Hacking on Medium
Cybersecurity Solutions for the Aviation Industry

https://cdn-images-1.medium.com/max/600/1*mL-3ZiGwrBEdH2ylQW1nNA.jpeg
Why think about cyber security for the aviation industry?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to become an ethical hacker

https://cdn-images-1.medium.com/max/695/0*hY-DmM_kwXtKBd1o.jpg
When most people hear the term “hacker” they think of a solitary, shrouded individual, illuminated by the glow of a computer in a dark…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
xmap : Performing Internet-wide IPv6 & IPv4 Network Research Scanning

xmap a tool for Performing Internet-wide IPv6 & IPv4 Network Research Scanning

Installing and Building XMap

Installing via Package Manager

XMap operates on GNU/Linux, macOS, and BSD.

Installing with the most OS package managers is not integrated yet.
OSFedora 19+ or EPEL 6+-Debian 8+ or Ubuntu 14.04+-Gentoo-macOS (using Homebrew)-Arch Linux-
Building from Source

Installing XMap Dependencies

XMap has the following dependencies:

* CMake – Cross-platform, open-source build system
* GMP – Free library for arbitrary precision arithmetic
* gengetopt – Command line option parsing for C programs
* libpcap – Famous user-level packet capture library
* flex and byacc – Output filter lexer and parser generator
* json-c – JSON implementation in C
* libunistring – Unicode string library for C
* libdnet – (macOS Only) Gateway and route detection

In addition, the following optional packages enable optional XMap functionality:

* hiredis – RedisDB support in C

Install the required dependencies with the following commands.

* On Debian-based systems (including Ubuntu):
*
* sudo apt-get install build-essential cmake libgmp3-dev gengetopt libpcap-dev flex byacc libjson-c-dev pkg-config libunistring-dev
*

On RHEL- and Fedora-based systems (including CentOS):

sudo yum install cmake gmp-devel gengetopt libpcap-devel flex byacc json-c-devel libunistring-devel

Development Notes

* Enabling development turns on debug symbols, and turns off optimizations. Release builds should be built with -DENABLE_DEVELOPMENT=OFF.
* Enabling log_tracecan have a major performance impact and should not be used except during early development. Release builds should be built with -DENABLE_LOG_TRACE=OFF.
* Redis support is not enabled by default. If you want to use XMap with Redis, you will first need to install hiredis. Then run cmake with -DWITH_REDIS=ON. Debian/Ubuntu has packaged hiredis as libhiredis-dev; Fedora and RHEL/CentOS have packaged it as hiredis-devel.
* Building packages for some systems like Fedora and RHEL requires a user-definable directory (buildroot) to put files. The way to respect this prefix is to run cmake with -DRESPECT_INSTALL_PREFIX_CONFIG=ON.
* Manpages (and their HTML representations) are generated from the .ronnsource files in the repository, using the ronn tool. This does not happen automatically as part of the build process; to regenerate the man pages you’ll need to run make manpages. This target assumes that ronnis in your PATH.
* Building with some versions of CMake may fail with unable to find parser.h. If this happens, try updating CMake. If it still fails, don’t clone XMap into a path that contains the string .com, and try again.
* XMap may be installed to an alternative directory, with the CMAKE_INSTALL_PREFIXoption. For example, to install it in $HOME/optrun

cmake -DCMAKE_INSTALL_PREFIX=$HOME/opt .
make -j4
make install
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
have youever tried to modify video game and are you in the cybersecurity field?

I have a theory

View Poll

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Industry standards - Companies giving access to sensitive personal data (contracts, photos) from publicly accessible URLs

I've recently come across the same issue twice, with major companies, so probably it has become a mainstream policy:

The first one, a multinational telco. I agreed to a new contract, which was published on a public URL for me to check and sign. The contract (which included my social security number, ID number, full name, date of birth, etc) was there for about a month; it was removed after I protested. I can't tell for how long it would be there.

The second one, an international enterprise: After I asked for my data stored on their systems (they give you the option, no special request) they send me a public URL also. It included my ID photos. They were there for 3 months, according to their policy. As an international company, they were much more cumbersome (rather unwilling) to remove them before the time their policy dictates; to be honest, I doubt if I spoke to any human being, probably they were all bots. I can't tell if my ID photos where publicly available after I asked my data or from the day I signed in.

Both companies answer was on the same basis: It's a URL which is not searchable (no results for these kind of URLs from internet search engines) so since I'm the only one who has it, I'm the only one capable of accessing it.
I consider this to NOT be secure. Like having something valuable on a public road, but it's a small road that no-one passes by; most probably, but not 100%, it won't be stolen.

So my questions for anybody in the IT security or audit industry,
- how is it possible for this policy to be acceptable from major companies? - Can it really be considered safe, a public URL; just because it's long, no results returned from search engines, and send only to one person? Send by non-encrypted e-mail, so even if the rest of the chain would be secure, it could be breached through mail. - If a malicious person (cracker, black hat hacker, whatever the terminology) or just a curious and very lucky person who tries many different URLs, access these data: Is there any way to persecute him/her? He did nothing unlawful, He just opened a public URL.

My question to hackers, have you managed to access such personal data on enterprises URLs? Is it really tough to traverse their sites to locate them?

submitted by /u/krackout21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
recommendations for wireless adapters that work with kali nethunter and kali Linux out of the box and has packet injection and monitor mode?

also preferably under or equals 20$, I have seen alot on Ebay from 9-15$ that claim to work out of the box but couldn't find anything that can work both on nethunter and pc.

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New malware dropper called NullMixer infects Windows machines

New malware dropper called NullMixer infects Windows machinesPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A new malware dropper named ‘NullMixer’ is infecting Windows devices with a dozen different malware families simultaneously through fake software cracks promoted on malicious sites in Google Search results.​

NullMixer acts as an infection funnel, using a single Windows executable to launch a dozen different malware families, leading to over two dozen infections running a single device.

These infections range from password-stealing trojans, backdoors, spyware, bankers, fake Windows system cleaners, clipboard hijackers, cryptocurrency miners, and even further malware loaders.

To distribute the malware, the malware distributors use ‘black hat SEO’ to display websites promoting the fake game cracks and pirated software activators in high search result positions on Google.

BleepingComputer tested a Google search for ‘software crack,’ and many of the sites said to be distributing this malware, as shown below, were listed in our search results in the second, third, and fourth search result positions.
https://www.bleepstatic.com/images/news/u/1220909/Website%20snaps/malicious-sites.png
Launching dozens of malwareNullMixer is commonly downloaded as files named similarly to ‘win-setup-i864.exe,’ that when launched, create a new file called ‘setup_installer.exe.’

This new file is responsible for dropping dozens of malware families and, having done that, launches another executable, ‘setup_install.exe.’

That third file launches all malware dropped in the compromised machine using a hardcoded list of their names and the Windows’ cmd.exe’ tool.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/execution-chain.jpg
___________________________
@hacking_Attack
@Hacking_Video

ndancy.

Whatever the case, it would be practically impossible for all those malware families to run on a breached computer and not generate abundant symptoms of compromise for the victim to realize the infection.

These symptoms could include heavy hard disk activity, increased CPU and memory utilization, unusual windows opening for no reason, or simply a noticeable performance issue on the infected device.

Thus, NullMixer is less of a stealthy threat now and more of a catastrophic encounter that can likely only be resolved through a reinstall of Windows.

Users must always consider the risks of downloading executables from obscure online sources and avoid resorting to software piracy.
Trending: Revolut hack: personal and banking data exposed
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-2-300x150.png New Erbium password-stealing malware spreads as game cracks, cheatsSeptember 27, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-1-300x150.png Microsoft SQL servers hacked with FARGO ransomware attacksSeptember 26, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-1-300x150.png Python’s Tarfile path traversal bug from 2007 still present in 350k open source reposSeptember 23, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-3-300x150.png Twitter failed to log you out of all devices after password resetsSeptember 22, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New malware dropper called NullMixer infects Windows machines first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What to do if your Twitch account is hacked?

https://cdn-images-1.medium.com/max/2600/1*BFKvUg3wiNOy8C3uOmCo2g.jpeg
Cybersecurity Hacking How-To Malware

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This hacker Targeting macOS Users Interested in Crypto Jobs

https://cdn-images-1.medium.com/max/728/0*p_68ghKM91Gqc96Q.jpg
The infamous Lazarus Group has continued its pattern of leveraging unsolicited job opportunities to deploy malware targeting Apple’s macOS…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Catch The Flag

https://cdn-images-1.medium.com/max/2600/0*d5IvwLFBqTLomTIv
CTF is always attractive for cyber security professionals,hackers,penetration testers and students.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
evilgophish : Combination Of Evilginx2 And GoPhish

___________________________
@hacking_Attack
@Hacking_Video

All about: IDORs

IDORs happen when users can **access resources that do not belong to them** by directly reference the object ID, object number, or…Continue reading on Medium »
Read more...

hacking: security in practice
Self Hosted Proxy Service

We have created a proxy software that can be deployed to any server and will convert it into a proxy server. So here's how it works.

Let's say you have a server with IP 192.xxx.xxx.023.

We will deploy our software to your server on port let's say:8899

Now Your proxy server is up and running on 192.xxx.xxx.023:8899

To use the proxy simply pass the website in the URL like: -

http://192.xxx.xxx.023:8899/url=https://www.example.com

​

It will work seamlessly like any other proxy service e.g. ScrapingAPI, etc

​

Features:

1. Both residential/data center IPs to choose from.

2. Low pricing

3. Geolocation according to your requirement.

4. Decentralized nodes.

​

For more info please contact me.

submitted by /u/Pradeepkr34
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My Apartment building is switching encryption protocol

Hello,

I live in student accommodation. Me and some engineers clone RFID cards to create replicas for anyone who wants one. This is so people can leave one in their door and take one with them or if you lose one you still have a spare etc...

Protocol was MIFARE CLASSIC 48 bit, easy to crack with Cipher. They are switching to MIFARE PLUS 128 bit, not so easy. The company that provides this is ONITY. We understand we may have been the ones to cause this change.

Any suggestions to cut corners on cracking the encryption or are we stuffed?

submitted by /u/Ladzilla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video