Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
How to bypass county's Internet "great" firewalls?

Hi there! Recently we had a big internet outage in my country, iran, ans now the goverment blocked like 90 percent of our access to global internet. Every kind of vpn you may think of are blocked. Nordvon, expresvpn, windscribe, proton vpn, etc. So some nerds like me tried to make our own vpns. I personally purchased a vps that's based in Germany and tried to setup OpenVPN on it, well as you may expect that didn't work, so tried wireguard with shadowsocks and surprisingly that didn't work either (it timeout on handshking everytime). After that i purchased another vps in my country so i could connect to i first and that vps was supposed to connect to the vps based in Germany and agian i failed.

Someothers tried http enjecting, ssh tunneling, etc and they failed too.

Right now I am connected to reddit using tor+snowflake however it struggles too, most if the time it for unknown reasons it get stucks on "added controll event port handler", whatever that is.

I also contacted netblocks and they said our current firewall is even worse than what is china is using.

So, does any one of you great people know anyway that friends in iran and I can connect to the Internet?

I'd be glad if you could help!

submitted by /u/yousef7118
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Blueshift DEX on the Milkomeda Algorand A1 Testnet

It’s fair to say that I have always been waiting for a Blueshift integration with any of the top blockchains (outside of Cardano) like…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Utkuici - Nessus Automation

https://blogger.googleusercontent.com/img/a/AVvXsEhn_XwTqM_s6E8qfyVPAY_KAbq1XfuWUzfcLIFlMV8zrfgEbNdoNPImJ_lgojs2UtLgt3Gyscrq_F8A7uRqYlXQBBUGWbfXHurmnzwsML4Hu2KO-9thxLx1HtEJTZBBtHTBclePRm15i1Pl9AHI7xPExHO_aypmG6DYnqvjwQDMNqj3Z41dQuGOWzATEQ=w640-h290 Today, with the spread of information technology systems, investments in the field of cyber security have increased to a great extent. Vulnerability management, penetration tests and various analyzes are carried out to accurately determine how much our institutions can be affected by cyber threats. With Tenable Nessus, the industry leader in vulnerability management tools, an IP address that has just joined the corporate network, a newly opened port, exploitable vulnerabilities can be determined, and a python application that can work integrated with Tenable Nessus has been developed to automatically identify these processes. Features* Finding New IP Address
* Finding New Port
* Finding New Exploitable Vulnerability Installationgit clone https://github.com/anil-yelken/Nessus-Automation cd Nessus-Automation sudo pip3 install requirements.txt UsageThe SIEM IP address in the codes should be changed.

In order to detect a new IP address exactly, it was checked whether the phrase "Host Discovery" was used in the Nessus scan name, and the live IP addresses were recorded in the database with a timestamp, and the difference IP address was sent to SIEM. The contents of the hosts table were as follows:

Usage: python finding-new-ip-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEhn_XwTqM_s6E8qfyVPAY_KAbq1XfuWUzfcLIFlMV8zrfgEbNdoNPImJ_lgojs2UtLgt3Gyscrq_F8A7uRqYlXQBBUGWbfXHurmnzwsML4Hu2KO-9thxLx1HtEJTZBBtHTBclePRm15i1Pl9AHI7xPExHO_aypmG6DYnqvjwQDMNqj3Z41dQuGOWzATEQ=w640-h290 By checking the port scans made by Nessus, the port-IP-time stamp information is recorded in the database, it detects a newly opened service over the database and transmits the data to SIEM in the form of "New Port:" port-IP-time stamp. The result observed by SIEM is as follows:

Usage: python finding-new-port-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEh53mmDZ9sSmDtt213_qPucEFoCExlGdvoXSXw3mLgpmlbQkyVVjt95rlbi9LGyPPrzegVDpajbFiRcGfmIIKZmqGGNcZIcyncN-UD0K1UR3INWON4kNiqgy69B-7t7ESkFN1-vWGcdDPJy4k9RUFbLsxvEE5KyHNRi0EJy2WdUG_4CmBvkdQjUMqyOOw=w640-h332 In the findings of vulnerability scans made in institutions and organizations, primarily exploitable vulnerabilities should be closed. At the same time, it records the vulnerabilities in the database that can be exploited with metasploit in the institutions and transmits this information to SIEM when it finds a different exploitable vulnerability on the systems. Exploitable vulnerabilities observed by SIEM:

Usage: python finding-exploitable-service-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEjkwBMu3zTVqAC6TwRqrXemNEFm-mIuLvUGMcnLn_YPbDnMxuWWAl25RVLYvfgCJyeufbx9bFrr6QR5mzUIZ25tMvHA2zHq9hOI9AsBiRTpYsQd_99qxuQV8bxZKnVVBlJeGloBrd3FVuJdWAJTn9qoSLNWCC1sELOJmEwtFkSqpHAwCgOLha1SwAQZ6Q=w640-h250 Contacthttps://twitter.com/anilyelken06 https://medium.com/@anilyelken Download Nessus-Automation

___________________________
@hacking_Attack
@Hacking_Video