modDetective is a small Python tool that chronologizes files based on modification (https://www.kitploit.com/search/label/Modification) time in order to investigate recent system activity. This can be used in CTF's in order to pinpoint (https://www.kitploit.com/search/label/Pinpoint) where escalation (https://www.kitploit.com/search/label/Escalation) and attack vectors may exist.

___________________________
@hacking_Attack
@Hacking_Video

To see the tool in its most useful form, try running the command as follows: python3 modDetective.py -i /usr/share,/usr/lib,/lib. This will ignore the /usr/lib, /usr/share, and /lib directories, which tend not to have anything of interest. Also note that by default the "dynamic" directories are ignored (/proc, /sys, /run, /snap, /dev). What is modDetective Doing? modDetective is very elementary in how it operates. It simply walks the filesystem, with bounds determined by user specified options (-i is for ignore, meaning the tool will walk every directory (https://www.kitploit.com/search/label/Directory) EXCEPT for the ones specified in the -i option, and -e is for exclusive, meaning the tool will ONLY walk the directories specified). While walking, it picks up the modification times of each file, then orders these modification times in order to output them chronologically. Additionally, in the output you will potentially see some files highlighted red. These files are denoted as "Indicators of User Activity," Since recent modifications to these files indicate that a user is currently active. As of now, these files include .swp files, .bash_history, .python_history and .viminfo. This list will be extended as I brainstorm more files that indicate present user activity. Requirements modDetective currently works only with python3; python2 (https://www.kitploit.com/search/label/Python2) compatability will be completed shortly (hence the lack of f strings). Standard libraries should be fine.

Download modDetective (https://github.com/itsKindred/modDetective)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: Hunting Open Redirect Vulnerabilities For $$$
https://faiyazhacks.medium.com/bug-bounty-hunting-open-redirect-vulnerabilities-for-e5b760abea8e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article was originally published at BePracticalContinue reading on Medium » (https://faiyazhacks.medium.com/bug-bounty-hunting-open-redirect-vulnerabilities-for-e5b760abea8e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
mirror links

How do I know that a mirror link for a certain site isn't a phishing site?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty: Hunting Open Redirect Vulnerabilities For $$$

This article was originally published at BePracticalContinue reading on Medium »
Read more...

How often do you communicate with non-technical people in this field?
https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/

New to reddit so apologies for any formatting issues etc. Background: I’m at the start of my cybersec studies towards pentesting. I’m autistic with the classic stereotypical traits; eidetic memory, hyper focus and unwavering persistence, pattern recognition and a real knack for spotting faults in anything, which I’ve been told gives me quite the leg-up in this field. The major problem I face however is communication. I can communicate facts and technical details fine, but when it comes to translating that to normal talk, for business stakeholders and the like, I’m completely lost. It’s something I’m working on constantly, but I’m worried how often I will need to do this in this field So my question(s) to the experts and CISO’s: How often will I need to consult with people in this manner, or is that mainly the job of a consultant? Will this disadvantage override my other skills in being hired? (Obviously each company is different, but what’s the general consensus in this industry?) I’ve already faced a lot of discrimination and being overlooked in life, despite my innate skills being exactly what people have needed, so I’m hoping this industry will be better! (So many jobs emphasise communication and being bubbly & friendly which I think is ridiculous, just let me hyper focus and get on with my job and provide thorough work for you) I’m also in Nz, if there’s any kiwi experts here to give their opinion. Thank you! submitted by /u/sleepless_synesthete (https://www.reddit.com/user/sleepless_synesthete)
[link] (https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/) [comments] (https://www.reddit.com/r/Pentesting/comments/w68k2b/how_often_do_you_communicate_with_nontechnical/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HacktheBox[Catch]

https://cdn-images-1.medium.com/max/1033/1*YP-vBFukkb99inQAsq9d6w.png
A full Nmap TCP scan identifies ports 22, 80, 3000, 5000, and 8000 are open:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phases of Hacking

https://cdn-images-1.medium.com/max/1023/1*UKNzp6TngJQvyHqKlZScyg.png
Hacking typically involves five phases. These five procedures don’t have to be carried out in order by a hacker. Simply defined, an…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jak skutecznie łamać hasła?

Do łamania haseł używamy narzędzi takich jak: hydra, medusa, Burp Suite, ncrack, hashcat, john - lecz jak mamy robić to skutecznie? Hasła…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Source Code Review Continues….

https://cdn-images-1.medium.com/max/1600/0*jK9lwjimIVt730tA
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Taller de audio y sonido con Alberto Novello- Audio and sound workshop with Alberto Novello.

https://cdn-images-1.medium.com/max/600/0*DXlrSMIPvf7XXSm7.gif
Hace un par de meses atrás hice un taller con un artista y científico, Alberto Novello, en el taller de Radiona en Zagreb. Alberto es de…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Security Headlines July 21, 2022

https://cdn-images-1.medium.com/max/2000/1*m3B60q3dejMEi0xd4_BhoQ.png
Welcome back to cyber security headlines by CISO Series and Simply Cyber.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CYGWIN - Can it, and is it treated as a subsystem?

As it stands, I can’t quite understand;

Is Cygwin treated as a windows subsystem, or is it in itself a part of windows as well?

This opens other questions;

If it is, in fact, a subsystem; what do I do to include windows as part of that subsystem or vice versa; make cygwin a part of windows?

How do symlinks come into play?

Are symlinks the way to connect those two?

And do the permission settings also connect when you make cygwin a part of windows or vice versa?

Thank you in advance,

Sincerely ~Never-Ending Why

submitted by /u/Never-Ending-Why
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video