Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
How would you go about hacking into an iot device that you want to change the date on, but the date is set by the manufacturer not to be changed?

I've been taking iot hacking classes to solve this issue, the problem is there isn't a lot out there.

My dad owns a company that offers 3rd party maintenance on machines. The manufacturer offers the same maintenance as my dad for 400% more money.

As a big fuck you to my dad, one of the companies made it so the date of required maintenance feature could not be changed by anyone but them.

I need to figure out how to change the date on this machine. A lot of the technicians have been trying, but I do a lot with Kali Linux already and want to give this a shot. I don't know jack about iot.

submitted by /u/crazyfuck113
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Do you reckon i can send john hammond a word document ?

user=tGJY'||(SELECT 0x70784751 FROM DUAL WHERE 1897=1897 AND (SELECT 9731 FROM(SELECT COUNT(),CONCAT(0x71767a7871,(SELECT (ELT(9731=9731,1))),0x71786a6a71,FLOOR(RAND(0)2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||'&password=&submit=Unlock

submitted by /u/MSDTsmellsofPoo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Using bettercap to arp.spoof my Windows VM, however, something keeps on going wrong...

I am a new learner to hacking and I reached the part where you/I learn to make MITM attacks and this keeps happening to my Windows VM when I do this in Kali Linux.

So I am having a problem where whenever I activate arp.spoof and net.sniff , the NatNetwork/Lan wifi on the Windows Virtual Machine disconnects saying "No Internet". I am connected but there isn't any internet meaning I can't browse the Internet and head to Vulnweb for example or Youtube. I made sure both are connected to the same NatNetwork because that's what the instructor said to do in his vids. Help what do I do?

submitted by /u/Sweeeeezyy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
Recon Tool: Domain Analyzer

Recon Tool: Domain AnalyzerPost Views: 18
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes GitHub Link Domain AnalyzerDomain analyzer by eldraco, is a security analysis tool that automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way.

This is a crucial step when performing bug bounty or Pentesting as a reconnaissance methodology to understand your target as much info before going into deciding the attack phase. Example default optionsSee Also: Offensive Security Tool: DeepSleep HowBasically, Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP addresses, mails on Google, SPF information, etc. After all the information is stored and organized it scans the ports of every IP found using nmap and perform several other security checks. After the ports are found, it uses the tool crawler.py from @verovaleros, to spider the complete web page of all the web ports found. This tool has the option to download files and find open folders.
Current version is 0.8 and the main features are:

* It creates a directory with all the information, including nmap output files.
* It uses colors to remark important information on the console.
* It detects some security problems like host name problems, unusual port numbers and zone transfers.
* It is heavily tested and it is very robust against DNS configuration problems.
* It uses nmap for active host detection, port scanning and version information (including nmap scripts).
* It searches for SPF records information to find new hostnames or IP addresses.
* It searches for reverse DNS names and compare them to the hostname.
* It prints out the country of every IP address.
* It creates a PDF file with results.
* It automatically detects and analyze sub-domains!
* It searches for domains emails.
* It checks the 192 most common hostnames in the DNS servers.
* It checks for Zone Transfer on every DNS server.
* It finds the reverse names of the /24 network range of every IP address.
* It finds active host using nmap complete set of techniques.
* It scan ports using nmap (remember that for the SYN scan you need to need root).
* It searches for host and port information using nmap.
* It automatically detects web servers used.
* It crawls every web server page using our crawler.py tool. See the description below.
* It filters out hostnames based on their name.
* It pseudo-randomly searches N domains in Google and automatically analyze them!
* Uses CTRL-C to stop current analysis stage and continue working.
* It can read an external file with domain names and try to find them on the domain.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Bonus features@verovaleros developed a separate python web crawler called “crawler.py”. Its main features are:

* Crawl http and https web sites.
* Crawl http and https web sites not using common ports.
* Uses regular expressions to find ‘href’ and ‘src’ html tag. Also content links.
* Identifies relative links.
* Identifies domain related emails.
* Identifies directory indexing.
* Detects references to URLs like ‘file:’, ‘feed=’, ‘mailto:’, ‘javascript:’ and others.
* Uses CTRL-C to stop current crawler stages and continue working.
* Identifies file extensions (zip, swf, sql, rar, etc.)
* Download files to a directory:
* Download every important file (images, documents, compressed files).
* Or download specified files types.
* Or download a predefined set of files (like ‘document’ files: .doc, .xls, .pdf, .odt, .gnumeric, etc.).

* Maximum amount of links [...]

___________________________
@hacking_Attack
@Hacking_Video