hacking: security in practice
Update All PS3 Models To 4.87 Manually For PS3 CFW & PS3HEN - PS3 Hacking & Guides

https://external-preview.redd.it/3axpsXUqHUCfHZOBTs_HA9JDDCGqFWEzxTokc9A7VQU.jpg?width=320&crop=smart&auto=webp&s=776863cabd8db9752b082b61e7676a3005b945ddsubmitted by /u/RANDOMDBZ
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
What is the state of exploit development in 2021 and is it still worth entering the field now(as a beginner)?

Hey guys so, I have been interested in exploit dev(most precisely binary exploitation and things along those lines), but after hearing some people(like the dudes at Day[0]) claim that the field is most likely slowly dying due to modern security countermeasures(like NX, ASLR and many others) that make exploitation difficult, and also due to the fact that most apps are switching to the web I was wondering if it's still worth investing time to learn and master this craft nowadays. Also what does the future(professionally speaking) look like for an aspiring exploit dev? Are there(currently) or will there still be many job opportunities in this field in say 5 years from now? Is Kernel exploitation also worth looking into once one understands the fundamentals? And finally what is your advice for someone(a beginner) who wishes to grow and excel in this field.

Apologies for the long and possibly convoluted question, but I am currently going over the fundamentals and while I am enjoying it so far, I am beginning to see that this is quite a complex field, so If I spend a year or two learning it I would hate to later find out that there are no more opportunities for people with this skill set.

PS: I am currently 25 years old willing to spend a year or two developing the skills so if necessary be as brutal as you need to be in your answers if you think I need a reality check, for I'd rather get "tough love" now than a tougher time making ends meet in 2 years(or however long it takes to get job ready). Thanks

submitted by /u/yuyumprod
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
I got hacked

Someone recently got into my instagram account and invaded my privacy. I want to know who it is. I somehow managed to get the IP address but its giving me a location of within 10 mile radius. Can somebody give me the exact location of it please it will be a great help the ip address is 2001:8f8:1425:e8d:512b:e3cb:506b:5937 (note the Latitude: 25.3569

Longitude: 55.405 is not the actual location i think its the default of anyone in the area)

submitted by /u/ed17xo4
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
How SUDO on Linux was HACKED! // CVE-2021-3156

https://external-preview.redd.it/jyPR3k9qnXHIEE5CyM8xWY5V8cIfMImIkxdos6PSdsk.jpg?width=320&crop=smart&auto=webp&s=b4eea069574ba8e21333e2a49eceb291d0f21e28submitted by /u/Morlax97
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

FreeCourseSite – Download Udemy Paid Courses For Free
Python PCEP: Become Certified Entry-Level Python Programmer

Python PCEP: Become Certified Entry-Level Python ProgrammerA course for absolute beginners that want to learn Python and pass the PCEP exam (Certified Entry-Level Python Programmer)What you’ll learnPython PCEP: Become Certified Entry-Level Python Programmer
*

Start programming from scratch
*

Understand Python basics
*

Prepare for PCEP-30-01 exam
*

Get basic Python skills for Software Development, Data Science, Machine Learning, etc.
*

Apply for entry-level Python jobs
*

Code along with me for real-life programming practice Requirements*

A computer with Internet access
*

Basic computer literacy
*

Willingness to learn https://s.w.org/images/core/emoji/13.0.1/72x72/1f642.png DescriptionWelcome! My name’s Adrian and I’m a professional Software Developer. If you’ve never written code before and want to try programming for yourself, then you’ve just found an excellent course for that!

According to statistics, Python is in the top 3 programming languages all around the world. It is much easier and quicker to learn than most other languages. At the same time, it’s extremely popular among software developers, data analysts, and other IT professions. All of this makes it an excellent choice for your first programming language.

COURSE OVERVIEW

In this course, you’ll learn the fundamentals of Python 3 and you’ll get prepared for the Certified Entry-Level Python Programmer exam (PCEP). You don’t need any programming experience. I’ll show you how to install Python and start writing code from scratch.

In the videos, we dive straight into the code to get you started as quickly as possible. You’ll get a chance to code along with me for the best learning experience. You’ll also get to write your own little programs to practice your skills.

There are 5 exam blocks when you sit the PCEP exam. Consequently, this course has 5 main modules, each one focusing on a different exam block. At the end of each module, we’ll do a short summary and you’ll have a chance to solve an exam quiz to check your skills.
This course also comes with a mock PCEP exam at the very end. It will have the same format as your actual exam, with the same passing grade and time limit. It will show you what kinds of questions you can expect. COURSE ADVANTAGES• concise – the short video lectures focus on the most important aspects: there are just 4 hours of videos to get you started ASAP

• based on practice – instead of useless academic theory, you learn the best developing practices drawn from my work experience,

• reasonably priced – compared to stationary developer boot camps, the course is much cheaper, so you save not only time but also money,

• available anywhere, anytime – the online form lets you run the course in the most convenient place (at home, work, or in a café) and time (while commuting by metro or relaxing at home after work), so you can adjust it to your agenda,

• accessible on desktop, mobile, and TV – you can display my lectures on the device of your choice, so you don’t have to stick to your PC,

• certificate of completion – after completing the course, you will receive a printable certificate that will make your resume more attractive.

Intro video music courtesy of Bensound Who this course is for:* Beginners with no programming experience
* Wanna-be software developers and data analysts
* People who need the minimum of Python for Machine Learning, Data Science, and Artificial Intelligence
* Beginner programmers who want to pass PCEP-30-01
*
Last updated 4/2021 Basic Python Scripting for Dynamo
Content From: https://www.udemy.com/course/python-pcep/ Download Now
The post Python PCEP: Become Cer[...]

FreeCourseSite – Download Udemy Paid Courses For Free
React Next.js – Cookie Based Secure Authentication System

React Next.js – Cookie Based Secure Authentication System
Learn to build secure production-ready react apps with a cookie-based authentication system instead of using local storage
What you’ll learn

React Next.js – Cookie Based Secure Authentication System
*

Learn to implement a secure authentication system using cookies
*

Learn to use cookies instead of local storage
*

Learn to integrate react and nextjs project with nodejs express and MongoDB API
*

Learn to protect your API with CSRF (cross-site request forgery) attacks
*

Learn to create protected pages
*

Learn to use context API to build your own redux like state management
*

Learn to use Ant Design and Bootstrap 4 with react and nextjs
*

Learn to build a boilerplate project that can be used as a base for all your future projects
Requirements

*

Previous experience with the basics of reactjs
Description
All great apps require a secure and performant authentication system before going live. There is a lot of discussion about the insecurities associated with saving JWT tokens in local storage for authentication purposes.

Generally, cookies are considered a much better solution when it comes to building secure authentication. HTTP-only cookies are not accessible to JavaScript in the browser, unlike local storage. Your server will issue an HTTP-only cookie to the client (browser) and it will include the cookie in its headers each time a request is sent to its origin server. So your server will have control over the cookie it issues.

With the help of some npm libraries, we will also be able to protect ourselves from CSRF (cross-site request forgery) attacks which are generally associated with cookie-based authentication.

By the end of this course not only you will have to build a production-ready fast and secure authentication system, but also have a solid boilerplate project that can be used as a base starter kit for all your future projects. This way you save a lot of time and headache of setting up the base project with login, registration, authentication, protected pages, etc

So if you have been concerned about the security of your apps, this course is your ultimate solution.
Who this course is for:

* Any react node or MERN stack developer looking to build a production-ready authentication system using cookies
* Anyone looking to build an auth ready boilerplate project that can be used as a base for future projects
*
Last updated 3/2021
How to Create a Secure Website With WordPress
Content From: https://www.udemy.com/course/react-cookie-based-authentication/
Download Now
The post React Next.js – Cookie Based Secure Authentication System appeared first on FreeCourseSite - Download Udemy Paid Courses For Free.

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Introduction to Ethical Hacking

What are the Objectives of Ethical Hacking?

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Cybersecurity is critical for businesses of all sizes.

Hackers are criminals who gain unauthorized access to a network and devices, usually with the intent to steal sensitive data, such as…

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Oopsie — HacktheBox Writeup ( getting root flag without actually being root )

https://cdn-images-1.medium.com/max/899/1*oLF7lYjrjfhsKop3wA6y2w.png
Introduction:

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Writeup: Traceback on Hack The Box

https://cdn-images-1.medium.com/max/600/1*_ufxuDRApB-pNMrRI2L0xg.png
The traceback box is an easy rated machine on hackthebox.eu.

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking GraphQL for Fun and Profit — Part 2— Methodology and Examples

Hi everyone!!Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

KitPloit - PenTest Tools!
SlackPirate - Slack Enumeration And Extraction Tool - Extract Sensitive Information From A Slack Workspace

https://1.bp.blogspot.com/-cAx1kRkAo3A/YIJaG6I9rTI/AAAAAAAAV7Y/jO5NHZSI0hUcAu6fiQ5vgciNQbglXmxIwCNcBGAsYHQ/w640-h334/SlackPirate_3_SlackPirate%252520--token.png This is a tool developed in Python which uses the native Slack APIs to extract 'interesting' information from a Slack workspace given an access token.

As of May 2018, Slack has over 8 million customers and that number is rapidly rising - the integration and 'ChatOps' possibilities are endless and allows teams (not just developers!) to create some really powerful workflows and Slack bot/application interactions.
As is the way with corporations large and small, it is not unusual for tools such as Slack to fly under the Information Security governance/policy radar which ultimately leads to precarious situations whereby sensitive and confidential information end up in places they shouldn't be.

The purpose of this tool is two-fold:

* Red-teamers can use this to identify and extract sensitive information, documents, credentials, etc from Slack given a low-privileged account to the organisation's Workspace. This could allow an attacker to pivot on to other systems and/or gain far more intimate knowledge and inner-workings of corporate systems/applications
* Blue-teamers can use this to identify and detect sensitive information on the Workspace that perhaps shouldn't exist on there in the first instance. Blue-teamers can use this information for internal training and awareness purposes by demonstrating the output of the tool and the type of 'things' that could be used and abused by (internal as well as external) attackers.

The tool allows you to easily gather sensitive information for offline viewing at your convenience.

Note: I'm a Python n00b and have no doubt that the script can be optimised and improved massively - please feel free to make pull requests; I'll review and merge them as appropriate! Information GatheringThe tool uses the native Slack APIs to extract 'interesting' information and looks for the following information, today:

* Print to standard output the domains (if any) that are allowed to register for the Workspace - I've seen stale, old and forgotten domains here that can be purchased and used to register for the Workspace
* Links to S3 buckets
* Passwords
* AWS Access/Secret keys
* Private Keys
* Pinned messages across all Channels
* References to links and URLs that could provide further access to sensitive materials - think: Google Docs, Trello Invites, links to internal systems, etc
* Files which could contain sensitive information such as .key, .sh, the words "password" or "secret" embedded in a document, etc Slack CookieThe Slack web application uses a number of cookies - the one of special interest is called, wait for it... d. This dcookie is the same across all Workspaces the victim has access to. What this means in reality is that a single stolen dcookie would allow an attacker to get access to all of the Workspaces the victim is logged-in to; my experience with the Slack web application is that once you are logged in, you'll remain logged in indefinitely. Slack TokenThe Slack API token is a per-workspace token. One token cannot (as far as I know) access other workspaces in the same way the dcookie above allows access to all Workspaces.

For the tool to search for and extract information, you will need to provide it an API token. There are two straight forward ways of doing this:

* Provide the tool a dcookie by using the --cookieflag. The tool will output the associated Workspaces and tokens
* Provide the tool with a token directly by using the --tokenflag. You can find t[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

his by viewing the source of the Workspace URL and doing a search for XOXThe token will look something like this: api_token: "xoxs-x-x-x-x"Make a copy of that and pass that in to the script using the --tokenflag. BuildingThe script has been developed, tested and confirmed working on Python 3.5, 3.6 and 3.7. A quick test on Python 2 presented some compatibility issues. Linux with virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install virtualenv* virtualenv SlackPirate* source SlackPirate/bin/activate* pip install -r requirements.txt* ./SlackPirate.py --helpLinux without virtualenv* git clone https://github.com/emtunc/SlackPirate* chmod +x SlackPirate.py* pip install -r requirements.txt* ./SlackPirate.py --helpWindows with virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install virtualenv* virtualenv SlackPirate* SlackPirate\Scripts\activate.bat* pip install -r requirements.txt* python SlackPirate.py --helpWindows without virtualenv* git clone https://github.com/emtunc/SlackPirate* pip install -r requirements.txt* python SlackPirate.py --helpUsagepython3 SlackPirate.py --help* Display the help menu - this includes information about all scan modules you can explicitly select or ignore python3 SlackPirate.py --interactive* Interactive mode instructs the tool to allow you to provide a token or cookie, and choose scans to run through a console UI rather than via command line arguments. python3 SlackPirate.py --cookie This will do the following:

* Find any associated Workspaces that can be accessed using that cookie
* Connect to any Workspaces that were returned
* Look for API Tokens in each returned Workspace
* Print to standard output for use in the next command python3 SlackPirate.py --token This will do the following:

* Check Token validity and only continue if Slack returns True* Print to standard output if the token supplied has admin, owner or primary_owner privileges
* Print to standard output if the tool found any @domains that can be used to register for the Slack Workspace (you may be surprised by what you find here - if you're lucky you'll find an old, unused, registerable domain here)
* Dump team access logs in .json format if the token provided is a privileged token
* Dump the user list in .json format
* Find references to S3 buckets
* Find references to passwords and other credentials
* Find references to AWS keys
* Find references to private keys
* Find references to pinned messages across all Slack channels
* Find references to interesting URLs and links
* Lastly, the tool will attempt to download files based on pre-defined keywords python3 SlackPirate.py --token * This will instruct the tool to only run the S3 scan python3 SlackPirate.py --token * This will instruct the tool to run all scans apart from the S3 scan python3 SlackPirate.py --token * Verbose mode will output files in .CSV - will provide a lot more information such as channel names, usernames, perma-links and more. Screenshotshttps://1.bp.blogspot.com/-KDRsoQT1B1I/YIJaPg9nNBI/AAAAAAAAV7g/dAT9YhzG1OQOdZXwy0lLyIAcA4kK9yUbACNcBGAsYHQ/w640-h334/SlackPirate_3_SlackPirate%252520--token.png https://1.bp.blogspot.com/-ptWJUtV8Qyo/YIJaPtdvtvI/AAAAAAAAV7c/dBAkJvbFVEYu_QRzNT4xUGuhswxf8ursACNcBGAsYHQ/w640-h96/SlackPirate_2_SlackPirate%252520--cookie.png Join the conversationA public Slack Workspace has been set-up where anyone can join and discuss new features, changes, feature requests or s[...]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

imply ask for help. Here's the invite link: https://join.slack.com/t/slackpirate/shared_invite/zt-6o3d9tjq-PhbMxtM2o5ALgFkOB9V_dg Download SlackPirate

___________________________

@hacking_Attack

@Hacking_Video
___________________________