hacking: security in practice
Setting up a Windows Active Directory Lab with VirtualBox

Trying to get a better idea of how Windows works for curiousity/hacking, resume experience, and to study for the CompTia A+. Following video: https://www.youtube.com/watch?v=MHsI8hJmggI

Just starting out now, it says I need 100GB so I hope the download doesn't take too long.

submitted by /u/RussiaVodkaAK47
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Moving files witout permission

i dont know if it fits this sub but im going to post this anyway.

i want to make a copy of something but i dont have the permission to do it(i cant even change permissions). is there a better filemanager that ignores permissions? Im using Windows 10.

submitted by /u/widrolo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Will a VM protect me from getting viruses on my own computer?

I'm really not an IT person so I'm sorry if this is a stupid question. I really want to just explore the deep web and I know that Tor is pretty much enough to protect my privacy, but what about computer viruses? There are a lot of weird websites out there, especially on the deep web. Is disabling JavaScript and not downloading anything enough to protect my PC from viruses? Or if I decide to run Tor on a virtual machine, how do I make sure that whatever happens to the VM does not get transferred to my own operating system?

Thanks!

submitted by /u/anna_boop
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Darkdotfail and darknetlive clearnet websites are compromised.

Only use the onions websites. The clearnet ones have been compromised and are now used for phishing.

I was actually quite surprised not to see any post about that here.

submitted by /u/TheGuyFromTheWest
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Client-side Encryption & Server-side Encryption Best Practices

Hello pentesting superstars, i am here again with my blog, lets continue spreading knowledge about cyber security & best practices.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SSL & it’s vulnerable components

Hello Readers! Here we go…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Jenkins RCE Vulnerability

https://cdn-images-1.medium.com/max/785/0*50OT4r4NTo5F8YpK.png
Hi guys whatsup! Here im presenting my

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HeroCTF v3 — Forensic Write-up : We need you

https://cdn-images-1.medium.com/max/1400/1*Nztw5EI6v21QBeVkY3rNsQ.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tunnelling Core Impact Through Cobalt Strike

https://cdn-images-1.medium.com/max/807/1*yHqF-y1xEDZaneJWMd-NoQ.png
I keep saying that my mission is to turn hackers into networkers and networkers into hackers. Having an understanding is great but having…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

MeterPwrShell - Automated Tool That Generate The Perfect Powershell Payload

Automated Tool That Generate A Powershell Oneliner That Can Create Meterpreter Shell On Metasploit,Bypass AMSI,Bypass Firewall,Bypass UAC,And Bypass Any AVs. This tool is powered by Metasploit-Framework and amsi.failNotes NEVER UPLOAD THE PAYLOAD THAT GENERATED BY THIS PROGRAM TO ANY ONLINE SCANNER NEVER USE THIS PROGRAM FOR MALICIOUS PURPOSE SPREADING THE PAYLOAD THAT GENERATED BY THIS PROGRAM IS NOT COOL ANY DAMAGE GENERATED BY THIS PROGRAM IS NOT MY (As the program maker) RESPONSIBILTY!!! If you have some feature recommendation,post that on Issue If you have some issue with the program,try redownloading it again (trust me),cause sometimes i edit the release and fix it without telling  If you want to know how tf my payload bypass any AVs,you can check on this and this Dont even try to fork this repository,you'll dont get the releases! Features (v1.5.1) Bypass UAC Automatic Migrate (using PrependMigrate) Built-in GetSYSTEM (if u use the Bypass UAC option) Disable All Firewall Profile (if u use the Bypass UAC option) Fully Bypass Windows Defender Real-time Protection (if you choose shortened payload or using Bypass UAC or both) Disable Windows Defender Security Features (if u use the Bypass UAC option) Fully unkillable payload Bypasses AMSI Successfully (if you choose shortened payload) Short One-Liner (if you choose shortened payload) Bypass Firewall (If you pick an unstaged payload) Great CLI A Lot More (Try it by yourself) All payload features is tested on Windows 10 v20H2 Advantages Of MeterPwrShell Compared To The web_delivery Module From Metasploit Framework Shorter stager (Or short one-liner in this case) Various AMSI bypass technique and code Dont need to setup a server for the stager Support Ngrok built-in (so the victim doesnt need to be on the same local network) Automatic Built-in Privesc Easily Bypass Windows Defender Thanks to Every single of my Discord Friends Special Thx to theia#8536 on Discord @FuzzySec for that awesome Masquerade PEB script @decoder-it for that amazing PPID Spoofing script Me for not dying when creating this tool Ed Wilson AKA Microsoft Scripting Guy for the great Powershell scripting tutorials and the last one is Emeric Nasi for the research on bypassing AV dynamics Requirements Kali Linux,Ubuntu,Or Debian (If you dont use on of those,the tool will not work!!!) Metasploit Framework Internet Connection (Both On Victim And Attacker Computer) Installation apt update && apt install wgetmkdir MeterPwrShellcd MeterPwrShell && wget https://github.com/GetRektBoy724/MeterPwrShell/releases/download/v1.5.1/meterpwrshellexecchmod +x meterpwrshellexec Usage # ./meterpwrshellexec -c help Available arguments : help, version, showbanner, showlastdebuglog, disablerootdetector, disableinternetdetector, disablealldetector help : Show this page version : Show MeterPwrShell's version showbanner : Show MeterPwrShell's Banner showlastdebuglog : Well,Its kinda self-explanatory tho disablerootdetector : Well,Its kinda self-explanatory tho disableinternetdetector : Well,Its kinda self-explanatory tho disablealldetector : Disable all detector except Linux distribution detector You also can use MeterPwrShell Without Any Flags And Arguments Attack Vectors BadUSBs Malicious Shortcuts (lnk2pwn) Document Macro Payload MS DDE Exploit Extreme Way : Type it in by yourself Any exploit/vulns that let you execute command to victim Idk i have run out of idea lmao To-do List Available features options Bypass AMSI Shortened Payload AKA IEX WebClient method (If you use Bypass AMSI Feature) Bypass UAC (If you use Shortened Payload AKA IEX WebClient method) Download MeterPwrShell
Read more...

hacking: security in practice
F5 Big-IP Vulnerable to Security-Bypass Bug

https://external-preview.redd.it/CNr2amn_BMPj_MIOB2yFCxYYB-8gcBQNDrmkeBbBw90.jpg?width=640&crop=smart&auto=webp&s=286cd08aebd803d2929c5cb22f0a9d185883afb7 submitted by /u/fatrat957
[link] [comments]