Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66.1K photos
15 videos
157 files
133K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Secure WiFi tunnel to my parents' house for when I move in to the dorms: Is it possible? What about a VPN with something like Pritunl?

Very new to hacking here, but wanting to teach myself in a virtual machine. My current knowledge of "hacking" includes being able to open task manager, navigate file explorer, and cheat in cookie clicker. That's it.

I'm a high school senior. Autistic and considered academically gifted - things that can get me a totally private dorm room in uni that's all to myself without roommates. The thing is, I'm concerned about the university WiFi. I imagine at the very least metadata is collected about the sites I visit which can be monitored by the university. More on this below. But, even with things like online gaming, I figure the WiFi there that all students share would result in high ping and overall a bad time. And what if I want to browse reddit or look at something, well, not SFW? I figure that I would want a way to remotely access the internet in my hometown, which is over an hour by car away from the university. I want to either 1) set up a secure tunnel to my parents WiFi that only my computer would know how to access, which I would set up before moving into the dorms. That, or 2) I could make a home VPN using Pritunl or something with an old laptop to act as a server to host it that'd always be on in my parents' house. I'd actually connect to these from a virtual box Windows 10 OS that's in my PC, to completely separate university work from gaming and other stuff I'd do on the IP that'd be from my home town.

This way, if they monitor my IP or something like a Chegg investigation happens, the IP address would say that the activity came from my hometown and not from campus or even the town the college is in. Are either of my two methods possible? Again very new to hacking so I'd appreciate details if people comment on this.

There's also a few points in the internet and network policy (I looked, boring I know) that are of interest:

Users should be aware that their University Network and computer activity, including the content of individual communications, may be monitored without notice when:

• Users have voluntarily made them available to the public by posting to a Usenet or a web page • It is necessary to protect the reliability, security or operation of the University, the Network and computer systems, or to protect the University from liability • There is concern that the User has violated or is violating this policy • Users appear to be engaged in unusual or uncommonly excessive activity • It is required by law.

And this...

Users must use the Network in a manner consistent with the University's instructional, public service, research and administrative mission. The Network may not be used for personal business or personal gain except as permitted by other University policies or explicitly stated in University contracts.

But this looks promising

Users may connect personal computers, cell phones and tablets to the University Network. Users are responsible for ensuring that they have the appropriate anti-virus and malware protection on their devices. If the device causes issues to the Network, the user is responsible for removal of such device immediately upon notification from ITS. Gaming Systems, Personal Entertainment Systems (e.g. Roku, Chromecast, etc.) and Wireless Printers are allowed to be connected in Student Housing. Wireless printers must be connected to the Wireless Network and will be configured not to broadcast their own SSID. Wireless printers broadcasting their own SSID must be disconnected from the network immediately upon notification from ITS. No other non-[university name] supplied devices (e.g. Network attached Storage, Wireless Routers, etc.) are allowed to be connected to the Network unless approved by ITS in advance.

So, I'm not sure if connecting to a router in your parents' house over an hour away is in violation of these rules. But I mainly want to know if it can be done.

submitted by /u/SirBorf [link] [comments]
hacking: security in practice
A small CTF and learning community

I've made a post recently about looking for a community that's small to join and learn with, and I decided on making my own.(Discord) We already have about 10 members, but I would like to expand the server a little, and meet cool new people.

My plan with this server is to create a small community where we can do CTFs and also learn possibly, so people interested in any Cyber Security topic are welcome from all skill levels! We can form multiple teams for different time zones, so that's not an issue either.

I don't want the server to get flooded with too many new members, so if you are interested, send me a DM with an introduction of yourself, and your achievements so far. It doesn't matter if all you did was setup your linux machine, or make a simple code, I would love to hear about it and welcome you in to our server.

Looking forward to meeting new people, so if you are interested just hmu with an introduction :)

submitted by /u/SodaWasTakennn
[link] [comments]
hacking: security in practice
Hacking Mentor

I am looking for someone who would be willing to be my mentor as I take my real dive into red team operations. I am going to study full-time and aim for 120-160 hours a month for my oscp. I have multiple cybersecurity certifications that iv gotten in 2 years so I am a well-adept student.

submitted by /u/ZombieSubstantial999
[link] [comments]
SQL injection (second order)

SQL injection vulnerabilities arise when user-controllable data is incorporated into database SQL queries in an unsafe manner. An attacker…Continue reading on Medium »
Read more...
OS Command Injection

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
Finding OS Command Injection

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium »
Read more...
Reverse Shell Using Command Injection

Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium »
Read more...
Bypassing File name Filters

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...
Bypassing Filename Filters Demo

One of the challenging factors to a Hacker in a web application attack is the file upload. The first step in every attack is to get some…Continue reading on Medium »
Read more...
Bypassing Directory Structure Filters

Directory traversal (also known as file path traversal) is a web security vulnerability that allows an attacker to read arbitrary files on…Continue reading on Medium »
Read more...
Bypassing File Type Filters

Unrestricted File Upload — File Extension Filter BypassContinue reading on Medium »
Read more...
Code Injection

Code Injection is the general term for attack types which consist of injecting code that is then interpreted/executed by the application…Continue reading on Medium »
Read more...
File Inclusion Demo

This script is possibly vulnerable to file inclusion attacks.Continue reading on Medium »
Read more...
Unsafe use of Reflection

This vulnerability is caused by unsafe use of the reflection mechanisms in programming languages like Java or C#Continue reading on Medium »
Read more...
PHP Object Injection

A very common and critical vulnerability in PHP applications is PHP Object Injection. This blog post explains how they work and how they…Continue reading on Medium »
Read more...
Finding OS Command Injection
https://medium.com/@pentesterclubpvtltd/finding-os-command-injection-6998c4c46108?source=rss------bug_bounty-5

In this section, we’ll explain what OS command injection is, describe how vulnerabilities can be detected and exploited, spell out some…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/finding-os-command-injection-6998c4c46108?source=rss------bug_bounty-5)
Reverse Shell Using Command Injection
https://medium.com/@pentesterclubpvtltd/reverse-shell-using-command-injection-f121bb156afa?source=rss------bug_bounty-5

Hello Internet! I was first introduced to the command injection vulnerability when I took pentester Club Ethical Hacking 101 class last…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/reverse-shell-using-command-injection-f121bb156afa?source=rss------bug_bounty-5)