hacking: security in practice
Anyone here heard of witchhack@aol . Com?
I’ve been referred to him and I hear he’s an ethical hacker that helps people who’ve been scammed. I’m kinda scared to reach out cause I’ve got no idea if he’s a scammer himself
submitted by /u/Potatobananapple
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Anyone here heard of witchhack@aol . Com?
I’ve been referred to him and I hear he’s an ethical hacker that helps people who’ve been scammed. I’m kinda scared to reach out cause I’ve got no idea if he’s a scammer himself
submitted by /u/Potatobananapple
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Anyone here heard of witchhack@aol . Com?
I’ve been referred to him and I hear he’s an ethical hacker that helps people who’ve been scammed. I’m kinda scared to reach out cause I’ve got no...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What Do Hackers Want With Your Facebook Account?
https://cdn-images-1.medium.com/max/1000/1*pxEETNtyY9r3n-td3PKRyw.jpeg
Have you ever had somebody try to hack into your Facebook account? You might be surprised. It’s actually probably happening right now.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What Do Hackers Want With Your Facebook Account?
https://cdn-images-1.medium.com/max/1000/1*pxEETNtyY9r3n-td3PKRyw.jpeg
Have you ever had somebody try to hack into your Facebook account? You might be surprised. It’s actually probably happening right now.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What Do Hackers Want With Your Facebook Account?
Have you ever had somebody try to hack into your Facebook account? You might be surprised. It’s actually probably happening right now.
Screenwriter researching chip heist
https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/
Hey there! So, I’m not sure if this belongs here, but redirect me if there’s a more applicable subreddit. Anyway, I’m a screenwriter and I’ve got this movie I’m working on that deals a lot with ai and technology. I’m very interested in this stuff, but my primary source of information is via Darknet Diaries. Anyway, I have a heist in the movie. Long story short, an agi developer resurrects a body in the style of Frankenstein and then a nefarious character convinces them all to steal a bunch of processing chips to resell on the grey market. I have a few questions. Would there be something better to heist than these chips? How are they usually stored? Where are they stored? How would you (hypothetically) steal them? Any relevant information would be much appreciated! Thank you submitted by /u/mynameismalakai (https://www.reddit.com/user/mynameismalakai)
[link] (https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/) [comments] (https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/
Hey there! So, I’m not sure if this belongs here, but redirect me if there’s a more applicable subreddit. Anyway, I’m a screenwriter and I’ve got this movie I’m working on that deals a lot with ai and technology. I’m very interested in this stuff, but my primary source of information is via Darknet Diaries. Anyway, I have a heist in the movie. Long story short, an agi developer resurrects a body in the style of Frankenstein and then a nefarious character convinces them all to steal a bunch of processing chips to resell on the grey market. I have a few questions. Would there be something better to heist than these chips? How are they usually stored? Where are they stored? How would you (hypothetically) steal them? Any relevant information would be much appreciated! Thank you submitted by /u/mynameismalakai (https://www.reddit.com/user/mynameismalakai)
[link] (https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/) [comments] (https://www.reddit.com/r/Pentesting/comments/vga9uh/screenwriter_researching_chip_heist/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Screenwriter researching chip heist
Hey there! So, I’m not sure if this belongs here, but redirect me if there’s a more applicable subreddit. Anyway, I’m a screenwriter and I’ve...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Moonwalk : Cover Your Tracks During Linux Exploitation By Leaving Zero Traces
moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell.
Features
* Small Executable: Get started quickly with a
* Fast: Performs all session commands including logging, trace clearing, and filesystem operations in under 5 milliseconds.
* Reconnaissance: To save the state of system logs,
* Shell History: Instead of clearing the whole history file,
* Filesystem Timestamps: Hide from the Blue Team by reverting the access/modify timestamps of files back to how it was using the
Installation
$ curl -L https://github.com/mufeedvh/moonwalk/releases/download/v1.0.0/moonwalk_linux -o moonwalk
(
OR
Download the executable from Releases OR Install with
Build From Source
Prerequisites
* Git
* Rust
* Cargo (Automatically installed when installing Rust)
* A C linker (Only for Linux, generally comes pre-installed)
$ git clone https://github.com/mufeedvh/moonwalk.git
$ cd moonwalk/
$ cargo build –release
The first command clones this repository into your local machine and the last two commands enters the directory and builds the source in release mode.
Usage
Once you get a shell into the target Unix machine, start a moonwalk session by running this command:
$ moonwalk start
While you’re doing recon/exploitation and messing with any files, get the
$ moonwalk get ~/.bash_history
Post-exploitation, clear your traces and close the session with this command:
$ moonwalk finish
Download
___________________________
@hacking_Attack
@Hacking_Video
Moonwalk : Cover Your Tracks During Linux Exploitation By Leaving Zero Traces
moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell.
Features
* Small Executable: Get started quickly with a
curlfetch to your target machine.* Fast: Performs all session commands including logging, trace clearing, and filesystem operations in under 5 milliseconds.
* Reconnaissance: To save the state of system logs,
moonwalkfinds a world-writable path and saves the session under a dot directory which is removed upon ending the session.* Shell History: Instead of clearing the whole history file,
moonwalkreverts it back to how it was including the invocation of moonwalk.* Filesystem Timestamps: Hide from the Blue Team by reverting the access/modify timestamps of files back to how it was using the
GETcommand.Installation
$ curl -L https://github.com/mufeedvh/moonwalk/releases/download/v1.0.0/moonwalk_linux -o moonwalk
(
AMD x86-64)OR
Download the executable from Releases OR Install with
cargo:Build From Source
Prerequisites
* Git
* Rust
* Cargo (Automatically installed when installing Rust)
* A C linker (Only for Linux, generally comes pre-installed)
$ git clone https://github.com/mufeedvh/moonwalk.git
$ cd moonwalk/
$ cargo build –release
The first command clones this repository into your local machine and the last two commands enters the directory and builds the source in release mode.
Usage
Once you get a shell into the target Unix machine, start a moonwalk session by running this command:
$ moonwalk start
While you’re doing recon/exploitation and messing with any files, get the
touchtimestamp command of a file beforehand to revert it back after you’ve accessed/modified it:$ moonwalk get ~/.bash_history
Post-exploitation, clear your traces and close the session with this command:
$ moonwalk finish
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Moonwalk : Cover Your Tracks During Linux Exploitation
moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Pybatfish : Python Client For Batfish (Network Configuration Analysis Tool)
Pybatfish is a Python client for Batfish.
What is Batfish?
Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of network devices. It builds complete models of network behavior from device configurations and finds violations of network policies (built-in, user-defined, and best-practices).
A primary use case for Batfish is to validate configuration changes before deployment (though it can be used to validate deployed configurations as well). Pre-deployment validation is a critical gap in existing network automation workflows. By Batfish in automation workflows, network engineers can close this gap and ensure that only correct changes are deployed.
Batfish does NOT require direct access to network devices. The core analysis requires only the configuration of network devices. This analysis may be enhanced using additional information from the network such as:
* BGP routes received from external peers
* Topology information represented by LLDP/CDP
What kinds of correctness checks does Batfish support?
The Batfish YouTube channel (which you can subscribe to for new content) illustrates many types of checks. These checks span a range of network behaviors and device configuration attributes.
Configuration Compliance
* Flag undefined-but-referenced or defined-but-unreferenced structures (e.g., ACLs, route maps)
* Configuration settings for MTUs, AAA, NTP, logging, etc. match templates
* Devices can only be accessed using SSHv2 and password is not null
Reliability
* End-to-end reachability is not impacted for any flow after any single-link or single-device failure
* Certain services (e.g., DNS) are globally reachable
Security
* Sensitive services can be reached only from specific subnets or devices
* Paths between endpoints are as expected (e.g., traverse a firewall, have at least 2 way ECMP, etc…)
Change Analysis
* End-to-end reachability is identical across the current and a planned configuration
* Planned ACL or firewall changes are provably correct and causes no collateral damage for other traffic
* Two configurations, potentially from different vendors, are functionally equivalent
How do I get started?
If you haven’t already installed Batfish, follow the instructions listed in the batfish github repository to do so.
Install Pybatfish
We highly recommend that you install Pybatfish in a Python 3 virtual environment. Details on how to set one up can be found here. Once your virtual environment is setup and activated, upgrade pip and then install pybatfish.
python3 -m pip install –upgrade pip
python3 -m pip install –upgrade pybatfish
Now, you are ready to evaluate your own network with Batfish. We encourage you to use Jupyter notebooks as your starting point, but you can use other methods that you are a comfortable with, e.g., an IDE like PyCharm or an interactive Python shell. If you choose to use Jupyter notebooks as your starting point, you need to install Jupyter in your virtual environment. Jupyter documentation can be found here – but the commands below will get you going.
python3 -m pip install jupyter
jupyter notebook
Our notebooks provide a quick start guide for different use cases.
Download
___________________________
@hacking_Attack
@Hacking_Video
Pybatfish : Python Client For Batfish (Network Configuration Analysis Tool)
Pybatfish is a Python client for Batfish.
What is Batfish?
Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of network devices. It builds complete models of network behavior from device configurations and finds violations of network policies (built-in, user-defined, and best-practices).
A primary use case for Batfish is to validate configuration changes before deployment (though it can be used to validate deployed configurations as well). Pre-deployment validation is a critical gap in existing network automation workflows. By Batfish in automation workflows, network engineers can close this gap and ensure that only correct changes are deployed.
Batfish does NOT require direct access to network devices. The core analysis requires only the configuration of network devices. This analysis may be enhanced using additional information from the network such as:
* BGP routes received from external peers
* Topology information represented by LLDP/CDP
What kinds of correctness checks does Batfish support?
The Batfish YouTube channel (which you can subscribe to for new content) illustrates many types of checks. These checks span a range of network behaviors and device configuration attributes.
Configuration Compliance
* Flag undefined-but-referenced or defined-but-unreferenced structures (e.g., ACLs, route maps)
* Configuration settings for MTUs, AAA, NTP, logging, etc. match templates
* Devices can only be accessed using SSHv2 and password is not null
Reliability
* End-to-end reachability is not impacted for any flow after any single-link or single-device failure
* Certain services (e.g., DNS) are globally reachable
Security
* Sensitive services can be reached only from specific subnets or devices
* Paths between endpoints are as expected (e.g., traverse a firewall, have at least 2 way ECMP, etc…)
Change Analysis
* End-to-end reachability is identical across the current and a planned configuration
* Planned ACL or firewall changes are provably correct and causes no collateral damage for other traffic
* Two configurations, potentially from different vendors, are functionally equivalent
How do I get started?
If you haven’t already installed Batfish, follow the instructions listed in the batfish github repository to do so.
Install Pybatfish
We highly recommend that you install Pybatfish in a Python 3 virtual environment. Details on how to set one up can be found here. Once your virtual environment is setup and activated, upgrade pip and then install pybatfish.
python3 -m pip install –upgrade pip
python3 -m pip install –upgrade pybatfish
Now, you are ready to evaluate your own network with Batfish. We encourage you to use Jupyter notebooks as your starting point, but you can use other methods that you are a comfortable with, e.g., an IDE like PyCharm or an interactive Python shell. If you choose to use Jupyter notebooks as your starting point, you need to install Jupyter in your virtual environment. Jupyter documentation can be found here – but the commands below will get you going.
python3 -m pip install jupyter
jupyter notebook
Our notebooks provide a quick start guide for different use cases.
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Pybatfish : Python Client For Batfish (Network Configuration Analysis Tool)
Pybatfish is a Python client for Batfish. Batfish is a network validation tool that provides correctness guarantees for security.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Back Door
https://cdn-images-1.medium.com/max/739/1*Ah5VGSJJ6laeCMPevB9pgQ.png
It is important to set up your backdoor once you compromise the machine. Back door means the action of creating a door from only which you…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Back Door
https://cdn-images-1.medium.com/max/739/1*Ah5VGSJJ6laeCMPevB9pgQ.png
It is important to set up your backdoor once you compromise the machine. Back door means the action of creating a door from only which you…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Back Door
It is important to set up your backdoor once you compromise the machine. Back door means the action of creating a door from only which you…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HACKING AND PENTESTING
https://cdn-images-1.medium.com/max/802/1*KL8cjk3sm_ryuC0JGvmWxw.jpeg
https://biharihacker.medium.com/
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
HACKING AND PENTESTING
https://cdn-images-1.medium.com/max/802/1*KL8cjk3sm_ryuC0JGvmWxw.jpeg
https://biharihacker.medium.com/
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
HACKING AND PENTESTING
https://biharihacker.medium.com/
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hacking and Pentesting
https://cdn-images-1.medium.com/max/2000/1*zitLVE4y-AR1aeQoIwo2Sg.jpeg
Hacking Apps For Android
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hacking and Pentesting
https://cdn-images-1.medium.com/max/2000/1*zitLVE4y-AR1aeQoIwo2Sg.jpeg
Hacking Apps For Android
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hacking and Pentesting
Hacking Apps For Android