Hacking on Medium
The Blockchain Universe #3

https://cdn-images-1.medium.com/max/1920/1*Ft49X3FvIODAXoaZiyCu5A.jpeg
The Blockchain Universe Part 3 (Blockchain Components 2)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Reverse Shell Attack with Netcat

https://cdn-images-1.medium.com/max/2600/0*HZE61n4sQKTMV_NC
Netcat is a tool to get remote access from your target. In this article, I will show you how to use it and what you can do to prevent them.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Smart contract hacking tools

https://cdn-images-1.medium.com/max/1629/1*UoVsaPlZw60vClqKYiGAGQ.gif
Here is the list of the most known Ethereum hacking tools used for auditing smart contracts:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

OSRipper - AV Evading OSX Backdoor And Crypter Framework
http://www.kitploit.com/2022/09/osripper-av-evading-osx-backdoor-and.html

___________________________
@hacking_Attack
@Hacking_Video

OSripper is a fully undetectable (https://www.kitploit.com/search/label/Undetectable) Backdoor generator (https://www.kitploit.com/search/label/Generator) and Crypter which specialises in OSX M1 malware. It will also work on windows but for now there is no support for it and it IS NOT FUD for windows (yet at least) and for now i will not focus on windows.You can also PM me on discord for support or to ask for new features SubGlitch1#2983
FeaturesFUD (for macOS)Cloacks as an official app (Microsoft, ExpressVPN etc)Dumps; Sys info, Browser History, Logins, ssh/aws/azure/gcloud creds, clipboard content, local users etc. (more on Cedric Owens swiftbelt)Encrypted communicationsRootkit-like BehaviourEvery Backdoor generated is entirely uniqueDescriptionPlease check the wiki for information on how OSRipper functions (which changes extremely frequently)https://github.com/SubGlitch1/OSRipper/wikiHere are example backdoors which were generated with OSRipper

___________________________
@hacking_Attack
@Hacking_Video

macOS .apps will look like this on vtGetting StartedDependenciesYou need python. If you do not wish to download python you can download a compiled release. The python dependencies are specified in the requirements.txt file.Since Version 1.4 you will need metasploit (https://www.kitploit.com/search/label/Metasploit) installed and on path so that it can handle the meterpreter listeners.InstallingLinuxapt install git python -y
git clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtWindowsgit clone https://github.com/SubGlitch1/OSRipper.git
cd OSRipper
pip3 install -r requirements.txtor download the latest release from https://github.com/SubGlitch1/OSRipper/releases/tag/v0.2.3Executing programOnly thissudo python3 main.py
ContributingPlease feel free to fork and open pull repuests. Suggestions/critisizm are appreciated as wellRoadmapv0.1✅Get down detection to 0/26 on antiscan.me✅Add Changelog✅Daemonise Backdoor✅Add Crypter✅Add More Backdoor templates✅Get down detection to at least 0/68 on VT (for mac malware)v0.2✅Add AntiVM[] Implement tor hidden services✅Add Logger✅Add Password stealer[] Add KeyLogger✅Add some new evasion options✅Add SilentMiner[] Make proper C2 serverv0.3Coming soonHelpJust open a issue and ill make sure to get back to youChangelog0.2.1OSRipper will now pull all information from the Target and send them to the c2 server (https://www.kitploit.com/search/label/C2%20Server) over sockets. This includes information like browser history, passwords, system information, keys and etc.0.1.6Proccess will now trojanise itself as com.apple.system.monitor and drop to /Users/Shared0.1.5Added Crypter0.1.4Added 4th Module0.1.3Got detection on VT down to 0. Made the Proccess invisible0.1.2Added 3rd module and listener0.1.1Initial ReleaseLicenseMITAcknowledgmentsInspiration, code snippets, etc.htr (https://github.com/htr-tech/PyObfuscate)swiftbelt (https://github.com/cedowens/SwiftBelt)SupportI am very sorry to even write this here but my finances are not looking good right now. If you appreciate my work i would really be happy about any donation. You do NOT have to this is solely optionalBTC: 1LTq6rarb13Qr9j37176p3R9eGnp5WZJ9TDisclaimerI am not responsible for what is done with this project. This tool is solely written to be studied by other security researchers to see how easy it is to develop macOS malware.

Download OSRipper (https://github.com/SubGlitch1/OSRipper)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Dependency Check : Detects Publicly Disclosed Vulnerabilities In Application Dependencies

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Raises $24m for Series A to Secure Web3

Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…Continue reading on Immunefi »
Read more...

hacking: security in practice
WPS Offline Attack, What to do?

Hi, I have a task for school where the task is to calculate the WPS PIN that was used to create the hashes given.

I have the following data/values :

EHASH1, and EHASH2, ENonce, RENonce, Enrollee MAC, Public Key Enrollee, Private Key Enrollee, Public Key Registrar, and the shared secret(256 Bit hash).

I tried using some pixiewps (offline was brute force) tool from GitHub, but all I got out was jibberish.

So what I was thinking of writing a python script that brute forces the combination, but every thing I have tried so far has not worked.

I you have any tips for how to solve this task, I would really appreciate if you could send me a message or comment.

submitted by /u/TheDragonPenguin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Strange encryption

Hi, I bumped into a weir encryption type that I cannot recognize, I know a password and its encrypted form, but I can't figure which encryption it is.

The password in plaintext is "CYM-Juri2016", and encrypted it is "dÔ£Žœ¦ï”eh["

Does it ring a bell ?

Thank you in advance

submitted by /u/megatronchote
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Raises $24m for Series A to Secure Web3
https://medium.com/immunefi/immunefi-raises-24m-for-series-a-to-secure-web3-deee774c0dee?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Today, we’re announcing that we’ve raised $24m for our Series A round, led by Framework Ventures and joined by other investors like…Continue reading on Immunefi » (https://medium.com/immunefi/immunefi-raises-24m-for-series-a-to-secure-web3-deee774c0dee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

Businesses need to turn privacy and security into an advantage. Store less data, and live up to customer expectations that their information is protected. Take small steps, be transparent about data management, and chose partners carefully.

Dark Reading: Attacks/Breaches
StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Expansion of test coverage includes custom scan discovery, custom test scripts and custom test data for REST APIs, enabling developers to leave no paths untouched.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

.

___________________________
@hacking_Attack
@Hacking_Video