Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Proactive Pentest, before a Pentest?
https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/

I am the system admin for a small company. 5 users and a couple public facing services (FTP, IIS website), plus internal servers (SQL, file server etc). Do you recommend any steps I can take and software I can run to find and remediate my own issues before I spend money on an external vendor/audit? I don't have the money right now for full scale Pentest or audit, but I feel like I want to take as many steps as I reasonably can myself, to find issues slowly. I know I won't do as good a job as a pro. Any recommendations? Are there 1 or 2 software tools I can use to get me 90% there? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/)

___________________________
@hacking_Attack
@Hacking_Video
Once upon a time, There lived a GHOST named “CYBERSECURITY”

I am writing this blog after seeing the evolution of cybersecurity in the past few months or years. I thought of starting this blog with…Continue reading on Medium »
Read more...
hacking: security in practice
Law enforcement used smart phone locator, how?

One investigative journalist claimed, they have identified a device that when in proximity of a cell phone target (IMEL), if triggered give out loud noise to reveal its location.

I have not heard this before.

One thing is if possible this should be only used in high priority target.

I am interested in knowing the technology. GSM? Will it work even if the phone is switched off? All the cell phone maker is building their device building any extra chip inside? or is it using some sort of bug?

Note: This is not GSM tower ping, that I know.

submitted by /u/ch1253
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Pentest customer facing report ?
https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/

I'm curious, if a customer asks a business "do you do pentesting and can I see your report?" Is this a typical thing to share about your infrastructure? Isn't that private? Or is there some common high level type of generic standard report template that tells them "there were 5 issues and they are now fixed - the details are none of your business" ? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/)

___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
xmap : Performing Internet-wide IPv6 & IPv4 Network Research Scanning

xmap a tool for Performing Internet-wide IPv6 & IPv4 Network Research Scanning

Installing and Building XMap

Installing via Package Manager

XMap operates on GNU/Linux, macOS, and BSD.

Installing with the most OS package managers is not integrated yet.
OSFedora 19+ or EPEL 6+-Debian 8+ or Ubuntu 14.04+-Gentoo-macOS (using Homebrew)-Arch Linux-
Building from Source

Installing XMap Dependencies

XMap has the following dependencies:

* CMake – Cross-platform, open-source build system
* GMP – Free library for arbitrary precision arithmetic
* gengetopt – Command line option parsing for C programs
* libpcap – Famous user-level packet capture library
* flex and byacc – Output filter lexer and parser generator
* json-c – JSON implementation in C
* libunistring – Unicode string library for C
* libdnet – (macOS Only) Gateway and route detection

In addition, the following optional packages enable optional XMap functionality:

* hiredis – RedisDB support in C

Install the required dependencies with the following commands.

* On Debian-based systems (including Ubuntu):
*
* sudo apt-get install build-essential cmake libgmp3-dev gengetopt libpcap-dev flex byacc libjson-c-dev pkg-config libunistring-dev
*

On RHEL- and Fedora-based systems (including CentOS):

sudo yum install cmake gmp-devel gengetopt libpcap-devel flex byacc json-c-devel libunistring-devel

Development Notes

* Enabling development turns on debug symbols, and turns off optimizations. Release builds should be built with -DENABLE_DEVELOPMENT=OFF.
* Enabling log_tracecan have a major performance impact and should not be used except during early development. Release builds should be built with -DENABLE_LOG_TRACE=OFF.
* Redis support is not enabled by default. If you want to use XMap with Redis, you will first need to install hiredis. Then run cmake with -DWITH_REDIS=ON. Debian/Ubuntu has packaged hiredis as libhiredis-dev; Fedora and RHEL/CentOS have packaged it as hiredis-devel.
* Building packages for some systems like Fedora and RHEL requires a user-definable directory (buildroot) to put files. The way to respect this prefix is to run cmake with -DRESPECT_INSTALL_PREFIX_CONFIG=ON.
* Manpages (and their HTML representations) are generated from the .ronnsource files in the repository, using the ronn tool. This does not happen automatically as part of the build process; to regenerate the man pages you’ll need to run make manpages. This target assumes that ronnis in your PATH.
* Building with some versions of CMake may fail with unable to find parser.h. If this happens, try updating CMake. If it still fails, don’t clone XMap into a path that contains the string .com, and try again.
* XMap may be installed to an alternative directory, with the CMAKE_INSTALL_PREFIXoption. For example, to install it in $HOME/optrun

cmake -DCMAKE_INSTALL_PREFIX=$HOME/opt .
make -j4
make install
Download

___________________________
@hacking_Attack
@Hacking_Video