Hacking on Medium
“Damn Vulnerable DeFi Wargame” Challenge #2 — Naive receiver Contract Analysis

https://cdn-images-1.medium.com/max/1920/1*XDQ-wPAiHd1iA98DF-qVZA.png
Challenge #2 — Naive receiver

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What are Dancing Pigs in Cybersecurity?

https://cdn-images-1.medium.com/max/2600/1*ojUOoQkfcsxDs4rz9kaaRA.jpeg
In computer security, “dancing pigs” is a term or problem that explains computer users’ attitudes towards computer security. Users will…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Microsoft Dynamics Container Sandbox RCE via Unauthenticated Docker Remote API 20,000$ Bounty

On 17.11.2021 I reported a critical security issue in Microsoft Dynamics Container Sandbox, that allows Microsoft Customers to setup a…Continue reading on Medium »
Read more...

Microsoft Dynamics Container Sandbox RCE via Unauthenticated Docker Remote API 20,000$ Bounty
https://hencohen10.medium.com/microsoft-dynamics-container-sandbox-rce-via-unauthenticated-docker-remote-api-20-000-bounty-7f726340a93b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

On 17.11.2021 I reported a critical security issue in Microsoft Dynamics Container Sandbox, that allows Microsoft Customers to setup a…Continue reading on Medium » (https://hencohen10.medium.com/microsoft-dynamics-container-sandbox-rce-via-unauthenticated-docker-remote-api-20-000-bounty-7f726340a93b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
OST2 Vulnerabilities 1001: C-Family Software Implementation Vulnerabilities (Taught via explaining > 3 dozen CVEs from the last 3 years)

https://external-preview.redd.it/YmXjBo6k_xTJTPp9j-8GED3YSa7L9csvOcMaCe1FOBY.jpg?width=640&crop=smart&auto=webp&s=c886b8eed9fe27665682c31cf28edf724b873b9f submitted by /u/OpenSecurityTraining
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any tool for guessing hash algorithm used to calculate a hash?

I'm doing a pentest and I already have a hash, the password in clear, and what may be the salt used to calculate that hash.

​

I need to find the hashing algorithm used so I can "un-hash" the rest of the users' passwords. Is there any way to do this?

edit: hash seems to be in base64, but decoding it gives me really weird characters

submitted by /u/Aslaron
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kubernetes 101 | Setting up Kubernetes Cluster Locally
https://infosecwriteups.com/kubernetes-101-setting-up-kubernetes-cluster-locally-aa8c34c89862?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This blog is about setting the local Kubernetes cluster for learning & testing using multiple tools like Kind, Minikube, Kubeadm & K3s.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/kubernetes-101-setting-up-kubernetes-cluster-locally-aa8c34c89862?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Can you recommend good active directory labs?
https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/

All AD machines on HTB and PG I've seen so far consist of only one domain controller. Are there any labs where you have 2-3 client machines and a DC to attack for example? submitted by /u/nbdknws (https://www.reddit.com/user/nbdknws)
[link] (https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/) [comments] (https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/)

___________________________
@hacking_Attack
@Hacking_Video

PowerGram - Multiplatform Telegram Bot In Pure PowerShell
http://www.kitploit.com/2022/06/powergram-multiplatform-telegram-bot-in.html

___________________________
@hacking_Attack
@Hacking_Video

PowerGram is a pure PowerShell (https://www.kitploit.com/search/label/PowerShell) Telegram (https://www.kitploit.com/search/label/Telegram) Bot that can be run on Windows, Linux (https://www.kitploit.com/search/label/Linux) or Mac OS. To make use of it, you only need PowerShell 4 or higher and an internet connection. All communication between the Bot and Telegram servers is encrypted with HTTPS, but all requests will be sent in GET method, so they could easily be intercepted.
Requirements PowerShell 4.0 or greater Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PowerGram
Usage .\PowerGram -h

____ ____
| _ \ __ __ __ __ _ __ / ___|_ __ __ _ _ __ ___
| |_) / _ \ \ /\ / / _ \ '__| | _| '__/ _' | '_ ' _ \
| __/ (_) \ V V / __/ | | |_| | | | (_| | | | | | |
|_| \___/ \_/\_/ \___|_| \____|_| \__,_|_| |_| |_|

------------------- by @JoelGMSec -------------------

Info: PowerGram is a pure PowerShell Telegram Bot
that can be run on Windows, Linux or Mac OS

Usage: PowerGram from PowerShell
.\PowerGram.ps1 -h Show this help message
.\PowerGram.ps1 -run Start PowerGram Bot

PowerGram from Telegram
/getid Get your Chat ID from Bot
/help Show all available commands

Warning: All commands will be sent using HTTPS GET requests
You need your Chat ID & Bot Token to run PowerGram

The detailed guide of use can be found at the following link: https://darkbyte.net/powergram-un-sencillo-bot-para-telegram-escrito-en-powershell License This project is licensed under the GNU (https://www.kitploit.com/search/label/GNU) 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).

Download PowerGram (https://github.com/JoelGMSec/PowerGram)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PowerGram - Multiplatform Telegram Bot In Pure PowerShell

https://blogger.googleusercontent.com/img/a/AVvXsEjehzbXT_1fjmcs2YwFwlbW74hUJKZuMgZlOGah8e0R1rSiam777CAHBIkMpBfqCJX0Ku_nztSoQ7V11MYotzEqyCXCJMOyoRQHpOgyxgAns2bM9gEz4KszUC2CVxpwTiYKu2sB6_kjqJnJdaiZfSidRZJJMA-PpsPI13DJWQm1VnjpE-2bLvbJFSQB=w640-h400
PowerGram is a pure PowerShell Telegram Bot that can be run on Windows, Linux or Mac OS. To make use of it, you only need PowerShell 4 or higher and an internet connection.

All communication between the Bot and Telegram servers is encrypted with HTTPS, but all requests will be sent in GET method, so they could easily be intercepted.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PowerGram


Usage

.\PowerGram -h

____ ____
| _ \ __ __ __ __ _ __ / ___|_ __ __ _ _ __ ___
| |_) / _ \ \ /\ / / _ \ '__| | _| '__/ _' | '_ ' _ \
| __/ (_) \ V V / __/ | | |_| | | | (_| | | | | | |
|_| \___/ \_/\_/ \___|_| \____|_| \__,_|_| |_| |_|

------------------- by @JoelGMSec -------------------

Info: PowerGram is a pure PowerShell Telegram Bot
that can be run on Windows, Linux or Mac OS

Usage: PowerGram from PowerShell
.\PowerGram.ps1 -h Show this help message
.\PowerGram.ps1 -run Start PowerGram Bot

PowerGram from Telegram
/getid Get your Chat ID from Bot
/help Show all available commands

Warning: All commands will be sent using HTTPS GET requests
You need your Chat ID & Bot Token to run PowerGram



The detailed guide of use can be found at the following link:

https://darkbyte.net/powergram-un-sencillo-bot-para-telegram-escrito-en-powershell

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PowerGram

___________________________
@hacking_Attack
@Hacking_Video