Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Best YouTube channels to learn cyber security and hacking in 2022
So you want to learn to hack, but you don’t know where to start? Here are some hacking YouTube channels that will help you get started
Continue reading on Medium »
Best YouTube channels to learn cyber security and hacking in 2022
So you want to learn to hack, but you don’t know where to start? Here are some hacking YouTube channels that will help you get started
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Deeper look into North Korean hackers
https://cdn-images-1.medium.com/max/1100/0*br_SU2fK_4IeEh3z.jpg
North Korea has always showed interest in cyberwarfare, linking its name with the greats attacks of the 21th century, as WannaCry and…
Continue reading on Medium »
Deeper look into North Korean hackers
https://cdn-images-1.medium.com/max/1100/0*br_SU2fK_4IeEh3z.jpg
North Korea has always showed interest in cyberwarfare, linking its name with the greats attacks of the 21th century, as WannaCry and…
Continue reading on Medium »
Pict - Post-Infection Collection Toolkit
http://www.kitploit.com/2022/08/pict-post-infection-collection-toolkit.html
http://www.kitploit.com/2022/08/pict-post-infection-collection-toolkit.html
This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response (https://www.kitploit.com/search/label/Incident%20Response) process. This data should not be considered to be a full forensic (https://www.kitploit.com/search/label/Forensic) data collection, but does capture (https://www.kitploit.com/search/label/Capture) a lot of useful forensic information. If you want true forensic data, you should really capture a full memory dump and image the entire drive. That is not within the scope of this toolkit.
How to use The script must be run on a live system, not on an image or other forensic data store. It does not strictly require root permissions to run, but it will be unable to collect much of the intended data without. Data will be collected in two forms. First is in the form of summary files, containing output of shell commands, data extracted from databases, and the like. For example, the browser module will output a browser_extensions.txt file with a summary of all the browser extensions installed for Safari, Chrome, and Firefox. The second are complete files collected from the filesystem. These are stored in an artifacts subfolder inside the collection folder. Syntax The script is very simple to run. It takes only one parameter, which is required, to pass in a configuration script in JSON format: ./pict.py -c /path/to/config.json The configuration script describes what the script will collect, and how. It should look something like this: collection_dest This specifies the path to store the collected data in. It can be an absolute path or a path relative to the user's home folder (by starting with a tilde). The default path, if not specified, is /Users/Shared. Data will be collected in a folder created in this location. That folder will have a name in the form PICT-computername-YYYY-MM-DD, where the computer name is the name of the machine specified in System Preferences > Sharing and date is the date of collection. all_users If true, collects data from all users on the machine whenever possible. If false, collects data only for the user running the script. If not specified, this value defaults to true. collectors PICT is modular, and can easily be expanded or reduced in scope, simply by changing what Collector modules are used. The collectors data is a dictionary (https://www.kitploit.com/search/label/Dictionary) where the key is the name of a module to load (the name of the Python file without the .py extension) and the value is the name of the Collector subclass found in that module. You can add additional entries for custom modules (see Writing your own modules (https://github.com/thomasareed/pict#writing-your-own-modules)), or can remove entries to prevent those modules from running. One easy way to remove modules, without having to look up the exact names later if you want to add them again, is to move them into a top-level dictionary named unused. settings This dictionary provides global settings. keepLSData specifies whether the lsregister.txt file - which can be quite large - should be kept. (This file is generated automatically and is used to build output by some other modules. It contains a wealth of useful information, but can be well over 100 MB in size. If you don't need all that data, or don't want to deal with that much data, set this to false and it will be deleted when collection is finished.) zipIt specifies whether to automatically generate a zip file with the contents of the collection folder. Note that the process of zipping and unzipping the data will change some attributes, such as file ownership. moduleSettings This dictionary specifies module-specific settings. Not all modules have their own settings, but if a module does allow for its own settings, you can provide them here. In the above example, you can see a boolean setting named collectArtifacts being used with the browser module. There are
How to use The script must be run on a live system, not on an image or other forensic data store. It does not strictly require root permissions to run, but it will be unable to collect much of the intended data without. Data will be collected in two forms. First is in the form of summary files, containing output of shell commands, data extracted from databases, and the like. For example, the browser module will output a browser_extensions.txt file with a summary of all the browser extensions installed for Safari, Chrome, and Firefox. The second are complete files collected from the filesystem. These are stored in an artifacts subfolder inside the collection folder. Syntax The script is very simple to run. It takes only one parameter, which is required, to pass in a configuration script in JSON format: ./pict.py -c /path/to/config.json The configuration script describes what the script will collect, and how. It should look something like this: collection_dest This specifies the path to store the collected data in. It can be an absolute path or a path relative to the user's home folder (by starting with a tilde). The default path, if not specified, is /Users/Shared. Data will be collected in a folder created in this location. That folder will have a name in the form PICT-computername-YYYY-MM-DD, where the computer name is the name of the machine specified in System Preferences > Sharing and date is the date of collection. all_users If true, collects data from all users on the machine whenever possible. If false, collects data only for the user running the script. If not specified, this value defaults to true. collectors PICT is modular, and can easily be expanded or reduced in scope, simply by changing what Collector modules are used. The collectors data is a dictionary (https://www.kitploit.com/search/label/Dictionary) where the key is the name of a module to load (the name of the Python file without the .py extension) and the value is the name of the Collector subclass found in that module. You can add additional entries for custom modules (see Writing your own modules (https://github.com/thomasareed/pict#writing-your-own-modules)), or can remove entries to prevent those modules from running. One easy way to remove modules, without having to look up the exact names later if you want to add them again, is to move them into a top-level dictionary named unused. settings This dictionary provides global settings. keepLSData specifies whether the lsregister.txt file - which can be quite large - should be kept. (This file is generated automatically and is used to build output by some other modules. It contains a wealth of useful information, but can be well over 100 MB in size. If you don't need all that data, or don't want to deal with that much data, set this to false and it will be deleted when collection is finished.) zipIt specifies whether to automatically generate a zip file with the contents of the collection folder. Note that the process of zipping and unzipping the data will change some attributes, such as file ownership. moduleSettings This dictionary specifies module-specific settings. Not all modules have their own settings, but if a module does allow for its own settings, you can provide them here. In the above example, you can see a boolean setting named collectArtifacts being used with the browser module. There are
also global module settings that are maintained by the Collector class, and that can be set individually for each module. collectArtifacts specifies whether to collect the file artifacts that would normally be collected by the module. If false, all artifacts will be omitted for that module. This may be needed in cases where storage space is a consideration, and the collected artifacts are large, or in cases where the collected artifacts may represent a privacy issue for the user whose system is being analyzed. Writing your own modules Modules must consist of a file containing a class that is subclassed from Collector (defined in collectors/collector.py), and they must be placed in the collectors folder. A new Collector module can be easily created by duplicating the collectors/template.py file and customizing it for your own use. def __init__(self, collectionPath, allUsers) This method can be overridden if necessary, but the super Collector.init() must be called in such a case, preferably before your custom code executes. This gives the object the chance to get its properties set up before your code tries to use them. def printStartInfo(self) This is a very simple method that will be called when this module's collection begins. Its intent is to print a message to stdout to give the user a sense of progress, by providing feedback about what is happening. def applySettings(self, settingsDict) This gives the module the chance to apply any custom settings. Each module can have its own self-defined settings, but the settingsDict should also be passed to the super, so that the Collection class can handle any settings that it defines. def collect(self) This method is the core of the module. This is called when it is time for the module to begin collection. It can write as many files as it needs to, but should confine this activity to files within the path self.collectionPath, and should use filenames that are not already taken by other modules. If you wish to collect artifacts, don't try to do this on your own. Simply add paths to the self.pathsToCollect array, and the Collector class will take care of copying those into the appropriate subpaths in the artifacts folder, and maintaining the metadata (https://www.kitploit.com/search/label/Metadata) (permissions, extended attributes, flags, etc) on the artifacts. When the method finishes, be sure to call the super (Collector.collect(self)) to give the Collector class the chance to handle its responsibilities, such as collecting artifacts. Your collect method can use any data collected in the basic_info.txt or lsregister.txt files found at self.collectionPath. These are collected at the beginning by the pict.py script, and can be assumed to be available for use by any other modules. However, you should not rely on output from any other modules, as there is no guarantee that the files will be available when your module runs. Modules may not run in the order they appear in your configuration JSON, since Python dictionaries are unordered. Credits Thanks to Greg Neagle for FoundationPlist.py (https://github.com/munki/munki/blob/master/code/client/munkilib/FoundationPlist.py), which solved lots of problems with reading binary plists, plists containing date data types, etc.
Download Pict (https://github.com/thomasareed/pict)
Download Pict (https://github.com/thomasareed/pict)
hacking: security in practice
Where can I get a non-English WPA password list?
I'm from Czechia and the only wordlist in Czech that I've found is just a dictionary of all the Czech words. All help is appreciated. Thanks!
submitted by /u/FilipIzSwordsman
[link] [comments]
Where can I get a non-English WPA password list?
I'm from Czechia and the only wordlist in Czech that I've found is just a dictionary of all the Czech words. All help is appreciated. Thanks!
submitted by /u/FilipIzSwordsman
[link] [comments]
reddit
Where can I get a non-English WPA password list?
I'm from Czechia and the only wordlist in Czech that I've found is just a dictionary of all the Czech words. All help is appreciated. Thanks!
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
anyone knows about why creator of Iloveyou malware quit IT? He works in a mobile repair shop today. His malware made CIA and US agencies shut down their networks.
He is 44 and works in small mobile repair shop.
He was talented and his malware was so sophisticated. CIA and other agencies shut down their networks.
submitted by /u/Ok_Durian_3015
[link] [comments]
anyone knows about why creator of Iloveyou malware quit IT? He works in a mobile repair shop today. His malware made CIA and US agencies shut down their networks.
He is 44 and works in small mobile repair shop.
He was talented and his malware was so sophisticated. CIA and other agencies shut down their networks.
submitted by /u/Ok_Durian_3015
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
hacking: security in practice
Secure WiFi tunnel to my parents' house for when I move in to the dorms: Is it possible? What about a VPN with something like Pritunl?
Very new to hacking here, but wanting to teach myself in a virtual machine. My current knowledge of "hacking" includes being able to open task manager, navigate file explorer, and cheat in cookie clicker. That's it.
I'm a high school senior. Autistic and considered academically gifted - things that can get me a totally private dorm room in uni that's all to myself without roommates. The thing is, I'm concerned about the university WiFi. I imagine at the very least metadata is collected about the sites I visit which can be monitored by the university. More on this below. But, even with things like online gaming, I figure the WiFi there that all students share would result in high ping and overall a bad time. And what if I want to browse reddit or look at something, well, not SFW? I figure that I would want a way to remotely access the internet in my hometown, which is over an hour by car away from the university. I want to either 1) set up a secure tunnel to my parents WiFi that only my computer would know how to access, which I would set up before moving into the dorms. That, or 2) I could make a home VPN using Pritunl or something with an old laptop to act as a server to host it that'd always be on in my parents' house. I'd actually connect to these from a virtual box Windows 10 OS that's in my PC, to completely separate university work from gaming and other stuff I'd do on the IP that'd be from my home town.
This way, if they monitor my IP or something like a Chegg investigation happens, the IP address would say that the activity came from my hometown and not from campus or even the town the college is in. Are either of my two methods possible? Again very new to hacking so I'd appreciate details if people comment on this.
There's also a few points in the internet and network policy (I looked, boring I know) that are of interest:
Users should be aware that their University Network and computer activity, including the content of individual communications, may be monitored without notice when:
• Users have voluntarily made them available to the public by posting to a Usenet or a web page • It is necessary to protect the reliability, security or operation of the University, the Network and computer systems, or to protect the University from liability • There is concern that the User has violated or is violating this policy • Users appear to be engaged in unusual or uncommonly excessive activity • It is required by law.
And this...
Users must use the Network in a manner consistent with the University's instructional, public service, research and administrative mission. The Network may not be used for personal business or personal gain except as permitted by other University policies or explicitly stated in University contracts.
But this looks promising
Users may connect personal computers, cell phones and tablets to the University Network. Users are responsible for ensuring that they have the appropriate anti-virus and malware protection on their devices. If the device causes issues to the Network, the user is responsible for removal of such device immediately upon notification from ITS. Gaming Systems, Personal Entertainment Systems (e.g. Roku, Chromecast, etc.) and Wireless Printers are allowed to be connected in Student Housing. Wireless printers must be connected to the Wireless Network and will be configured not to broadcast their own SSID. Wireless printers broadcasting their own SSID must be disconnected from the network immediately upon notification from ITS. No other non-[university name] supplied devices (e.g. Network attached Storage, Wireless Routers, etc.) are allowed to be connected to the Network unless approved by ITS in advance.
So, I'm not sure if connecting to a router in your parents' house over an hour away is in violation of these rules. But I mainly want to know if it can be done.
submitted by /u/SirBorf [link] [comments]
Secure WiFi tunnel to my parents' house for when I move in to the dorms: Is it possible? What about a VPN with something like Pritunl?
Very new to hacking here, but wanting to teach myself in a virtual machine. My current knowledge of "hacking" includes being able to open task manager, navigate file explorer, and cheat in cookie clicker. That's it.
I'm a high school senior. Autistic and considered academically gifted - things that can get me a totally private dorm room in uni that's all to myself without roommates. The thing is, I'm concerned about the university WiFi. I imagine at the very least metadata is collected about the sites I visit which can be monitored by the university. More on this below. But, even with things like online gaming, I figure the WiFi there that all students share would result in high ping and overall a bad time. And what if I want to browse reddit or look at something, well, not SFW? I figure that I would want a way to remotely access the internet in my hometown, which is over an hour by car away from the university. I want to either 1) set up a secure tunnel to my parents WiFi that only my computer would know how to access, which I would set up before moving into the dorms. That, or 2) I could make a home VPN using Pritunl or something with an old laptop to act as a server to host it that'd always be on in my parents' house. I'd actually connect to these from a virtual box Windows 10 OS that's in my PC, to completely separate university work from gaming and other stuff I'd do on the IP that'd be from my home town.
This way, if they monitor my IP or something like a Chegg investigation happens, the IP address would say that the activity came from my hometown and not from campus or even the town the college is in. Are either of my two methods possible? Again very new to hacking so I'd appreciate details if people comment on this.
There's also a few points in the internet and network policy (I looked, boring I know) that are of interest:
Users should be aware that their University Network and computer activity, including the content of individual communications, may be monitored without notice when:
• Users have voluntarily made them available to the public by posting to a Usenet or a web page • It is necessary to protect the reliability, security or operation of the University, the Network and computer systems, or to protect the University from liability • There is concern that the User has violated or is violating this policy • Users appear to be engaged in unusual or uncommonly excessive activity • It is required by law.
And this...
Users must use the Network in a manner consistent with the University's instructional, public service, research and administrative mission. The Network may not be used for personal business or personal gain except as permitted by other University policies or explicitly stated in University contracts.
But this looks promising
Users may connect personal computers, cell phones and tablets to the University Network. Users are responsible for ensuring that they have the appropriate anti-virus and malware protection on their devices. If the device causes issues to the Network, the user is responsible for removal of such device immediately upon notification from ITS. Gaming Systems, Personal Entertainment Systems (e.g. Roku, Chromecast, etc.) and Wireless Printers are allowed to be connected in Student Housing. Wireless printers must be connected to the Wireless Network and will be configured not to broadcast their own SSID. Wireless printers broadcasting their own SSID must be disconnected from the network immediately upon notification from ITS. No other non-[university name] supplied devices (e.g. Network attached Storage, Wireless Routers, etc.) are allowed to be connected to the Network unless approved by ITS in advance.
So, I'm not sure if connecting to a router in your parents' house over an hour away is in violation of these rules. But I mainly want to know if it can be done.
submitted by /u/SirBorf [link] [comments]
reddit
Secure WiFi tunnel to my parents' house for when I move in to the...
Very new to hacking here, but wanting to teach myself in a virtual machine. My current knowledge of "hacking" includes being able to open task...
hacking: security in practice
A small CTF and learning community
I've made a post recently about looking for a community that's small to join and learn with, and I decided on making my own.(Discord) We already have about 10 members, but I would like to expand the server a little, and meet cool new people.
My plan with this server is to create a small community where we can do CTFs and also learn possibly, so people interested in any Cyber Security topic are welcome from all skill levels! We can form multiple teams for different time zones, so that's not an issue either.
I don't want the server to get flooded with too many new members, so if you are interested, send me a DM with an introduction of yourself, and your achievements so far. It doesn't matter if all you did was setup your linux machine, or make a simple code, I would love to hear about it and welcome you in to our server.
Looking forward to meeting new people, so if you are interested just hmu with an introduction :)
submitted by /u/SodaWasTakennn
[link] [comments]
A small CTF and learning community
I've made a post recently about looking for a community that's small to join and learn with, and I decided on making my own.(Discord) We already have about 10 members, but I would like to expand the server a little, and meet cool new people.
My plan with this server is to create a small community where we can do CTFs and also learn possibly, so people interested in any Cyber Security topic are welcome from all skill levels! We can form multiple teams for different time zones, so that's not an issue either.
I don't want the server to get flooded with too many new members, so if you are interested, send me a DM with an introduction of yourself, and your achievements so far. It doesn't matter if all you did was setup your linux machine, or make a simple code, I would love to hear about it and welcome you in to our server.
Looking forward to meeting new people, so if you are interested just hmu with an introduction :)
submitted by /u/SodaWasTakennn
[link] [comments]
reddit
A small CTF and learning community
I've made a post recently about looking for a community that's small to join and learn with, and I decided on making my own.(Discord) We already...
hacking: security in practice
Hacking Mentor
I am looking for someone who would be willing to be my mentor as I take my real dive into red team operations. I am going to study full-time and aim for 120-160 hours a month for my oscp. I have multiple cybersecurity certifications that iv gotten in 2 years so I am a well-adept student.
submitted by /u/ZombieSubstantial999
[link] [comments]
Hacking Mentor
I am looking for someone who would be willing to be my mentor as I take my real dive into red team operations. I am going to study full-time and aim for 120-160 hours a month for my oscp. I have multiple cybersecurity certifications that iv gotten in 2 years so I am a well-adept student.
submitted by /u/ZombieSubstantial999
[link] [comments]
reddit
Hacking Mentor
I am looking for someone who would be willing to be my mentor as I take my real dive into red team operations. I am going to study full-time and...
SQL injection (second order)
SQL injection vulnerabilities arise when user-controllable data is incorporated into database SQL queries in an unsafe manner. An attacker…Continue reading on Medium »
Read more...
SQL injection vulnerabilities arise when user-controllable data is incorporated into database SQL queries in an unsafe manner. An attacker…Continue reading on Medium »
Read more...
OS Command Injection
In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
Finding OS Command Injection
In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
Reverse Shell Using Command Injection
Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium »
Read more...
Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium »
Read more...
Bypassing File name Filters
One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...
One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...