hacking: security in practice
Is there any tool for guessing hash algorithm used to calculate a hash?

I'm doing a pentest and I already have a hash, the password in clear, and what may be the salt used to calculate that hash.

​

I need to find the hashing algorithm used so I can "un-hash" the rest of the users' passwords. Is there any way to do this?

edit: hash seems to be in base64, but decoding it gives me really weird characters

submitted by /u/Aslaron
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kubernetes 101 | Setting up Kubernetes Cluster Locally
https://infosecwriteups.com/kubernetes-101-setting-up-kubernetes-cluster-locally-aa8c34c89862?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This blog is about setting the local Kubernetes cluster for learning & testing using multiple tools like Kind, Minikube, Kubeadm & K3s.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/kubernetes-101-setting-up-kubernetes-cluster-locally-aa8c34c89862?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Can you recommend good active directory labs?
https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/

All AD machines on HTB and PG I've seen so far consist of only one domain controller. Are there any labs where you have 2-3 client machines and a DC to attack for example? submitted by /u/nbdknws (https://www.reddit.com/user/nbdknws)
[link] (https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/) [comments] (https://www.reddit.com/r/Pentesting/comments/v2g6tf/can_you_recommend_good_active_directory_labs/)

___________________________
@hacking_Attack
@Hacking_Video

PowerGram - Multiplatform Telegram Bot In Pure PowerShell
http://www.kitploit.com/2022/06/powergram-multiplatform-telegram-bot-in.html

___________________________
@hacking_Attack
@Hacking_Video

PowerGram is a pure PowerShell (https://www.kitploit.com/search/label/PowerShell) Telegram (https://www.kitploit.com/search/label/Telegram) Bot that can be run on Windows, Linux (https://www.kitploit.com/search/label/Linux) or Mac OS. To make use of it, you only need PowerShell 4 or higher and an internet connection. All communication between the Bot and Telegram servers is encrypted with HTTPS, but all requests will be sent in GET method, so they could easily be intercepted.
Requirements PowerShell 4.0 or greater Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/PowerGram
Usage .\PowerGram -h

____ ____
| _ \ __ __ __ __ _ __ / ___|_ __ __ _ _ __ ___
| |_) / _ \ \ /\ / / _ \ '__| | _| '__/ _' | '_ ' _ \
| __/ (_) \ V V / __/ | | |_| | | | (_| | | | | | |
|_| \___/ \_/\_/ \___|_| \____|_| \__,_|_| |_| |_|

------------------- by @JoelGMSec -------------------

Info: PowerGram is a pure PowerShell Telegram Bot
that can be run on Windows, Linux or Mac OS

Usage: PowerGram from PowerShell
.\PowerGram.ps1 -h Show this help message
.\PowerGram.ps1 -run Start PowerGram Bot

PowerGram from Telegram
/getid Get your Chat ID from Bot
/help Show all available commands

Warning: All commands will be sent using HTTPS GET requests
You need your Chat ID & Bot Token to run PowerGram

The detailed guide of use can be found at the following link: https://darkbyte.net/powergram-un-sencillo-bot-para-telegram-escrito-en-powershell License This project is licensed under the GNU (https://www.kitploit.com/search/label/GNU) 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).

Download PowerGram (https://github.com/JoelGMSec/PowerGram)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PowerGram - Multiplatform Telegram Bot In Pure PowerShell

https://blogger.googleusercontent.com/img/a/AVvXsEjehzbXT_1fjmcs2YwFwlbW74hUJKZuMgZlOGah8e0R1rSiam777CAHBIkMpBfqCJX0Ku_nztSoQ7V11MYotzEqyCXCJMOyoRQHpOgyxgAns2bM9gEz4KszUC2CVxpwTiYKu2sB6_kjqJnJdaiZfSidRZJJMA-PpsPI13DJWQm1VnjpE-2bLvbJFSQB=w640-h400
PowerGram is a pure PowerShell Telegram Bot that can be run on Windows, Linux or Mac OS. To make use of it, you only need PowerShell 4 or higher and an internet connection.

All communication between the Bot and Telegram servers is encrypted with HTTPS, but all requests will be sent in GET method, so they could easily be intercepted.
Requirements

* PowerShell 4.0 or greater

Download

It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:

git clone https://github.com/JoelGMSec/PowerGram


Usage

.\PowerGram -h

____ ____
| _ \ __ __ __ __ _ __ / ___|_ __ __ _ _ __ ___
| |_) / _ \ \ /\ / / _ \ '__| | _| '__/ _' | '_ ' _ \
| __/ (_) \ V V / __/ | | |_| | | | (_| | | | | | |
|_| \___/ \_/\_/ \___|_| \____|_| \__,_|_| |_| |_|

------------------- by @JoelGMSec -------------------

Info: PowerGram is a pure PowerShell Telegram Bot
that can be run on Windows, Linux or Mac OS

Usage: PowerGram from PowerShell
.\PowerGram.ps1 -h Show this help message
.\PowerGram.ps1 -run Start PowerGram Bot

PowerGram from Telegram
/getid Get your Chat ID from Bot
/help Show all available commands

Warning: All commands will be sent using HTTPS GET requests
You need your Chat ID & Bot Token to run PowerGram



The detailed guide of use can be found at the following link:

https://darkbyte.net/powergram-un-sencillo-bot-para-telegram-escrito-en-powershell

License

This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.

Credits and Acknowledgments

This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec

Contact

This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.

For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PowerGram

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
ADReaper : A Fast Enumeration Tool For Windows Active Directory Pentesting Written In Go

ADReaperis a tool written in Golangwhich enumerates an Active Directory environment with LDAP queries within few seconds

Installation

You can download precompiled executable binaries for Windows/Linux from latest releases

Install from source

To build from source, clone the repo and build it with GO

$ git clone https://github.com/AidenPearce369/ADReaper
$ cd ADReaper/
$ go build

Usage

ADReaper performs enumeration with various commands that performs LDAP queries with respective to it

PS C:\Users\redteamer\Desktop\shared> .\ADReaper.exe
-command string
Command to run
dc – to list domain controllers
domain-trust – to list domain trust
users – to list all users
computers – to list all computers
groups – to list all groups with members
spn – to list service principal objects
never-loggedon – to list users never logged on
gpo – to list group policy objects
ou – to list organizational units
ms-sql – to list MS-SQL servers
asreproast – to list AS-REP roastable accounts
unconstrained – to list Unconstrained Delegated accounts
admin-priv – to list AD objects with admin privilege
-dc string
Enter the DC
-filter string
Filters to use for users/groups/computers
list – lists all objects only
fulldata – list all objects with properties
membership – lists all members from an object
(default “list”)
-name string
Pass object name of user/group/computer
-password string
Enter the Password
-user string
Enter the Username

To query the properties of Domain Controllerof the domain,

.\ADReaper.exe -dc -user -password -command dc

To query the Trust Attributesof the domain,

.\ADReaper.exe -dc -user -password -command domain-trust

To list all Usersfrom the domain,

.\ADReaper.exe -dc -user -password -command users

To list all Userswith attributes from the domain,

.\ADReaper.exe -dc -user -password -command users -filter full-data

To list the membership of the Specific User,

.\ADReaper.exe -dc -user -password -command users -name -filter membership
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Smap : A Drop-In Replacement For Nmap Powered By Shodan.Io

Smap is a replica of Nmap which uses shodan.io’s free API for port scanning. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacement for Nmap.

Features

* Scans 200 hosts per second
* Doesn’t require any account/api key
* Vulnerability detection
* Supports all nmap’s output formats
* Service and version fingerprinting
* Makes no contact to the targets

Installation

Binaries

You can download a pre-built binary from here and use it right away.

Manual

go install -v github.com/s0md3v/smap/cmd/smap@latest

Confused or something not working? For more detailed instructions, click here

AUR pacakge

Smap is available on AUR as smap-git (builds from source) and smap-bin (pre-built binary).

Usage

Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iLare ignored. If you are unfamiliar with Nmap, here’s how to use Smap.

Specifying targets

smap 127.0.0.1 127.0.0.2

You can also use a list of targets, seperated by newlines.

smap -iL targets.txt

Supported formats

1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR

Output

Smap supports 6 output formats which can be used with the -o* as follows

If you want to print the output to terminal, use hyphen (-) as filename.

Supported formats

oX // nmap’s xml format
oG // nmap’s greppable format
oN // nmap’s default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json

Note: Since Nmap doesn’t scan/display vulnerabilities and tags, that data is not available in nmap’s formats. Use -oSto view that info.

Specifying ports

Smap scans these 1237 ports by default. If you want to display results for certain ports, use the -poption.

smap -p21-30,80,443 -iL targets.txt
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How safe are VPS providers firewalls?

Curious what everyone's take is on something like linode or vultrs built in firewalling for vps's? Is hosting a vps with auto updates, non root login, fail2ban, ufw, etc etc plus the provided vps firewalling enough to stay relatively safe from attack?

submitted by /u/solar_cell
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft Office zero-day vulnerability

submitted by /u/pcaversaccio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Retrieving info from HDD

Hey all,

Working outside of my specialty here and got handed a piece of hardware to mess with from my uncle that I could use some advice on.

I have a Toshiba HDD that is password protected and has some old resumes and contracts on them that I need. Never done much forensics before but where should I be starting for retrieving documents off an HDD that’s password protected?

Main issue being it’s his device but his work made him put a password on it that they kept. He left a few months ago and the password is in his work email so I advised him to reach out to IT for it but in the event he can’t get the pass, how would I retrieve the docs from it? Any advice appreciated. Thanks!

submitted by /u/IAmPerrot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any other resource for web app hacking other than Portswigger Academy?

I did quite a few rooms in tryhackme and still learning through it. Portswigger labs looks extremely boring and I feel that I am learning nothing from them. I do realize that they are important since Burp is an important tool. Still I wish to get some theroetical practical knowledge before I start CTF. So any resource you people would recommend?

submitted by /u/mukulexplorer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Pardon me but Do CTFs posts qualify for this sub?

submitted by /u/Blaack_Work
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a website or a mail install anything on an unrooted android phone without me knowing?

2 scenarios:

* a) getting redirected to a shady website while browsing (without actively accepting any messages or files from it)
* b) opening a spam mail in a known (EU-regulated) mail-provider platform/web-site. (without klicking any link in it)

Can a website or a mail install anything on an unrooted android phone without me knowing,
Like a Key-logger?

submitted by /u/GerritTheBerrit
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Distinguishing AI Hype From Reality in SecOps

AI and ML are important SecOps tools, but human involvement is still required.