hacking: security in practice
Force uninstalling corporate antivirus
It’s called Trend Micro Agent and it’s on my company laptop. In the past I was able to wipe Endpoint management software using a power shell script but this one is quite the challenge. It requires a password to uninstall and I’m trying to figure out a way to force uninstall it without having to reset windows. Any pros around to assist? It’s interfering with my workflow, I plan to reinstall it after I’m done with my project.
submitted by /u/Ev1lC4t
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Force uninstalling corporate antivirus
It’s called Trend Micro Agent and it’s on my company laptop. In the past I was able to wipe Endpoint management software using a power shell script but this one is quite the challenge. It requires a password to uninstall and I’m trying to figure out a way to force uninstall it without having to reset windows. Any pros around to assist? It’s interfering with my workflow, I plan to reinstall it after I’m done with my project.
submitted by /u/Ev1lC4t
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Force uninstalling corporate antivirus
It’s called Trend Micro Agent and it’s on my company laptop. In the past I was able to wipe Endpoint management software using a power shell...
hacking: security in practice
Bendigo bank can’t track who hacked our account QLD
We had an ex employee using a current employees log in to view business accounts.
She is viewing them because she is being charged with payroll fraud. I don’t know what viewing the business accounts after their fraud activities were uncovered achieves, but she is.
We found out when in court she mentioned “she had evidence” that the business wasn’t “playing by the rules”. Which is projection, because the only one not following the rules is that con artist.
All employees were asked to change passwords after she left, but one forgot to and so she did the day the con artist made that statement. Lo and behold that afternoon a failed log in attempt pinged three times for that employee. So she was using her log in to view accounts.
She currently (somehow) runs a family daycare despite over 120 aggravated fraud charges pending a trial in the district court. (So annoyed, she now gets to con the child care subsidy scheme/income tax)
Bendigo bank have provided police “data” of all who accessed the accounts, but police are stating that there are no IP addresses to prove she breached her bail to continue access, or (imo) that they can’t understand the data.
She’s breached her bail twice, we would love to prove she still is. We’ve changed passwords and enabled TFA.
How can we get this evidence she was logging in? Are the bank able to track IP addresses? Are we asking for the wrong data 😖
submitted by /u/strayashrimp
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Bendigo bank can’t track who hacked our account QLD
We had an ex employee using a current employees log in to view business accounts.
She is viewing them because she is being charged with payroll fraud. I don’t know what viewing the business accounts after their fraud activities were uncovered achieves, but she is.
We found out when in court she mentioned “she had evidence” that the business wasn’t “playing by the rules”. Which is projection, because the only one not following the rules is that con artist.
All employees were asked to change passwords after she left, but one forgot to and so she did the day the con artist made that statement. Lo and behold that afternoon a failed log in attempt pinged three times for that employee. So she was using her log in to view accounts.
She currently (somehow) runs a family daycare despite over 120 aggravated fraud charges pending a trial in the district court. (So annoyed, she now gets to con the child care subsidy scheme/income tax)
Bendigo bank have provided police “data” of all who accessed the accounts, but police are stating that there are no IP addresses to prove she breached her bail to continue access, or (imo) that they can’t understand the data.
She’s breached her bail twice, we would love to prove she still is. We’ve changed passwords and enabled TFA.
How can we get this evidence she was logging in? Are the bank able to track IP addresses? Are we asking for the wrong data 😖
submitted by /u/strayashrimp
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Bendigo bank can’t track who hacked our account QLD
We had an ex employee using a current employees log in to view business accounts. She is viewing them because she is being charged with payroll...
hacking: security in practice
hello guys my friend got hacked on insta and even got their phone number any way to fix this?
I don't know what to do in this situation because they even got my friend's phone number.
submitted by /u/ConversationNew6726
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
hello guys my friend got hacked on insta and even got their phone number any way to fix this?
I don't know what to do in this situation because they even got my friend's phone number.
submitted by /u/ConversationNew6726
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
hello guys my friend got hacked on insta and even got their phone...
I don't know what to do in this situation because they even got my friend's phone number.
Ransomware simulation tools
https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/
Hello everyone, can you recommend me a free tool to simulate ransomware attacks? submitted by /u/Equivalent_Year154 (https://www.reddit.com/user/Equivalent_Year154)
[link] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/) [comments] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/
Hello everyone, can you recommend me a free tool to simulate ransomware attacks? submitted by /u/Equivalent_Year154 (https://www.reddit.com/user/Equivalent_Year154)
[link] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/) [comments] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/)
___________________________
@hacking_Attack
@Hacking_Video
Reddit
From the redteamsec community on Reddit
Explore this post and more from the redteamsec community
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall
Firezone is a self-hosted VPN server and Linux firewall* Manage remote access through an intuitive web interface and CLI utility.
* Deploy on your own infrastructure to keep control of your network traffic.
* Built on WireGuard® to be stable, performant, and lightweight. Get StartedFollow our deploy guide to install your self-hosted instance of Firezone.
Or, if you’re on a supported platform, try our one-line install script :
sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)” Features* Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
* SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
* No dependencies: All dependencies are bundled thanks to Chef Omnibus.
* Simple: Takes minutes to set up. Manage via a simple CLI.
* Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
* Firewall included: Uses Linux nftables to block unwanted egress traffic. Anti-featuresFirezone is not:
* An inbound firewall
* A tool for creating mesh networks
* A full-featured router
* An IPSec or OpenVPN server DeployGet started with Firezone in a few minutes by self-hosting on a supported platformFirezone can be self-hosted on a server running a supported Linux distribution in a few minutes. This guide will walk you through the steps to get started. Step 1: Environment SetupSupported operating systemsStart by checking if your environment is listed on supported platforms. A kernel upgrade may be required to ensure WireGuard® is available. Security settingsEnsure port forwarding is enabled on your firewall. The default Firezone configuration requires the following ports to be open:
*
*
NOTE
Firezone modifies the kernel netfilter and routing tables. Other programs that modify the Linux routing table or firewall may interfere with Firezone’s operation. For help troubleshooting connectivity issues, see the troubleshooting guide. Production deploymentsFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. See instructions here. Step 2: Server Install ScriptThe easiest way to get started using Firezone is via the automatic installation script below.
sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)”
This will ask you a few questions regarding your install, install the latest release for your platform, then create an administrator user and print to the console instructions for logging in to the web UI.
By default, the web UI can be reached at the IP or domain name of your server. You can regenerate the admin credentials using the
If the script fails, follow instructions for manual installation. Step 3: Install Client AppsOnce successfully deployed, users and devices can be added to connect to the VPN server:
* Add Users: Add users to grant them access to your network.
* Client Instructions: Instructions to establish a VPN session. After SetupCongrats! You have completed the setup, but there’s a lot more you can do with Firezone.
* Integrate your identity provider for authenticating clients
* Using Firezone to establish a static IP
* Create tunnels between multiple peers with reverse tunnels
* Only route certain traffic through Firezone with split tunneling
Support us by:
* Star our repo on Github
* Follow us on Twitter at @firezonehq
* Follow us on LinkedIn at @firezonehq Supported PlatformsFirezone currently supports the following platforms:
OSArchitecturesStatusNotesAmazonLinux 2
___________________________
@hacking_Attack
@Hacking_Video
Firezone : WireGuard-Based VPN Server And Firewall
Firezone is a self-hosted VPN server and Linux firewall* Manage remote access through an intuitive web interface and CLI utility.
* Deploy on your own infrastructure to keep control of your network traffic.
* Built on WireGuard® to be stable, performant, and lightweight. Get StartedFollow our deploy guide to install your self-hosted instance of Firezone.
Or, if you’re on a supported platform, try our one-line install script :
sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)” Features* Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
* SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
* No dependencies: All dependencies are bundled thanks to Chef Omnibus.
* Simple: Takes minutes to set up. Manage via a simple CLI.
* Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
* Firewall included: Uses Linux nftables to block unwanted egress traffic. Anti-featuresFirezone is not:
* An inbound firewall
* A tool for creating mesh networks
* A full-featured router
* An IPSec or OpenVPN server DeployGet started with Firezone in a few minutes by self-hosting on a supported platformFirezone can be self-hosted on a server running a supported Linux distribution in a few minutes. This guide will walk you through the steps to get started. Step 1: Environment SetupSupported operating systemsStart by checking if your environment is listed on supported platforms. A kernel upgrade may be required to ensure WireGuard® is available. Security settingsEnsure port forwarding is enabled on your firewall. The default Firezone configuration requires the following ports to be open:
*
443/tcp: To access the web UI.*
51820/udp: The VPN traffic listen-port.NOTE
Firezone modifies the kernel netfilter and routing tables. Other programs that modify the Linux routing table or firewall may interfere with Firezone’s operation. For help troubleshooting connectivity issues, see the troubleshooting guide. Production deploymentsFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. See instructions here. Step 2: Server Install ScriptThe easiest way to get started using Firezone is via the automatic installation script below.
sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)”
This will ask you a few questions regarding your install, install the latest release for your platform, then create an administrator user and print to the console instructions for logging in to the web UI.
By default, the web UI can be reached at the IP or domain name of your server. You can regenerate the admin credentials using the
firezone-ctl create-or-reset-admincommand.If the script fails, follow instructions for manual installation. Step 3: Install Client AppsOnce successfully deployed, users and devices can be added to connect to the VPN server:
* Add Users: Add users to grant them access to your network.
* Client Instructions: Instructions to establish a VPN session. After SetupCongrats! You have completed the setup, but there’s a lot more you can do with Firezone.
* Integrate your identity provider for authenticating clients
* Using Firezone to establish a static IP
* Create tunnels between multiple peers with reverse tunnels
* Only route certain traffic through Firezone with split tunneling
Support us by:
* Star our repo on Github
* Follow us on Twitter at @firezonehq
* Follow us on LinkedIn at @firezonehq Supported PlatformsFirezone currently supports the following platforms:
OSArchitecturesStatusNotesAmazonLinux 2
amd64 arm64Fully-supportedSee AmazonLinux 2 NotesCen[...]___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall
Firezone is a self-hosted VPN server and Linux firewall. Manage remote access through an intuitive web interface and CLI utility.
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials Firezone : WireGuard-Based VPN Server And Firewall Firezone is a self-hosted VPN server and Linux firewall* Manage remote access through an intuitive web interface and CLI utility. * Deploy on your own infrastructure to keep control of…
tOS 7
If your distro isn’t listed here please try using a package for the closest distro first. For example, since Raspberry Pi OS is based on Debian, try using the Debian Firezone package.
If that doesn’t work, please open an issue and let us know. New distros are being supported on a regular basis and there’s a good chance yours will be added soon.
Note that we only support RPM and DEB based packaging systems. Others, like Arch Linux are currently being investigated in this issue. AmazonLinux 2 NotesKernel upgrade required:
sudo amazon-linux-extras install -y kernel-5.10 CentOS 7 NotesKernel upgrade to 5.6+ required. To upgrade to the latest mainline kernel and select it as the default boot kernel:
sudo rpm –import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
sudo yum install -y https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
sudo yum install -y elrepo-release
sudo yum –enablerepo=elrepo-kernel install -y kernel-ml
sudo grub2-set-default 0
sudo grub2-mkconfig -o /boot/grub2/grub.cfg
sudo reboot CentOS 8 NotesThe WireGuard kernel module needs to be installed:
yum install elrepo-release epel-release
yum install kmod-wireguard RHEL 7 NotesRed Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 7 should work just fine for RHEL 7. You’ll still need to upgrade your kernel to 5.6+ however. To do so, follow the steps for CentOS 7 Notes above. RHEL 8 NotesRed Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 8 should work just fine for RHEL 8. You’ll still need to install the WireGuard kernel module, however. See CentOS 8 Notes above. RHEL 9 NotesUse the package for CentOS 9. Fedora NotesOn fresh Fedora installations you’ll probably need to install a cron implementation to support the logrotate functionality, otherwise you may receive errors about a missing
yum install cronie-anacron Ubuntu 18.04 NotesKernel upgrade to 5.4+ required:
sudo apt install linux-image-generic-hwe-18.04 Debian 10 NotesKernel upgrade to 5.6+ required. See this guide for an example. openSUSE NotesFirezone requires the
sudo zypper install libcap-progs PrerequisitesFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. Create a DNS recordFirezone requires a fully-qualified domain name (e.g.
amd64Fully-supportedSee CentOS 7 NotesCentOS 8amd64 arm64Fully-supportedSee CentOS 8 NotesCentOS Stream 9amd64 arm64Fully-supportedWorks as-isRed Hat Enterprise Linux 7amd64Fully-supportedSee RHEL 7 NotesRed Hat Enterprise Linux 8amd64 arm64Fully-supportedSee RHEL 8 NotesRed Hat Enterprise Linux 9amd64 arm64Fully-supportedSee RHEL 9 NotesDebian 10amd64 arm64Fully-supportedSee Debian 10 NotesDebian 11amd64 arm64Fully-supportedWorks as-isFedora 33amd64 arm64Fully-supportedSee Fedora NotesFedora 34amd64 arm64Fully-supportedSee Fedora NotesFedora 35amd64 arm64Fully-supportedSee Fedora NotesUbuntu 18.04amd64 arm64Fully-supportedSee Ubuntu 18.04 NotesUbuntu 20.04amd64 arm64Fully-supportedWorks as-isUbuntu 22.04amd64 arm64Fully-supportedWorks as-isopenSUSE Leap 15.3amd64Fully-supportedSee openSUSE Notes If your distro isn’t listed here please try using a package for the closest distro first. For example, since Raspberry Pi OS is based on Debian, try using the Debian Firezone package.
If that doesn’t work, please open an issue and let us know. New distros are being supported on a regular basis and there’s a good chance yours will be added soon.
Note that we only support RPM and DEB based packaging systems. Others, like Arch Linux are currently being investigated in this issue. AmazonLinux 2 NotesKernel upgrade required:
sudo amazon-linux-extras install -y kernel-5.10 CentOS 7 NotesKernel upgrade to 5.6+ required. To upgrade to the latest mainline kernel and select it as the default boot kernel:
sudo rpm –import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
sudo yum install -y https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
sudo yum install -y elrepo-release
sudo yum –enablerepo=elrepo-kernel install -y kernel-ml
sudo grub2-set-default 0
sudo grub2-mkconfig -o /boot/grub2/grub.cfg
sudo reboot CentOS 8 NotesThe WireGuard kernel module needs to be installed:
yum install elrepo-release epel-release
yum install kmod-wireguard RHEL 7 NotesRed Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 7 should work just fine for RHEL 7. You’ll still need to upgrade your kernel to 5.6+ however. To do so, follow the steps for CentOS 7 Notes above. RHEL 8 NotesRed Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 8 should work just fine for RHEL 8. You’ll still need to install the WireGuard kernel module, however. See CentOS 8 Notes above. RHEL 9 NotesUse the package for CentOS 9. Fedora NotesOn fresh Fedora installations you’ll probably need to install a cron implementation to support the logrotate functionality, otherwise you may receive errors about a missing
/etc/cron.hourlydirectory.yum install cronie-anacron Ubuntu 18.04 NotesKernel upgrade to 5.4+ required:
sudo apt install linux-image-generic-hwe-18.04 Debian 10 NotesKernel upgrade to 5.6+ required. See this guide for an example. openSUSE NotesFirezone requires the
setcaputility, but some recent openSUSE releases may not have it installed by default. To fix, ensure libcap-progsis installed:sudo zypper install libcap-progs PrerequisitesFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. Create a DNS recordFirezone requires a fully-qualified domain name (e.g.
firezone.company.com) for production use. You’ll need to create the appropriate DNS record at your registrar to achieve this. Typically this is either an A, CNAME, or AAAA record depending on your requirements.[...]Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall
___________________________
@hacking_Attack
@Hacking_Video
Firezone : WireGuard-Based VPN Server And Firewall
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall
Firezone is a self-hosted VPN server and Linux firewall. Manage remote access through an intuitive web interface and CLI utility.
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability
https://external-preview.redd.it/qvagQCUP1uPrszNRmMMFS-QsYIpdFQIQLltnB0dBptM.jpg?width=640&crop=smart&auto=webp&s=798167cd502ce748669e08a1242ff89d2671698c submitted by /u/cheeztoshobo
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability
https://external-preview.redd.it/qvagQCUP1uPrszNRmMMFS-QsYIpdFQIQLltnB0dBptM.jpg?width=640&crop=smart&auto=webp&s=798167cd502ce748669e08a1242ff89d2671698c submitted by /u/cheeztoshobo
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin...
Posted in r/hacking by u/cheeztoshobo • 1 point and 0 comments
CodeRed's Pentesting and Privilege Escalation course
https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/
Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details. submitted by /u/iambarry345 (https://www.reddit.com/user/iambarry345)
[link] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/
Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details. submitted by /u/iambarry345 (https://www.reddit.com/user/iambarry345)
[link] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
CodeRed's Pentesting and Privilege Escalation course
Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details.
Mass Assignment Leading to Pre Account Takeover
https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5
https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5
API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium » (https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Mass Assignment Leading to Pre Account Takeover
https://cdn-images-1.medium.com/max/1154/1*zl-PE5lbIZ0PASkSGoYgPg.png
API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…
Continue reading on Medium »
Mass Assignment Leading to Pre Account Takeover
https://cdn-images-1.medium.com/max/1154/1*zl-PE5lbIZ0PASkSGoYgPg.png
API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…
Continue reading on Medium »
Hacking on Medium
The unlimited approval feature helps save time and money on gas, but it was abused in the LiFi hack
Users can facilitate a wide range of asset transfer and swapping options across a variety of major chains with LI.FI, an advanced bridge…
Continue reading on Medium »
The unlimited approval feature helps save time and money on gas, but it was abused in the LiFi hack
Users can facilitate a wide range of asset transfer and swapping options across a variety of major chains with LI.FI, an advanced bridge…
Continue reading on Medium »
Medium
The unlimited approval feature helps save time and money on gas, but it was abused in the LiFi hack
Users can facilitate a wide range of asset transfer and swapping options across a variety of major chains with LI.FI, an advanced bridge…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to — Directory Enumeration
https://cdn-images-1.medium.com/max/1521/1*9q0LE2g04GVdEqi7fwWoog.png
Directory Enumeration is an important skill every penetration tester and hacker should have in their skill pouch. It is a technique to…
Continue reading on Medium »
How to — Directory Enumeration
https://cdn-images-1.medium.com/max/1521/1*9q0LE2g04GVdEqi7fwWoog.png
Directory Enumeration is an important skill every penetration tester and hacker should have in their skill pouch. It is a technique to…
Continue reading on Medium »