hacking: security in practice
A hacker broke into a secret videoconference between EU defense chiefs

https://external-preview.redd.it/QmQr5SGmu7O9gErogeEp7TKT3AqBRtPGcRS_F8xQU2A.jpg?width=640&crop=smart&auto=webp&s=03b1239034ba0108fd83af2a4c3364164241815esubmitted by /u/brownrawbottle
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
FLOODCRM - HQ EMAIL BOMBER: Flood any email with up to 70000 subscription emails!

[removed]

submitted by /u/bestreddo
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Some fool is trying to hack me and its pathetic...

Its been a few days I have been getting countless non-stop verification codes for my google account and I know it may sound like some glitch but its not been stopping so I know its some ameture anonymous pfp 12 y.o script kiddie I doubt that he/she is even a script kiddie lmao I just find it hilarious

submitted by /u/Drawing_Afraid
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Could my neighbor being hacking me?

I am in a university town, and we are nearing the end of the semester. Last night around 11:30pm the neighbour that I have only seen once all year asked for the WiFi password. He said all of his roommates moved out for the summer (this is true) and they took their router with them (unsure if this is true).

We gave him the wrong answer the first time accidentally so he had to come back to ask again. The first time we asked to just type it on his phone for him and he said he didn't bring it. Second time he came, we asked once again to type it on the phone for him but he suggested we write it on a piece of paper. He didn't seem very sus but it was very late at night.

Today I got a notification on my laptop while writing a final exam that my connection was no longer private. The pop-up also had something about financial information can be collected when your network is in this state. Would you like to stay on the network? I clicked no, and finished my exam via hotspot from my phone. I have seen some internet popups asking if you'd like to share the network to other devices, however this one I received was like nothing I have seen before.

My question is given these circumstances and that we won't see this man again as he is moved out, could he have been hacking us? Any help is appreciated.

submitted by /u/korprr
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

OverRide - Binary Exploitation And Reverse-Engineering (From Assembly Into C)

Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasembly_notes.md - notes on asm See the subject for more details. For more gdb & exploitation fun check out the previous project RainFall.Final Score 125/100Getting Started First download from 42 OverRide.iso. Virtual Machine setup On Mac OSX, install VirtualBox. In VirtualBox create a new VM (click new). Name and operating system - Type: Linux, Version: (Oracle 64-bit) Continue through all the next steps with the default settings: Memory size: 4MB Hard disk: Create a disk now Hard disk file type: VDI(VirtualBox Disk Image) Storage on physical hard disk: Dynamically allocated File size: 12,00GB Next click Settings > Network > Adapter 1 > Attached to: Bridged Adapter. Still in settings click Storage > Right of "Controller: IDE", there is a CD icon with a + sign (add optical drive). Click Add Disk Image, and select OverRide.iso. Click Start to start the VM, once runnning it should show the VM IP address and prompt user to login. SSH connect Log in from a separate shell as user level00 with password level00. ssh level00@{VM_IP} -p 4242 Level Up As user level00 the goal is to read the password for user level01, found at /home/users/level01/.pass. However, user level00 does not have permissions to read this file. In the home folder for user level00 is a binary level00 with SUID set and owner level01. This means when we execute the binary level00, we do so with the permissions of user level01. We must find a vulnerability in the binary level00 with gdb. Then exploit the vulnerability to run system("/bin/sh"), opening a shell as user level01 where we have permissions to read the password. cat /home/users/level01/.pass Then log in as user level01. su level01 Repeat for each level. Reverse-engineered binary For each level, we reverse engineered the original source.c by examining the gdb disassembly of the binary. Levels Overview 0 - Hardcoded password 1 - Ret2Libc attack 2 - printf() format string attack 3 - Brute force password 4 - gets() stack overflow + Return-to-libc attack 5 - Shellcode in env variable + printf() format string attack 6 - Hash value discoverable with gdb 7 - Ret2Libc Attack on unprotected data table 8 - Binary backs up password via symlink 9 - Off-by-one error Team I wrote this project in a team with the awesome @dfinnis. Download OverRide
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Data Leak — B2B eCommerce Platform Bizongo

https://cdn-images-1.medium.com/max/1770/1*GwycTE37Nwk29U-Q8hxpOQ.jpeg
What we know so far about the Bizongo.com data breach

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Eight Short Links of Recent Cyber Security Data Science Papers

https://cdn-images-1.medium.com/max/1675/1*9ElAl1NSdxD-v44WlSwrQw.jpeg
A short listing of cyber security data science research papers I’ve discovered recently. Each of them uses machine learning or enables ML…

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
ZeroPointSecurity Certified Red Team Operator Course (CRTO) Review

https://cdn-images-1.medium.com/max/979/1*EuFShHSAeneL3gvORrVLHw.png
Frustration Courtesy of Covenant

Continue reading on The Mayor »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
Vulnhub: Pylington Walkthrough

https://cdn-images-1.medium.com/max/1371/1*rphNRJlL_X5gACo08X2QPg.png
Boot2Root step by step walkthrough

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

XSS Nedir-Nasıl bypass Edilir?

Herkese merhaba bu yazımda sizlere kendi bilgim dahilinde xss’in ne olduğuna nasıl bulunduğuna ve de bazı bypass yöntemlerini anlatcam.Çok…Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

KitPloit - PenTest Tools!
OverRide - Binary Exploitation And Reverse-Engineering (From Assembly Into C)

https://1.bp.blogspot.com/-Xs7VjGHtrbY/YIJaoHGvHpI/AAAAAAAAV7w/ufd4B8ALFVcN4vgBy-OeNIvi-8WDTK-ZwCNcBGAsYHQ/w640-h204/OverRide_1_ssh.png Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges.

In the folder for each level you will find:

*
flag - password for next level

*
README.md - how to find password

*
source.c - the reverse engineered binary

*
dissasembly_notes.md - notes on asm
See the subject for more details.

For more gdb & exploitation fun check out the previous project RainFall. Final Score 125/100 Getting StartedFirst download from 42 OverRide.iso. Virtual Machine setupOn Mac OSX, install VirtualBox.

In VirtualBox create a new VM (click new).

* Name and operating system - Type: Linux, Version: (Oracle 64-bit)

Continue through all the next steps with the default settings:

* Memory size: 4MB
* Hard disk: Create a disk now
* Hard disk file type: VDI(VirtualBox Disk Image)
* Storage on physical hard disk: Dynamically allocated
* File size: 12,00GB

Next click Settings > Network > Adapter 1 > Attached to: Bridged Adapter.

Still in settings click Storage > Right of "Controller: IDE", there is a CD icon with a + sign (add optical drive). Click Add Disk Image, and select OverRide.iso.

Click Start to start the VM, once runnning it should show the VM IP address and prompt user to login. SSH connectLog in from a separate shell as user level00 with password level00. ssh level00@{VM_IP} -p 4242https://1.bp.blogspot.com/-GvSFZ7oAPss/YIJa9u-D-6I/AAAAAAAAV74/nqOlSvwv2ewdiy39Zyyr5kJFqrkjNKcJACNcBGAsYHQ/w640-h204/OverRide_1_ssh.png Level UpAs user level00 the goal is to read the password for user level01, found at /home/users/level01/.pass. However, user level00 does not have permissions to read this file.

In the home folder for user level00 is a binary level00 with SUID set and owner level01. https://1.bp.blogspot.com/-8lWjYZOf80A/YIJbDTPRhBI/AAAAAAAAV78/0xidIsYllsolZYbZOZQjszKO03lhuG_5wCNcBGAsYHQ/w640-h90/OverRide_2_suid.png This means when we execute the binary level00, we do so with the permissions of user level01.

We must find a vulnerability in the binary level00 with gdb. Then exploit the vulnerability to run system("/bin/sh"), opening a shell as user level01 where we have permissions to read the password. cat /home/users/level01/.passThen log in as user level01. su level01https://1.bp.blogspot.com/-dWFPlyrND88/YIJbIn62ZYI/AAAAAAAAV8A/tGYQ64TVxG8xZrzYxOs9GshbSPE9O4YngCNcBGAsYHQ/w640-h274/OverRide_3_su.png Repeat for each level. Reverse-engineered binaryFor each level, we reverse engineered the original source.c by examining the gdb disassembly of the binary. Levels Overview* 0 - Hardcoded password

* 1 - Ret2Libc attack

* 2 - printf() format string attack

* 3 - Brute force password

* 4 - gets() stack overflow + Return-to-libc attack

* 5 - Shellcode in env variable + printf() format string attack

* 6 - Hash value discoverable with gdb

* 7 - Ret2Libc Attack on unprotected data table

* 8 - Binary backs up password via symlink

* 9 - Off-by-one error TeamI wrote this project in a team with the awesome @dfinnis. Download OverRide

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Deep Web
Download Tails on Windows 10 and it keeps saying "file currupted" how do I fix this?

I am trying to install tails on my flash drive and tried to burn it on my flash drive with etcher and it says can't burn because system file is corrupted, what do I do to make it not corrupted, I'm frustrated right now someone help me please.

submitted by /u/SNOWMANIAM0
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Wondering if it’s possible to make an airtag

I was thinking maybe you could copy the signal coming out of an airtag and make an airtag for cheaper? Any ideas

submitted by /u/jaekim24
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
The Incredible Rise of North Korea’s Hacking Army

https://external-preview.redd.it/8OYARuDKvUUWR5kXebscm75fsLqrWfqllhqBpZ9kA7c.jpg?width=640&crop=smart&auto=webp&s=038217542e1e5e1284f198094c67009c4024f93dsubmitted by /u/JRWoodwardMSW
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________