Hacking Articles Tips Tricks Videos Tutorials

5 views04:16

So HackerOne was one of my favorite places to practice. I stopped completing the challenges so the invites could be used at a later time…Continue reading on Medium » (https://medium.com/@prince0f4llsaiyanz/hackerone-getting-started-811aec7b0ffb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

HackerOne — Getting Started

So HackerOne was one of my favorite places to practice. I stopped completing the challenges so the invites could be used at a later time…

7 viewsedited 04:16

Hacking Articles Tips Tricks Videos Tutorials

7 views05:57

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Specific on Tricks to get people into infecting their devices by disgising LockBit ransomware as copyright claims.

https://external-preview.redd.it/uFkgCBXPuEdwRGqV5JAu0_KucD3GvtBR7s8KuBLSDfY.jpg?width=640&crop=smart&auto=webp&s=7c41fb8c397842e2b4d376e541c3eaab2d3963d6 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Specific on Tricks to get people into infecting their devices by...

Posted in r/hacking by u/Late_Ice_9288 • 1 point and 0 comments

7 viewsedited 05:57

Hacking Articles Tips Tricks Videos Tutorials

https://a.thumbs.redditmedia.com/fThS6Uv788dNdJkDrgBS6kZnHWghOijMmvi0cLqfi28.jpg Multiple command prompts like this pop up on my screen very often and I'm worried that someone has backdoor access to my laptop. They pop up for a few seconds and then they disappear.

Any idea what this is?

Screenshot

submitted by /u/Daddy_is_here1
[link] [comments]

3 views05:57

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is it possible to find a password protected ssd hashcode?

I bought a Samsung T5 a while ago, and had set up a password for it. I know what that password was, but recently I had to change it to update I think. I've forgotten what the new password is, though, so I can't access it. I wouldn't mind factory resetting it, as it just contained my steam library, but samsung requires you to go through a ridiculous process to do a factory reset. I've looked up password crackers, but it seems like I need hashcodes for them to work, and I have no idea how to find them, or if it is even possible.

submitted by /u/realphoenix2233
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is it possible to find a password protected ssd hashcode?

I bought a Samsung T5 a while ago, and had set up a password for it. I know what that password was, but recently I had to change it to update I...

3 viewsedited 05:57

Hacking Articles Tips Tricks Videos Tutorials

3 views06:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
DuplicateDump : Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

DuplicateDump is a fork of MirrorDump with following modifications:

* DInovke implementation
* LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That’s why MirrorDump failed to delete the plugin.
* PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe
* Passing value “0” instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS

DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.

Testing

By loading DuplicateDump in memory, it was able to dump LSASS memory without detection on

* Symantec 14.3
* Kaspersky Enterprise
* Windows Defender

Detected by Cortex XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne.

Usage

Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump

.\DuplicateDump.exe –help
-f, –filename=VALUE The path to write the dump file to
-p, –plugin=VALUE Full file path to LSA plugin
-c, –compress GZip and delete the dump file on disk
-d, –DebugPriv Obtain SeDebugPrivilege
-h, –help Display this help

Example

.\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll
[+] Loading LSA security package
[+] Named pipe connected and replying with current PID 6492
[+] Found duplicated LSASS process handle 0x3d0
[+] Compressed dump file saved to test.gz
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

DuplicateDump : Dumping LSASS With A Duplicated Handle

DuplicateDump is a fork of MirrorDump with following modifications. LSA plugin DLL written in C++ which could be clean up after dumping LSASS.

3 viewsedited 06:17

Hacking Articles Tips Tricks Videos Tutorials

4 views06:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
BirDuster : A Multi Threaded Python Script Designed To Brute Force Directories

BirDusteris a Python based knockoff of the original DirBuster.

BirDusteris a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within.

Installation

Use PIP: pip3 install --user BirDuster

Clone source:

git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install –user -r requirements.txt
python3 BirDuster.py –help

Usage

BirDusterhas the following flags and options (which you can see with the -hflag):

* -h/--help: Show help and exit.
* -v,-vv,-vvv/--verbosity: Verbosity level.
* -p/--port: Port to use while dirbusting. Default 80/443.
* -P/--pfile: If you want to test several ports just write them to a file with newlines.
* -t/--threads: Amount of concurrent threads. Default is 15.
* -o/--output: Output CSV of responses. Default is domain_output.csv.
* -l/--dlist: Directory list file. Default is dir_list.txt.
* -w/--writereponse: Will write HTTP/S responses to files. Default is False.
* -i/--ignorecertificate: Ignore SSL certificate errors. Default is False.
* -u/--useragent: User-Agent to use. Default is random user-agent.
* --ssl: Use SSL or not. -iflag will automatically turn on SSL.
* --timeout: Change default socket timeout. Default is 3 seconds.

usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [–ssl]
[–timeout TIMEOUT]
domain
positional arguments:
domain domain or host to buster
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

BirDuster : A Multi Threaded Python Script Designed

BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application.

11 viewsedited 06:17

Hacking Articles Tips Tricks Videos Tutorials

8 views06:56

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Best Practices for Cybersecurity that Every Business Should Adopt

https://cdn-images-1.medium.com/max/1024/1*1EbFToFhZppq3eI1hhokqw.jpeg
One of the main issues that a company in the current digital era must concentrate on is staff awareness of Cyber Security.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Best Practices for Cybersecurity that Every Business Should Adopt

One of the main issues that a company in the current digital era must concentrate on is staff awareness of Cyber Security. Giving staff the…