hacking: security in practice
How to get my SAM file using Kali live

I'm going for my Sec+ for an entry into Security. I've played with Kali in the past but not very extensively. In school I did a demonstration on airmon-ng and "cracked" a wifi network using those tools. That was pretty cool!

But haven't really touched it since then. I'm using my laptop and running Kali live. When in Kali, I can see my windows drive, I can mount it by putting in the password, but my goal is to use the tools in Kali to get into that drive and grab my SAM file so I can try to use hashcat to crack the password. Or just use the tools to get the drive to mount without the password?

I've taken an image of the drive and have that stored on a external SSD, I've tried playing around with autopsy but not sure I can get the info I'm wanting from that since the drive is encrypted. I am able to see some info from the image, but I think it's my main data partition that's encrypted and I'm pretty sure that's where the file is going to be that I need.

But I'm kind of stuck now. I've quickly messed with crunch but the lists I tried creating were massive haha.

I've got a desktop with a 3080Ti that I can use but not sure how much more beneficial outside of brute forcing my way in (which I know probably isn't possible). Plus I don't think I can use hashcat to run against that drive directly?

submitted by /u/DevilDogg22
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
2013 iMac was reset and may have MDM lock

So a couple weeks ago my friend gave me his computer and reset it in front of me, after doing so i took it home not thinking much of it but when i tried to turn it on it told me “The device is automatically monitored by S**** ***** **********.” So I looked up a tutorial on how to reset it from there and now I don’t know what to do. Is there a way to fix it? Did I lose 50 bucks? Please help if you can.

submitted by /u/Foreign_Artichoke526
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OPEN REDIRECT VULNERABILITIES: ESCALATING TO XSS
https://faiyazhacks.medium.com/open-redirect-vulnerabilities-escalating-to-xss-e4e833cb3226?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article was originally published at BePracticalContinue reading on Medium » (https://faiyazhacks.medium.com/open-redirect-vulnerabilities-escalating-to-xss-e4e833cb3226?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

When clients don't know where their systems live, let alone what the priority is [meme]
https://www.reddit.com/r/Pentesting/comments/w7y9cy/when_clients_dont_know_where_their_systems_live/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/misconfig_exe (https://www.reddit.com/user/misconfig_exe)
[link] (https://i.redd.it/bii6uxatprd91.jpg) [comments] (https://www.reddit.com/r/Pentesting/comments/w7y9cy/when_clients_dont_know_where_their_systems_live/)

___________________________
@hacking_Attack
@Hacking_Video

Sensitive Data Exposure: Mengambil alih semua akun, akunmu = akunku.
https://aminudin.medium.com/sensitive-data-exposure-mengambil-alih-semua-akun-akunmu-akunku-526f14fc9755?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Sensitive Data Exposure vulnerabilities can occur when a web application does not adequately protect sensitive information from being…Continue reading on Medium » (https://aminudin.medium.com/sensitive-data-exposure-mengambil-alih-semua-akun-akunmu-akunku-526f14fc9755?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Sensitive Data Exposure: Mengambil alih semua akun, akunmu = akunku.

Sensitive Data Exposure vulnerabilities can occur when a web application does not adequately protect sensitive information from being…Continue reading on Medium »
Read more...

Hacking on Medium
Human, Hacking

https://cdn-images-1.medium.com/max/600/1*satPhXTWLG1ynx_yo7klCA.jpeg
I’ve seen people online saying social-engineering is something you become, and that you can become an actual social-engineer. As true as…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
flatline (thm) writeup (w/o metasploit)

https://cdn-images-1.medium.com/max/631/1*YfeRmWCg3EfjGwxmZz6b4Q.png
This box is SLOW. Let it boot for atleast 20min, this is what it took to become functional for me.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I got All of my Docker commands down to a ‘single-word’ in Bash, Ubuntu Server 20.04, Gnome-GUI

https://cdn-images-1.medium.com/max/1118/0*uxCw99_5QwfVoxjw.png
Hello. I learned something pretty nifty this morrning by being inquisitive(i’m not always so inquisitive lol). I logged into my…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Intro to Offensive Security

https://cdn-images-1.medium.com/max/710/0*FiXV5ugm73pPlbLU.png
Hack your first website (legally in a safe environment) and experience an ethical hacker’s job.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video