Hacking Articles Tips Tricks Videos Tutorials
___________________________ @hacking_Attack @Hacking_Video ___________________________
Hacking on Medium
Hacktivism. La libertà nelle maglie della rete
https://cdn-images-1.medium.com/max/600/1*oi8oBvP8L3ossAOpH3aaiQ.jpeg
di Arturo Di Corinto e Tommaso Tozzi
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hacktivism. La libertà nelle maglie della rete
https://cdn-images-1.medium.com/max/600/1*oi8oBvP8L3ossAOpH3aaiQ.jpeg
di Arturo Di Corinto e Tommaso Tozzi
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hacking Articles Tips Tricks Videos Tutorials
___________________________ @hacking_Attack @Hacking_Video ___________________________
Black Hat Ethical Hacking
Mount Locker Ransomware Aggressively Changes Up Tactics
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Mount Locker Ransomware Aggressively Changes Up TacticsPost Views: 97
Reading Time: 2 Minutes
The Mount Locker ransomware has shaken things up in recent campaigns with more sophisticated scripting and anti-prevention features, according to researchers. And, the change in tactics appears to coincide with a rebranding for the malware into “AstroLocker.”
According to researchers, Mount Locker has been a swiftly moving threat. Having just hit the ransomware-as-a-service scene in the second half of 2020, the group released a major update in November that broadened its targeting capabilities (including searching for file extensions utilized by TurboTax tax-return software to encrypt). It also added improved detection evasion. Attacks have continued to escalate, and now, another major update signals “an aggressive shift in Mount Locker’s tactics,” according to an analysis released Thursday by GuidePoint Security. Mount Locker Adds Security-Evasion FeaturesLike many ransomware gangs, the operators not only lock up files, but also steal data and threaten to leak it if the ransom isn’t paid, in a double-extortion gambit. They’re also known for demanding multimillion-dollar ransoms and stealing especially large amounts of data (up to 400 GB).
In terms of technical approach, Mount Locker uses off-the-shelf, legitimate tools to move laterally, steal files and deploy encryption, GuidePoint noted. This includes the use of AdFind and Bloodhound for Active Directory and user reconnaissance; FTP for file exfiltration; and the pen-testing tool CobaltStrike for lateral movement and the delivery and execution of encryption, potentially through psExec.
See Also: Pulse Secure Critical Zero-Day Security Bug Under Active Exploit “After the environment is mapped, backup systems are identified and neutralized, and data is harvested, systems are encrypted with target-specific ransomware delivered via the established command-and-control channels (C2),” said Drew Schmitt, senior threat intelligence analyst for GuidePoint, in the analysis. “These payloads include executables, extensions and unique victim IDs for payment.”
More recent campaigns have jazzed things up with new batch scripts, researchers noted. These are designed to disable detection and prevention tools.
“[This] indicates that Mount Locker is increasing its capabilities and is becoming a more dangerous threat,” according to Schmitt. “These scripts were not just blanket steps to disable a large swath of tools, they were customized and targeted to the victim’s environment.”
Another change in tactics for the group involves using multiple CobaltStrike servers with unique domains. It’s an added step that helps with detection evasion, but Schmitt noted that it’s not often seen because it requires much more management to put into practice effectively.
See Also: Offensive Security Tool: Hunt Biotech Firms in Cyberattack Sightshttps://media.threatpost.com/wp-content/uploads/sites/103/2021/04/22150002/MountLocker-300x258.png
A Mount Locker ransom note. Click to enlarge. Source: GuidePoint Security.
The changes have been accompanied by an uptick in Mount Locker attacks, especially those taking aim at companies in the biological tech industry. Schmitt said there has been a surge in incidents in this segment, indicating that there may be a larger campaign afoot that aggressively targets healthcare-adjacent industries.
“Biotech companies, in particular, are a prime target for ransomware because of their position in an industry flush not only with ca[...]
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Mount Locker Ransomware Aggressively Changes Up Tactics
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Mount Locker Ransomware Aggressively Changes Up TacticsPost Views: 97
Reading Time: 2 Minutes
The Mount Locker ransomware has shaken things up in recent campaigns with more sophisticated scripting and anti-prevention features, according to researchers. And, the change in tactics appears to coincide with a rebranding for the malware into “AstroLocker.”
According to researchers, Mount Locker has been a swiftly moving threat. Having just hit the ransomware-as-a-service scene in the second half of 2020, the group released a major update in November that broadened its targeting capabilities (including searching for file extensions utilized by TurboTax tax-return software to encrypt). It also added improved detection evasion. Attacks have continued to escalate, and now, another major update signals “an aggressive shift in Mount Locker’s tactics,” according to an analysis released Thursday by GuidePoint Security. Mount Locker Adds Security-Evasion FeaturesLike many ransomware gangs, the operators not only lock up files, but also steal data and threaten to leak it if the ransom isn’t paid, in a double-extortion gambit. They’re also known for demanding multimillion-dollar ransoms and stealing especially large amounts of data (up to 400 GB).
In terms of technical approach, Mount Locker uses off-the-shelf, legitimate tools to move laterally, steal files and deploy encryption, GuidePoint noted. This includes the use of AdFind and Bloodhound for Active Directory and user reconnaissance; FTP for file exfiltration; and the pen-testing tool CobaltStrike for lateral movement and the delivery and execution of encryption, potentially through psExec.
See Also: Pulse Secure Critical Zero-Day Security Bug Under Active Exploit “After the environment is mapped, backup systems are identified and neutralized, and data is harvested, systems are encrypted with target-specific ransomware delivered via the established command-and-control channels (C2),” said Drew Schmitt, senior threat intelligence analyst for GuidePoint, in the analysis. “These payloads include executables, extensions and unique victim IDs for payment.”
More recent campaigns have jazzed things up with new batch scripts, researchers noted. These are designed to disable detection and prevention tools.
“[This] indicates that Mount Locker is increasing its capabilities and is becoming a more dangerous threat,” according to Schmitt. “These scripts were not just blanket steps to disable a large swath of tools, they were customized and targeted to the victim’s environment.”
Another change in tactics for the group involves using multiple CobaltStrike servers with unique domains. It’s an added step that helps with detection evasion, but Schmitt noted that it’s not often seen because it requires much more management to put into practice effectively.
See Also: Offensive Security Tool: Hunt Biotech Firms in Cyberattack Sightshttps://media.threatpost.com/wp-content/uploads/sites/103/2021/04/22150002/MountLocker-300x258.png
A Mount Locker ransom note. Click to enlarge. Source: GuidePoint Security.
The changes have been accompanied by an uptick in Mount Locker attacks, especially those taking aim at companies in the biological tech industry. Schmitt said there has been a surge in incidents in this segment, indicating that there may be a larger campaign afoot that aggressively targets healthcare-adjacent industries.
“Biotech companies, in particular, are a prime target for ransomware because of their position in an industry flush not only with ca[...]
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hacking Articles Tips Tricks Videos Tutorials
___________________________ @hacking_Attack @Hacking_Video ___________________________
Black Hat Ethical Hacking
Offensive Security Tool: ADFSBrute
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: ADFSBrutePost Views: 15 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 5 Minutes
Offensive Security Tool: ADFSBrute GitHub Link
adfsbrute
ADFSBrute by ricardojoserf, is a script to test credentials against Active Directory Federation Services (ADFS), calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks.
The main idea is carrying out password spraying attacks with a random and high delay between each test and using a list of proxies or Tor to make the detection by the Blue Team more difficult. Brute force attacks are also possible, or testing credentials with the format username:password (for example from Pwndb). Tested logins will get stored in a log file to avoid testing them twice.
Usage
Password spraying with password “Company123”, tor password is “test123” and changing the IP every 3 requests:
Password spraying with password “Company123”, tor password is “test123”, changing the IP for every request, random delay time between 10 and 20 seconds and do not randomize the order of users:
Finding ADFS url:
Using Tor
To use Tor to change the IP for every request, you must hash a password:
This script is implemented to test in security audits, DO NOT use without proper authorization from the company owning the ADFS or you will block acco[...]
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Offensive Security Tool: ADFSBrute
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: ADFSBrutePost Views: 15 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 5 Minutes
Offensive Security Tool: ADFSBrute GitHub Link
adfsbrute
ADFSBrute by ricardojoserf, is a script to test credentials against Active Directory Federation Services (ADFS), calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks.
The main idea is carrying out password spraying attacks with a random and high delay between each test and using a list of proxies or Tor to make the detection by the Blue Team more difficult. Brute force attacks are also possible, or testing credentials with the format username:password (for example from Pwndb). Tested logins will get stored in a log file to avoid testing them twice.
Usage
./adfsbrute.py -t TARGET [-u USER] [-U USER_LIST] [-p PASSWORD] [-P PASSWORD_LIST] [-UL userpassword_list]
[-m MIN_TIME] [-M MAX_TIME] [-tp TOR_PASSWORD] [-pl PROXY_LIST] [-n NUMBER_OF_REQUESTS_PER_IP]
[-s STOP_ON_SUCCESS] [-r RANDOM_COMBINATIONS] [-d DEBUG] [-l LOG_FILE]The parameters for the attacks are: * -t: Target domain. Example: test.com
* -u: Single username. Example: agarcia@domain.com
* -U: File with a list of usernames. Example: users.txt
* -p: Single password: Example: Company123
* -P: File with a list of passwords. Example: passwords.txt
* -UP: File with a list of credentials in the format "username:password". Example: userpass.txt
* -m : Minimum value of random seconds to wait between each test. Default: 30
* -M : Maximum value of random seconds to wait between each test. Default: 60
* -tp: Tor password (change IP addresses using Tor)
* -pl: Use a proxy list (change IP addresses using a list of proxy IPs)
* -n: Number of requests before changing IP address (used with -tp or -pl). Default: 1
* -s: Stop on success, when one correct credential is found. Default: False
* -r: Randomize the combination of users and passwords. Default: True
* -d: Show debug messages. Default: True
* -l: Log file location with already tested credentials. Default: tested.txtExamplesPassword spraying with password “Company123”, tor password is “test123” and changing the IP every 3 requests:
python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -n 3https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image1.png Password spraying with password “Company123”, tor password is “test123”, changing the IP for every request, random delay time between 10 and 20 seconds and do not randomize the order of users:
python3 adfsbrute.py -t company.com -U users.txt -p Company123 -tp test123 -m 10 -M 20 -r Falsehttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image2.png Finding ADFS url:
python3 adfsbrute.py -t company.comhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image3.png Using Tor
To use Tor to change the IP for every request, you must hash a password:
tor --hash-password test123In the file /etc/tor/torrc, uncomment the variable ControlPort and the variable HashedControlPassword, and in this last one add the hash: ControlPort 9051
HashedControlPassword 16:7F314CAB402A81F860B3EE449B743AEC0DED9F27FA41831737E2F08F87Restart the tor service and use this password as argument for the script (“-tp test123” or “–tor_password 123”) service tor restartNoteThis script is implemented to test in security audits, DO NOT use without proper authorization from the company owning the ADFS or you will block acco[...]
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Mount Locker Ransomware Aggressively Changes Up Tactics https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Mount Locker Ransomware Aggressively Changes Up TacticsPost Views: 97 …
sh but also with highly sensitive IP,” Schmitt explained. “Additionally, connections to other research organizations increase the potential to damage the victim’s reputation in the industry and put business dealings at risk.”
Healthcare and biotech companies are also prime targets given that they stand to lose the most if operations are halted for too long or critical IP is lost, Schmitt pointed out. So, “attackers view them as more likely to pay the requested ransom quickly,” he said.
All of this has happened as Mount Locker appears to be rebranding to AstroLocker. Schmitt pointed out that “the verbiage and victims listed on both variants’ shaming sites share significant overlap.” He added, “this could signal a shift in the group’s overall tactics and an effort to fully rebrand as a more insidious threat.” See Also: Hacking Stories: When two young hackers played war games with PentagonOrganizations can look for signs of Mount Locker or AstroLocker within their environments, such as CobaltStrike stagers and beacons; and, they should monitor for the staging and exfiltration of files via FTP.
“While these would always be cause for alarm…an updated, more aggressive Mount Locker and the dramatic increase in attacks attributable to the group make these indicators of compromise particularly alarming,” Schmitt concluded. Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/linkedin-90x90.png Data from 500M LinkedIn Users Posted for Sale Online2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/cisco-patch-90x90.png Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers2 weeks ago
The post Mount Locker Ransomware Aggressively Changes Up Tactics first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Healthcare and biotech companies are also prime targets given that they stand to lose the most if operations are halted for too long or critical IP is lost, Schmitt pointed out. So, “attackers view them as more likely to pay the requested ransom quickly,” he said.
All of this has happened as Mount Locker appears to be rebranding to AstroLocker. Schmitt pointed out that “the verbiage and victims listed on both variants’ shaming sites share significant overlap.” He added, “this could signal a shift in the group’s overall tactics and an effort to fully rebrand as a more insidious threat.” See Also: Hacking Stories: When two young hackers played war games with PentagonOrganizations can look for signs of Mount Locker or AstroLocker within their environments, such as CobaltStrike stagers and beacons; and, they should monitor for the staging and exfiltration of files via FTP.
“While these would always be cause for alarm…an updated, more aggressive Mount Locker and the dramatic increase in attacks attributable to the group make these indicators of compromise particularly alarming,” Schmitt concluded. Source: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-11-90x90.png Pulse Secure Critical Zero-Day Security Bug Under Active Exploit1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/firefox_patch-90x90.jpg Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Discord-Nitro-e1618858537976-90x90.png NitroRansomware Asks for Discord Gift Codes, Steals Access Tokens3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-10-90x90.png WordPress could treat Google FloC as a security issue4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Crypto_Mining_Bitcoin-90x90.jpg Attackers Target ProxyLogon Exploit to Install Cryptojacker1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/patchtues1-90x90.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in total1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-90x90.jpg Chrome Zero-Day Exploit Posted on Twitter1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Clubhouse2-e1618258606781-90x90.png 1.3M Clubhouse Users’ Data Dumped in Hacker Forum for Free1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/linkedin-90x90.png Data from 500M LinkedIn Users Posted for Sale Online2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/cisco-patch-90x90.png Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers2 weeks ago
The post Mount Locker Ransomware Aggressively Changes Up Tactics first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Offensive Security Tool: ADFSBrute https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: ADFSBrutePost Views: 15 https://www.blackhatethicalhacking.com/wp-…
unts. Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/logo-90x90.png Offensive Security Tool: Hunt7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration-90x90.png Offensive Security Tools: FireEye Red Team Tool Countermeasures4 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: ADFSBrute first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
___________________________
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/12/hack-like-pro-snort-ids-for-aspiring-hacker-part-2-setting-up-basic-configuration-90x90.png Offensive Security Tools: FireEye Red Team Tool Countermeasures4 months ago
style="display:block; text-align:center;"
data-ad-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: ADFSBrute first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Vajra – an automated web hacking framework for web applications.https://hakin9.org/vajra-framework/
#Vajra #hack #web
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Vajra #hack #web
___________________________
@hacking_Attack
@Hacking_Video
___________________________
SQL Injection Cheat Sheet.https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/
#SQL #Injection #CheatSheet
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#SQL #Injection #CheatSheet
___________________________
@hacking_Attack
@Hacking_Video
___________________________
The Mobile App Pentest cheat sheet.https://github.com/whb224117/MobileApp-Pentest-Cheatsheet
#cheatsheet #Mobile
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#cheatsheet #Mobile
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Cheat Sheet: XSS that works in 2021.https://netsec.expert/posts/xss-in-2021/index.html
#XSS #Cheatsheet
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#XSS #Cheatsheet
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hide Secrets and Crack JPEG File Password via Steganography Tools.https://secnhack.in/hide-secrets-and-crack-jpeg-file-password-via-steganography-tools/
#Steganography #Tools
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Steganography #Tools
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Hash Buster - Why crack hashes when you can bust them?https://hakin9.org/hash-buster-why-crack-hashes-when-you-can-bust-them/
#Hash #Buster
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Hash #Buster
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Darkdump – Search The Deep Web (Dark Web).
https://secnhack.in/darkdump-search-the-deep-web-dark-web/
#darkdump
___________________________
@hacking_Attack
@Hacking_Video
___________________________
https://secnhack.in/darkdump-search-the-deep-web-dark-web/
#darkdump
___________________________
@hacking_Attack
@Hacking_Video
___________________________
How APTs Use Reverse Proxies to Nmap Internal Networks.https://www.varonis.com/blog/nmap-reverse-proxies/
#Nmap
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Nmap
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Using
#OSINT
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Archive.org for OSINT Investigations.https://osintcurio.us/2021/03/03/using-archive-org-for-osint-investigations/#OSINT
___________________________
@hacking_Attack
@Hacking_Video
___________________________
retoolkit: Toolbox for Reverse Engineering.https://en.iguru.gr/2021/03/21/retoolkit-ergaleiothiki-gia-reverse-engineering/
#retoolkit #RE
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#retoolkit #RE
___________________________
@hacking_Attack
@Hacking_Video
___________________________
RapidScan – The Multi-Tool Web Vulnerability Scanner.https://secnhack.in/rapidscan-the-multi-tool-web-vulnerability-scanner/
#RapidScan #Web
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#RapidScan #Web
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Subcert - a subdomain enumeration tool.https://hakin9.org/subcert-a-subdomain-enumeration-tool/
#Subcert
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Subcert
___________________________
@hacking_Attack
@Hacking_Video
___________________________
Nessus Vulnerability Scanner Tool Installation.https://secnhack.in/nessus-vulnerability-scanner-tool-installation/
#Nessus
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#Nessus
___________________________
@hacking_Attack
@Hacking_Video
___________________________
I-See-You - a tool to find the location of users during social engineering or phishing engagements.https://hakin9.org/i-see-you-a-tool-to-find-the-location-of-users-during-social-engineering-or-phishing-engagements/
#phishing
___________________________
@hacking_Attack
@Hacking_Video
___________________________
#phishing
___________________________
@hacking_Attack
@Hacking_Video
___________________________