Hacking on Medium
Huoxian (White Hat Hackers Empowering Cloud Security)

https://cdn-images-1.medium.com/max/2600/1*mff0loXQCdBfTm8Edy20yQ.jpeg
Huoxian, a community-based cloud security platform, pilots a human-computer collaboration approach in security with crowdsourced testing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Future Is Quite

https://cdn-images-1.medium.com/max/2600/0*-vSAOyzeevAcdnYG
Enough to slow

Continue reading on MIDFORM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers

https://cdn-images-1.medium.com/max/728/0*n-FAjjrNEVYI5Jw9
The U.S. National Security Agency, the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Socialhunter - Crawls The Website And Finds Broken Social Media Links That Can Be Hijacked

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ9WACcbHYIsnowomItI03uZiIvSPaIDmutH7ITlpTBhwYKZfgmw3o0BD-8vNIK33h6Z_GmY9UzM1C8AtjZTgHfgIrnTHEfzafjDmDC8XwO6FPELdMnsUMkb4faZz7bep4qZ0YLPla13I5XP3aqAAkpMHRzBK2lB1C61R_s1iFLpLhPF3vUjvwsSgR/w640-h478/Socialhunter.png
Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attacks. It also can cost a loss of the company's reputation. Broken social media hijack issues are usually accepted on the bug bounty programs.
Currently, it supports Twitter, Facebook, Instagram and Tiktok without any API keys.

https://camo.githubusercontent.com/65bbd741a7a85edfd02cd1b08d28c021a33eeda8f30f37855ee26f02f028ba1c/68747470733a2f2f61736369696e656d612e6f72672f612f77594d565849484378784f423351505771344665384164766e2e737667

Installation

From Binary

You can download the pre-built binaries from the releases page and run. For example:

wget https://github.com/utkusen/socialhunter/releases/download/v0.1.1/socialhunter_0.1.1_Linux_amd64.tar.gz

tar xzvf socialhunter_0.1.1_Linux_amd64.tar.gz

./socialhunter --help

From Source

1. Install Go on your system
2. Run: go get -u github.com/utkusen/socialhunter

Usage

socialhunter requires 2 parameters to run:

-f: Path of the text file that contains URLs line by line. The crawl function is path-aware. For example, if the URL is https://utkusen.com/blog, it only crawls the pages under /blogpath

-w: The number of workers to run (e.g -w 10). The default value is 5. You can increase or decrease this by testing out the capability of your system.
Download Socialhunter

___________________________
@hacking_Attack
@Hacking_Video

Socialhunter - Crawls The Website And Finds Broken Social Media Links That Can Be Hijacked
http://www.kitploit.com/2022/06/socialhunter-crawls-website-and-finds.html

___________________________
@hacking_Attack
@Hacking_Video

Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing (https://www.kitploit.com/search/label/Phishing) attacks. It also can cost a loss of the company's reputation. Broken social media hijack issues are usually accepted on the bug bounty programs.
Currently, it supports Twitter, Facebook, Instagram (https://www.kitploit.com/search/label/Instagram) and Tiktok without any API keys.

___________________________
@hacking_Attack
@Hacking_Video

Installation From Binary You can download the pre-built binaries from the releases (https://github.com/utkusen/socialhunter/releases) page and run. For example: wget https://github.com/utkusen/socialhunter/releases/download/v0.1.1/socialhunter_0.1.1_Linux_amd64.tar.gz tar xzvf socialhunter_0.1.1_Linux_amd64.tar.gz ./socialhunter --help From Source Install Go on your system Run: go get -u github.com/utkusen/socialhunter Usage socialhunter requires 2 parameters to run: -f : Path of the text file that contains URLs line by line. The crawl function is path-aware. For example, if the URL is https://utkusen.com/blog, it only crawls the pages under /blog path -w : The number of workers to run (e.g -w 10). The default value is 5. You can increase or decrease this by testing (https://www.kitploit.com/search/label/Testing) out the capability of your system.

Download Socialhunter (https://github.com/utkusen/socialhunter)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Is a Cross-Chain Bridge and How Are Bridges Hacked?

https://external-preview.redd.it/EReVsai1J7APfYlstsxJG1VfRLXktPqJjHEjAZ5jsb0.jpg?width=320&crop=smart&auto=webp&s=16556937ef41d4aa798e7eab286fa9ff22a97ee4 submitted by /u/yintianshi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Tor Network, is it secure?

I looked up related posts and many are from years ago, I trust Tor but it always lurks in the back of my mind that the service was created by the US Navy (Heard/Read about this long ago, I hope it’s not wrong).

I know the Tor network consists of many entities that believe in anonymity, but I can’t be the only one who ponders on this question? Am I?

Thankfully Tor is open source, and we can see how nodes/services are programmed. Not that I’ve actually looked through it.

I’m just looking for everyone’s personal input, I haven’t got much more knowledge about Tor other than what I said briefly here.

EDIT: If this is confusing to anyone, it’s not necessarily a specific question of am I safe using Tor. I’m wondering how everyone else feels about the security and anonymity of the Tor network.

Yes it’ll be personal feedback but I myself (and I hope others) will be able to make their own judgement call.

submitted by /u/iEvilPanda
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
"Execute as an admin"

Hackers and Technicians of this subreddit, I'd like to know if there's any way to bypass the "Execute as an admin" popup that is blocked by a password.

What I want to do, is just simply download whatever I want on my school's computer. Games, precisely. All of that might sound really silly, but I certainly wouldn't even dare to try to download anything if it wasn't for its impressive hardware I can't afford. So, all I'll do is take advantage of that!

One of the games I tried to download is Stepmania 5 by the way-

submitted by /u/TheBigBlueCat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
why MSF payload trig AV while my own is not

I'm asking why MSF payload (w/wo obfuscation) trig AV since the one I wrote on cpp (Windows) trig nothing on Virus Total ? Main feature of my payload are: - Keylogger - Screenshot capture - Open socket to exec cmd remotely - List AV present on target

Nb: the payload is not obfuscated The network communication aren't ciphered

submitted by /u/dd707834
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Intigriti — XSS Challenge — May 2022 — Bug Bounty Hunting — Writeup
https://0x1rootjkqsta.medium.com/intigriti-xss-challenge-may-2022-bug-bounty-hunting-writeup-460a9eb956a5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello guys I am back again. So let’s start talking rn bc I’m tired of everything.Continue reading on Medium » (https://0x1rootjkqsta.medium.com/intigriti-xss-challenge-may-2022-bug-bounty-hunting-writeup-460a9eb956a5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Attack Simulation by Ghostcat and Caldera

https://cdn-images-1.medium.com/max/1260/1*osh69jeLRQ3OqnYPRV9f0g.png
Ghostcat (CVE-2020–1938)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video