hacking: security in practice
Windows 10 vs 11
How does windows 10 compare to windows 11 for doing penetration testing and network security? I've been thinking about upgrading to windows 11, but am unsure how it would fair on this side of things.
Worst comes to worst, I'll pull out the external hard drive for a USB boot drive...
submitted by /u/Darineyl
[link] [comments]
Windows 10 vs 11
How does windows 10 compare to windows 11 for doing penetration testing and network security? I've been thinking about upgrading to windows 11, but am unsure how it would fair on this side of things.
Worst comes to worst, I'll pull out the external hard drive for a USB boot drive...
submitted by /u/Darineyl
[link] [comments]
reddit
Windows 10 vs 11
How does windows 10 compare to windows 11 for doing penetration testing and network security? I've been thinking about upgrading to windows 11,...
hacking: security in practice
Brute forcing word gussing games with automated process?
for the word guessing type games online where is shows you the amount of chararters and you need to guess them. Is there a app or script that brute forces the letters with dictionary options to complete the phase?
submitted by /u/CloudTiger_
[link] [comments]
Brute forcing word gussing games with automated process?
for the word guessing type games online where is shows you the amount of chararters and you need to guess them. Is there a app or script that brute forces the letters with dictionary options to complete the phase?
submitted by /u/CloudTiger_
[link] [comments]
reddit
Brute forcing word gussing games with automated process?
for the word guessing type games online where is shows you the amount of chararters and you need to guess them. Is there a app or script that...
hacking: security in practice
Breaking down the integral parts of a RAT (remote access trojan)
Ive recently decided to take up the challenge of trying to build a RAT and while doing research I just want to confirm how exactly are rats made? As far as I have looking into there is an ssh part of the rat, an ofuscation part which can go in many ways such as double file naming, a keylogger (which is only 7 lines of python not too diffcult), and a shell spawning mechanism. What im wondering is there a dedicated tutorial on the web for RATs specifically other than the simple ones on youube that dont do too in depth? I am open to learning one of the C languages (java is my main) and learning the new syntax. Thank you for your input
submitted by /u/Suspicious_Term_4142
[link] [comments]
Breaking down the integral parts of a RAT (remote access trojan)
Ive recently decided to take up the challenge of trying to build a RAT and while doing research I just want to confirm how exactly are rats made? As far as I have looking into there is an ssh part of the rat, an ofuscation part which can go in many ways such as double file naming, a keylogger (which is only 7 lines of python not too diffcult), and a shell spawning mechanism. What im wondering is there a dedicated tutorial on the web for RATs specifically other than the simple ones on youube that dont do too in depth? I am open to learning one of the C languages (java is my main) and learning the new syntax. Thank you for your input
submitted by /u/Suspicious_Term_4142
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Genymotion Virtualbox configuration error solved !!
https://raoshaab.medium.com/genymotion-virtualbox-configuration-error-solved-a787bacf991?source=rss------bug_bounty-5
https://raoshaab.medium.com/genymotion-virtualbox-configuration-error-solved-a787bacf991?source=rss------bug_bounty-5
After an Windows update , I am facing virtualbox error . I tried with genymotion help center https://support.genymotion.com/hc/en-us .Continue reading on Medium » (https://raoshaab.medium.com/genymotion-virtualbox-configuration-error-solved-a787bacf991?source=rss------bug_bounty-5)
Genymotion Virtualbox configuration error solved !!
After an Windows update , I am facing virtualbox error . I tried with genymotion help center https://support.genymotion.com/hc/en-us .Continue reading on Medium »
Read more...
After an Windows update , I am facing virtualbox error . I tried with genymotion help center https://support.genymotion.com/hc/en-us .Continue reading on Medium »
Read more...
https://b.thumbs.redditmedia.com/baH92mBx_p5s-xIfBAg9vs5gn3fJB74u6gbn7KfW6mM.jpg
Hi. Starting to educate myself about this skillset. If anyone had any educational insight into what this site could be or a process of how to figure out what the site is trying to do, I'd be grateful!
For the sake of it, I won't post the url here. But the site digitalelement [dot] com would appear to me like some kind of <typehacking attempt? It's indexed on search engines so you can navigate to it yourself / below is a screenshot.
On every home page refresh or url string (I navigated to the page through a search engine request regarding geolocating an ip adress) you are presented with a big string of encrypted text and a button telling you to click it, so that on the next page you can post the code to report the 403 error on this page - which is why this is all happening in the first place apparently.
https://preview.redd.it/hzkjz9wczyp91.png?width=1013&format=png&auto=webp&s=553d24cb90b771755d176a6025c0f4f3dd862622
submitted by /u/M32H9
[link] [comments]
Hi. Starting to educate myself about this skillset. If anyone had any educational insight into what this site could be or a process of how to figure out what the site is trying to do, I'd be grateful!
For the sake of it, I won't post the url here. But the site digitalelement [dot] com would appear to me like some kind of <typehacking attempt? It's indexed on search engines so you can navigate to it yourself / below is a screenshot.
On every home page refresh or url string (I navigated to the page through a search engine request regarding geolocating an ip adress) you are presented with a big string of encrypted text and a button telling you to click it, so that on the next page you can post the code to report the 403 error on this page - which is why this is all happening in the first place apparently.
https://preview.redd.it/hzkjz9wczyp91.png?width=1013&format=png&auto=webp&s=553d24cb90b771755d176a6025c0f4f3dd862622
submitted by /u/M32H9
[link] [comments]
hacking: security in practice
John.rec?
Although I can cat the contents of the John.rec file when using John the Ripper, what exactly is it? What's the purpose of this file? Is it a temp file of sorts for the latest cracking session?
submitted by /u/D1CCP
[link] [comments]
John.rec?
Although I can cat the contents of the John.rec file when using John the Ripper, what exactly is it? What's the purpose of this file? Is it a temp file of sorts for the latest cracking session?
submitted by /u/D1CCP
[link] [comments]
reddit
John.rec?
Although I can cat the contents of the John.rec file when using John the Ripper, what *exactly* is it? What's the purpose of this file? Is it a...
hacking: security in practice
Running more than one John the Ripper "sessions" concurrently?
Is it possible to run several John the Ripper "sessions" concurrently, i.e.:
Tab 1:
john --format=md5crypt
Tab 2:
john --format=sha256
Tab 3:
john --format=sha512
Is it advised to running it concurrently and are there any pros/cons of doing so vs running one at a time?
submitted by /u/D1CCP
[link] [comments]
Running more than one John the Ripper "sessions" concurrently?
Is it possible to run several John the Ripper "sessions" concurrently, i.e.:
Tab 1:
john --format=md5crypt
Tab 2:
john --format=sha256
Tab 3:
john --format=sha512
Is it advised to running it concurrently and are there any pros/cons of doing so vs running one at a time?
submitted by /u/D1CCP
[link] [comments]
reddit
Running more than one John the Ripper "sessions" concurrently?
Is it possible to run several John the Ripper "sessions" concurrently, i.e.: Tab 1: john --format=md5crypt Tab 2: john...
hacking: security in practice
Best way to scan against IPS protected website?
Nmap is the most populair recon tool for scanning ports and services on websites. But I find it harder to use when a website well configured ips/ids system is implemented.
How do you tackle this when scanning against a website that 4000 ports open or is not getting any valuable information back?
submitted by /u/xcaliburr101
[link] [comments]
Best way to scan against IPS protected website?
Nmap is the most populair recon tool for scanning ports and services on websites. But I find it harder to use when a website well configured ips/ids system is implemented.
How do you tackle this when scanning against a website that 4000 ports open or is not getting any valuable information back?
submitted by /u/xcaliburr101
[link] [comments]
reddit
Best way to scan against IPS protected website?
Nmap is the most populair recon tool for scanning ports and services on websites. But I find it harder to use when a website well configured...
Hacking Articles Tips Tricks Videos Tutorials
Photo
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell
http://www.kitploit.com/2022/09/psasyncshell-powershell-asynchronous.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/09/psasyncshell-powershell-asynchronous.html
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
PSAsyncShell — Asynchronous TCP reverse shell in pure PowerShell that bypasses firewalls via non-blocking I/O, with command history…
PSAsyncShell is an Asynchronous TCP Reverse (https://www.kitploit.com/search/label/Reverse) Shell written in pure PowerShell.Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls (https://www.kitploit.com/search/label/Firewalls) and some countermeasures against this kind of remote (https://www.kitploit.com/search/label/Remote) connections.Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
RequirementsPowerShell 4.0 or greaterDownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:git clone https://github.com/JoelGMSec/PSAsyncShell
Usage.\PSAsyncShell.ps1 -h
____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/
---------------------- by @JoelGMSec -----------------------
Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls
Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client
.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client (https://www.kitploit.com/search/label/Client) to a PSAsyncShell server
Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart
The detailed guide of use can be found at the following link:https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincronaLicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSecContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.For more information, you can find me on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).
Download PSAsyncShell (https://github.com/JoelGMSec/PSAsyncShell)
___________________________
@hacking_Attack
@Hacking_Video
RequirementsPowerShell 4.0 or greaterDownloadIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:git clone https://github.com/JoelGMSec/PSAsyncShell
Usage.\PSAsyncShell.ps1 -h
____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/
---------------------- by @JoelGMSec -----------------------
Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls
Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client
.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client (https://www.kitploit.com/search/label/Client) to a PSAsyncShell server
Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart
The detailed guide of use can be found at the following link:https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincronaLicenseThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.Credits and AcknowledgmentsThis tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSecContactThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.For more information, you can find me on Twitter (https://www.kitploit.com/search/label/Twitter) as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).
Download PSAsyncShell (https://github.com/JoelGMSec/PSAsyncShell)
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivaKwQorq948BbRsS9IbtUOeG6rO4fC0m40JWlK7VLPKcwgQQ1QE4Gbw2pPn12fW2_ppTEd2ryMorJsx-40Xs8EpAHQo5RU0Elh3JQsP6IKZ4nF8TSPjAEo4w4vbzdy4xS0LwOXVnjV234_3a9CcyCho797LYwjxeN89wH97x58LBupV3KFi-klAv6Kg/w640-h400/PSAsyncShell_1_PSAsyncShell.png
PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell.
Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections.
Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
Requirements
* PowerShell 4.0 or greater
Download
It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:
Usage
The detailed guide of use can be found at the following link:
https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincrona
License
This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.
Credits and Acknowledgments
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec
Contact
This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.
For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSAsyncShell
___________________________
@hacking_Attack
@Hacking_Video
PSAsyncShell - PowerShell Asynchronous TCP Reverse Shell
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivaKwQorq948BbRsS9IbtUOeG6rO4fC0m40JWlK7VLPKcwgQQ1QE4Gbw2pPn12fW2_ppTEd2ryMorJsx-40Xs8EpAHQo5RU0Elh3JQsP6IKZ4nF8TSPjAEo4w4vbzdy4xS0LwOXVnjV234_3a9CcyCho797LYwjxeN89wH97x58LBupV3KFi-klAv6Kg/w640-h400/PSAsyncShell_1_PSAsyncShell.png
PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell.
Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections.
Additionally, this tool features command history, screen wiping, file uploading and downloading, information splitting through chunks and reverse Base64 URL encoded traffic.
Requirements
* PowerShell 4.0 or greater
Download
It is recommended to clone the complete repository or download the zip file. You can do this by running the following command:
git clone https://github.com/JoelGMSec/PSAsyncShell
Usage
.\PSAsyncShell.ps1 -h
____ ____ _ ____ _ _ _
| _ \/ ___| / \ ___ _ _ _ __ ___/ ___|| |__ ___| | |
| |_) \___ \ / _ \ / __| | | | '_ \ / __\___ \| '_ \ / _ \ | |
| __/ ___) / ___ \\__ \ |_| | | | | (__ ___) | | | | __/ | |
|_| |____/_/ \_\___/\__, |_| |_|\___|____/|_| |_|\___|_|_|
|___/
---------------------- by @JoelGMSec -----------------------
Info: This tool helps you to get a remote shell
over asynchronous TCP to bypass firewalls
Usage: .\PSAsyncShell.ps1 -s -p listen_port
Listen for a new connection from the client
.\PSAsyncShell.ps1 -c server_ip server_port
Connect the client to a PSAsyncShell server
Warning: All info betwen parts will be sent unencrypted
Download & Upload functions don't use MultiPart
The detailed guide of use can be found at the following link:
https://darkbyte.net/psasyncshell-bypasseando-firewalls-con-una-shell-tcp-asincrona
License
This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.
Credits and Acknowledgments
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec
Contact
This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.
For more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.
Download PSAsyncShell
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
PSAsyncShell — Asynchronous TCP reverse shell in pure PowerShell that bypasses firewalls via non-blocking I/O, with command history…
eWPT to eWPTX Certified in 45 days (without INE labs) — Exam Review and Tips
In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness »
Read more...
In this article, I am going to provide feedback and helpful tips for the eWPT and eWPTXv2 exams.Continue reading on System Weakness »
Read more...
Tesla paid me $10,000 because of Directory Indexing
Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium »
Read more...
Many people are interested in trying Bug Bounties, but they feel they won’t be able to find anything. I hope that my success will serve as…Continue reading on Medium »
Read more...