Hacking on Medium
Blue TryHackMe Writeup/Walkthrough

https://cdn-images-1.medium.com/max/936/1*4__ODSTTvUzCGKaafCWCyg.png
In this TryHackME — Blue Writeup we will learn how a small blip in the system can get it hacked. The purpose of this blog is to…

Continue reading on Medium »

Kali Linux Tutorials
Crosslinked : LinkedIn Enumeration Tool

CrossLinked is a LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from an organization. This technique provides accurate results without the use of API keys, credentials, or accessing LinkedIn directly!

Install

Install the last stable release from PyPi:

pip3 install crosslinked

Or, install the most recent code from GitHub:

git clone https://github.com/m8sec/crosslinked
cd crosslinked
python3 setup install

Prerequisite

CrossLinked assumes the organization’s account naming convention has already been identified. This is required for execution and should be added to the CMD args based on your expected output. See the Naming Formatand Example Usagesections below:

Naming Format

{f}.{last} = j.smith
{first.{last} = john.smith
CMP{first}{l} = CMP\johns
{f}{last}@company.com = jsmith@company.com

Search

By default, CrossLinked will use googleand bingsearch engines to identify employees of the target organization. After execution, two files (names.txt & names.csv) will appear in the current directory, unless modified in the CMD args.

* names.txt – List of unique user accounts in the specified format.
* names.csv – Raw search data. See the Parsesection below for more.

Example Usage

python3 crosslinked.py -f ‘{first}.{last}@domain.com’ company_name

python3 crosslinked.py -f ‘domain{f}{last}’ -t 15 -j 2 company_name

Parse

Account naming convention changed after execution and now your hitting CAPTCHA requests? No Problem!

CrossLinked v0.2.0 now includes a names.csvoutput file, which stores all scraping data including: first name, last name, job title, and url. This can be ingested and parsed to reformat user accounts as needed.

Example Usage

python3 crosslinked.py -f ‘{f}{last}@domain.com’ names.csv

Additional Options

Proxy Rotation

The latest version of CrossLinked provides proxy support to rotate source addresses. Users can input a single proxy with --proxy 127.0.0.1:8080or use multiple via --proxy-file proxies.txt.

cat proxies.txt
127.0.0.1:8080
socks4://111.111.111.111
socks5://222.222.222.222
python3 crosslinked.py –proxy-file proxies.txt -f ‘{first}.{last}@company.com’ -t 10 “Company”

Usage

positional arguments:
company_name Target company name
optional arguments:
-h, –help show help message and exit
-t TIMEOUT Max timeout per search (Default=15)
-j JITTER Jitter between requests (Default=1)
Search arguments:
–search ENGINE Search Engine (Default=’google,bing’)
Output arguments:
-f NFORMAT Format names, ex: ‘domain{f}{last}’, ‘{first}.{last}@domain.com’
-o OUTFILE Change name of output file (omit_extension)
Proxy arguments:
–proxy PROXY Proxy requests (IP:Port)
–proxy-file PROXY Load proxies from file for rotation
Download

Kali Linux Tutorials
Exegol : Fully Featured And Community-Driven Hacking Environment

Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Script kiddies use Kali Linux, real pentesters use Exegol, megachads maintain it. Wrapper & imagesExegol is two things in one. Try it, and you’ll stop using your old, unstable and risky environment, no more Kali Linux as host or single VM.

* a python wrapper making everyone’s life easier. It handles all docker and git operations so you don’t have to, and it allows for l33t hacking following best-practices. No more messed up history, libraries, and workspaces. Now’s the time to have a clean environment with one container per engagement without the effort. Exegol handles multiple images and multiple containers.
* Want to test a new tool without risking messing up your environment? Exegol is here, pop up a new container in 5 seconds and try the tool without risk or effort
* Like the idea of using docker containers without effort but don’t want to sacrifice GUI tools like BloodHound and Burp? Exegol is here, new containers are created with X11 sharing by default allowing for GUI tools to work.
* Like the idea of using docker containers but want to use USB accessories, Wi-Fi, host’s network interfaces, etc.? Exegol handles all that flawlessly
* Want to stop pentesting your clients with the same environment everytime, interconnecting everything and risking being a weak link? Exegol is here, pop multiple containers without breaking a sweat and lead by example!
* You like this idea but don’t want to lose your work when quitting/removing a container? Exegol shares a workspace directory per container with your host, allowing you to work knowing your progress won’t be lost.

* a set of pre-built docker images and dockerfiles that include a neat choice of tools, awesome resources, custom configs and many more.
* Fed up with the instability and poor choice of tools of Kali Linux ? Exegol is here, trying to correct all this by being community-driven. Want some not-so-famous tool to be added? Open an issue and let’s talk do it!
* Tired of always having to open manor print the help for every tool because the syntax varies? Exegol includes a command history allowing you to just replace the placeholders with your values, saving you precious time
* Want to improve productivity? Exegol includes all sorts of custom configs and tweaks with ease of use and productivity in mind (colored output for Impacket, custom shortcuts and aliases, custom tool configs, …).
* Want to build your own docker images locally? It’s absolutely possible and the wrapper will help in the quest.
* Tired of always having to search github for your favorite privesc enumeration script? Exegol includes a set of resources, shared with all exegol containers and your host, including LinPEAS, WinPEAS, LinEnum, PrivescCheck, SysinternalsSuite, mimikatz, Rubeus, PowerSploit and many more.
Exegol was built with pentest engagements in mind, but it can also be used in CTFs, Bug Bounties, HackTheBox, OSCP, and so on.

* Tools: many tools that are either installed manually or with apt, pip, go etc. Some of those tools are in kali, some are not. Exegol doesn’t come with only ultra-famous tools, you will find ones that the community loves to use, even if it’s in dev/new/not famous. Some tools are pre-configured and/or customized (colored output, custom NtChallengeResponse in Responder, custom queries in BloodHound, …)
* Resources: many resources can be useful during engagements. Those resources are not referred to as “tools” since they need to be run on a pwned target, and not on the attacker machine (e.g. mimikatz, rubeus, …).
* History: a populated history file that allows exegol users to save time and brain space by not having to remember every tool option and argument or checking the “help” every time.
* Aliases: a file [...]

___________________________
@hacking_Attack
@Hacking_Video

containing aliases that can be handful when using manually installed tools, or doing common operations.
* Usage: a powerful Python3 wrapper used to manage Exegol container and image very easily (handles every docker operations). Project structureBelow are some bullet points to better understand how Exegol works

* This repository (Exegol) contains the code for the Python wrapper. It’s the entrypoint of the Exegol project.
* The Exegol-images repo is loaded as a submodule. It includes all necessary assets to build Docker images.
* The Exegol-resources repo is loaded as a submodule. It includes all resources mentioned previously (LinPEAS, WinPEAS, LinEnum, PrivescCheck, SysinternalsSuite, mimikatz, Rubeus, PowerSploit and many more.).
* Getting started with the Exegol project comes down to using the wrapper, which can be installed through pip or with the sources directly (see. get started). Download

___________________________
@hacking_Attack
@Hacking_Video

How I found the Stored XSS and Clickjacking.
https://medium.com/@nitishkumar3ar/how-i-found-the-stored-xss-and-clickjacking-5eac638d7ee6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone! I’m Nitish, this is my first write-up. Hope you all are doing great.Continue reading on Medium » (https://medium.com/@nitishkumar3ar/how-i-found-the-stored-xss-and-clickjacking-5eac638d7ee6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I found the Stored XSS and Clickjacking.

Hello everyone! I’m Nitish, this is my first write-up. Hope you all are doing great.Continue reading on Medium »
Read more...

hacking: security in practice
GTA 6 source code and videos leaked after Rockstar Games hack

https://external-preview.redd.it/4gWnw1216K_y_1reS415VFVnp_pH72J0XijcDdDZzdQ.jpg?width=640&crop=smart&auto=webp&s=4a6ca31f663ec645b008aa35b27320746d45ec45 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone have experience with Wi-Fi controlled LED Hacking?

I have some Monster brand wifi controlled LED lights at my house and wanted to connect them to my raspberry pi so that I could control them with a custom program. The only problem is that these lights are meant to only be used with the app or through digital assistants like Siri. I figured that the first step would be to use wire shark and see what is happening when the lights are told to turn on and change color. I am not currently home so I can’t do this right now, and I am wondering if anyone has experience doing this kind of thing and what methods/ approaches did you guys take? Just looking for any info that will speed up my own attempts!

submitted by /u/midnightwolfr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Worth the watch

Watched this tonight very interesting I feel some members of the community will enjoy it but it might not be for everyone https://m.youtube.com/watch?v=wTgYeETwgKQ

submitted by /u/Phantasius224
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

LDAP Nom Nom - anonymously bruteforce Active Directory usernames at high speed
https://www.reddit.com/r/redteamsec/comments/xi6spc/ldap_nom_nom_anonymously_bruteforce_active/

Here's my new tool "LDAP nom nom", which allows you to anonymously bruteforce Domain Controllers to find usernames in Active Directory at high speeds. As far as I know there are no logs generated for this, so detecting this requires custom network level monitoring. If you're pentesting a new environment, and don't know where to start, you can detect existence of about 10M usernames in less than 30 minutes (10K names/sec) From there on, it could be a question of looking for really dubious account names like "admintest" or "tempadmin" who might have the same password as the account name. This can be attempted by kerberoasting or direct logins (this is noisy and generates events). Reception of this small tool has been terrific, with more than 200 stars on Github in less than 24 hours, which is crazy compared to the other stuff I've released. https://github.com/lkarlslund/ldapnomnom submitted by /u/lkarlslund (https://www.reddit.com/user/lkarlslund)
[link] (https://www.reddit.com/r/redteamsec/comments/xi6spc/ldap_nom_nom_anonymously_bruteforce_active/) [comments] (https://www.reddit.com/r/redteamsec/comments/xi6spc/ldap_nom_nom_anonymously_bruteforce_active/)

___________________________
@hacking_Attack
@Hacking_Video

Crack Pre-Shared Key of WPA/WPA2 from Live Network
https://www.reddit.com/r/redteamsec/comments/xi7650/crack_preshared_key_of_wpawpa2_from_live_network/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/cracking-wpa-psk-using-aircrack/) [comments] (https://www.reddit.com/r/redteamsec/comments/xi7650/crack_preshared_key_of_wpawpa2_from_live_network/)

___________________________
@hacking_Attack
@Hacking_Video

Staying Under the Radar - PPID Spoofing and Blocking DLLs
https://www.reddit.com/r/redteamsec/comments/xi7opb/staying_under_the_radar_ppid_spoofing_and/

https://crypt0ace.github.io/posts/Staying-under-the-Radar/ submitted by /u/Potential_Waltz7400 (https://www.reddit.com/user/Potential_Waltz7400)
[link] (https://www.reddit.com/r/redteamsec/comments/xi7opb/staying_under_the_radar_ppid_spoofing_and/) [comments] (https://www.reddit.com/r/redteamsec/comments/xi7opb/staying_under_the_radar_ppid_spoofing_and/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe : Red Team Learning Path

https://cdn-images-1.medium.com/max/864/1*InAO4lsmYeEU3KC19eP65A.png
hey sup, it’s your techie Kalra here, so recently Tryhackme has created a new Learning Path called “Red Team Learning Path”, so today we…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hello Ethernaut (Level-0) CTF

https://cdn-images-1.medium.com/max/612/1*9XvfiaRh6u17knFl203x9A.jpeg
Introduction

Continue reading on CoinsBench »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Developing Pentest Skills

https://cdn-images-1.medium.com/max/728/0*7AlpQBiy8wX6MrrQ
Lots of people ask me how to get into the hacking field and almost always I tell them to start with pentesting. Pentesting is the gateway…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video