Hacking on Medium
Ways to protect your accounts from getting hacked

As the world develops in mostly everything there’s no doubt that scammers and cyber attackers will obtain new ways to scam or hack…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Researchers Find Counterfeit Phones with Backdoor to Hack?

https://cdn-images-1.medium.com/max/728/0*Ml0pwq6CtZ1ki2Aa.jpg
Budget Android device models that are counterfeit versions associated with popular smartphone brands are harboring multiple trojans…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
$5000 Bounty, Free Certification Courses, IndexDB, Reconnaissance Guide, Elasticsearch, and much…

https://cdn-images-1.medium.com/max/2000/1*Pe9tWHA6K4Z3GFe797hFfQ.jpeg
Hey 👋

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Game hacking and cheat development

https://cdn-images-1.medium.com/max/631/1*udivd4CnmdRO0xcq0ovffA.png
A simple overview of how game cheats work and how hard it can be to actually make game cheats.

Continue reading on The Hacker Outpost »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Virtual Vengeance is Mine!

https://cdn-images-1.medium.com/max/2600/0*o7DZDIYaO8qqrll4
Update on my search for the “hijacker” of my Amazon account

Continue reading on ILLUMINATION »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WHAT ARE WINDOWS HACKING TRICKS?PART#1

https://cdn-images-1.medium.com/max/1280/1*_yIU7Skb3fSDxgS49ql4tw.jpeg
Windows Hacking:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ROPemporium ‘callme’

https://cdn-images-1.medium.com/max/1920/1*y-Q88R9bDtuWmTOHpN-P1Q.gif
Hey pwners that’s our third challenge binary from ropemporium.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Smap : A Drop-In Replacement For Nmap Powered By Shodan.Io

Smap is a port scanner built with shodan.io’s free API. It takes same command line arguments as Nmap and produces the same output which makes it a drop-in replacament for Nmap.

Features

* Scans 200 hosts per second
* Doesn’t require any account/api key
* Vulnerability detection
* Supports all nmap’s output formats
* Service and version fingerprinting
* Makes no contact to the targets

Installation

Binaries

You can download a pre-built binary from here and use it right away.

Manual

go install -v github.com/s0md3v/smap/cmd/smap@latest

Confused or something not working? For more detailed instructions, click here

AUR pacakge

Smap is available on AUR as smap-git (builds from source) and smap-bin (pre-built binary).

Homebrew/Mac

Smap is also avaible on Homebrew.

brew update
brew install smap

Usage

Smap takes the same arguments as Nmap but options other than -p, -h, -o*, -iLare ignored. If you are unfamiliar with Nmap, here’s how to use Smap.

Specifying targets

smap 127.0.0.1 127.0.0.2

You can also use a list of targets, seperated by newlines.

smap -iL targets.txt

Supported formats

1.1.1.1 // IPv4 address
example.com // hostname
178.23.56.0/8 // CIDR

Output

Smap supports 6 output formats which can be used with the -o* as follows

smap example.com -oX output.xml

If you want to print the output to terminal, use hyphen (-) as filename.

Supported formats

oX // nmap’s xml format
oG // nmap’s greppable format
oN // nmap’s default format
oA // output in all 3 formats above at once
oP // IP:PORT pairs seperated by newlines
oS // custom smap format
oJ // json

Note: Since Nmap doesn’t scan/display vulnerabilities and tags, that data is not available in nmap’s formats. Use -oSto view that info.

Specifying ports

Smap scans these 1237 ports by default. If you want to display results for certain ports, use the -poption.

smap -p21-30,80,443 -iL targets.txt
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
BlackStone : Pentesting Reporting Tool

BlackStone project or “BlackStone Project” is a tool created in order to automate the work of drafting and submitting a report on audits of ethical hacking or pentesting.

In this tool we can register in the database the vulnerabilities that we find in the audit, classifying them by internal, external audit or wifi, in addition, we can put your description and recommendation, as well as the level of severity and effort for its correction. This information will then help us generate in the report a criticality table as a global summary of the vulnerabilities found.

We can also register a company and, just by adding its web page, the tool will be able to find subdomains, telephone numbers, social networks, employee emails… Docker InstallInstall Docker

/bin/bash -c “$(curl -fsSL https://get.docker.com)”
systemctl enable docker
systemctl start docker

Install docker-compose

sudo curl -L “https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)” -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose Install BlackStonegit clone https://github.com/micro-joan/BlackStone
cd BlackStone
docker-compose up -d Manual Install* First we must download an Apache server to host the tool, in my case I use Mamp (I recommend following these steps): https://www.mamp.info/en/downloads/
* We will download the content of this repository and we will have 2 folders (BlackStone and BBDD)
* Once the server starts we will go to c://MAMP/htdocs and paste all the contents of the downloaded folder “BlackStone”
* For the application to work we will have to import the database, we will go to our browser and write “localhost/phpMyAdmin/”, you have the database connection file in the folder BlackStone/conexion.php
* We will create a database called blackstone and import the data from the downloaded BBDD folder
* Log in to BlackStone with the username and password “blackstone” UseFirst you need to go to profile settings and add Hunter.io and haveibeenpwned.com tokens:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJCzvYjxykBUCgbyq2MY4Y6nxe2JAtOdRIb0FUfBKlAN_uzY_8YcEOukGspiJ4Rmr7urB9cJ4326Utn6UYvvPnwlkm0PDJaiiQEMmcBeFx-tq5vZFrWH3ozO9iayE_bmUI-daPK40iscaZWFIH_hbp73eFergA6r0GDjJWBQsh7RIrkQRiF4nfjp7B/s900/182502047-36e2b125-de44-463f-8c74-9b8b2cab14e4.gif
After having vulnerabilities in the database, we will go to the audited client and we will register a client along with their web page, once registered we can go to customer details and we can see the following information:

THE USE OF THIS APPLICATION IS FOR PROFESSIONAL USE, THE AUTHOR IS NOT RESPONSIBLE FOR A MISUSE EMPLOYED

* Name of business owner
* Social networks of the company owner
* Email and telephone number of the owner of the company
* Exposed password check on the company owner’s deep web
* Subdomains of the website as well as information of interest found in google
* Emails of company workers
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrgFCN1NZdZ4fwdsQ_nE9nPXSZ0FNuQX0qooOCfu9X2gbOlcXwBo4qRiYTRy5w9BRINbCoel8GJEMWiNFcx0WMyf-I5RUPO1TuvlIvptUL4PHEmqn1XH80yAEDN9ZaSkBs1yyV9NKd8mFTf-rrCbv4UR4QhCqWYxuO1GIvikpjjGdQzWIYFmpdUUq4/s900/182502564-02929088-2584-4cd9-9d1a-52ce6cb69f17.gif
Once we have the company that we are going to audit registered in the database, we will create a report, adding the date, name of the report and the company to which will be audited. When we register the report, we will give it edit and then we will select the vulnerabilities that we want to appear in the report:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglG07CEOD6w097fDIQJ04ACFGxwNRz_GkRlylE0kAT0Nlade3hqquj3gWhWrsULEZl6cDLF0IJH16OlXzTLTTyPdZIXdM2eVpJRmcPYXit89DONac8LZ3Aj4gKOTLBrAiHJAknUtRV0R8eHggGmpRi8tIh6a5JZCPlyuPiDR8Li4hRcmXZQ89NkhvZ/s900/182503343-c1990024-83f2-4c4b-b524-08719d775cac.[...]

___________________________
@hacking_Attack
@Hacking_Video

gif
Finally, we will generate the report by clicking on the “overview report” button, and later we will save the page that is generated as “.mht”, then we will open it with Word to be able to work on the generated report:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuR9tF1zP1z9f8bblDWk0oU3uyh1Cq4GNj_bbSV_MHkmBoxGemIpLqFG89EI5L9D700BylrrYI89iDV0uWmte7hQhT7NsBtucUIHzXnZQW91cNv6kTkPEtuJbwDXVL0cchyH5Gw96eZM4hSGGcWPDbB1oFUOCSrAszZBaMbdoX6Jk0VVmURWJXmPhM/s900/182504065-2a55fac4-b961-4cd8-8d38-1f02c98123fb.gif Download

___________________________
@hacking_Attack
@Hacking_Video

Free online cybercrime intelligence tool - discover what threat actors know about any domain's external attack surface & how many compromised employees and users it has
https://www.reddit.com/r/redteamsec/comments/wvi65t/free_online_cybercrime_intelligence_tool_discover/

Check any domain for free - https://www.hudsonrock.com/are-you-compromised Results look like that (keep reading, more content at the bottom) - https://preview.redd.it/mx8c7sb60fj91.png?width=759&format=png&auto=webp&s=07a73433f660a9024664dbb788bf76dddb75256d https://preview.redd.it/fofwiyu70fj91.png?width=705&format=png&auto=webp&s=efb54ec55b54dd0caa48bd22a99b86507c61b8c2 What is it? - this free tool lets you search any domain and discover: The external attack surface of that domain that is known to threat actors - each of the URLs have corresponding compromised credentials that are used by threat actors as an initial attack vector. How many compromised employees & users a domain (company) has from our continuously augmented cybercrime database composed of millions of compromised computers worldwide Why is it useful? Risk assessment - looking up a domain and seeing it has a lot of compromised employees can indicate the company is not up to date with proper security measures, each compromised employee indicates that someone in the company downloaded and executed an info-stealing malware and had all their corporate credentials, cookies, documents, etc stolen by hackers that are using the credentials as an initial attack vector. Assets discovery (External attack surface) - we show the top 5 URLs that compromised employees & clients had credentials to, often times these URLs are not attainable anywhere else because internal URLs accessed by users & employees are not indexed anywhere and cannot be scraped. The data you will see is not public, and it is not from database leaks or scrapes but from 6,500,000 computers compromised through global malware spreading campaigns. Hope you like it! submitted by /u/Malwarebeasts (https://www.reddit.com/user/Malwarebeasts)
[link] (https://www.reddit.com/r/redteamsec/comments/wvi65t/free_online_cybercrime_intelligence_tool_discover/) [comments] (https://www.reddit.com/r/redteamsec/comments/wvi65t/free_online_cybercrime_intelligence_tool_discover/)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Over 80000 Hikvision vulnerable cameras exposed online

Over 80000 Hikvision vulnerable cameras exposed onlinePost Views: 45 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Security researchers have discovered over 80,000 Hikvision cameras vulnerable exposed online vulnerable to a critical command injection flaw that’s easily exploitable via specially crafted messages sent to the vulnerable web server.The flaw is tracked as CVE-2021-36260 and was addressed by Hikvision via a firmware update in September 2021.

However, according to a whitepaper published by CYFIRMA, tens of thousands of systems used by 2,300 organizations across 100 countries have still not applied the security update.

There have been two known public exploits for CVE-2021-36260, one published in October 2021 and the second in February 2022, so threat actors of all skill levels can search for and exploit vulnerable cameras.

In December 2021, a Mirai-based botnet called ‘Moobot’ used the particular exploit to spread aggressively and enlist systems into DDoS (distributed denial of service) swarms.

In January 2022, CISA alerted that CVE-2021-36260 was among the actively exploited bugs in the then published list, warning organizations that attackers could “take control” of devices and to patch the flaw immediately.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Vulnerable and exploitedCYFIRMA says Russian-speaking hacking forums often sell network entrance points relying on exploitable Hikvision cameras that can be used either for “botnetting” or lateral movement.
https://www.bleepstatic.com/images/news/u/1220909/Forum%20and%20Marketplace%20Posts/russian-forum.png
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Sponsor.png Weak passwords also a problemApart from the command injection vulnerability, there’s also the issue of weak passwords that users set for convenience or that come with the device by default and aren’t reset during the first set up.

Bleeping Computer has spotted multiple offerings of lists, some even free, containing credentials for Hikvision camera live video feeds on clearnet hacking forums.
https://www.b[...]

___________________________
@hacking_Attack
@Hacking_Video

leepstatic.com/images/news/u/1220909/Forum%20and%20Marketplace%20Posts/free-list.png
Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-7-300x150.png WordPress sites hacked with fake Cloudflare DDoS alerts pushing malwareAugust 22, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-4-1-300x150.png Apple security updates fix 2 zero-days used to hack iPhonesAugust 19, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-2-300x150.png Researchers found over 9,000 accessible VNC servers, without a passwordAugust 15, 2022
Reading Time: 5 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-2-1-300x150.png Browser-powered desync: New class of HTTP request smuggling attacks showcased at Black Hat USAAugust 12, 2022
Reading Time: 5 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Over 80000 Hikvision vulnerable cameras exposed online first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to view my roommates search history with the shared wifi I'm on ?

I have a shared wifi at my place and I want to know if it's possible to view all website history on every device, perhaps using Wireshark.. but from what I understand of Wireshark it doesn't actually show the websites visited. ( I have the Bell login which shows the devices, but not clear details on the sites visited ).

Could I write a Python program to translate all the packet data, etc. Or is there an easier way, better program to use other than Wireshark ?

I don't want to get login or password info just the websites visited, if it's possible.

submitted by /u/Gray_houses
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video