Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
My CyberSecurity journey — What I am doing now ?
https://cdn-images-1.medium.com/max/600/0*_OsvQovdQiAjN5x8.png
Since I want to find a way to CyberSecurity and Ethical Hacking, i have noted that having 24 hours in a day is REALLY, REALLY short !
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
My CyberSecurity journey — What I am doing now ?
https://cdn-images-1.medium.com/max/600/0*_OsvQovdQiAjN5x8.png
Since I want to find a way to CyberSecurity and Ethical Hacking, i have noted that having 24 hours in a day is REALLY, REALLY short !
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
My CyberSecurity journey — What I am doing now ?
Since I want to find a way to CyberSecurity and Ethical Hacking, i have noted that having 24 hours in a day is REALLY, REALLY short !
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Blood (CTF Challenges)
https://cdn-images-1.medium.com/max/600/1*ci0xL3MMGpvwkj-rgNsSuQ.png
Hi everyone,
This is my first post on medium
Here I want to share my journey in CTF Challenges.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Blood (CTF Challenges)
https://cdn-images-1.medium.com/max/600/1*ci0xL3MMGpvwkj-rgNsSuQ.png
Hi everyone,
This is my first post on medium
Here I want to share my journey in CTF Challenges.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Blood (CTF Challenges)
Hi everyone, This is my first post on medium Here I want to share my journey in CTF Challenges.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
dBmonster : Track WiFi Devices With Their Recieved Signal Strength
dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna for the best results) or to find out how your self made antenna works the best (antenna radiation patterns).
Features on Linux and MacOS
FeatureLinuxMacOSListing WiFi interfaceshttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Track & scan on 2.4GHzhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Track & scan on 5GHzhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Scanning for APhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Scanning for STAhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Beep when device foundhttps://s.w.org/images/core/emoji/14.0.0/72x72/2753.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png
Installation
git clone https://github.com/90N45-d3v/dBmonster
cd dBmonster
Install required tools (On MacOS without sudo)
sudo python requirements.py
Start dBmonster
sudo python dBmonster.py
Has been successfully tested on
Platform https://s.w.org/images/core/emoji/14.0.0/72x72/1f4bb.png WiFi Adapter https://s.w.org/images/core/emoji/14.0.0/72x72/1f4e1.png Kali LinuxALFA AWUS036NHA, DIY Bi-Quad WiFi AntennaMacOS MontereyInternal card 802.11 a/b/g/n/ac (MBP 2019) * should work on any MacOS or Debian based system and with every WiFi card that supports monitor-mode
Download
___________________________
@hacking_Attack
@Hacking_Video
dBmonster : Track WiFi Devices With Their Recieved Signal Strength
dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets (sniffed with TShark). These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna for the best results) or to find out how your self made antenna works the best (antenna radiation patterns).
Features on Linux and MacOS
FeatureLinuxMacOSListing WiFi interfaceshttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Track & scan on 2.4GHzhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Track & scan on 5GHzhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Scanning for APhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Scanning for STAhttps://s.w.org/images/core/emoji/14.0.0/72x72/2705.png Beep when device foundhttps://s.w.org/images/core/emoji/14.0.0/72x72/2753.png https://s.w.org/images/core/emoji/14.0.0/72x72/2705.png
Installation
git clone https://github.com/90N45-d3v/dBmonster
cd dBmonster
Install required tools (On MacOS without sudo)
sudo python requirements.py
Start dBmonster
sudo python dBmonster.py
Has been successfully tested on
Platform https://s.w.org/images/core/emoji/14.0.0/72x72/1f4bb.png WiFi Adapter https://s.w.org/images/core/emoji/14.0.0/72x72/1f4e1.png Kali LinuxALFA AWUS036NHA, DIY Bi-Quad WiFi AntennaMacOS MontereyInternal card 802.11 a/b/g/n/ac (MBP 2019) * should work on any MacOS or Debian based system and with every WiFi card that supports monitor-mode
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
dBmonster : Track WiFi Devices With Their Recieved Signal Strength
dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm) of their sent packets.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
System Informer : A Free, Powerful, Multi-Purpose Tool That Helps You Monitor System Resources, Debug Software And Detect Malware
System Informer, A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc.
System requirements
Windows 7 or higher, 32-bit or 64-bit.
Features
* A detailed overview of system activity with highlighting.
* Graphs and statistics allow you quickly to track down resource hogs and runaway processes.
* Can’t edit or delete a file? Discover which processes are using that file.
* See what programs have active network connections, and close them if necessary.
* Get real-time information on disk access.
* View detailed stack traces with kernel-mode, WOW64 and .NET support.
* Go beyond services.msc: create, edit and control services.
* Small, portable and no installation required.
* 100% Free Software (MIT)
Building the project
Requires Visual Studio (2022 or later).
Execute
You can download the free Visual Studio Community Edition to build the System Informer source code.
See the build readme for more information or if you’re having trouble building.
Enhancements/Bugs
Please use the GitHub issue tracker for reporting problems or suggesting new features.
Settings
If you are running System Informer from a USB drive, you may want to save System Informer’s settings there as well. To do this, create a blank file named “SystemInformer.exe.settings.xml” in the same directory as SystemInformer.exe. You can do this using Windows Explorer:
* Make sure “Hide extensions for known file types” is unticked in Tools > Folder options > View.
* Right-click in the folder and choose New > Text Document.
* Rename the file to SystemInformer.exe.settings.xml (delete the “.txt” extension).
Download
___________________________
@hacking_Attack
@Hacking_Video
System Informer : A Free, Powerful, Multi-Purpose Tool That Helps You Monitor System Resources, Debug Software And Detect Malware
System Informer, A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc.
System requirements
Windows 7 or higher, 32-bit or 64-bit.
Features
* A detailed overview of system activity with highlighting.
* Graphs and statistics allow you quickly to track down resource hogs and runaway processes.
* Can’t edit or delete a file? Discover which processes are using that file.
* See what programs have active network connections, and close them if necessary.
* Get real-time information on disk access.
* View detailed stack traces with kernel-mode, WOW64 and .NET support.
* Go beyond services.msc: create, edit and control services.
* Small, portable and no installation required.
* 100% Free Software (MIT)
Building the project
Requires Visual Studio (2022 or later).
Execute
build_release.cmdlocated in the builddirectory to compile the project or load the SystemInformer.slnand Plugins.slnsolutions if you prefer building the project using Visual Studio.You can download the free Visual Studio Community Edition to build the System Informer source code.
See the build readme for more information or if you’re having trouble building.
Enhancements/Bugs
Please use the GitHub issue tracker for reporting problems or suggesting new features.
Settings
If you are running System Informer from a USB drive, you may want to save System Informer’s settings there as well. To do this, create a blank file named “SystemInformer.exe.settings.xml” in the same directory as SystemInformer.exe. You can do this using Windows Explorer:
* Make sure “Hide extensions for known file types” is unticked in Tools > Folder options > View.
* Right-click in the folder and choose New > Text Document.
* Rename the file to SystemInformer.exe.settings.xml (delete the “.txt” extension).
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
System Informer : A Free, Powerful, Multi-Purpose Tool
System Informer, A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
Burp Suite + Quickbooks
https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/
Hello! Question for any who have any ideas: is there a way to intercept and view traffic from QuickBooks to a banking website in a tool like Burp Suite or similar? Some background: I am reviewing a banking website, and it offers the option to link QuickBooks and other such software to the account using a person's normal online banking creds. I have a hypothesis that there may be some portions of the website this uses that might be vulnerable to attack (as they are not intended to be seen by users and instead are just passthroughs for QuickBooks). So I would like to map them out, sample the typical requests, and manipulate them. I have added the Burp Suite CA and set my system proxy to a listening Burp Suite proxy, and confirmed I can intercept browser traffic as normal. However, when I download the trial version of QuickBooks and try to connect it to the bank account, the connection fails. It succeeds if I stop trying to proxy through Burp Suite. It seems likely that QuickBooks isn't trusting the burp Suite CA I installed (it probably has its own CAs it trusts). But I'm not sure if I'm neglecting something, or if anyone has encountered a similar issue. Any thoughts? Any other tools/approaches that might be good for exploring this avenue of attack further? Thank you very much! submitted by /u/helmutye (https://www.reddit.com/user/helmutye)
[link] (https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/) [comments] (https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/
Hello! Question for any who have any ideas: is there a way to intercept and view traffic from QuickBooks to a banking website in a tool like Burp Suite or similar? Some background: I am reviewing a banking website, and it offers the option to link QuickBooks and other such software to the account using a person's normal online banking creds. I have a hypothesis that there may be some portions of the website this uses that might be vulnerable to attack (as they are not intended to be seen by users and instead are just passthroughs for QuickBooks). So I would like to map them out, sample the typical requests, and manipulate them. I have added the Burp Suite CA and set my system proxy to a listening Burp Suite proxy, and confirmed I can intercept browser traffic as normal. However, when I download the trial version of QuickBooks and try to connect it to the bank account, the connection fails. It succeeds if I stop trying to proxy through Burp Suite. It seems likely that QuickBooks isn't trusting the burp Suite CA I installed (it probably has its own CAs it trusts). But I'm not sure if I'm neglecting something, or if anyone has encountered a similar issue. Any thoughts? Any other tools/approaches that might be good for exploring this avenue of attack further? Thank you very much! submitted by /u/helmutye (https://www.reddit.com/user/helmutye)
[link] (https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/) [comments] (https://www.reddit.com/r/Pentesting/comments/x2jxey/burp_suite_quickbooks/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Burp Suite + Quickbooks
UPDATE: Figured it out--you have to install the Burp Suite / Portswigger CA as a Trusted Root CA on the local machine (doing it through a browser...
Rotation IP Address with Burpsuite
https://medium.com/@mil3anism/rotation-ip-address-with-burpsuite-24b315bbc4a5?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@mil3anism/rotation-ip-address-with-burpsuite-24b315bbc4a5?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Rotation IP Address with Burpsuite
Hi, For those of you who are unfamiliar with what IP Rotation is, I’m going to share a quick tip and trick with you all on how to use…
Hi, pada kesempatan kali ini gue akan membagikan sebuah tips and trick sederhana bagi kalian semua heker-meN(Red) bagaimana caranya…Continue reading on Medium » (https://medium.com/@mil3anism/rotation-ip-address-with-burpsuite-24b315bbc4a5?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Rotation IP Address with Burpsuite
Hi, For those of you who are unfamiliar with what IP Rotation is, I’m going to share a quick tip and trick with you all on how to use…
OAuth 2.0 (Introduction and Exploitation Part I)Explained By Hashar Mujahid
https://infosecwriteups.com/oauth-2-0-introduction-and-exploitation-part-i-explained-by-hashar-mujahid-262f9c59de6c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://infosecwriteups.com/oauth-2-0-introduction-and-exploitation-part-i-explained-by-hashar-mujahid-262f9c59de6c?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
OAuth 2.0 (Introduction and Exploitation Part I)Explained By Hashar Mujahid
In this blog, I am going to explain how OAuth 2.0 works and what vulnerabilities can be raised if it is implemented incorrectly.
In this blog, I am going to explain how OAuth 2.0 works and what vulnerabilities can be raised if it is implemented incorrectly.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/oauth-2-0-introduction-and-exploitation-part-i-explained-by-hashar-mujahid-262f9c59de6c?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
OAuth 2.0 (Introduction and Exploitation Part I)Explained By Hashar Mujahid
In this blog, I am going to explain how OAuth 2.0 works and what vulnerabilities can be raised if it is implemented incorrectly.
What is API And Why It’s Important to know
https://medium.com/@tmgsecurity/what-is-api-and-why-its-important-to-know-c1a5b565d8b5?source=rss------bug_bounty-5
What is API?Continue reading on Medium » (https://medium.com/@tmgsecurity/what-is-api-and-why-its-important-to-know-c1a5b565d8b5?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@tmgsecurity/what-is-api-and-why-its-important-to-know-c1a5b565d8b5?source=rss------bug_bounty-5
What is API?Continue reading on Medium » (https://medium.com/@tmgsecurity/what-is-api-and-why-its-important-to-know-c1a5b565d8b5?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
What is API And Why It’s Important to know
What is API?
Exploit Collector
Zyxel Firewall SUID Binary Privilege Escalation
___________________________
@hacking_Attack
@Hacking_Video
Zyxel Firewall SUID Binary Privilege Escalation
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Zyxel Firewall SUID Binary Privilege Escalation
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
WordPress Core Cross Site Scripting / SQL Injection
___________________________
@hacking_Attack
@Hacking_Video
WordPress Core Cross Site Scripting / SQL Injection
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
WordPress Core Cross Site Scripting / SQL Injection
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.