Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
psudohash is a password list generator (https://www.kitploit.com/search/label/Generator) for orchestrating brute force (https://www.kitploit.com/search/label/Brute%20Force) attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable.
Pentesting Corporate Environments System administrators (https://www.kitploit.com/search/label/Administrators) and other employees often use a mutated version of the Company's name to set passwords (https://www.kitploit.com/search/label/Passwords) (e.g. Am@z0n_2022). This is commonly the case for network devices (Wi-Fi access points, switches, routers, etc), application or even domain accounts. With the most basic options, psudohash can generate a wordlist with all possible mutations of one or multiple keywords, based on common character substitution patterns (customizable), case variations, strings commonly used as padding and more. Take a look at the following example: 

___________________________
@hacking_Attack
@Hacking_Video
The script includes a basic character substitution schema. You can add/modify character substitution patterns by editing the source and following the data structure logic presented below (default): transformations = [
{'a' : '@'},
{'b' : '8'},
{'e' : '3'},
{'g' : ['9', '6']},
{'i' : ['1', '!']},
{'o' : '0'},
{'s' : ['$', '5']},
{'t' : '7'}
]
Individuals When it comes to people, i think we all have (more or less) set passwords using a mutation of one or more words that mean something to us e.g., our name or wife/kid/pet/band names, sticking the year we were born at the end or maybe a super secure padding like "!@#". Well, guess what?

___________________________
@hacking_Attack
@Hacking_Video
Installation No special requirements. Just clone the repo and make the script executable: git clone https://github.com/t3l3machus/psudohash
cd ./psudohash
chmod +x psudohash.py
Usage ./psudohash.py [-h] -w WORDS [-an LEVEL] [-nl LIMIT] [-y YEARS] [-ap VALUES] [-cpb] [-cpa] [-cpo] [-o FILENAME] [-q]
The help dialog [ -h, --help ] includes usage details and examples. Usage Tips Combining options --years and --append-numbering with a --numbering-limit ≥ last two digits of any year input, will most likely produce duplicate words because of the mutation patterns implemented by the tool. If you add custom padding values and/or modify the predefined common padding values in the source code, in combination with multiple optional parameters, there is a small chance of duplicate words occurring. psudohash includes word filtering controls but for speed's sake, those are limited. Future I'm gathering (https://www.kitploit.com/search/label/Gathering) information regarding commonly used password creation patterns to enhance the tool's capabilities.

Download Psudohash (https://github.com/t3l3machus/psudohash)

___________________________
@hacking_Attack
@Hacking_Video
Crypto Bug Bounty Hunting: An Overview Since 2020

This is article 2 of 4 for the BanklessDAO Writer’s Cohort.Continue reading on Coinmonks »
Read more...
hacking: security in practice
Is it possible to have a sandbox on your phone (android)?

Mods, let me know if this doesn't fit the hacking subreddit and I'll remove it. I know it isn't literally hacking just related to it, so I'm not sure.

My question is pretty much the title. Is it possible to set up a sandbox on your phone? You have plenty of options when it comes to computers, you can even set up a fake phone on your computer, but I never really heard about anything that can be used on actual phones. Does anybody here know? Or maybe a reference to a sub that would know?

submitted by /u/Genemoni
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video