hacking: security in practice
How to hack into my late Father's computer?

Hey all,

My Dad recently passed away and we're locked out of his computer. Mom needs to get on to access a bunch of his business files, email, etc... 99% sure he's on Windows 10.

I once was able to hack into an older version of Windows on my laptop when I forgot the password, but can't remember how I did it.

Does anyone have a lny good resources about how to go about this?

Thanks!

submitted by /u/Igloooooooooo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to get started in Cybersecurity in 2022 (Part-2)

https://cdn-images-1.medium.com/max/1280/0*DJZnHTghRYDBaunh.jpeg
This is a roadmap for beginners interested in learning about cybersecurity who don’t have proper knowledge of the field and have no one to…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My Idea of a Safe and Peaceful Cyber Space

https://cdn-images-1.medium.com/max/848/1*QozhSLuwVYwC4hvqN-ys8w.png
Over the last 30 years, the international security environment has been characterized by several security deficits.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
8 Important Questions To Ask Your Cybersecurity Integrator Before Signing

https://cdn-images-1.medium.com/max/600/1*-bW-hL78apQK4uD0ZsAMEw.gif
When it comes to protecting your business from cybersecurity threats, you can’t be too careful. That’s why it’s so important to partner…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW NOT TO GET HACKED

https://cdn-images-1.medium.com/max/720/0*UCnLKn6iuCOHG8oa.png
Recently, I have been seeing so many people getting hacked/phished easily on Instagram and other social media platforms. Hence, I decided…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
PyPI package ‘keep’ mistakenly included a password stealer

PyPI package ‘keep’ mistakenly included a password stealerPost Views: 54
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes
PyPI packages ‘keep,’ ‘pyanxdns,’ ‘api-res-py’ were found to be containing a backdoor due to the presence of malicious ‘request’ dependency within some versions.
For example, while most versions of ‘keep’ project use the legitimate Python module requests for making HTTP requests, ‘keep’ v.1.2 contains ‘request’ (without s) which is malware.

BleepingComputer reached out to the authors of each of these packages to understand if this was caused by a mere typographical error,  self-sabotage, or by maintainer accounts getting hijacked. PyPI package ‘keep’ uses malicious ‘request’Some versions of PyPI packages, ‘keep,’ ‘pyanxdns,’ and ‘api-res-py’ were caught using a malicious dependency, ‘request,’

Back in May, GitHub user duxinglin1 noticed the vulnerable versions contained the misspelled ‘request’ dependency, as opposed to the legitimate requests library.

As such, the following CVEs have been assigned this week with regards to the vulnerable versions:

* CVE-2022-30877 – ‘keep’ version 1.2 contains the backdoor ‘request’, contrary to what the advisory implies.
* CVE-2022-30882 – ‘pyanxdns’ version 0.2 impacted
* CVE-2022-31313 – ‘api-res-py’ version 0.1 impacted

Although ‘pyanxdns’ and ‘api-res-py’ might be small scale projects,  the ‘keep’ package, in particular, gets downloaded over 8,000 times in a week on average—with its version 1.2 using the malicious dependency:
https://www.bleepstatic.com/images/news/u/1164866/2022/jun-2022/pypi-request-keep-backdoor/pypi-keep-page.jpeg
___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
PyPI package ‘keep’ mistakenly included a password stealer

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Pool on the roof - {{%B %d, %Y}}

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SSH beyond login and port forwarding?

One of my NAS devices allows SSH logins with a username/password belonging to the manufacturer. I have the credentials. My attempts to login have been a complete failure.

Can you suggest anything beyond a normal login or port forwarding?

Interactive login and SCP succeed but I immediately get "ERROR: Connection refused" from some internal application. Port forwarding doesn't drop but its disabled in the config file and can't be used.

submitted by /u/caravandog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
finding people OSINT

I am starting to learn about the osint framework, Searching for people outside the US is not working because the majority of the websites that i encouter are US based so if i want to search myself i couldn't . So what to do when i encounter this kind of problem

submitted by /u/__hiken__
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
using tor

I am starting to learn about tor browser most of the tutorials just guides you how to install it and the settings that you need to change but what is .onion ?

And if by doing reverse image in tor the result will be different from standard search engine? Searching for people and companies will it also result in different results ?

submitted by /u/__hiken__
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how to stop school monitoring me

So, I have recently been able to get access to the CMD on my school windows computer. However, I know that school monitors all activity on computers, so I wouldn't actually be able to do anything without being caught. Is there any way that I could ask my presence, or make it look like I was doing something else? Thanks

submitted by /u/Queer_Gerblin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get unbanned from a website?

Any help is much appreciated.

Thanks!

submitted by /u/wahsgood
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

confluencePot - Simple Honeypot For Atlassian Confluence (CVE-2022-26134)
http://www.kitploit.com/2022/06/confluencepot-simple-honeypot-for.html

___________________________
@hacking_Attack
@Hacking_Video

ConfluencePot is a simple honeypot (https://www.kitploit.com/search/label/HoneyPot) for the Atlassian Confluence unauthenticated and remote OGNL injection (https://www.kitploit.com/search/label/Injection) vulnerability (https://www.kitploit.com/search/label/Vulnerability) (CVE-2022-26134 (https://nvd.nist.gov/vuln/detail/CVE-2022-26134)).
About the vulnerability You can find the official advisory by Atlassian to this vulerability here (https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html). For details about the inner workings and exploits (https://www.kitploit.com/search/label/Exploits) in the wild you should refer to the reports by Rapid7 (https://www.rapid7.com/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/) and Cloudflare (https://blog.cloudflare.com/cloudflare-observations-of-confluence-zero-day-cve-2022-26134/). Affected but not yet patched systems should be deemed compromised until further investigation. About the tool ConfluencePot is written in Golang and implements its own HTTPS server to minimize the overall attack surface. To make it appear like a legit Confluence instance it returns a bare-bones version of a Confluence landing page. Log output is written to stdout and a log file on disk. ConfluencePot DOES NOT allow attackers to execute commands/code on your machine, it only logs requests and returns a bogus response. Building & Running it You need a recent version of Golang to run/build confluencePot and the appropriate privileges to bind to port 443. We recommend to execute it in a tmux session for easier handling. To run ConfluencePot you either need to create a self-signed TLS certificate with openssl or request one from e.g. Let's Encrypt. go build confluencePot.go
./confluencePot
Testing and Issues ConfluencePot was tested using the public exploit by Nwqda (https://github.com/Nwqda/CVE-2022-26134), which seems to be the most used variant in the wild at the time of writing. If you find anything wrong with confluencePot please feel free to open an issue or send us a pull request. Follow us on Twitter (https://www.kitploit.com/search/label/Twitter) --> @SI_FalconTeam (https://twitter.com/SI_FalconTeam) <-- to stay up to date with our latest research. Stay safe!

Download confluencePot (https://github.com/SIFalcon/confluencePot)

___________________________
@hacking_Attack
@Hacking_Video