https://a.thumbs.redditmedia.com/5POhW3VicRYxuFlWKTKsUP6UNY75du6YmVohWSGElr0.jpg https://preview.redd.it/pmh1f357lyv61.jpg?width=1244&format=pjpg&auto=webp&s=4fb9344a53c9a5d7fd680f02799a02417754ab20

I found a bug in the Afranet network in Iran and took some screenshots! The company is one of the biggest in Iran and is listed on the stock exchange.

From the image you can see the PRTG Network Monitor software with 21000 sensors. In a workstation I found a few dollars software cracked.

In 2 days I got all the necessary information and I saw that the breach has been open for about 8 months. I didn't find any activity of other snoopers.

Photo link: https://imgur.com/a/gYxnO0h

I will add more comments later

submitted by /u/LargeTrader
[link] [comments]

hacking: security in practice
Arbitrary code execution found in ExifTool. Make sure to update to 12.24+

https://external-preview.redd.it/AZ0HF3tmPB2D5IQ0cL_pzixXCyN_HmofLUxV_ZRLMB0.png?width=640&crop=smart&auto=webp&s=4ae87f23cd46e73e290cf1e0c8185687a3b749d8 submitted by /u/brownrawbottle
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What happened to Stakkato?

Does anyone know what happened to Stakkato? Long story short, it's a Swedish hacker who hacked into NASA, Pentagon, Cisco and a bunch of universities when he was only 16 years old. He got caught back in 2005, and I know that he was in court in around 2010 (don't know the exact date). However I can't find any info on what sentence he got, and what he's up to now.

submitted by /u/ChameLeonYT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How can you be as anonymous as possible

What are some of the precautions I should take on the deep web I go on it daily just to kind of explore and stuff but want to go deeper into the deep web but not sure what kindve stuff to do I use a VM and a vpn is there anything else I need to do?

submitted by /u/Different_Addition_2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Empire for Pentester: Active Directory Enumeration

In this article, we take a look inside Active Directory through PowerShell Empire. PowerShell Empire consists of some post-exploitation modules inside the situational awareness section. PowerView is integrated inside the Empire to extract data from a Domain.

Table of Contents· Introduction· Get User· Get Computer· Get Loggedon· Process Hunter· Get OU· Get Session· Get Domain Controller· Get Group· Get Group Member· Get Cached RDP Connection· Find Local Admin Access· Share Finder· Get Subnet Ranges· Get Forest· Get Forest Domain· Get GPO· Get Domain Policy· Get RDP Session· Get Site· ConclusionIn our previous article focused on Active Directory Enumeration: PowerView, we discussed a ton of options some of those are also present in Empire so those can seem to be repeating the similar approach but there are some more interactive modules here that are worth looking into. We will be using the same Active Directory Lab configuration from the PowerView Article mentioned above. In this Article/Demonstration, we are focused on our ability to Enumerate Information that can be then further be used to elevate privileges or be able to help with Lateral Movement. A tool by the name of PowerView was developed and integrated by Will Schroeder (a.k.a harmj0y)for PowerSploit. It soon became an integral toolkit to perform Active Directory Attacks and Enumeration. We will be using PowerShell Empire to demonstrate the various Enumeration Tactics by PowerView.What is Situational Awareness?Situational Awareness is defined as: “Within a volume of time and space, the perception of an enterprise’s security posture and its threat environment; the comprehension/meaning of both taken together (risk); and the projection of their status into the near future.” In simpler terms learning and understanding the structure of any enterprise or network in a particular set of time while making a note of potential risks and making a plan of action is called Situational Awareness. Get UserIn our Active Directory Lab Setup, we created 8 users with different roles and privileges. Then when we emulate the attack on the AD from PowerShell Empire using Kali Linux as demonstrated, we generate the following result.usemodule situational_awareness/network/powerview/get_userhttps://1.bp.blogspot.com/-5-V7slsF9pw/YImm_oA7dpI/AAAAAAAAvlM/CMeFX5MoED4ECoI-p_dGPw14lTMCmwVmgCLcBGAsYHQ/s16000/1.png ___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Empire for Pentester: Active Directory Enumeration

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The dangers of the online world

https://cdn-images-1.medium.com/max/1024/0*bh3RdqBXhMHITjt0.jpg
Welcome to the online world! Here you may face cyberbullying, hacking and strangers with crazy minds but don’t worry, I’m here to help you!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Mr. Robot CTF — Beginner Friendly (detailed)

https://cdn-images-1.medium.com/max/600/1*eELTi8UxZycRdOtr130eHA.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
اساسيات اعداد لاب لاختبار اختراق تطبيقات

https://cdn-images-1.medium.com/max/1346/1*sZnOJkivgHCHzpo81ysypA.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
IP Address Hiding & Free VPN Chrome

https://cdn-images-1.medium.com/max/2600/0*G7e2PXyf3GJpLSvi
Introduction: Hello, I’m weychel.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Thanks to MAGIC FINGER HACKERS for helping me with my grades permanently.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XML External Entity (OWASP Top 10)

https://cdn-images-1.medium.com/max/2600/0*-yscOx_yhEwjcInw
Continue reading on Secure You!! »

___________________________
@hacking_Attack
@Hacking_Video

PwnLnX - An Advanced Multi-Threaded, Multi-Client Python Reverse Shell For Hacking Linux Systems

An advanced multi-threaded, multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out with the development. Disclaimer: This reverse shell should only be used in the lawful, remote administration of authorized systems. Accessing a computer network without authorization or permission is illegal.Getting Started Please follow these instructions to get a copy of PwnLnX running on your local machine without any problems. Prerequisites Python3: vidstream pyfiglet tqdm mss termcolor pyautogui pyinstaller pip3 pynput Installing # Download source codegit clone https://github.com/spectertraww/PwnLnX.gitcd PwnLnX# download and install the dipendenceschmod +x setup.sh./setup.sh Getting PwnLnx up and running Show help python3 PwnLnX.py --help Listening for incoming connections python3 PwnLnX.py --lhost your localhost ip address --lport free port for listening incoming connections creating/Generating a payload chmod +x PwnGen.sh./PwnGen.sh then follow the procedure to successifully create your payload, the payload is saved in PwnLnx directory. Send the created payload to victim PwnLnx Usage Command Usage help show help exit close all the sessions and quit the progaram. show sessions show all available sessions from connected. session ID interact with a specified session ID. kill all/ID kill a specified session or all to kill all sessions. banner have funny by changing the program banner Interact with a session Command Usage help show help. quit close the current session. background background the current session. sysinfo get minimum target system information. create_persist create a persistant backdoor. upload upload the specified filename to the target system. download download the specified filename from the target system. screenshot take a desktop screenshot of the target system. start_screenshare start desktop screensharing. stop_screenshare stop desktop screensharing. start_keycap start capturing victim's pressed keystrokes. dump_keycap dump/get the captured keystrokes. stop_keycap stop the capturing keystrokes. NB. you can also execute linux system commands besides those listed above. Disclaimer I will not be responsible for any direct or indirect damage caused due to the usage of this tool, it is for educational purposes only. Report Bugs spectertraww@gmail.com Snapshots Download PwnLnX
Read more...

___________________________
@hacking_Attack
@Hacking_Video