hacking: security in practice
Anonymous hacker, who bragged about exploits on TikTok, says he was raided by Canadian police

https://external-preview.redd.it/od8BxKnQ-P706qbeObL1VFqfjUvkgWN1wfQLuHRureM.jpg?width=640&crop=smart&auto=webp&s=09467602c218d61c49a30b210ff8712f009a4723 submitted by /u/BollocksAsBalls
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
where to earn money?

I have heard about people earning some money with hacking like bug bounty and such? Now I was interested which things these are and how they work a d if its easy to do them because iam a programmer

submitted by /u/woolliegames
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible reverse engineer a challenge, in order to crack a password from a NTLMv2 Authorization header?

Hello all,

Imagine the following environment: Couple of urlencoded form requests are done over http and there is an NTLMv2 authentication (the whole 3 yards). Then wireshark sniffs the packets and decodes them - I get mostly everything expected. My question is, is there a way to somehow decode the password? From what I get the mechanism works as follows - server sends a challenge (nonce) which is hashed using the client's password. Could I use the NTLMv2 Client Challenge and NTProofStr for that purpose and somehow reverse engineer the encoding?

Authorization header looks as follows:

```

NTLM TlRMTVNTUAADAAAAGAAYAFgAAAAOAQ4BcAAAAAwADAB+AQAADAAMAIo......

```

​

Excuse me if I'm asking borderline stupid questions, it's actually my first time diving into the cybersecurity realm.

submitted by /u/hipnozzza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal 18rb Data Leaked
https://baguslindu.medium.com/directory-traversal-18rb-data-leaked-913c5843887a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hallo, sebenernya ini merupakan sesi iseng nulis write up, jadi begini pada tanggal 5 februari 2022 yang lalu saya melakukan sebuah…Continue reading on Medium » (https://baguslindu.medium.com/directory-traversal-18rb-data-leaked-913c5843887a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Common C Vulnerabilities
https://medium.com/@capturethebugs/common-c-vulnerabilities-56ffad22581e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IntroductionContinue reading on Medium » (https://medium.com/@capturethebugs/common-c-vulnerabilities-56ffad22581e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How i Found Unauthorized Bypass RCE

Easy Vulnerability Leads To admin Console ,P1 typeContinue reading on Medium »
Read more...

Directory Traversal 18rb Data Leaked

Hallo, sebenernya ini merupakan sesi iseng nulis write up, jadi begini pada tanggal 5 februari 2022 yang lalu saya melakukan sebuah…Continue reading on Medium »
Read more...

Common C Vulnerabilities

IntroductionContinue reading on Medium »
Read more...

Session Management Part — 2
https://medium.com/@sathvika03/session-management-part-2-18006a31bedc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let us learn some more vulnerbailities related to SessionsContinue reading on Medium » (https://medium.com/@sathvika03/session-management-part-2-18006a31bedc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Session Management Part — 2

Let us learn some more vulnerbailities related to SessionsContinue reading on Medium »
Read more...

Exploiting Stack-based Buffer Overflow on Windows x64 | Step by Step explanation | Part-2

Hello Security folks, Tejas here :) I hope you all are doing great. In previous writeup, we reached at the point where we were able to…Continue reading on Medium »
Read more...

FISSURE - Frequency Independent SDR-based Signal Understanding and Reverse Engineering
http://www.kitploit.com/2022/09/fissure-frequency-independent-sdr-based.html

Frequency Independent SDR-based Signal Understanding and Reverse EngineeringFISSURE is an open-source RF and reverse engineering framework (https://www.kitploit.com/search/label/Reverse%20Engineering%20Framework) designed for all skill levels with hooks for signal detection and classification, protocol discovery, attack execution, IQ manipulation, vulnerability (https://www.kitploit.com/search/label/Vulnerability) analysis, automation, and AI/ML. The framework was built to promote the rapid integration of software modules, radios, protocols, signal data, scripts, flow graphs, reference material, and third-party tools. FISSURE is a workflow enabler that keeps software in one location and allows teams to effortlessly get up to speed while sharing the same proven baseline configuration for specific Linux distributions.The framework and tools included with FISSURE are designed to detect the presence of RF energy, understand the characteristics of a signal, collect and analyze samples, develop transmit and/or injection techniques, and craft custom payloads or messages. FISSURE contains a growing library of protocol and signal information to assist in identification, packet crafting, and fuzzing. Online archive capabilities exist to download signal files and build playlists to simulate traffic and test systems.The friendly Python codebase and user interface allows beginners to quickly learn about popular tools and techniques involving RF and reverse engineering. Educators in cybersecurity (https://www.kitploit.com/search/label/Cybersecurity) and engineering can take advantage of the built-in material or utilize the framework to demonstrate their own real-world applications. Developers and researchers can use FISSURE for their daily tasks or to expose their cutting-edge solutions to a wider audience. As awareness and usage of FISSURE grows in the community, so will the extent of its capabilities and the breadth of the technology it encompasses.
Getting StartedSupportedThere are two branches within FISSURE to make file navigation easier and reduce code redundancy. The Python2_maint-3.7 branch contains a codebase built around Python2, PyQt4, and GNU Radio 3.7; while the Python3_maint-3.8 branch is built around Python3, PyQt5, and GNU Radio 3.8.Operating SystemFISSURE BranchUbuntu 18.04 (x64)Python2_maint-3.7Ubuntu 18.04.5 (x64)Python2_maint-3.7Ubuntu 18.04.6 (x64)Python2_maint-3.7Ubuntu 20.04.1 (x64)Python3_maint-3.8Ubuntu 20.04.4 (x64)Python3_maint-3.8In-Progress (beta)Operating SystemFISSURE BranchUbuntu 22.04 (x64)Python3_maint-3.8Note: Certain software tools do not work for every OS. Refer to Software And Conflicts (https://github.com/ainfosec/FISSURE/blob/Python3_maint-3.8/Help/Markdown/SoftwareAndConflicts.md)Installationgit clone https://github.com/ainfosec/fissure.git
cd FISSURE
git checkout or
./install
This will automatically install PyQt software dependencies required to launch the installation GUIs if they are not found.Next, select the option that best matches your operating system (should be detected automatically if your OS matches an option).