Hacking on Medium
Different Categories Of Hacking...

https://cdn-images-1.medium.com/max/1024/1*Mb80caxKmYb7ZbG00YeC6g.png
Hackers of computers have existed for a very long time. We have started to hear more and more about hacking as computers and the internet…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is Ethical Hacking? All You Need To Know

https://cdn-images-1.medium.com/max/650/1*9Budi8b_akNu-36GuWHHFw.jpeg
Whenever someone hears about hacking, they think it as unethical! But have you ever heard of ethical hacking? Here’s all you need to know.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Security-Red Teaming Operations Chapter-1

https://cdn-images-1.medium.com/max/600/0*nySiL4WE3rzjbhl5
Şeytani İkiz Saldırısı ile Wifi Hackleme

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
China-backed APT41 Hackers are back and they are targeting?

https://cdn-images-1.medium.com/max/728/0*yc_QWMbRdLtg7eDQ.jpg
The Chinese advanced persistent threat (APT) actor tracked as Winnti has targeted at least 13 organizations geographically spanning across…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Trust no one. Microsoft Windows exploited!

https://cdn-images-1.medium.com/max/1400/0*tHDKs_VgK1O9u514.jpg
Microsoft has confirmed the “Remote Code Execution” vulnerability that has been exploited in the “Microsoft Windows Support Diagnostic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack The Android Auto Backup For Apps Functionality?

https://cdn-images-1.medium.com/max/2600/0*HkJ_YHICmm7acoOM
In this post I’ll tell you how to get data from an app, customize it and then use the modified version on Android. Developers should be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
crAPI - Completely Ridiculous API

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEis8Xu-hQepJDB9yXVDyzUWXRoxOScdM39oll_pLGH4cOBL_49zxgvRn3w3Amh36goTYkPVaZuDmAw9c1bHHOTVh2DxUlBiBZ-Fg5rwccyhUhAbtxe_tmSP1si6dsMcG365i2UcWo6-kUYuSjrlKIgFj1ni-4teCxxRLDuGa6wSIEqnBg4WfRDYLhGm/w640-h360/crapi.jpg
completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.

crAPI is modern, built on top of a microservices architecture. When time has come to buy your first car, sign up for an account and start your journey. To know more about crAPI, please check crAPI's overview.
QuickStart Guide

Docker

You'll need to have Docker installed and running on your host system.

Using prebuilt images

You can use prebuilt images generated by our CI workflow.

*
To use the latest stable version.

* Linux Machine

curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d


* Windows Machine

curl.exe -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d


*
To use the latest development version

* Linux Machine

curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml

VERSION=develop docker-compose pull

VERSION=develop docker-compose -f docker-compose.yml --compatibility up -d


* Windows Machine

Visit http://localhost:8888
Note: All emails are sent to mailhog service by default and can be checked on http://localhost:8025 You can change the smtp configuration if required however all emails with domain example.com will still go to mailhog.

Vagrant

This option allows you to run crAPI within a virtual machine, thus isolated from your system. You'll need to have Vagrant and, for example VirtualBox installed.

1. Clone crAPI repository
$ git clone [REPOSITORY-URL]


2. Start crAPI Virtual Machine
$ cd deploy/vagrant && vagrant up


3. Visit http://192.168.33.20

Note: All emails are sent to mailhog service and can be checked on http://192.168.33.20:8025

Once you're done playing with crAPI, you can remove it completely from your system running the following command from the repository root directory

$ cd deploy/vagrant && vagrant destroy


For more deployment options visit the setup instructions for more details.

To know more about challenges in crAPI. Visit challenges
Download crAPI

Active Directory privesc and pivoting
https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/

*I posted this in r/ethicalhacking (https://www.reddit.com/r/ethicalhacking) as well, however I figured that this sub might be more fitted for this type of thread. I'm a junior penetration tester doing my first large-scale test on a big organization together with another junior colleague. We have gained system access to a member server via a share misconfiguration which allowed us to upload a webshell and get code execution from the web app that ran. We are sort of stuck right now and can't seem to find a way forward. No luck from dumping SAM, as there were no sessions from high-priv users. The only thing we got from that server was a DCC hash we couldn't crack. Other than that it was clean. We passed the local admin hash around to all servers in the domain, but nothing. The only set of domain credentials we have is one domain user, which we got from password spraying, and it doesn't have access to other interesting shares. Responder hasn't picked anything up, which is strange since LLMNR /mDNS isn't disabled. The user doesn't appear to have write access to any frequently used shares, so we see no point in planting link files all over. Kerberoasting yielded nothing as the service accounts seem to have incredibly strong passwords. We'd appreciate some tips on how to more forward, if anyone's got anything. We feel like owning one server has to be useful in further escalating our privileges. Then again, we're probably missing something since we're noobs. submitted by /u/memeabiding (https://www.reddit.com/user/memeabiding)
[link] (https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/) [comments] (https://www.reddit.com/r/Pentesting/comments/wsd2lp/active_directory_privesc_and_pivoting/)

___________________________
@hacking_Attack
@Hacking_Video

crAPI - Completely Ridiculous API
http://www.kitploit.com/2022/08/crapi-completely-ridiculous-api.html

___________________________
@hacking_Attack
@Hacking_Video

completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable (https://www.kitploit.com/search/label/Vulnerable) by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your first car, sign (https://www.kitploit.com/search/label/Sign) up for an account and start your journey. To know more about crAPI, please check crAPI's overview (https://github.com/OWASP/crAPI/blob/develop/docs/overview.md).
QuickStart Guide Docker You'll need to have Docker installed and running on your host system. Using prebuilt images You can use prebuilt images generated by our CI workflow. To use the latest stable version. Linux Machine curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d
Windows Machine curl.exe -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/main/deploy/docker/docker-compose.yml

docker-compose pull

docker-compose -f docker-compose.yml --compatibility up -d
To use the latest development version Linux Machine curl -o docker-compose.yml https://raw.githubusercontent.com/OWASP/crAPI/develop/deploy/docker/docker-compose.yml

VERSION=develop docker-compose pull

VERSION=develop docker-compose -f docker-compose.yml --compatibility up -d
Windows Machine Visit http://localhost:8888 (http://localhost:8888/) Note: All emails (https://www.kitploit.com/search/label/Emails) are sent to mailhog service by default and can be checked on http://localhost:8025 (http://localhost:8025/) You can change the smtp configuration if required however all emails with domain example.com will still go to mailhog. Vagrant This option allows you to run crAPI within a virtual machine, thus isolated from your system. You'll need to have Vagrant (https://www.vagrantup.com/downloads) and, for example VirtualBox (https://www.virtualbox.org/wiki/Downloads) installed. Clone crAPI repository $ git clone [REPOSITORY-URL]
Start crAPI Virtual Machine $ cd deploy/vagrant && vagrant up
Visit http://192.168.33.20 (http://192.168.33.20/) Note: All emails are sent to mailhog service and can be checked on http://192.168.33.20:8025 (http://192.168.33.20:8025/) Once you're done playing with crAPI, you can remove it completely from your system running the following command from the repository root directory $ cd deploy/vagrant && vagrant destroy
For more deployment options visit the setup instructions (https://github.com/OWASP/crAPI/blob/develop/docs/setup.md) for more details. To know more about challenges in crAPI. Visit challenges (https://github.com/OWASP/crAPI/blob/develop/docs/challenges.md)

Download crAPI (https://github.com/OWASP/crAPI)

___________________________
@hacking_Attack
@Hacking_Video

New Bug Bounty Vault on Hats: Welcome Mover!
https://hatsfinance.medium.com/new-bug-bounty-vault-on-hats-welcome-mover-633c70c7b7e8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

With great excitement we welcome another project to Hats Finance. Through our decentralized bug bounty platform, we onboard Mover to…Continue reading on Medium » (https://hatsfinance.medium.com/new-bug-bounty-vault-on-hats-welcome-mover-633c70c7b7e8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Good reporting tool for team to use that is compatible with nessus?
https://www.reddit.com/r/redteamsec/comments/wsgqks/good_reporting_tool_for_team_to_use_that_is/

Currently we use Dradis and it works... but it could be a whole lot better. We are trying a lot of demos at the moment. We've tried attack forge and a couple others. Does anyone have any recommendations? submitted by /u/Ziggy__Pop (https://www.reddit.com/user/Ziggy__Pop)
[link] (https://www.reddit.com/r/redteamsec/comments/wsgqks/good_reporting_tool_for_team_to_use_that_is/) [comments] (https://www.reddit.com/r/redteamsec/comments/wsgqks/good_reporting_tool_for_team_to_use_that_is/)

___________________________
@hacking_Attack
@Hacking_Video

New Bug Bounty Vault on Hats: Welcome Mover!

With great excitement we welcome another project to Hats Finance. Through our decentralized bug bounty platform, we onboard Mover to…Continue reading on Medium »
Read more...