hacking: security in practice
can someone hack into your phone using a USB c charging cable?

I did a very stupid thing, I needed a USB c charger and I was searching the store and I only found one random one that was unpackaged and left on the shelf, I had a feeling it looked like bait by hackers

So now I think 1 or 2 so weeks have passed and I find out someone was trying to get into my card, my bank blocked multiple 1p transactions to "PayPal" and advised me to get a new card.

This was so stupid of me, this is the only thing I can relate the suspicious attempt to. Do I have to get a new phone or is it enough to throw away/destroy the cable

submitted by /u/zooseed22
[link] [comments]

hacking: security in practice
I’m being bullied online

This started about a month ago. This person has been dming me all types of hate full things. This person is full of racism and hate. I know that I know this person irl just because of the things that they said. I would love to expose them for what they have done and said. It’s not okay to hide behind a screen and do things like this. If anyone has any tips or knows what to do please help me out!

submitted by /u/1Buck2Buck
[link] [comments]

hacking: security in practice
Missing Niece

I need help and the cops aren’t working fast enough. I need to ping her Instagram or hack into her Snapchat. She’s been gone for 13 days I can’t take this anymore I’m desperate.

submitted by /u/sweetsarajupiter
[link] [comments]

hacking: security in practice
Got my PSN stolen

So my account was stolen and the guy who did it bougth a game so id like to now if there is anyway i could track him or get his identity, and go to the police with it, he changed my e-mail and It shows It was done in a city of my country.

submitted by /u/NerveReap
[link] [comments]

INFORMATIX TESTNET COMPETITION QICK GUIDE, 750,000 $INFO tokens up for grabs
https://airdropeveryday77.medium.com/informatix-testnet-competition-qick-guide-750-000-info-tokens-up-for-grabs-f0dcfd1f1841?source=rss------bug_bounty-5

Infomatix is a data collection tool that aims to build the worlds most comprehensive financial database through crowd sourced expertise.Continue reading on Medium » (https://airdropeveryday77.medium.com/informatix-testnet-competition-qick-guide-750-000-info-tokens-up-for-grabs-f0dcfd1f1841?source=rss------bug_bounty-5)

HDX (Headline Crypto) INCENTIVIZED TESTNET QUICK GUIDE, WITH 250,000 $HDX AS REWARDS
https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5

HEADLINE Crypto is a Texas-based blockchain project and token from the team behind AlgoPay, AlgoCloud, Vaults Protocol, FORUM, PIPELINE-UI…Continue reading on Medium » (https://airdropeveryday77.medium.com/hdx-headline-crypto-incentivized-testnet-quick-guide-with-250-000-hdx-as-rewards-fb77ca09e70d?source=rss------bug_bounty-5)

Hacking on Medium
Buffer overflows

https://cdn-images-1.medium.com/max/728/1*7C-NuMy0WOtp1268ifXkAw.jpeg
Anatomy of memory

Continue reading on Medium »

Hacking on Medium
Crypto-Bridge Hacks: The Billion Dollar Problem

https://cdn-images-1.medium.com/max/600/1*R-nLB9YHeE6d3DCpWrUReg.png
Over the past year $1.1 billion in cryptocurrencies has been looted by hackers, including the biggest heists in blockchain history by…

Continue reading on Medium »

KitPloit - PenTest Tools!
Nim-Loader - WIP Shellcode Loader In Nim With EDR Evasion Techniques

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
a very rough work-in-progress adventure into learning nim by cobbling resources together to create a shellcode loader that implements common EDR/AV evasion techniques.

This is a mess and is for research purposes only! Please don't expect it to compile and run without your own modifications.
Instructions

* Replace the byte array in loader.nimwith your own x64 shellcode
* Compile the EXE and run it: nim c -d:danger -d:strip --opt:size "loader.nim"
* Probably adjust which process you want to inject into by looking in the .nim files of the injection folder method you're using...

Completed Features

* Direct syscalls dynamically resolved from NTDLL (Thanks @ShitSecure)
* AMSI and ETW patching (Thanks @byt3bl33d3r)
* NTDLL unhooking (Thanks @MrUn1k0d3r)
* CreateRemoteThread injection (Thanks @byt3bl33d3r, @ShitSecure)

WIP Features

* Process Hollowing Technique (Thanks @snovvcrash)
* Shellcode encryption/decryption using [AES in CTR mode](https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Counter_(CTR) (Thanks @snovvcrash)
* Replace all compatible API calls with syscalls
* Add template generator and compiler, cmdline args for shellcode, injection methods, process paths, etc.

Obfuscation

* Consider using denim by @LittleJoeTables for obfuscator-llvm nim compilation support!

References & Inspiration

* OffensiveNim by Marcello Salvati (@byt3bl33d3r)
* NimlineWhispers2 by Alfie Champion (@ajpc500)
* SysWhispers3 by klezVirus (@KlezVirus)
* NimPackt-v1 by Cas van Cooten (@chvancooten)
* unhook_bof.c by Mr. Un1k0d3r (@MrUn1k0d3r)
* NimGetSyscallStub by S3cur3Th1sSh1t (@ShitSecure)
* NimHollow by snovvcrash (@snovvcrash)

Examples

https://blogger.googleusercontent.com/img/a/AVvXsEghoAwSP8tfQ0sIRJuF9bla0dxRrdW1lPn96pxum-o5IHa7VkI95mmOfDO5j3BktycKqlFVVdOpyf3jpwf-tFUn2R0pmrTikJme--EpMM14WUufp3PCZmJo-7mMiAaADeKvExN71KOWHN8JteTPPrGwHdZAuktozFqYa6N-BjBkPQGmzZ_2rcHOIXvw=w640-h502
Download Nim-Loader

Any recommendation for note taking app for a beginner trying to work towards oscp. My preference is to use app with support for hierarchical structures, quick snip with a shortcut and pasting directly into notes.. Thanks in advance..
https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/

submitted by /u/Due-Being9217 (https://www.reddit.com/user/Due-Being9217)
[link] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/vkjrl4/any_recommendation_for_note_taking_app_for_a/)

hacking: security in practice
hacking

Hallo kann jmd ein Handy anhand der Nummer hacken und mir Bilder und chats senden von dem Handy? LG

submitted by /u/Antoniad1988
[link] [comments]

hacking: security in practice
Is there any way to auto execute batch when pendrive is inserted?

I'm trying to build a autorun pendrive for a project which includes getting PC's info when inserted, I've tried making autorun.inf file but it seems that it doesn't execute batch file even if I've added argument to open batch file but it changes the icon and pd name tho, i don't know how could I go around this one

My project included executing batch file in pendrive the movement i insert pendrive into pc

submitted by /u/dominatevil
[link] [comments]

Hacking on Medium
Threat Hunting in Cyber Security

https://cdn-images-1.medium.com/max/600/0*iOXX84BYKJikwzUz.png
Here in this article, I would like to share my own ways of exploring the different types of Threat Hunting practices that can be…

Continue reading on Medium »