hacking: security in practice
Malware scripting for windows

Question, what language do you consider the best for low level (networking, keylogger etc) scripting? As far as i know linux uses shell but after searching online i couldn't find in what language windows targeting malware is written in.

submitted by /u/shurikkenn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can SMTP be used for anything other than Recon (& emailing)?

I’ve been stuck on a CTF for awhile, and all the machine has open is: DNS, SMTP, and SSH. I’ve done the User Enumeration from SMTP, and I’m assuming that one of them can be used for SSH later, but an entire day of unsuccessful Brute-Forcing with Hydra makes me think I’m missing something. One of the “users” is MySQL, but I don’t think I can do anything with that until I SSH in.

TL;DR

All the guides I see online for Pen-testing SMTP servers are about User Enumeration or sending spoofed emails. Is that all SMTP is good for?

If any 1337 hackers have advice for a noob, I’d really appreciate it. Thanks for your time!

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does reconnaissance work in real life?

When I do CTF or hackthebox, I usually don't hesitate to launch nmap/burp to scan everything I can to gather as much info as possible. However, I imagine in real life security systems will detect unusual activity after a reasonable amount of probes. So how does this work in real life? It seems to me that any scanning probes would be immediately banned. How do pentesters overcome this?

submitted by /u/kasssom
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Paramspider lead to find SQLI vulnerability
https://medium.com/@arshiadev/paramspider-lead-to-find-sqli-vulnerability-995f6159564c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this tutorial you will learn how real hackers can find injection vulnerabilities like :Continue reading on Medium » (https://medium.com/@arshiadev/paramspider-lead-to-find-sqli-vulnerability-995f6159564c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Paramspider lead to find SQLI vulnerability

In this tutorial you will learn how real hackers can find injection vulnerabilities like :Continue reading on Medium »
Read more...

Hacking on Medium
Crypt 1 | Defend the Web

https://cdn-images-1.medium.com/max/700/0*tCTRjfCk2occExUj.jpg
reve noitpyrcne tselpmiS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Malicious Steganography

https://cdn-images-1.medium.com/max/2048/1*PnTHNCI8T-cAP7d8m213mg.jpeg
How to inject malicious powershell scripts into an image?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ffuf txt file defined, but not found in headers, method, URL or POST data

The command ffuf -u https://codingo.com/FUZZ/ -w D:/code.txt gives the following error I wrote in the title. (Keyword /code.txt defined, but not in headers, method, URL or POST data. What can I do to fix?

submitted by /u/wahedstrijder
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PayPal phishing kit added to hacked WordPress sites for full ID theft

https://external-preview.redd.it/UnwAjT8m9O_LltZF53zfau0pRr2ktmmP2hzID9YmQtw.jpg?width=640&crop=smart&auto=webp&s=3751204d76fc03e2983f3f69f0d5a4e5834b0aae submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
This is the Code the FBI Used to Wiretap the World Motherboard is publishing parts of the code for the Anom encrypted messaging app, which was secretly managed by the FBI in order to monitor organized crime on a global scale.

https://external-preview.redd.it/Gjr3kK8H2C8djP4qgz2CU9UPWCoNGdzA4Mvpf9Mgd-4.jpg?width=640&crop=smart&auto=webp&s=68a431be5ac82bf3eafffcec6f31a62c30f387aa submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft links Holy Ghost ransomware operation to North Korean hackers

https://external-preview.redd.it/sTt-1l5QDbfVw4CxsMtMvEyN1zLLDTuzOBb4duoCwzU.jpg?width=640&crop=smart&auto=webp&s=f442fdbea0b1813b58c38eaf8130e52ac00568bc submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Here is our blog to promote our services! xD
https://www.reddit.com/r/Pentesting/comments/vzhiz0/here_is_our_blog_to_promote_our_services_xd/

Every other blog about pentesting bores our clients to tears, so we wrote one that won't. Sharing to hopefully get a laugh, and since we got called out last time, the full disclosure is that we ARE trying to promote ourselves a bit. But only a little. https://www.metadefencelabs.com/single-post/pentesting-the-shortest-sweetest-outline-you-ll-ever-find submitted by /u/MetaDefence_Labs (https://www.reddit.com/user/MetaDefence_Labs)
[link] (https://www.reddit.com/r/Pentesting/comments/vzhiz0/here_is_our_blog_to_promote_our_services_xd/) [comments] (https://www.reddit.com/r/Pentesting/comments/vzhiz0/here_is_our_blog_to_promote_our_services_xd/)

___________________________
@hacking_Attack
@Hacking_Video

THIS IS WHAT I CALL MASS IDOR

A Chained Mass IDORContinue reading on Medium »
Read more...

Information Source Code Disclosure Directory .git — MNC Play

Pada tanggal 15 Oktober 2020 saya menemukan BUG SQL Injection di payment.mncplay.id tetapi tidak ada respons dari pihak MNC Play.Continue reading on Medium »
Read more...