Dark Reading: Attacks/Breaches
Fast Company CMS Hack Raises Security Questions

The company's website remains offline after hackers used its compromised CMS to send out racist messages.

Dark Reading: Attacks/Breaches
Google Cloud DORA: Securing the Supply Chain Begins With Culture

The team's annual survey finds that the right development culture is better than technical measures when it comes to shoring up software supply chain security practices. An additional benefit: Less burnout.

Dark Reading: Attacks/Breaches
Container Supply Chain Attacks Cash In on Cryptojacking

Cloud-native threats are costing cloud customer victims money as cryptojackers mine their vulnerable cloud instances.

KitPloit - PenTest Tools!
Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns

https://blogger.googleusercontent.com/img/a/AVvXsEjBvbKgBVYgLcvHX5xAs4947PD5DsLaR_53o4PhyAINSqxoARl20tL3Pr_iTvjflpvvEIK61S-OVEpcNZ_TykfuiM-JAnY1eM2R8tenfsVwSDHp2VrAvtu-_jewWh7eI-Nei9b2tUmjzh6TJc9y_0p3epToJ9rZlm5FCDPsJMzNrb7oimaH2vyoPy-QDw=w640-h414 psudohash is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable. Pentesting Corporate EnvironmentsSystem administrators and other employees often use a mutated version of the Company's name to set passwords (e.g. Am@z0n_2022). This is commonly the case for network devices (Wi-Fi access points, switches, routers, etc), application or even domain accounts. With the most basic options, psudohash can generate a wordlist with all possible mutations of one or multiple keywords, based on common character substitution patterns (customizable), case variations, strings commonly used as padding and more. Take a look at the following example: https://blogger.googleusercontent.com/img/a/AVvXsEjBvbKgBVYgLcvHX5xAs4947PD5DsLaR_53o4PhyAINSqxoARl20tL3Pr_iTvjflpvvEIK61S-OVEpcNZ_TykfuiM-JAnY1eM2R8tenfsVwSDHp2VrAvtu-_jewWh7eI-Nei9b2tUmjzh6TJc9y_0p3epToJ9rZlm5FCDPsJMzNrb7oimaH2vyoPy-QDw=w640-h414 The script includes a basic character substitution schema. You can add/modify character substitution patterns by editing the source and following the data structure logic presented below (default): transformations = [
{'a' : '@'},
{'b' : '8'},
{'e' : '3'},
{'g' : ['9', '6']},
{'i' : ['1', '!']},
{'o' : '0'},
{'s' : ['$', '5']},
{'t' : '7'}
] IndividualsWhen it comes to people, i think we all have (more or less) set passwords using a mutation of one or more words that mean something to us e.g., our name or wife/kid/pet/band names, sticking the year we were born at the end or maybe a super secure padding like "!@#". Well, guess what? https://blogger.googleusercontent.com/img/a/AVvXsEiA97heH7brWCOpppmU1LOpPvfWXJWFx3A_SKOcuK_zYDxRygbrrX1E618dhONMj5obS3UmSizRoHc3eSrLjrotzrBelcx0yFd7AqCNnWqljZLocuJqakhv9PxSlJ-7uB1MQS11YhwueGsPCZSznhzZZkhgPfffeAxM-OhtHE2u-auBsc9mH6HDo5H5iQ=w640-h610 InstallationNo special requirements. Just clone the repo and make the script executable: git clone https://github.com/t3l3machus/psudohash
cd ./psudohash
chmod +x psudohash.py Usage./psudohash.py [-h] -w WORDS [-an LEVEL] [-nl LIMIT] [-y YEARS] [-ap VALUES] [-cpb] [-cpa] [-cpo] [-o FILENAME] [-q] The help dialog [ -h, --help ] includes usage details and examples. Usage Tips1. Combining options --yearsand --append-numberingwith a --numbering-limit≥ last two digits of any year input, will most likely produce duplicate words because of the mutation patterns implemented by the tool.
2. If you add custom padding values and/or modify the predefined common padding values in the source code, in combination with multiple optional parameters, there is a small chance of duplicate words occurring. psudohash includes word filtering controls but for speed's sake, those are limited. FutureI'm gathering information regarding commonly used password creation patterns to enhance the tool's capabilities. Download Psudohash

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
what are the main types of hacking

You’ve certainly watched a lot of films where hacking is depicted as an alluring activity, and after seeing them, the majority of you…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Alfred CTF | TryHackMe Write-Up

https://cdn-images-1.medium.com/max/600/1*pGxR8FF3iGCDICYAzc1-Pg.png
TryHackMe Room:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Rusia asegura que ha desmantelado el grupo de ransomware REvil

https://cdn-images-1.medium.com/max/1715/0*WNyrLNj7l-ODEmUx
El Servicio de Seguridad Federal de Rusia (FSB) anunció este viernes que detuvo a miembros de REvil y neutralizó la infraestructura…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberDefenders: Ulysses — Walkthrough

https://cdn-images-1.medium.com/max/700/0*9jVTYGLuvS0K6Nl-.png
SPOILER ALERT — A possible Solution to the Challenge

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proving Grounds-BBSCute

https://cdn-images-1.medium.com/max/1882/1*ML8Nxfj3K6Ks3hUnutC-AA.png
Hi Everyone! Today we are going to go over how to root BBSCute on Proving Grounds by foxlox. Let’s get started.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Penetration Testing with Metasploit

https://cdn-images-1.medium.com/max/2048/1*I9bqudnmtVCW5JIKb5Wcmw.jpeg
Metasploit is one of the most used penetration test tools for security professionals and hackers. In this article, I will explain the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns
http://www.kitploit.com/2022/09/psudohash-password-list-generator-that.html

___________________________
@hacking_Attack
@Hacking_Video

psudohash is a password list generator (https://www.kitploit.com/search/label/Generator) for orchestrating brute force (https://www.kitploit.com/search/label/Brute%20Force) attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable.
Pentesting Corporate Environments System administrators (https://www.kitploit.com/search/label/Administrators) and other employees often use a mutated version of the Company's name to set passwords (https://www.kitploit.com/search/label/Passwords) (e.g. Am@z0n_2022). This is commonly the case for network devices (Wi-Fi access points, switches, routers, etc), application or even domain accounts. With the most basic options, psudohash can generate a wordlist with all possible mutations of one or multiple keywords, based on common character substitution patterns (customizable), case variations, strings commonly used as padding and more. Take a look at the following example: 

___________________________
@hacking_Attack
@Hacking_Video

The script includes a basic character substitution schema. You can add/modify character substitution patterns by editing the source and following the data structure logic presented below (default): transformations = [
{'a' : '@'},
{'b' : '8'},
{'e' : '3'},
{'g' : ['9', '6']},
{'i' : ['1', '!']},
{'o' : '0'},
{'s' : ['$', '5']},
{'t' : '7'}
]
Individuals When it comes to people, i think we all have (more or less) set passwords using a mutation of one or more words that mean something to us e.g., our name or wife/kid/pet/band names, sticking the year we were born at the end or maybe a super secure padding like "!@#". Well, guess what?

___________________________
@hacking_Attack
@Hacking_Video