tools, terminal tweaks and more See Also: Recon Tool: Dorks collections list
However, the Silicon Valley company was apportioned blame, both by security experts and members of the US Congress, over a 2012 hack that it initially thought affected 6.4 million user passwords, but in 2016 transpired to comprise emails and passwords belonging to 117 million users. Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Find hidden and encrypted secrets from any website Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/vmware-cloudnerve-90x90.jpg New ‘Cheers’ Linux ransomware targets VMware ESXi servers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/mozilla-releases-fixes-for-firefox-thunderbird-vulnerabilities-exploited-during-pwn2own-vancouver-2022-hacking-contest-90x90.jpg Mozilla fixes Firefox, Thunderbird zero-days exploited at Pwn2Own2 days ago
* h[...]
___________________________
@hacking_Attack
@Hacking_Video
LinkedIn bug bounty program goes public with rewards of up to $18k
LinkedIn bug bounty program goes public with rewards of up to $18kPost Views: 10
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
LinkedIn has launched a public bug bounty program to replace the invite-only program that has been running since 2014.
Critical security vulnerabilities discovered on the business-oriented social media platform will net researchers bounties ranging from $5,000 up to $15,000, while high severity issues will command rewards of between $2,500 and $5,000, and medium severity flaws will net bug hunters between $250 and $2,500.
The program, which is hosted by HackerOne, invites hackers to probe the main web domain, LinkedIn.com, for security flaws, as well as the LinkedIn API plus Android and iOS mobile apps. Going publicIn scope on the Microsoft-owned platform are “implementation and design issues that substantially impact LinkedIn members’ data or LinkedIn infrastructure” such as cross-site scripting (XSS), cross-site request forgery (CSRF), SQL injection, authentication, access control, and server-side code execution vulnerabilities.
“Our security team strives to provide a safe and secure experience for our 830 million members and customers by quickly addressing security vulnerabilities, constantly improving our defenses, and safeguarding our product development process,” said LinkedIn in a blog post announcing the news.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png The private program had since its launch “awarded more than $250,000 across nearly 500 submissions covering the LinkedIn member platform and mobile applications,” it added.
“Because of the program’s success, we have decided to make the program public and expand participation to anyone wanting to report potential security vulnerabilities.”
LinkedIn, which connects business professionals with each other and job opportunities, was the source of two enormous data leaks in 2021, affected 500 million and 700 million users respectively, but these were attributed to scraping of public web pages rather than cyber-attacks.
See Also: Kali Linux 2022.2 released with new tools, terminal tweaks and more See Also: Recon Tool: Dorks collections list
However, the Silicon Valley company was apportioned blame, both by security experts and members of the US Congress, over a 2012 hack that it initially thought affected 6.4 million user passwords, but in 2016 transpired to comprise emails and passwords belonging to 117 million users. Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Write up: Find hidden and encrypted secrets from any website Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/vmware-cloudnerve-90x90.jpg New ‘Cheers’ Linux ransomware targets VMware ESXi servers1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/mozilla-releases-fixes-for-firefox-thunderbird-vulnerabilities-exploited-during-pwn2own-vancouver-2022-hacking-contest-90x90.jpg Mozilla fixes Firefox, Thunderbird zero-days exploited at Pwn2Own2 days ago
* h[...]
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
LinkedIn bug bounty program goes public with rewards of up to $18k | Black Hat Ethical Hacking
LinkedIn has launched a public bug bounty program to replace the invite-only program that has been running since 2014.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking LinkedIn bug bounty program goes public with rewards of up to $18k LinkedIn bug bounty program goes public with rewards of up to $18kPost Views: 10 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon…
ttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/4x3_1600x1200_highres-Word_Snake_News-90x90.jpg Snake Keylogger Spreads Through Malicious PDFs3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/FTYM512XsAArcFs-90x90.jpg Malicious PyPI package opens backdoors on Windows, Linux, and Macs4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/WordPress_headpic-90x90.jpg Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/3e41-article-210226-vmware-body-text-90x90.jpg April VMware Bugs Abused to Deliver Mirai Malware, Exploit Log4Shell1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/iphone-low-power-hacking_068D000001681697-90x90.jpg iPhones Vulnerable to Attack Even When Turned Off1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-90x90.jpg Apple emergency update fixes zero-day used to hack Macs, Watches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/banner-2022.2-release-90x90.jpg Kali Linux 2022.2 released with new tools, terminal tweaks and more2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Discord-hack-90x90.png Malware Builder Leverages Discord Webhooks2 weeks ago
The post LinkedIn bug bounty program goes public with rewards of up to $18k first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/FTYM512XsAArcFs-90x90.jpg Malicious PyPI package opens backdoors on Windows, Linux, and Macs4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/WordPress_headpic-90x90.jpg Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/3e41-article-210226-vmware-body-text-90x90.jpg April VMware Bugs Abused to Deliver Mirai Malware, Exploit Log4Shell1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/iphone-low-power-hacking_068D000001681697-90x90.jpg iPhones Vulnerable to Attack Even When Turned Off1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/ezgif.com-gif-maker-90x90.jpg Apple emergency update fixes zero-day used to hack Macs, Watches1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/banner-2022.2-release-90x90.jpg Kali Linux 2022.2 released with new tools, terminal tweaks and more2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Discord-hack-90x90.png Malware Builder Leverages Discord Webhooks2 weeks ago
The post LinkedIn bug bounty program goes public with rewards of up to $18k first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Everything you need to know about NGROK
https://cdn-images-1.medium.com/max/1280/1*xnPMl3We9qaGPM06oBLHnA.png
WHAT IS NGROK?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Everything you need to know about NGROK
https://cdn-images-1.medium.com/max/1280/1*xnPMl3We9qaGPM06oBLHnA.png
WHAT IS NGROK?
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Everything you need to know about NGROK
WHAT IS NGROK?
Deep Web
are there any 'for-hire' darkweb page developers?
are there any legit/reputable darkweb developers that are for hire? Looking to create an onion page, wanting to hire someone but wary about what precautions are needed to prevent issues once its up and running. Anyone for-hire?!
submitted by /u/Urgent_NonEmergency
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
are there any 'for-hire' darkweb page developers?
are there any legit/reputable darkweb developers that are for hire? Looking to create an onion page, wanting to hire someone but wary about what precautions are needed to prevent issues once its up and running. Anyone for-hire?!
submitted by /u/Urgent_NonEmergency
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
___________________________
@hacking_Attack
@Hacking_Video
reddit
are there any 'for-hire' darkweb page developers?
are there any legit/reputable darkweb developers that are for hire? Looking to create an onion page, wanting to hire someone but wary about what...
hacking: security in practice
DNS phone
recently i found out that you can change the dns address in your phones settings to for example adguads.com making it so u dont get any add anymore. my question is if any of those alternative dns servers are safe and/or trustworthy. Does anyone have any recommendations or should i just stick to the dns of my isp? i will provide a list of alternative dns providersdns providers
submitted by /u/shadowwizzardori
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
DNS phone
recently i found out that you can change the dns address in your phones settings to for example adguads.com making it so u dont get any add anymore. my question is if any of those alternative dns servers are safe and/or trustworthy. Does anyone have any recommendations or should i just stick to the dns of my isp? i will provide a list of alternative dns providersdns providers
submitted by /u/shadowwizzardori
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
DNS phone
recently i found out that you can change the dns address in your phones settings to for example adguads.com making it so u dont get any add...
hacking: security in practice
Wifi Probe Requests
So for a few years now it is standard that mobile phones randomize their Mac Adress when sending probe requests so it’s harder to track them. I could not find an example requests to look through but my question is: does a phone send all their known SSIDs in one request with their (random) Mac ? And , how random is this MAC address ? Is it more like a pool of 100 addresses the phone can chose from or are they dynamically generated ? I always thought Mac addresses should be pretty unique globally.
submitted by /u/AugenCrepes
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Wifi Probe Requests
So for a few years now it is standard that mobile phones randomize their Mac Adress when sending probe requests so it’s harder to track them. I could not find an example requests to look through but my question is: does a phone send all their known SSIDs in one request with their (random) Mac ? And , how random is this MAC address ? Is it more like a pool of 100 addresses the phone can chose from or are they dynamically generated ? I always thought Mac addresses should be pretty unique globally.
submitted by /u/AugenCrepes
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Wifi Probe Requests
So for a few years now it is standard that mobile phones randomize their Mac Adress when sending probe requests so it’s harder to track them. I...
hacking: security in practice
How to do the ping command in CMD?
I am testing some networks, but I just need the Ping command, now.. I am not really experienced with CMD. How do you do it tho? I am not sure but anyone more professional to explain how do you do it. No, I am not testing my own network but one of a place that called me to well yeah test It out. So yeah.. help
submitted by /u/Inner_Information_26
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
How to do the ping command in CMD?
I am testing some networks, but I just need the Ping command, now.. I am not really experienced with CMD. How do you do it tho? I am not sure but anyone more professional to explain how do you do it. No, I am not testing my own network but one of a place that called me to well yeah test It out. So yeah.. help
submitted by /u/Inner_Information_26
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
How to do the ping command in CMD?
I am testing some networks, but I just need the Ping command, now.. I am not really experienced with CMD. How do you do it tho? I am not sure but...
Hello folks, I’m a Python programmer and willing to learn penetration testing, are there any sources that can help me get started (Books, courses on Udemy, etc..)?
https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/
Thanks in advance! Edit: Linux is my main OS, no desktop environment installed, just an X server and a window manager because all I do is programming using Vim in the terminal emulator, also I have a bit of knowledge on how to script using bash. submitted by /u/port9050 (https://www.reddit.com/user/port9050)
[link] (https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/
Thanks in advance! Edit: Linux is my main OS, no desktop environment installed, just an X server and a window manager because all I do is programming using Vim in the terminal emulator, also I have a bit of knowledge on how to script using bash. submitted by /u/port9050 (https://www.reddit.com/user/port9050)
[link] (https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/uyulni/hello_folks_im_a_python_programmer_and_willing_to/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Hello folks, I’m a Python programmer and willing to learn...
Thanks in advance!