Hacking on Medium
Penetration Testing with Metasploit

https://cdn-images-1.medium.com/max/2048/1*I9bqudnmtVCW5JIKb5Wcmw.jpeg
Metasploit is one of the most used penetration test tools for security professionals and hackers. In this article, I will explain the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Psudohash - Password List Generator That Focuses On Keywords Mutated By Commonly Used Password Creation Patterns
http://www.kitploit.com/2022/09/psudohash-password-list-generator-that.html

___________________________
@hacking_Attack
@Hacking_Video

psudohash is a password list generator (https://www.kitploit.com/search/label/Generator) for orchestrating brute force (https://www.kitploit.com/search/label/Brute%20Force) attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. It is keyword-based and highly customizable.
Pentesting Corporate Environments System administrators (https://www.kitploit.com/search/label/Administrators) and other employees often use a mutated version of the Company's name to set passwords (https://www.kitploit.com/search/label/Passwords) (e.g. Am@z0n_2022). This is commonly the case for network devices (Wi-Fi access points, switches, routers, etc), application or even domain accounts. With the most basic options, psudohash can generate a wordlist with all possible mutations of one or multiple keywords, based on common character substitution patterns (customizable), case variations, strings commonly used as padding and more. Take a look at the following example: 

___________________________
@hacking_Attack
@Hacking_Video

The script includes a basic character substitution schema. You can add/modify character substitution patterns by editing the source and following the data structure logic presented below (default): transformations = [
{'a' : '@'},
{'b' : '8'},
{'e' : '3'},
{'g' : ['9', '6']},
{'i' : ['1', '!']},
{'o' : '0'},
{'s' : ['$', '5']},
{'t' : '7'}
]
Individuals When it comes to people, i think we all have (more or less) set passwords using a mutation of one or more words that mean something to us e.g., our name or wife/kid/pet/band names, sticking the year we were born at the end or maybe a super secure padding like "!@#". Well, guess what?

___________________________
@hacking_Attack
@Hacking_Video

Installation No special requirements. Just clone the repo and make the script executable: git clone https://github.com/t3l3machus/psudohash
cd ./psudohash
chmod +x psudohash.py
Usage ./psudohash.py [-h] -w WORDS [-an LEVEL] [-nl LIMIT] [-y YEARS] [-ap VALUES] [-cpb] [-cpa] [-cpo] [-o FILENAME] [-q]
The help dialog [ -h, --help ] includes usage details and examples. Usage Tips Combining options --years and --append-numbering with a --numbering-limit ≥ last two digits of any year input, will most likely produce duplicate words because of the mutation patterns implemented by the tool. If you add custom padding values and/or modify the predefined common padding values in the source code, in combination with multiple optional parameters, there is a small chance of duplicate words occurring. psudohash includes word filtering controls but for speed's sake, those are limited. Future I'm gathering (https://www.kitploit.com/search/label/Gathering) information regarding commonly used password creation patterns to enhance the tool's capabilities.

Download Psudohash (https://github.com/t3l3machus/psudohash)

___________________________
@hacking_Attack
@Hacking_Video

Crypto Bug Bounty Hunting: An Overview Since 2020
https://medium.com/coinmonks/crypto-bug-bounty-hunting-an-overview-since-2020-6f5cebe24650?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is article 2 of 4 for the BanklessDAO Writer’s Cohort.Continue reading on Coinmonks » (https://medium.com/coinmonks/crypto-bug-bounty-hunting-an-overview-since-2020-6f5cebe24650?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Crypto Bug Bounty Hunting: An Overview Since 2020

This is article 2 of 4 for the BanklessDAO Writer’s Cohort.Continue reading on Coinmonks »
Read more...

hacking: security in practice
Is it possible to have a sandbox on your phone (android)?

Mods, let me know if this doesn't fit the hacking subreddit and I'll remove it. I know it isn't literally hacking just related to it, so I'm not sure.

My question is pretty much the title. Is it possible to set up a sandbox on your phone? You have plenty of options when it comes to computers, you can even set up a fake phone on your computer, but I never really heard about anything that can be used on actual phones. Does anybody here know? Or maybe a reference to a sub that would know?

submitted by /u/Genemoni
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to screen record a (windows pc) app that detects and blocks screen recording?

I’ve been screen recording an app on my windows desktop using the program OBS. At some point the app updated to a version that detects and blocks screen recording. My screen looks normal while recording, but when I go back and view the recordings themselves, the app window is blacked out.

Is there any way around this?

And

Is there anyway to unblack out the app window on the already existing recordings?

Please help!!

submitted by /u/anything97365
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Quashes 5 High-Severity Bugs With Chrome 106 Update

External researchers contributed 16 of the 20 security updates included in the new Chrome 106 Stable Channel rollout, including five high-severity bugs.

Dark Reading: Attacks/Breaches
Plug Your Data Leaks: Integrating Data Loss Prevention into Your Security Stack

The average cost of a data-exposing cybersecurity incident is $4.35 million. If your business can’t avoid to pay, make sure you’ve got a strong data loss prevention practice in place.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Sophisticated Covert Cyberattack Campaign Targets Military Contractors

Malware used in the STEEP#MAVERICK campaign features rarely seen obfuscation, anti-analysis, and evasion capabilities.

Hacking on Medium
DevSecOps 101: Pre-commit hooks with Talisman and gofindapis

https://cdn-images-1.medium.com/max/1000/0*p1OAgpzosgv2hmlO
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Laptop Suggestion for hacking/programming

Hey guys , I want to get a laptop mainly for hacking & programming,I was thinking about having more cores but don't know which brand to go, (windows only below 900$ or 75k INR) can you guys share your suggestions(laptop names) regarding this.

submitted by /u/vinay737
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learn How To Modify Windows ISOs to make your own Windows 10 "Lite"

Original XDA Thread:

https://forum.xda-developers.com/t/how-to-make-a-lite-or-modded-windows-iso-tool-premade-lite-win-10-iso.4496967/

Hello Friends~!

Today I bring you a guide that teaches you how to use a built in Windows program called Dism.exe to remove unwanted installed programs on windows installation isos. You are also able to embed your own apps. Works on all Windows!

For a full walkthrough with pics, video, download links, and sources, see my XDA thread above!

submitted by /u/Long-Cap6202
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video