hacking: security in practice
Callow

Is there anyway to use "Callow" to brute force a website with no username. The website im trying it on is for an internet mystery and the page only needs a password no username but the program requires one (to the best of my knowledge. GitHub for Callow (edit: grammar)

submitted by /u/_TheOneTrueBean_
[link] [comments]

hacking: security in practice
How do I turn off tamper protection through powershell?

I'm trying to do a reverse shell attack on my windows computer from my linux vm, and the to run the powershell script on the client side, i need to disable real time protection manually, but i figured out a way to disable it by a powershell script, but to run the script and disable real time protection, first i need to disable tamper protection...So is there a way to disable tamper protection through a powershell command?

submitted by /u/Aryangsuktekar
[link] [comments]

hacking: security in practice
DrayTek Bruteforce

Hi, few days ago i got my hands on a DrayTek Vigor2760 router to use as a modem for my home network, however once i reset the router, it did not go back to the default credentials, i got in touch with DrayTek, and they advised it is likely for it to be a custom firmware, and they are unable to help, They advised its best to get in touch with the supplier of the router for the default credentials. not knowing who the supplier is, i attempted to bruteforce the webapp using OWASP zap. after having a look at the post request that is sent to the router, i could see that the fields that are sent out are more than username and password.

aa=dGVzdA%3D%3D&ab=AA%3D%3D&sslgroup=-1&sFormAuthStr=R8riZC8XxeWxi5t

breaking this down i could see that there are these fields: aa: this seems to be the username is BASE64 encoding ab: password in BASE64 sslgroup: looking at the name i can see its probably has to do with the HTTPS or smth but please let me know if im wrong. and lastly, sFormAuthStr.

looking at these fields, what is the best way to attack this webapp, any ideas or approaches i need to try? any links that i can have a look at that guides me to the right direcion?

it is worth mentioning that there is nothing illegal going on and i own the router, it was given to me by a friend who had this collecting dust in his attic.

Thank you :)

submitted by /u/h0ly_k0w
[link] [comments]

How to configure polkit utility in centos 7 cve-2019-4034? please help.
https://www.reddit.com/r/Pentesting/comments/vcr3c3/how_to_configure_polkit_utility_in_centos_7/

submitted by /u/l_l__R4v4N__l__l (https://www.reddit.com/user/l_l__R4v4N__l__l)
[link] (https://www.reddit.com/r/Pentesting/comments/vcr3c3/how_to_configure_polkit_utility_in_centos_7/) [comments] (https://www.reddit.com/r/Pentesting/comments/vcr3c3/how_to_configure_polkit_utility_in_centos_7/)

Hacking on Medium
Five Places To Learn How To Hack Web Applications

https://cdn-images-1.medium.com/max/960/0*wqwbDPYtqeSikV5I.jpg
Learn how to hack and secure web applications online

Continue reading on Geek Culture »

Hacking on Medium
How To Bypass Any Linux Password | Easy Steps To Bypass Linux Password

https://cdn-images-1.medium.com/max/640/0*nfsWWoXO7mUz1qN7.jpg
How To Bypass Any Linux Password

Continue reading on Medium »

Hacking on Medium
Analysis of Ranion Ransomware

https://cdn-images-1.medium.com/max/640/0*peh0hSo6ZZHsYJbq.jpg
Analysis of Ranion ransomware that has been running for four years

Continue reading on Medium »

Hacking on Medium
SpaceX Looks At Starlink’s Expansion In India

https://cdn-images-1.medium.com/max/640/0*PrPndizjsSf3gGiU.png
SpaceX Looks At Starlink’s Expansion In India

Continue reading on Medium »

Hacking on Medium
6 Signs You May Be Hacked When Smartphone Acting Weird

https://cdn-images-1.medium.com/max/600/0*Q5J9yf5hNS37qKS4.jpg
If your smartphone is appearing bizarre, some thing is up.

Continue reading on Medium »

Hacking on Medium
How we managed to hack the biggest Southeast Europe hackathon

https://cdn-images-1.medium.com/max/2600/1*zAcMwJAvZTjASn9CwHktEg.jpeg
Disclaimer

Continue reading on Medium »

Getting Started with AllianceBlock DEX on Mainnet
https://allianceblock.medium.com/abdex-getting-started-with-abdex-on-mainnet-c83591511fa0?source=rss------bug_bounty-5

We walk you through how to use the AllianceBlock DEX, as well as some updates on our progress on the development since we launched.Continue reading on Medium » (https://allianceblock.medium.com/abdex-getting-started-with-abdex-on-mainnet-c83591511fa0?source=rss------bug_bounty-5)

Getting Started with AllianceBlock DEX on Mainnet

We walk you through how to use the AllianceBlock DEX, as well as some updates on our progress on the development since we launched.Continue reading on Medium »
Read more...