Hacking Articles|Raj Chandel's Blog
Active Directory Enumeration: BloodHound

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box — Bastard: Walkthrough (without Metasploit)

https://cdn-images-1.medium.com/max/600/1*9u9NvVkQVOE0hqVLjtT8VQ.png
Hack The Box — Bastard: Walkthrough (without Metasploit) | Windows Medium Level | DrupalGeddon2 | JuicyPotato | Window Enumeration | Drupal

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Vaf - Very Advanced (Web) Fuzzer

https://1.bp.blogspot.com/-MGnCnN7YPqU/YIxWCWXTjWI/AAAAAAAAWBM/G6LCKOFIY3kSjg1sfWmuTab560zNdEDoQCNcBGAsYHQ/w640-h336/vaf_1_main%252520without%252520pu.png
very advanced fuzzer

compiling

1. Install nim from nim-lang.org
2. Run

nimble build

A vaf.exe file will be created in your directory ready to be used
using vaf

using vaf is simple, here's the current help text:
Usage:
vaf - very advanced fuzzer [options]

Options:
-h, --help
-u, --url=URL choose url, replace area to fuzz with []
-w, --wordlist=WORDLIST choose the wordlist to use
-sc, --status=STATUS set on which status to print, set this param to 'any' to print on any status (default: 200)
-pr, --prefix=PREFIX prefix, e.g. set this to / for content discovery if your url doesnt have a / at the end (default: )
-sf, --suffix=SUFFIX suffix, e.g. use this for extensions if you are doing content discovery (default: )
-pd, --postdata=POSTDATA only used if '-m post' is set (default: {})
-m, --method=METHOD suffix, e.g. use this for extensions if you are doing content discovery (default: get)
-pif, --printifreflexive print only if the output reflected in the page, useful for finding xss
-ue, --urlencode url encode the payloads
-pu, --printurl prints the url that has been requested

screenshots
https://1.bp.blogspot.com/-7q8tPuUPhcw/YIxWJPLZc2I/AAAAAAAAWBQ/oHNNYwKEOfAUlzYqxB4PJNrGkEmJmPolACNcBGAsYHQ/w640-h336/vaf_1_main%252520without%252520pu.png
(with every status code printed, suffixes .php,.html and no prefixes)
https://1.bp.blogspot.com/-MN-GlqFmYIY/YIxWMHppnjI/AAAAAAAAWBU/BKut-ij4YYggpAD__HKiAxAtkm-DHXL-wCNcBGAsYHQ/w640-h320/vaf_2_main.png
(with url printed, every status code printed, suffixes .php,.html and no prefixes)
https://1.bp.blogspot.com/-wT5a1rwOg1k/YIxWPl_0sUI/AAAAAAAAWBY/lHQxtrKBYUcywhl6YRYN_8Rw4rv2AIRaQCNcBGAsYHQ/w640-h210/vaf_3_main%252520post.png
(post data fuzzing)

examples

Fuzz post data:
vaf.exe -w example_wordlists\short.txt -u https://jsonplaceholder.typicode.com/posts -m post -sc 201 -pd "{\"title\": \"[]\"}"

Fuzz GET URLs
vaf.exe -w example_wordlists\short.txt -u https://example.org/[] -sf .html

tips

* Add a trailing ,in the suffixes or prefixes argument to try the word without any suffix/prefix like this: -pf .php,or -sf .php,
* Use -pifwith a bunch of xss payloads as the wordlist to find XSS
* Make an issue if you want to suggest a feature
Download Vaf

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Skills Required to be a Hacker | 2021 Hacking Course Free

https://cdn-images-1.medium.com/max/602/0*5yRpQqk5WbzB0grE
Hacking is one of the hottest professions in this decade, but don’t make it an easy task. You must have a deep knowledge of computer…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Download Free Courses
Learn Modern JavaScript: Advanced Topics with Steven Hancock

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-26-at-11.23.23-AM.png Learn Modern JavaScript: Advanced Topics with Steven Hancock — SkillShare — Free download
Advanced Topics picks up where the Getting Started course ended. You should now have some experience with JavaScript and understand the JavaScript language much better. Therefore, you are ready to learn more of the nuances and important patterns that advanced JavaScript developers know and use.

In Learn Modern JavaScript: Advanced Topics, we explore the more advanced techniques in JavaScript. You learn advanced concepts for objects and functions, the value of ‘this’, the power of functions using closure and IIFEs. You learn about the namespace and module patterns. You learn JSON and how to load a JSON file. You will follow along as we apply OOP concepts to a project. You get very familiar with the prototype, and these are just the main topics covered in this advanced course. A new bonus section helps you get familiar with functional programming concepts in JavaScript.

This course contains 15 sections and one bonus section, over 90 different lectures, over 17 hours of video, 4 quizzes, 9 assignments, 1 large project and several Think Like a Programmer sections with invaluable information for those intent on making JavaScript a career choice or a major part of their lives.

If you want to improve your JavaScript skills, this course is for you!
DOWNLOAD
https://sundryshare.com/themes/flow/images/file_icons/32px/rar.png Learn-Modern-JavaScript-Advanced-Topics.part1.rar  (2.93 GB)
sundryshare.com/1TM5 https://sundryshare.com/themes/flow/images/group.png https://sundryshare.com/themes/flow/images/download_icon.png https://sundryshare.com/themes/flow/images/file_icons/32px/rar.png Learn-Modern-JavaScript-Advanced-Topics.part2.rar  (21.68 MB)
sundryshare.com/1TM6 https://sundryshare.com/themes/flow/images/group.png https://sundryshare.com/themes/flow/images/download_icon.png
Course Content: https://www.skillshare.com/classes/Learn-Modern-JavaScript-Advanced-Topics/1710411551

hacking: security in practice
Wordpress hacking security and malware

I want to learn how to hack Wordpress and privilege escalation or dumping the database, I host my own Wordpress and I’ve had not attacks, malware and I just want to learn Wordpress hacking and how to tighten security because it seems that with every update comes a new exploit or vulnerability and it’s like whack a mole.

I tried Metaspolit and wp scanner but not had much success with them. I was going to build a dedicated Linux box to carry out Wordpress hacking and I would only ever use it against my own systems

submitted by /u/stayjuicecom
[link] [comments]

hacking: security in practice
Is python the only language for hacking?

I want to learn new languages but which language should I learn I am unaware.

submitted by /u/Muted-beast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
XPOST : SACA Technolgoies/ IronOrbit MSP breached.

submitted by /u/slowz3r
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Languages for learn ethical hacking

https://cdn-images-1.medium.com/max/640/1*ESxT3U3u95ftlowqt6Fl0w.jpeg
As shown by the remarkable progress in regenerating positions, battles, APIs, diagrams, programs, and that, we need to use common, basic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme | Lazy Admin

What’s worse than an admin? A lazy admin! This is easy level tryhackme room that exploits bad practices and weak passwords.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Quedtion about Samy kamkar's myspace hack

A lot of you probably know about when he created a bug on myspace and that whole thing. I have been reading up on it but am trying to find images. I have seen two, 1 with his follower count with kick ass and i rule from samy's sight. The other one is a search result that says "samy is my hero" in every result. Does anyone know of anymore pictures as i want to do a project on this and i kinda need more pics. Any help is greatly appreciated

submitted by /u/__babygiraffe__
[link] [comments]

Hacking on Medium
TryHackMe | Anonymous

A TyHackMe room that test’s your Linux skills and escalation skills.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: SSHPry2.0

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: SSHPry2.0Post Views: 11 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 3 Minutes
Offensive Security Tool: SSHPry2.0 GitHub Link
SSHPry2.0
This is a second release of SSHPry tool, with multiple features added.
⦿ Control of target’s TTY
⦿ Built-In Keylogger
⦿ Console-Level phishing
⦿ Record & Replay previous sessions
SSHPry v2 – Spy & Control os SSH Connected client’s TTY
SSHPry2.0 is a tool written by nopernik that seamlessly let’s you spy on SSH session like it is your tty. As SSH is one of the most used protocols by hackers and admins when it comes to controlling a Linux machine remotely, the most dangerous part, is when you can spy on that session in real-time, record keystrokes, and even use phishing attacks from within the terminal.
The main purpose of this tool had this question: What if you’ll have a tool that can show you a terminal of active SSH connection? and… maybe… control it? Record it? Investigate?
See Also: Offensive Security Tool: ADFSBrute
Using Attacks like SSH Snooping and RDP Session Hijacking, you know that every *nix user should already know about GNU Screen, especially of its -x multi display mode feature, that allows to observe an attached screen session. Using SSH Snooping attack, you can utilize ‘strace’ to get all process syscalls read/write including root’s password. SSHPry is a script that mirrors a terminal of connected SSH Client.
By combining all these techniques and spawning two separate threads one for echoing ‘strace’ strings to your terminal and second for transferring your standard input to target TTY you get a tool that replicates GNU screen ‘-x’ feature without screen itself with couple more #redteam and #blueteam related cool features.
See Also: Hacking has Evolved
Once you get full control over the session, and you get all strings, you can make some ‘phishing attacks’ in that session, while listening to all strings with ‘strace’, you can get clear-text password of any logged in user, especially root. -Read in more details- Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image1-90x90.png Offensive Security Tool: ADFSBrute1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/logo-90x90.png Offensive Security Tool: Hunt2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
style="display:block; text-align:center;"
data-a[...]

___________________________
@hacking_Attack
@Hacking_Video