Hacking on Medium
Полезные и эффективные алгоритмы для эллиптической кривой secp256k1

https://cdn-images-1.medium.com/max/800/0*TFwApqSDFum3Ps1K.png
В этой статье мы рассмотрим несколько полезных и эффективных алгоритмов для эллиптической кривой E над полем GF(p) , заданной коротким…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding and Exploiting Graph QL

https://cdn-images-1.medium.com/max/1342/0*dAyRNkMHbEXt4RQA
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does Shodan grab RDP screenshots of Windows machines, post-Server 2003?

Hi folks,

Something I've been curious about is how Shodan manages to grab screenshots of unauthenticated Console sessions ("RDP Screenshots") on machines newer than Server 2003, and how I can do the same from my machine. On Server 2003 and older, you can use the -console flag with mstsc.exe (e.g. mstsc -v:(Hostname or IP Address) -console) to initiate this console session, and present a logon screen as if you were physically at the device, with no authentication needed.

However, this was removed in Server 2008 for obvious security reasons, and trying to use the -console flag to connect to a Server 2008 and later machine is ignored - you are prompted for authentication and if successful enter a standard RDP session.

Does anyone know how Shodan does it? Thanks in advance!

submitted by /u/BloodyGenius
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Open innovation: it sounds like a good idea, but in reality…

https://cdn-images-1.medium.com/max/1280/1*bcKtyaLEJsQk2bWSE0VbCg.jpeg
Experience has led me to be increasingly skeptical about open innovation programs in large companies: in most cases I know, the mindset is…

Continue reading on Enrique Dans »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Can I Spy On My Husband’s Phone Without Touching It (2022).

https://cdn-images-1.medium.com/max/600/0*snRR3b8TzihmBCVv.png
How Can I Spy On My Husband’s Phone Without Touching It? Are you considering hacking your husband’s cell phone due to suspicious activity…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If you pwn a server, how would you profit from it?

We're usually invested in learning how to get into a server, but... then what?

Of course if you'd have multiple pwns you'd be able to build up a decent botnet, but what about only one? Is it possible to capitalize on it and what would be more profitable?

General question to understand which types of threat analysis should be invested to try to identify traffic types.

submitted by /u/skully_kiddo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does/Can Hacking Physically Destroy Hardware?

This is in response to a few questions I have received by users asking this question.

Yes, but...

In general, software cannot harm hardware. The vast majority of computers cannot be physically harmed by software.

There are few exceptions that can happen:

When software directly controls hardware; and when the hardware being controlled contains weaknesses that the program may exploit.

Stuxnet, a complex piece of malware particularly designed to ruin computer-controlled centrifuges used to enrich uranium, is the go-to example, as someone has previously highlighted on reddit. The program would cause the centrifuges to speed up and slow down outside of their working boundaries, destroying the motors that powered them.

There have been less spectacular cases. Back in the days of the Apple II, there existed a malicious piece of software that could destroy Apple 5.25" floppy drives by seeking a track that was too high, causing the read/write heads to continuously slam against the stop.

More recently, early multi sync monitors might be destroyed by overheating the switching transistor, breaking the flyback transformer, or both if software set them to a mode the monitor didn't allow.

​

In several examples, the software caused harm by exploiting what may be deemed a hardware design fault.

​

Hardware can also be rendered inoperable by software without being destroyed. Many UEFI systems can be prevented from booting if the flashable firmware is overwritten with junk. It is not "damaged" in hardware, but the built-in software required for startup is missing, which might be a challenging problem to overcome.

submitted by /u/Simonvilla1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Searching across github

Hi

I would like to search across all public github libraries if any sensitive data from my organisation has been published. We recently have received several instances of developers putting out secret keys out in github libraries.

I have no idea how to search across github or tools available to achieve it.

Appreciate any help

Thank you

submitted by /u/Illustrious_Value765
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I created a TCP data transporter in C that you might use
https://www.reddit.com/r/Pentesting/comments/w1oqca/i_created_a_tcp_data_transporter_in_c_that_you/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Krimzon_89 (https://www.reddit.com/user/Krimzon_89)
[link] (https://github.com/BloodhoundAllfather/dembe) [comments] (https://www.reddit.com/r/Pentesting/comments/w1oqca/i_created_a_tcp_data_transporter_in_c_that_you/)

___________________________
@hacking_Attack
@Hacking_Video

MSA Weekly 4 - “How to Get Subdomains Using Subfinder & Sudomy”

Pencarian subdomains biasa dilakukan dalam proses information gathering. Information gathering merupakan proses awal dalam Penetration…Continue reading on Medium »
Read more...

MSA Weekly 4 - “How to Get Subdomains Using Subfinder & Sudomy”
https://medium.com/@ajisnt1907/msa-weekly-4-how-to-get-subdomains-using-subfinder-sudomy-3f6e7ba4c83f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Pencarian subdomains biasa dilakukan dalam proses information gathering. Information gathering merupakan proses awal dalam Penetration…Continue reading on Medium » (https://medium.com/@ajisnt1907/msa-weekly-4-how-to-get-subdomains-using-subfinder-sudomy-3f6e7ba4c83f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My OSWA Review/Guide
https://zaqqaza.medium.com/my-oswa-review-guide-5b24266d4b62?source=rss------bug_bounty-5

Hi everyone! Offensive Security recently released their new web security course, web-200. This course finishes with an exam that, when…Continue reading on Medium » (https://zaqqaza.medium.com/my-oswa-review-guide-5b24266d4b62?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My OSWA Review/Guide

Hi everyone! Offensive Security recently released their new web security course, web-200. This course finishes with an exam that, when…Continue reading on Medium »
Read more...