Hacking Articles|Raj Chandel's Blog
Wireshark for Pentester: Password Sniffing

Many people wonder if Wireshark can capture passwords. The answer is undoubtedly yes! Wireshark can capture not only passwords, but any type of data passing through a network – usernames, email addresses, personal information, pictures, videos, or anything else. Wireshark can sniff the passwords passing through as long as we can capture network traffic. But the question is, what kind of passwords are they? Or, more precisely, which network protocols' passwords can we obtain? That is the subject of this article.

Table of contents

· Plain text network protocols Disclaimer: To protect client data, all screenshots have been censored and/or modified.Dissect HTTPS Packet Captures___________________________
@hacking_Attack
@Hacking_Video

7.png Don’t worry we have already provided the key along with the PCAP file.Edit > Preference > Protocol > TLSIP address: 127.0.0.1Hurray!!! As you can see, we have Successfully decrypted the Data over the TLS.___________________________
@hacking_Attack
@Hacking_Video

4. SMTP uses Base 64 encoding for the transaction to encode the username and password.___________________________
@hacking_Attack
@Hacking_Video

but it can also be set to allow it. In such cases, a well-positioned attacker could intercept network traffic and obtain the username and password.___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What goes into the effectiveness of a brute force password crack (not sure if I said it right. Might be called a dictionary crack or something)?

We all know how insane the list gets if literally put in every common symbol, number, abc and ABC. And the fact that you can't really just ignore one of these because sites force you to use them makes these kinds of hacks hard.

So I'm curious, is there any way to make this effective in 2021? What goes into it? Does internet speed matter? Is it the CPU that matters? Stuff like that

submitted by /u/CreatureWarrior
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Change mac address

Hi guys

I think I am soft banned by uber eats. I cannot use promotions anymore. I tried vpn on my phone etc but it does not work.

Then someone told me it is because of my “mac adress” of my phone. So if I change that, will the “soft ban” of uber eats be over? If so, does someone know how to change / spoof / fake my mac adress on my iphone? Or maybe on my Macbook (as I can use ubereats via chrome or download an android emulator and run ubereats on mac).

Thanks a lot guys, help a poor student 💀

submitted by /u/a_boy_456
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Modded-Ubuntu : Run Ubuntu GUI On Your Termux With Much Features

Modded-Ubuntu is a tool used to run ubuntu GUI on your termux with much features. Features Fixed Audio Output Lightweight {Requires at least 4GB Storage} Katoolin3 tool for installing kali tools 2 Browsers (Chromium & Mozilla Firefox) Supports Bangla Fonts VLC Media Player Visual Studio Code Easy for Beginners Installation First Clone the Repository & […]

The post Modded-Ubuntu : Run Ubuntu GUI On Your Termux With Much Features appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Write Up critical Vulnerability Kominfo

Halo Hunters udah lama nih ga update tulisan lagi yah karena ada beberapa pekerjaan dan ujian sekolah jadi ga sempet nih buat tulisan lagi…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Hacking has Evolved

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Hacking has EvolvedPost Views: 61 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 3 Minutes
Hacking has evolved into helping shape the Information Security Industry.
Back in the ’90s, hackers were considered criminals, no one wanted to interact with them without understanding that a ‘hacking ethos’ could be applied to things that weren’t “Illegal”.
As years went by, today it’s completely legitimized when used for a good cause. Events like ‘Hackbama’, ‘Blackhat’, ‘Defcon’ the world’s most notable hackers conventions started in 1993 and continue even to our days, because of how hacking has evolved today.
People want to visit such events reaching over 30K attendances per event to see what ‘hackers’ are working on, what sort of security breaches have been discovered, new techniques, that will help vendors of software and hardware create better and more secure equipment for our industry.
See Also: Hacking Stories: Xbox Underground
Organizations from across the world including: Federal law enforcement agents from the FBI, DoD, United States Postal Inspection Service, DHS, and other agencies regularly attend these events, including computer security professionals, journalists, lawyers, federal government employees, security researchers, students, and hackers with a general interest in software, computer architecture, hardware modification, conference badges, anything else that can be “hacked” and to improve their knowledge.
Such events consist of several tracks of speakers about the computer and hacking related subjects, as well as Cyber-Security challenges and competitions, talking and learning from hackers, sharing their information to improve the Information Security World, after realizing that hackers have a role to keep the ‘infrastructure’ of governments, industries, corporations, companies, and the world in general safe.
See Also: Fact: You can’t protect what you can’t see
Online Platforms such as HackerOne, BugCrowd powered by some of the best hackers around, partner up with top companies across the world to invite hackers to hack their systems and offer huge amounts of Bounties. If you are not well trained from the offensive side, it will be very hard to understand how to perform the techniques used by hackers. It is a place of vulnerability coordination and bug bounty platform that connects businesses with penetration testers and security researchers.
What separates a criminal from a hacker, is their motive and code of ethics. Offensive Security is playing a major role in the Information Security Industry and hacking has shaped and changed the Cyber Security landscape, evolving it into one of the most desired positions today.
See Also: Offensive Security Tool: ADFSBrute Recent Facts* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/You-cant-protect-what-you-cant-see-Fact_Website-Template-90x90.png You can’t protect what you can’t see1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/Fact_Website-Template-90x90.png Manual Pentesting is more Effective than the Automated2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/Fact_Website-Template-90x90.png 90% of the hacking process involves the Reconnaissance Phase4 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/Website-90x90.png A Hacker needs only one loophole to hack any system.5 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/10/Website_2-90x90.png Not all hackers are criminals7 month[...]

___________________________
@hacking_Attack
@Hacking_Video

s ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/08/Website-90x90.png Human Intelligence is the best defense against Phishing Attacks8 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/07/Website-90x90.png Firewalls are no longer enough9 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/06/Website-90x90.png Your Data in the Cloud is not as secure as you think11 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/05/Website-90x90.png The Weakest Link in a Security Chain is the Human Element11 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2020/04/Copy-of-Website-fact-90x90.png Two-Factor Authentication is not always Totally Secure1 year ago
The post Hacking has Evolved first appeared on Black Hat Ethical Hacking.
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux.Requirements Powershell 4.0 or higher Bash* Python 3* *Required to use all features Download It is recommended to clone the complete repository or download the zip file. You can do this by running the following command: git clone https://github.com/JoelGMSec/Invoke-Stealth.git You can also download the limited version as follows: powershell iwr -useb https://darkbyte.net/invoke-stealth.php -outfile Invoke-Stealth.ps1 Usage .\Invoke-Stealth.ps1 -helpInfo: This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniquesUsage: .\Invoke-Stealth.ps1 script.ps1 -technique Xencrypt - You can use as single or separated by commas -Techniques: · Chimera: Substitute strings and concatenate variables · Xencrypt: Compresses and encrypts with random iterations · PyFuscation: Obfuscate functions, variables and parameters · PSObfuscation: Convert content to bytes and encode with Gzip · ReverseB64: Encode with base64 and reverse it to avoid detections · All: Sequentially executes all techniques described aboveWarning: The output script will exponentially multiply the original size Chimera & PyFuscation need dependencies to work properly in Windows The detailed guide of use can be found at the following link: https://darkbyte.net/ofuscando-scripts-de-powershell-con-invoke-stealth License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments This script has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Some modules use third-party code, scripts, and tools, particularly: • Chimera by tokyoneon --> https://github.com/tokyoneon/Chimera • BetterXencrypt by GetRektBoy724 --> https://github.com/GetRektBoy724/BetterXencrypt • PyFuscation by CBHue --> https://github.com/CBHue/PyFuscation • PSObfuscation by gh0x0st --> https://github.com/gh0x0st/Invoke-PSObfuscation Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can contact through info@darkbyte.net Download Invoke-Stealth
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is serviceres.net?

Im about to start the hacking game. And it seems everytime I google something, AVG aborts it. Could anyone help me out? Oh and I know its a website. Just what it does im not sure....

submitted by /u/ardaskid1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why do developers make awesome hackers?

https://external-preview.redd.it/cK56bJHCBJ3A_PWeE6HJlMdArw01TkrycscWUh6sPDk.jpg?width=320&crop=smart&auto=webp&s=f202ce19b78ab5c03754aad8dd4746d28df06745 submitted by /u/kilbazas
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What do people think of ESR?

I was wondering what do people think of Eric Steven Raymond in the hacking community.

submitted by /u/Marimo_3D2Y
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Малварь для Android за полчаса. Отслеживаем местоположение, читаем SMS, пишем аудио и делаем фото

https://cdn-images-1.medium.com/max/1600/1*vLrG3CsKYMM_7r_H-3_e-Q.png
Итак, наша задача — разобраться, как работают современные зловредные приложения. А лучший способ это сделать — посмотреть, как создается…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Emotet. La morte di un malware 2014–2021

https://cdn-images-1.medium.com/max/2600/1*Fp43zS64ZPoWi4IAz1n3MA.jpeg
Breve storia del malware più pericoloso di tutti i tempi

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video