hacking: security in practice
Is there a danger oh hackers making computers go on fire by overvolting hardware?
I read some meme about how hackers can make .ex robots choke you, so that made me wonder if hackers could actually cause physical harm like in movies and games.
The most realistic scenario I came up with is if someone made a computer turn on by itself at the middle of the night when no one is there to stop it, to run some stress program that would make the cpu and gpu work at 100% and to overvolt them, which may(?) cause a fire, which can then further do real damage.
Is something like that possible and were there ever such cases?
submitted by /u/jakers036
[link] [comments]
Is there a danger oh hackers making computers go on fire by overvolting hardware?
I read some meme about how hackers can make .ex robots choke you, so that made me wonder if hackers could actually cause physical harm like in movies and games.
The most realistic scenario I came up with is if someone made a computer turn on by itself at the middle of the night when no one is there to stop it, to run some stress program that would make the cpu and gpu work at 100% and to overvolt them, which may(?) cause a fire, which can then further do real damage.
Is something like that possible and were there ever such cases?
submitted by /u/jakers036
[link] [comments]
reddit
Is there a danger oh hackers making computers go on fire by...
I read some meme about how hackers can make .ex robots choke you, so that made me wonder if hackers could actually cause physical harm like in...
Cypheroth - Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound's Neo4j Backend And Saves Output To Spreadsheets
http://www.kitploit.com/2021/04/cypheroth-automated-extensible-toolset.html
http://www.kitploit.com/2021/04/cypheroth-automated-extensible-toolset.html
Automated, extensible toolset (https://www.kitploit.com/search/label/Toolset) that runs cypher (https://www.kitploit.com/search/label/Cypher) queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
Description
This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same queries through the Neo4j web interface on multiple assessments and figured there must be an easier way. ο The list of cypher queries to run is fully extensible. The formatting example below shows how to add your own. Please share any additional useful queries so I can add them to this project! Fully tested to be working in Bash on Linux, macOS, and Windows
Demo (https://github.com/seajaysec/cypheroth/blob/master/img/demo_v1_4.svg)
Prereqs
The cypher-shell command comes bundled with Neo4j, and is required for this script to function If Neo4j is installed and cypher-shell is not found, you may have an outdated version of Neo4j The latest version can always be found at this location (https://neo4j.com/download-center/) On Kali, upgrade to the latest version using Neo4j's Debian repository (https://debian.neo4j.org/) Optional: If the ssconvert command is present, the script will combine all .csv output to sheets within a .xls file Install the gnumeric toolset with apt or brew to gain access (https://www.kitploit.com/search/label/Access) to ssconvert On Windows (https://www.kitploit.com/search/label/Windows) we recommend using WSL to run this script, while the neo4j database runs on Windows. You will just need to install the cypher-shell package in WSL (Linux).
Usage
Flags: -u Neo4J Username (Required)
-p Neo4J Password (Required)
-d Fully Qualified Domain Name (Required) (Case Sensitive)
-a Bolt address (Optional) (Default: localhost:7687)
-t Query Timeout (Optional) (Default: 30s)
-v Verbose mode (Optional) (Default:FALSE)
-h Help text and usage example (Optional)
Example with Defaults: ./cypheroth.sh -u neo4j -p BloodHound (https://www.kitploit.com/search/label/BloodHound) -d TESTLAB.LOCAL Example with All Options: ./cypheroth.sh -u neo4j -p hunter2 -d BigTech.corp -a 10.0.0.1:7687 -t 5m -v true Files are added to a subdirectory named after the FQDN.
Cypher Queries
There are nearly 60 queries in the script currently. This is a sample of the information you'll receive: Full User Property List Full Computer Property List Full Domain Property List Full OU Property List Full GPO Property List Full Group Property List Computers with Admins Computers without Admins Kerberoastable users and computers where they are admins To add additional queries, edit the queries array within cypheroth.sh and add a line using the following format: Description;Cypher Query;Output File If adding a query that requires the Domain value to be set, save it as $DOMAIN. Example 1: All Usernames;MATCH (u:User) RETURN u.name;usernames.csv
Example 2: All Domain Admins;MATCH (u:User) MATCH (g:Group {name:'DOMAIN ADMINS@$DOMAIN'}) RETURN u.displayname;domainAdmins.csv
Analyze several domains
If you need to analyze several domains, you can run multiple instances of Cypheroth in parallel with each one working on its domain. You can use the following script for example (10 in parallel). #!/usr/bin/env bash
DOMAINS=(domA.example.net domB.example.net [...])
parallel -j10 --lb ./cypheroth.sh -d {} ::: "${DOMAINS[@]}"
Troubleshooting
If you are running an outdated version of cypher-shell you may receive the following error: DateTime is not supported as a return type in Bolt protocol version 1.
Please make sure driver supports at least protocol version 2.
Driver upgrade is most likely required.
To fix, update Neo4j (https://neo4j.com/download-center/) to the latest version.
Author
Chris Farrell (@seajay (https://twitter.com/seajay))
Acknowledgments
Description
This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same queries through the Neo4j web interface on multiple assessments and figured there must be an easier way. ο The list of cypher queries to run is fully extensible. The formatting example below shows how to add your own. Please share any additional useful queries so I can add them to this project! Fully tested to be working in Bash on Linux, macOS, and Windows
Demo (https://github.com/seajaysec/cypheroth/blob/master/img/demo_v1_4.svg)
Prereqs
The cypher-shell command comes bundled with Neo4j, and is required for this script to function If Neo4j is installed and cypher-shell is not found, you may have an outdated version of Neo4j The latest version can always be found at this location (https://neo4j.com/download-center/) On Kali, upgrade to the latest version using Neo4j's Debian repository (https://debian.neo4j.org/) Optional: If the ssconvert command is present, the script will combine all .csv output to sheets within a .xls file Install the gnumeric toolset with apt or brew to gain access (https://www.kitploit.com/search/label/Access) to ssconvert On Windows (https://www.kitploit.com/search/label/Windows) we recommend using WSL to run this script, while the neo4j database runs on Windows. You will just need to install the cypher-shell package in WSL (Linux).
Usage
Flags: -u Neo4J Username (Required)
-p Neo4J Password (Required)
-d Fully Qualified Domain Name (Required) (Case Sensitive)
-a Bolt address (Optional) (Default: localhost:7687)
-t Query Timeout (Optional) (Default: 30s)
-v Verbose mode (Optional) (Default:FALSE)
-h Help text and usage example (Optional)
Example with Defaults: ./cypheroth.sh -u neo4j -p BloodHound (https://www.kitploit.com/search/label/BloodHound) -d TESTLAB.LOCAL Example with All Options: ./cypheroth.sh -u neo4j -p hunter2 -d BigTech.corp -a 10.0.0.1:7687 -t 5m -v true Files are added to a subdirectory named after the FQDN.
Cypher Queries
There are nearly 60 queries in the script currently. This is a sample of the information you'll receive: Full User Property List Full Computer Property List Full Domain Property List Full OU Property List Full GPO Property List Full Group Property List Computers with Admins Computers without Admins Kerberoastable users and computers where they are admins To add additional queries, edit the queries array within cypheroth.sh and add a line using the following format: Description;Cypher Query;Output File If adding a query that requires the Domain value to be set, save it as $DOMAIN. Example 1: All Usernames;MATCH (u:User) RETURN u.name;usernames.csv
Example 2: All Domain Admins;MATCH (u:User) MATCH (g:Group {name:'DOMAIN ADMINS@$DOMAIN'}) RETURN u.displayname;domainAdmins.csv
Analyze several domains
If you need to analyze several domains, you can run multiple instances of Cypheroth in parallel with each one working on its domain. You can use the following script for example (10 in parallel). #!/usr/bin/env bash
DOMAINS=(domA.example.net domB.example.net [...])
parallel -j10 --lb ./cypheroth.sh -d {} ::: "${DOMAINS[@]}"
Troubleshooting
If you are running an outdated version of cypher-shell you may receive the following error: DateTime is not supported as a return type in Bolt protocol version 1.
Please make sure driver supports at least protocol version 2.
Driver upgrade is most likely required.
To fix, update Neo4j (https://neo4j.com/download-center/) to the latest version.
Author
Chris Farrell (@seajay (https://twitter.com/seajay))
Acknowledgments
This tool wouldn't exist without BloodHound - developed by @_wald0 (https://twitter.com/_wald0), @CptJesus (https://twitter.com/CptJesus), and @harmj0y (https://twitter.com/harmj0y). Shoutout to the Bloodhound Slack (https://bloodhoundgang.herokuapp.com/) #cypher_queries channel for assistance Big ups to @TinkerSec (https://twitter.com/TinkerSec) - the bones of this project were straight up copy/pasted from his procdump script (https://github.com/tinkersec/scratchpad/blob/master/BashScripts/grabDump.sh) ο Many thanks to @awsmhacks (https://twitter.com/awsmhacks), @haus3c (https://twitter.com/haus3c) and @ScoubiMtl (https://twitter.com/ScoubiMtl) for collecting useful cypher queries (here (https://github.com/awsmhacks/awsmBloodhoundCustomQueries), here (https://hausec.com/2019/09/09/bloodhound-cypher-cheatsheet/) and here (https://github.com/Scoubi/BloodhoundAD-Queries/blob/master/BH%20Red2Blue.txt)) Hugely appreciate contributions from @chryzsh (https://twitter.com/chryzsh) and @mubix (https://twitter.com/mubix)!! All of the amazing contributions from @cnotin (https://twitter.com/cnotin)
Download Cypheroth (https://github.com/seajaysec/cypheroth)
Download Cypheroth (https://github.com/seajaysec/cypheroth)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Max : Maximizing BloodHound With A Simple Suite Of Tools
Description New Release: dpat β The BloodHound Domain Password Audit Tool (DPAT) A simple suite of tools: get-info β Pull lists of information from the Neo4j database mark-owned β Mark a list of objects as Owned mark-hvt β Mark a list of objects as High Value Targets query β Run a raw Cypher query and [β¦]
The post Max : Maximizing BloodHound With A Simple Suite Of Tools appeared first on Kali Linux Tutorials.
Max : Maximizing BloodHound With A Simple Suite Of Tools
Description New Release: dpat β The BloodHound Domain Password Audit Tool (DPAT) A simple suite of tools: get-info β Pull lists of information from the Neo4j database mark-owned β Mark a list of objects as Owned mark-hvt β Mark a list of objects as High Value Targets query β Run a raw Cypher query and [β¦]
The post Max : Maximizing BloodHound With A Simple Suite Of Tools appeared first on Kali Linux Tutorials.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
CRYPTO RECOVERY
Cryptocurrencies like Bitcoin and Ethereum have dramatically increase in value, with even a single Bitcoin now worth tens of thousands ofβ¦
Continue reading on Medium Β»
CRYPTO RECOVERY
Cryptocurrencies like Bitcoin and Ethereum have dramatically increase in value, with even a single Bitcoin now worth tens of thousands ofβ¦
Continue reading on Medium Β»
Blockzero Labs Opens $10,000 Bug Bounty for Dropzero Protocol
https://medium.com/bombx/blockzero-labs-opens-10-000-bug-bounty-for-dropzero-protocol-b329fe5140a2?source=rss------bug_bounty-5
https://medium.com/bombx/blockzero-labs-opens-10-000-bug-bounty-for-dropzero-protocol-b329fe5140a2?source=rss------bug_bounty-5
Dropzero by Blockzero Labs is cryptoβs first permissionless protocol for one-stop airdrops distribution.Continue reading on Blockzero Labs Β» (https://medium.com/bombx/blockzero-labs-opens-10-000-bug-bounty-for-dropzero-protocol-b329fe5140a2?source=rss------bug_bounty-5)
KitPloit - PenTest Tools!
Cypheroth - Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound's Neo4j Backend And Saves Output To Spreadsheets
Cypheroth - Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound's Neo4j Backend And Saves Output To Spreadsheets
KitPloit - PenTest & Hacking Tools
Cypheroth - Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound's Neo4j Backend And Saves Output To Spreadsheets
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles
Domain Persistence: DSRM
In this post, we are going to discuss one more Mitre Attack Technique for Tactic ID TA0003 which is used by various of APTs & threat Actors for creating a permanent backdoor in the domain controller. We will check how to use Directory Services Restore Mode (DSRM) for conducting a
The post Domain Persistence: DSRM appeared first on Hacking Articles.
Domain Persistence: DSRM
In this post, we are going to discuss one more Mitre Attack Technique for Tactic ID TA0003 which is used by various of APTs & threat Actors for creating a permanent backdoor in the domain controller. We will check how to use Directory Services Restore Mode (DSRM) for conducting a
The post Domain Persistence: DSRM appeared first on Hacking Articles.
Deep Web
Deep Web Art
Does anyone know of any famous paintings or pieces of art that have gone missing and then have shown up on the deep web? Iβm very interested in art and I was watching a documentary about stealing paintings and was wondering where they go after they get stolen because itβs not like they can just sell the paintings on the open web... that would be way to much attention and they would obviously get caught.
So if anyone knows where they go please let me know Iβm very couriers!!
submitted by /u/Monkeyhank420
[link] [comments]
Deep Web Art
Does anyone know of any famous paintings or pieces of art that have gone missing and then have shown up on the deep web? Iβm very interested in art and I was watching a documentary about stealing paintings and was wondering where they go after they get stolen because itβs not like they can just sell the paintings on the open web... that would be way to much attention and they would obviously get caught.
So if anyone knows where they go please let me know Iβm very couriers!!
submitted by /u/Monkeyhank420
[link] [comments]
reddit
Deep Web Art
Does anyone know of any famous paintings or pieces of art that have gone missing and then have shown up on the deep web? Iβm very interested in...
Deep Web
Chinese 2015 OPM Leak
Referring to the Chinese hack of 2015 on the OPM, I heard it was leaked somewhere on the deep web. I am trying to get this information for a college project, this is not cheating as my professor said that we are allowed to use whatever open-source resources that we want. Does anyone know where I can find some info or the leak itself?
submitted by /u/Nalsooner12
[link] [comments]
Chinese 2015 OPM Leak
Referring to the Chinese hack of 2015 on the OPM, I heard it was leaked somewhere on the deep web. I am trying to get this information for a college project, this is not cheating as my professor said that we are allowed to use whatever open-source resources that we want. Does anyone know where I can find some info or the leak itself?
submitted by /u/Nalsooner12
[link] [comments]
reddit
Chinese 2015 OPM Leak
Referring to the Chinese hack of 2015 on the OPM, I heard it was leaked somewhere on the deep web. I am trying to get this information for a...