Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Looking for Guidance cracking old Motorola Droid 4 phone

Hello all - I recently came into the possession of a friends ancient android Motorola Droid 4 (flip keyboard) phone which he had used in back in 2012/2013 to buy "stuff" from the Darkweb using bitcoin which at the time was valued at only 18$ or so. Apparently the wallet on the phone contains 3-8 BTC in a wallet, but this guy forgot what his android PIN lock was on the phone to begin with. I offered to help break into the device and split the profit of the BTC should there be any found on it.

I'm looking for some guidance to start on this endeavor - I understand there are basically two approaches here - the first being trying to bruteforce the pin via OTG cable attached device, but that might be a difficult move considering we don't know what the PIN length is, and if it is 7-8 characters this might be a huge problem as the device only allows 3 guesses every 30 seconds or so if I am not mistaken.

I'm more in favor of a software approach, something similar to replacing the bootloader/sideloading? I have very little experience in this field, so any guidance is highly valued! The bootloader DOES appear to be locked however, so ... not sure how to proceed.

If anyone can point me in the right direction, or connect me to a community that is able to be of assistance please let me know... I guess I'll also offer a bounty that if your information helps crack this phone, and it does contain the motherlode of 150-300k$ on it, then I'll send you over a couple thousand bucks or something.

Thanks for reading!

submitted by /u/illz757
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Looking for Guidance cracking old Motorola Droid 4 phone

Hello all - I recently came into the possession of a friends ancient android Motorola Droid 4 (flip keyboard) phone which he had used in back in...

13 viewsedited 21:40

hacking: security in practice
How easy is it to hack a fully patched and properly configured Wordpress site that uses SSL, a security firewall plugin (like Sucuri or iThemes) while also proxied via cloudflare?

Hypothetically, if someone set up a new a self hosted Wordpress site and did all of the above, what kind of ways in would you hackers try first?

submitted by /u/love_the_word_SHITE
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How easy is it to hack a fully patched and properly configured...

Hypothetically, if someone set up a new a self hosted Wordpress site and did all of the above, what kind of ways in would you hackers try first?

9 viewsedited 21:40

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Decrypting an encrypted PDF without password?

Hello all, I have some university notes from a course I took years back that I would like to revisit for a project that I' m working on, but I have forgotten the password. Many of the online methods require entering the original password in order to remove pretection from the PDF. Also many sources suggested using John the Ripper, but I;'m not that tech-savvy in that area. Is there any other way to address this issue more easily?

submitted by /u/bhj190
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Decrypting an encrypted PDF without password?

Hello all, I have some university notes from a course I took years back that I would like to revisit for a project that I' m working on, but I...

9 viewsedited 21:40

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
so where do I get my dark net links from now?

Since the dark. fail has been compromised now how do I get my links? it's not like I had them all stored up somewhere?

submitted by /u/FR3Xie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

so where do I get my dark net links from now?

Since the dark. fail has been compromised now how do I get my links? it's not like I had them all stored up somewhere?

8 viewsedited 22:03

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
darkode offline and dark fail showing 404 not found anyone else having problems?

submitted by /u/CoteXXXX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

darkode offline and dark fail showing 404 not found anyone else...

Posted in r/deepweb by u/CoteXXXX • 2 points and 1 comment

7 viewsedited 22:03

Hacking Articles Tips Tricks Videos Tutorials

Deep Web
Search for a video

Heard that a video was on the dark web, somewhere, depicting a murder which entailed a guy strapped down in a tree house and stabbed a bunch of times. Anybody help?

submitted by /u/MPRESive2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Search for a video

Heard that a video was on the dark web, somewhere, depicting a murder which entailed a guy strapped down in a tree house and stabbed a bunch of...

6 viewsedited 22:03

Hacking Articles Tips Tricks Videos Tutorials

Nginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilities

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.Install: cd /optgit clone https://github.com/stark0de/nginxpwnercd nginxpwnerchmod +x install.sh./install.sh Usage: Target tab in Burp, select host, right click, copy all URLs in this host, copy to a filecat urllist | unfurl paths | cut -d"/" -f2-3 | sort -u > /tmp/pathlist Or get the list of paths you already discovered in the application in some other way. Note: the paths should not start with /Finally:python3 nginxpwner.py https://example.com /tmp/pathlist Notes: It actually checks for: -Gets Ngnix version and gets its possible exploits using searchsploit and tells if it is outdated -Throws a wordlist specific to Nginx via gobuster -Checks if it is vulnerable to CRLF via a common misconfiguration of using $uri in redirects -Checks for CRLF in all of the paths provided -Checks if the PURGE HTTP method is available from the outside -Checks for variable leakage misconfiguration -Checks for path traversal vulnerabilities via merge_slashes set to off -Tests for differences in the length of requests when using hop-by-hop headers (ex: X-Forwarded-Host) -Uses Kyubi to test for path traversal vulnerabilities via misconfigured alias -Tests for 401/403 bypass using X-Accel-Redirect -Shows the payload to check for Raw backend reading response misconfiguration -Checks if the site uses PHP and suggests some nginx-specific tests for PHP sites -Tests for the common integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) The tool uses the Server header in the response to do some of the tests. There are other CMS and so which are built on Nginx like Centminmod, OpenResty, Pantheon or Tengine for example which don't return that header. In that case please use nginx-pwner-no-server-header.py with the same parameters than the other script Also, for the exploit search to run correctly you should do: searchsploit -u in Kali from time to time The tool does not check for web cache poisoning/deception vulnerabilities nor request smuggling, you should test that with specific tools for those vulnerabilities. NginxPwner is mainly focused in misconfigurations developers may have introduced in the nginx.conf without being aware of them. Credit to shibli2700 for his awesome tool Kyubi https://github.com/shibli2700/Kyubi and to all the contributors of gobuster. Credits also to Detectify (which actually discovered many of this misconfigurations in NGINX) Download Nginxpwner
Read more...

___________________________
@hacking_Attack
@Hacking_Video

GitHub

GitHub - shiblisec/Kyubi: A tool to discover and exploit Nginx alias traversal misconfiguration, the tool can bruteforce the URL…

A tool to discover and exploit Nginx alias traversal misconfiguration, the tool can bruteforce the URL path recursively to find out hidden files and directories. - shiblisec/Kyubi

7 viewsedited 22:16

Hacking Articles Tips Tricks Videos Tutorials

2 views22:24

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Facebook Messenger Bot — Hacking the buildings Intercom to open the entrance door

https://cdn-images-1.medium.com/max/776/1*A3NufTJS4K_Ta7rxXPNyuw.jpeg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Facebook Messenger Bot — Hacking the buildings Intercom to open the entrance door

So when you approach a buildings entrance, you’ll see a panel on the wall with a bunch of buttons and a speaker. When you press a button corresponding with the name of the apartment owner, the…