Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Autodeauth : A Tool Built To Automatically Deauth Local Networks

Autodeauth is a tool built to automatically deauth local networks

* Tested on Raspberry Pi OS and Kali Linux

Setup

$ chmod +x setup.sh
$ sudo ./setup.sh
[] This can be changed by editing /etc/systemd/system/autodeauth.service [?] Enter your WiFi interface to use with the autodeauth service: wlan0 [] Installed!, you can use sudo autodeauth -h to see available options.
[] Use sudo systemctl start autodeauth to start the service [] Check the README for more infomation about configuring the service

Options

$ sudo autodeauth -h _ _ _ _ _ /\ | | | \ _ _ | || |_
/ _ \ || | / \ |) / –) ` | || | | ‘ \ // __,|____//__,|_,|__||||
usage: autodeauth [-h] –interface INTERFACE [–blacklist BLACKLIST] [–whitelist WHITELIST] [–led LED] [–time TIME] [–random] [–ignore] [–count COUNT] [–verbose VERBOSE]
Auto Deauth Tool
options:
-h, –help show this help message and exit
–interface INTERFACE, -i INTERFACE
Interface to fetch WiFi networks and send deauth packets (must support packet injection)
–blacklist BLACKLIST, -b BLACKLIST
List of networks ssids/mac addresses to avoid (Comma seperated)
–whitelist WHITELIST, -w WHITELIST
List of networks ssids/mac addresses to target (Comma seperated)
–led LED, -l LED Led pin number for led display
–time TIME, -t TIME Time (in s) between two deauth packets (default 0)
–random, -r Randomize your MAC address before deauthing each network
–ignore Ignore errors encountered when randomizing your MAC address
–count COUNT, -c COUNT
Number of packets to send (default 5000)
–verbose VERBOSE, -v VERBOSE
Scapy verbosity setting (default: 0)

Usage

After running the setup you are able to run the script by using autodeauth from any directory

Command line

Networks with spaces can be represented using their mac addresses

$ sudo autodeauth -i wlan0 –blacklist FreeWiFi,E1:DB:12:2F:C1:57 -c 10000

Service

$ sudo systemctl start autodeauth

Loot and Log files

Loot

When a network is detected and fits under the whitelist/blacklist criteria its network information is saved as a json file in /var/log/autodeauth/

{
“ssid”: “MyWiFiNetwork”,
“mac_address”: “10:0B:21:2E:C1:11”,
“channel”: 1,
“network.frequency”: “2.412 GHz”,
“mode”: “Master”,
“bitrates”: [
“6 Mb/s”,
“9 Mb/s”,
“12 Mb/s”,
“18 Mb/s”,
“24 Mb/s”,
“36 Mb/s”,
“48 Mb/s”,
“54 Mb/s”
],
“encryption_type”: “wpa2”,
“encrypted”: true,
“quality”: “70/70”,
“signal”: -35
}

Log File

$ cat /var/log/autodeauth/log
2022-08-20 21:01:31 – Scanning for local networks
2022-08-20 21:20:29 – Sending 5000 deauth frames to network: A0:63:91:D5:B8:76 — MyWiFiNetwork
2022-08-20 21:21:00 – Exiting/Cleaning up

Edit Service Config

To change the settings of the autodeauth service edit the file /etc/systemd/system/autodeauth.service
Lets say you wanted the following config to be setup as a service

$ sudo autodeauth -i wlan0 –blacklist FreeWiFi,myWifi -c 10000

$ vim /etc/systemd/system/autodeauth.service

Then you would change the ExecStart line to

ExecStart=/usr/bin/python3 /usr/local/bin/autodeauth -i wlan0 –blacklist FreeWiFi,myWifi -c 10000
Download
Dark Reading: Attacks/Breaches
How Can I Protect My SaaS Apps Amid Employee Turnover?

A SaaS-specific security solution can help security teams make sure apps and usage are both secure, reducing the chances of a breach.
Dark Reading: Attacks/Breaches
Next-Gen Linux Malware Takes Over Devices With Unique Toolset

The Shikitega malware takes over IoT and endpoint devices, exploits vulnerabilities, uses advanced encoding, abuses cloud services for C2, installs a cyptominer, and allows full remote control.
Dark Reading: Attacks/Breaches
Iran-Linked APT Cozies Up to 'Enemies' in Trust-Based Spy Game

APT42 is posing as a friend to people considered threats to the government, using a raft of different tools to steal relevant info and perform surveillance.
Dark Reading: Attacks/Breaches
Some Employees Aren't Just Leaving Companies — They're Defrauding Them

Here are a few measures your organization can implement to minimize fraudulent behavior and losses.
hacking: security in practice
How to access data on a locked Samsung galaxy S8?

Hey guys. I'm trying to find out if it is possible to get access to the photos on a locked galaxy s8. Without laying out the whole sad story, the issue is that my wife's grandparents died in a car crash a few years ago and I was given her granddads phone to see if I could recover his photos. I tried originally and couldn't find any software or anything that claimed to be able to do it without wiping the device. I came across the phone in a box again and want to see if anything has changed. I'm hoping that maybe you guys would know if this is possible.

submitted by /u/Rex__Nihilo
[link] [comments]
How I found 3 RXSS on the Lululemon bug bounty program

Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomainsContinue reading on Medium »
Read more...
Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomainsContinue reading on Medium » (https://omar0x01.medium.com/how-i-found-3-rxss-on-the-lululemon-bug-bounty-program-fa357a0154c2?source=rss------bug_bounty-5)