Kali Linux Tutorials
DNSPeep : Spy On The DNS Queries Your Computer Is Making

DNSPeep lets you spy on the DNS queries your computer is making. Here’s some example output: $ sudo dnspeepquery name server IP responseA incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME: pipeline-incoming-prod-elb-149169523.us-west-2.elb.amazonaws.com, A: 52.39.144.189, A: 54.191.136.131, A: 34.215.151.143, A: 54.149.208.57, A: 44.226.235.191, A: 52.10.174.113, A: 35.160.138.173, A: 44.238.190.78AAAA incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME: pipeline-incoming-prod-elb-149169523.us-west-2.elb.amazonaws.comA www.google.com 192.168.1.1 A: 172.217.13.132AAAA […]

The post DNSPeep : Spy On The DNS Queries Your Computer Is Making appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: SeBackupPrivilege

In this article, we will shed light on some of the methods of Escalating Privilege on Windows-based Devices when it is vulnerable with the SeBackupPrivilege after getting the initial foothold on the device. Table of Content· Introduction· Setting Up Privilege on Windows 10· Testing Privilege on Windows 10· Exploiting Privilege on Windows 10· Setting Up Privilege on Domain Controller· Testing Privilege on Domain Controller· Exploiting Privilege on Domain Controller (Method 1)· Exploiting Privilege on Domain Controller (Method 2)· ConclusionThis specific privilege escalation is based on the act of assigning a user SeBackupPrivilege. It was designed for allowing users to create backup copies of the system. Since it is not possible to make a backup of something that you cannot read. This privilege comes at the cost of providing the user with full read access to the file system. This privilege must bypass any ACL that the Administrator has placed in the network. So, in a nutshell, this privilege allows the user to read any file on the entirety of the files that might also include some sensitive files such as the SAM file or SYSTEM Registry file. From the attacker's perspective, this can be exploited after gaining the initial foothold in the system and then moving up to an elevated shell by essentially reading the SAM files and possibly crack the passwords of the high privilege users on the system or network. This article will help you set up the privilege in a VM environment to learn and explore it in detail and then exploit it via Kali Linux. Setting Up Privilege on Windows 10We will be performing this demonstration on a Windows 10 machine that is quite essential not part of a domain. Here, we need to create a user to which we will be providing the privilege. Creating a user is simple, it can be done using a new user command as shown in the image below. net user aarti 123 /addhttps://1.bp.blogspot.com/-INyMgdRQGyE/YIrW1z_VHkI/AAAAAAAAvpE/7B-dRJtWM8M16sqwgDHIaUR9bhcvyHf2gCLcBGAsYHQ/s16000/1.png powershell -ep bypass Install-Module -Name carbon ___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Windows Privilege Escalation: SeBackupPrivilege

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Suspected Chinese Hackers Unleash Malware That Can Survive OS Reinstalls

https://cdn-images-1.medium.com/max/1422/0*M9X2uEtqJJHKSqbg.jpg
It works to create a Trojan file called ‘IntelUpdate.exe’ in the Startup Folder, which will reinstall itself even if the user finds it and…

Continue reading on PC Magazine »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack A University Student Portal To Change Grades

https://cdn-images-1.medium.com/max/822/0*4P9yo2ZIpe7zUy4F.jpg
MAGICFINGERHACKERS@GMAIL.COM — — — -Here is a tip of how you can hack grades in any university portal with ease.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox: Delivery Walkthrough

https://cdn-images-1.medium.com/max/701/1*jcFv38GJprYrWjz2rkqZFA.png
Hi folks, it’s been a long time since I posted an article. So here I am back with another walkthrough but this time, it’s a box from HTB…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BrightScan #ThreatIntelThursday | Denial of Service Attacks

https://cdn-images-1.medium.com/max/1920/1*uC_adUCPAamGzOfSSACgEA.png
By: Sarah King

Continue reading on OpenAVN »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Client-side Encryption & Server-side Encryption Best Practices

Hello pentesting superstars, i am here again with my blog, lets continue spreading knowledge about cyber security & best practices.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Jenkins RCE Vulnerability

Hi guys whatsup! Here im presenting myContinue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
API Hole on Experian Partner Site Exposes Credit Scores

Student researcher is concerned security gap may exist on many other sites.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for a certain keygen for educational purposes

Hey friends,

I’m looking for a keygen created by h2o back in 2005 for (no longer sold / now abandoned) Native Instruments softwares. I am specifically looking for the NI Bandstand keygen, version 1.0 or 1.0.1 would be ideal.

Trying to reverse engineer it to figure out some details...

If anyone has access to this file, please let me know.

If this post is not allowed, my apologies & please remove it!

submitted by /u/theBexN
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iOS 14.5 FaceID Facemask Restriction Bypass

https://external-preview.redd.it/7TSsxs1p15ket6fGeMqkMiJQMleSLcGDFApP8zKnhwk.jpg?width=320&crop=smart&auto=webp&s=2b2fd6a98b6752990342701de6d73416eb323b58 submitted by /u/Cr0wTom
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video