hacking: security in practice
New method to force machine account to authenticate somewhere using Microsoft's Distributed File System (MS-DFSNM) protocol on \PIPE\netdfs.

https://external-preview.redd.it/j8ICZku9_kDS9iNRqTQsxFCYh8GLC8xxHTHKdTMMcrk.png?width=640&crop=smart&auto=webp&s=72130e19cabf10efdcc389d8ea1d83c2351c1e46 submitted by /u/Podalirius_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Log4j Vulnerability and Cloud Guard AppSec Machine Learning based Approach for Preemptive Prevention

submitted by /u/xkristineeeeese
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to remote access a smart phone on my wifi

I have been using remote software with google desktop but it only allows for remote access to a computer and not a phone. Can I remote access a smartphone on my wifi network (both phones are mine) I have MAC address the password. But I want to feel like I’m in watch dogs.

submitted by /u/EnvironmentalAd3385
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Vulnhub .ova to ISO image file converter
https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/

I’m setting up a cyber lab on ESXi, but I can’t really find any ISO images. I tried importing .ova files from Vulnhub but always get an error. Next I’m going to try to convert the .ova files to an ISO image. Is there any recommended software for this? submitted by /u/DigitalQuinn1 (https://www.reddit.com/user/DigitalQuinn1)
[link] (https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/) [comments] (https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tails 4.18 OS — Live System

https://cdn-images-1.medium.com/max/600/1*b31hiO4ynbDLRrXWEFF4aQ.png
Tails 4.18 OS — Live System: Leave no trace on the computer

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Social Engineering | All in one tool for Phishing by Zphisher | Best tool for Phishing

https://cdn-images-1.medium.com/max/640/0*IExC6QXL0gYDG2aH.png
Social Engineering | All in one tool for Phishing by Zphisher | Best tool for Phishing

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Top 10: #1 — Injection

https://cdn-images-1.medium.com/max/600/1*1fOyXpTbDTDzc3baL-roiw.png
The only Top 10 list that actually f*cking matters.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Identify Your Phone Got Hacked and How to Avoid It?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Java Application -Server Side Template Injection

Description:Continue reading on Medium »
Read more...

hacking: security in practice
I made a script to brick any windows PC

Here is the link to the script

https://github.com/SomeoneAlt-86/pc-killer

So the way it works is lowering the system memory to very low so that windows is unable to boot once restarted.

submitted by /u/Ambitious-Cod-7354
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Msprobe - Finding All Things On-Prem Microsoft For Password Spraying And Enumeration
http://www.kitploit.com/2022/06/msprobe-finding-all-things-on-prem.html

___________________________
@hacking_Attack
@Hacking_Video

Finding all things on-prem Microsoft (https://www.kitploit.com/search/label/Microsoft) for password spraying and enumeration. The tool will used a list of common subdomains (https://www.kitploit.com/search/label/Subdomains) associated with your target apex domain to attempt to discover (https://www.kitploit.com/search/label/Discover) valid instances of on-prem Microsoft solutions. Screenshots of the tool in action are below:
Installing Install the project using pipx (https://pypa.github.io/pipx/installation/) pipx install git+https://github.com/puzzlepeaches/msprobe.git
Usage The tool has four different modules that assist with the discovery (https://www.kitploit.com/search/label/Discovery) of on-prem Microsoft products: Exchange RD Web ADFS Skype for Business The help menu and supported modules are shown below: Usage: msprobe [OPTIONS] COMMAND [ARGS]...

Find Microsoft Exchange, RD Web, ADFS, and Skype instances

Options:
--help Show this message and exit.

Commands:
adfs Find Microsoft ADFS servers
exch Find Microsoft Exchange servers
full Find all Microsoft supported by msprobe
rdp Find Microsoft RD Web servers
skype Find Microsoft Skype servers
Examples Find ADFS servers associated with apex domain: msprobe adfs acme.com
Find RD Web servers associated with apex domain with verbose output: msprobe rdp acme.com -v
Find all Microsoft products hostsed on-prem for a domain: msprobe full acme.com
Coming Soon Full wiki for each module Fixes for lxml based parsing (https://www.kitploit.com/search/label/Parsing) in RD Web module Acknowledgements @p0dalirius (https://twitter.com/intent/follow?screen_name=podalirius_) for RDWArecon (https://github.com/p0dalirius/RDWArecon) @b17zr (https://twitter.com/b17zr) for the ntlm_challenger.py script @ReverendThing (https://github.com/ReverendThing) for his project Carnivore (https://github.com/ReverendThing/Carnivore) and it's included subdomains @busterbcook (https://twitter.com/busterbcook) and their tool msmailprobe (https://github.com/busterb/msmailprobe) heavily influenced the creation of this project

Download Msprobe (https://github.com/puzzlepeaches/msprobe)

___________________________
@hacking_Attack
@Hacking_Video

Java Application -Server Side Template Injection
https://medium.com/@Dhamuharker/java-application-server-side-template-injection-f2aa4d2bb41?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video