Hacking on Medium
What is Hacking?

“It is the art or technique of finding and exploiting security loopholes in an system ”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Scout - Lightweight URL Fuzzer And Spider: Discover A Web Server'S Undisclosed Files, Directories And VHOSTs

https://blogger.googleusercontent.com/img/a/AVvXsEglHpc2WnG1-GUXkKAeAQMNOqUIZi1ig7_4curXDVBHg_w7r7FpjBiWJ3f001DbraBdKgzySNJlHzbFoUmpsuV8Q8Knch-MvZe88_IFBj8Fqc0xgd-0UPjt8ePNyr6I-BCu8nxYH-Ovb8Svmsz5jhHs1bl4h4XGPhBgqQO4ngDN6GTZ_3lFALQbH-Ow=w640-h346 Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server.
A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! UsageDiscover URLs on a given web server. version Display scout version. vhost Discover VHOSTs on a given web server. Flags: -d, --debug Enable debug logging. -h, --help help for scout -n, --no-colours Disable coloured output. -p, --parallelism int Parallel routines to use for sending requests. (default 10) -k, --skip-ssl-verify Skip SSL certificate verification. -w, --wordlist string Path to wordlist file. If this is not specified an internal wordlist will be used. ">Usage:
scout [command]

Available Commands:
help Help about any command
url Discover URLs on a given web server.
version Display scout version.
vhost Discover VHOSTs on a given web server.

Flags:
-d, --debug Enable debug logging.
-h, --help help for scout
-n, --no-colours Disable coloured output.
-p, --parallelism int Parallel routines to use for sending requests. (default 10)
-k, --skip-ssl-verify Skip SSL certificate verification.
-w, --wordlist string Path to wordlist file. If this is not specified an internal wordlist will be used. Discover URLsFlags-x, --extensionsFile extensions to detect. (default php,htm,html,txt]) -f, --filenameFilename to seek in the directory being searched. Useful when all directories report 404 status. -H, --headerExtra header to send with requests e.g. -H "Cookie: PHPSESSID=blah"-c, --status-codesHTTP status codes which indicate a positive find. (default 200,400,403,500,405,204,401,301,302) -m, --methodHTTP method to use. -s, --spiderScan page content for links and confirm their existence. Full example$ scout url http://192.168.1.1

[+] Target URL http://192.168.1.1
[+] Routines 10
[+] Extensions php,htm,html
[+] Positive Codes 200,302,301,400,403,500,405,204,401,301,302

[302] http://192.168.1.1/css
[302] http://192.168.1.1/js
[302] http://192.168.1.1/language
[302] http://192.168.1.1/style
[302] http://192.168.1.1/help
[401] http://192.168.1.1/index.htm
[302] http://192.168.1.1/image
[200] http://192.168.1.1/log.htm
[302] http://192.168.1.1/script
[401] http://192.168.1.1/top.html
[200] http://192.168.1.1/shares
[200] http://192.168.1.1/shares.php
[200] http://192.168.1.1/shares.htm
[200] http://192.168.1.1/shares.html
[401] http://192.168.1.1/traffic.htm
[401] http://192.168.1.1/reboot.htm
[302] http://192.168.1.1/debug
[401] http://192.168.1.1/debug.htm
[401] http://192.168.1.1/debug.html
[4 01] http://192.168.1.1/start.htm

Scan complete. 28 results found. Discover VHOSTs$ scout vhost https://google.com

[+] Base Domain google.com
[+] Routines 10
[+] IP -
[+] Port -
[+] Using SSL true

account.google.com
accounts.google.com
blog.google.com
code.google.com
dev.google.com
local.google.com
m.google.com
mail.google.com
mobile.google.com
www.google.com
admin.google.com
chat.google.com

Scan complete. 12 results found. Installationcurl -s "https://raw.githubusercontent.com/liamg/scout/master/scripts/install.sh" | bashDownload Scout

___________________________
@hacking_Attack
@Hacking_Video

MSA Weekly 1 — “Skill yang harus dimiliki seorang cyber security engineer”

Nah kita udah belajar mengenai sistem operasi yang biasa dipakai di cyber security, sekarang kita belajar beberapa skill yang harus…Continue reading on Medium »
Read more...

MSA Weekly 1 — “5 Operating System Untuk Cyber Security”

Ethical Hacking merupakan suatu kegiatan mengidentifikasi kelemahan dalam sistem komputer ataupun jaringan computer serta dapat…Continue reading on Medium »
Read more...

MSA Weekly 1 — “Skill yang harus dimiliki seorang cyber security engineer”
https://medium.com/@miziimoklet/msa-weekly-1-skill-yang-harus-dimiliki-seorang-cyber-security-engineer-4cbffe7661ec?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Nah kita udah belajar mengenai sistem operasi yang biasa dipakai di cyber security, sekarang kita belajar beberapa skill yang harus…Continue reading on Medium » (https://medium.com/@miziimoklet/msa-weekly-1-skill-yang-harus-dimiliki-seorang-cyber-security-engineer-4cbffe7661ec?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

MSA Weekly 1 — “5 Operating System Untuk Cyber Security”
https://medium.com/@heryantokosasih/msa-weekly-1-5-operating-system-untuk-cyber-security-b57a82fe6de5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Ethical Hacking merupakan suatu kegiatan mengidentifikasi kelemahan dalam sistem komputer ataupun jaringan computer serta dapat…Continue reading on Medium » (https://medium.com/@heryantokosasih/msa-weekly-1-5-operating-system-untuk-cyber-security-b57a82fe6de5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The truth behind password managers

https://external-preview.redd.it/g7z4U5f1_JApbuD4GSJlrTeuBA_ALd-bX3hSyI7VBI0.jpg?width=320&crop=smart&auto=webp&s=c51fd32d5d21aca0139ffdfeed5234113786f1ef submitted by /u/IronVestCommunity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does your phone (or internet router) store a log of every network connection it discovers?

My friend had their new Jeep Cherokee stolen last night. My guess is the jeep was hacked using the vehicles WiFi. If this were the case, whoever hacked it must have been using a mobile wifi/hotspot to discover the vehicles WiFi, which means anyone's phone within range of thar mobile Hotspot must have picked up that IP/Host.

And I'm wondering if there's a way to go into your phone to see all the nearby networks your phone has connected to in the last 24 hours. If there's a way we can find the IP address, we could give that to the police.

Any help would be greatly appreciated!

submitted by /u/Bam607
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
fully evasive malware

Is it possible to develop a piece of malware that is 100% evasive from sandboxes antivirus programs and all reverse engineering tools so that it can not be analysed. I understand that static analysis is still going to be possible but for dynamic and fully automated testing is it possible?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IcedID Malicious Document & Packet Capture Analysis

https://external-preview.redd.it/CZsomET5ae5pUvin7BqLUMDKqRmu7rZbNAihBumS7VM.jpg?width=640&crop=smart&auto=webp&s=d5283e6bb16e1d26d4da1433b437c8130bb7874d submitted by /u/TorchedXorph
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can SIM swapping be practiced in a safe environment with your own SIM?

I don't plan on attempting it anytime soon, since I don't even know how it works. I just watched a YouTube video about it and this question popped into my head.

submitted by /u/obv_throw3334
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tools & Interesting Things for RedTeam Operations

https://external-preview.redd.it/SVvzQZHPcKIohJ24r5xYz6zk-PRLon5WRTHfVljHMMQ.jpg?width=640&crop=smart&auto=webp&s=9a3892a752daf1a06a0c0c2dd1daf1b1536d71e6 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video