Hacking on Medium
Broken Authentication & Session Management Flaws: Causes & Fixes

What is Broken Authentication? We answer the same and share a few ways you can stay a step ahead of such attacks.

Continue reading on DLT Labs »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
7 Most Common Type Of Cyber Attacks

https://cdn-images-1.medium.com/max/2600/1*pwNpTw0L0e_yItZ0O1hNXw.jpeg
A cyberattack is a malicious and willful effort by a person or company to breach the data system of another person or organization…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

All about Information disclosure

What is Information disclosure ?Continue reading on InfoSec Write-ups »
Read more...

Duplicut - Remove Duplicates From MASSIVE Wordlist, Without Sorting It (For Dictionary-Based Password Cracking)

Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors Overview Modern password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most common passwords are cracked instantly. With existing dedupe tools you are forced to choose if you prefer to preserve the order OR handle massive wordlists. Unfortunately, wordlist creation requires both: So i wrote duplicut in highly optimized C to address this very specific needQuick start git clone https://github.com/nil0x42/duplicutcd duplicut/ && make./duplicut wordlist.txt -o clean-wordlist.txt Options Features: Handle massive wordlists, even those whose size exceeds available RAM Filter lines by max length (-l option) Can remove lines containing non-printable ASCII chars (-p option) Press any key to show program status at runtime. Implementation: Written in pure C code, designed to be fast Compressed hashmap items on 64 bit platforms Multithreading support TODO: Use huge memory pages to increase performance Limitations: Any line longer than 255 chars is ignored Heavily tested on Linux x64, mostly untested on other platforms. Technical Details  1- Memory optimized: An uint64 is enough to index lines in hashmap, by packing size info within pointer's extra bits:  2- Massive file handling: If whole file can't fit in memory, it is split into virtual chunks, then each one is tested against next chunks. So complexity is equal to th triangle number: Throubleshotting If you find a bug, or something doesn't work as expected, please compile duplicut in debug mode and post an issue with attached output: # debug level can be from 1 to 4make debug level=1./duplicut OPTIONS 2>&1 | tee /tmp/duplicut-debug.log Download Duplicut
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Duplicut - Remove Duplicates From MASSIVE Wordlist, Without Sorting It (For Dictionary-Based Password Cracking)

https://1.bp.blogspot.com/-Ugs55xgkowc/YIxcmN9q-SI/AAAAAAAAWDI/4JSoTFzP-eorJnPWw3qMTV272B2nMpLxACNcBGAsYHQ/w640-h256/duplicut_5_1-comparison.png Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors OverviewModern password wordlist creation usually implies concatenating multiple data sources.

Ideally, most probable passwords should stand at start of the wordlist, so most common passwords are cracked instantly.

With existing dedupe tools you are forced to choose if you prefer to preserve the order OR handle massive wordlists.

Unfortunately, wordlist creation requires both: https://1.bp.blogspot.com/-n6o17898PN4/YIxc0tQhdxI/AAAAAAAAWDM/HYqHBOX_tdYQHFbxqR1Qvzd12732U0icgCNcBGAsYHQ/w640-h256/duplicut_5_1-comparison.png So i wrote duplicut in highly optimized C to address this very specific need Quick startgit clone https://github.com/nil0x42/duplicut
cd duplicut/ && make
./duplicut wordlist.txt -o clean-wordlist.txtOptionshttps://1.bp.blogspot.com/-mf2ncGUHwOU/YIxc7YD_xRI/AAAAAAAAWDU/fNG2CpZFBO8GdHcmS6OLuN5oauBFNEj1ACNcBGAsYHQ/w640-h236/duplicut_6_4-help.png *
Features:

* Handle massive wordlists, even those whose size exceeds available RAM
* Filter lines by max length (-l option)
* Can remove lines containing non-printable ASCII chars (-p option)
* Press any key to show program status at runtime.

*
Implementation:

* Written in pure C code, designed to be fast
* Compressed hashmap items on 64 bit platforms
* Multithreading support
* [TODO]: Use huge memory pages to increase performance

*
Limitations:

* Any line longer than 255 chars is ignored
* Heavily tested on Linux x64, mostly untested on other platforms. Technical Details
1- Memory optimized:An uint64is enough to index lines in hashmap, by packing sizeinfo within pointer's extra bits: https://1.bp.blogspot.com/-ghJnDIQ03fc/YIxdKOO0HsI/AAAAAAAAWDc/m1JHHxUrCGkQQdTIqNeULnGrN-JwfA2IgCNcBGAsYHQ/w640-h390/duplicut_7_2-line-struct.png  2- Massive file handling:If whole file can't fit in memory, it is split into https://camo.githubusercontent.com/816795a4b9032e5045eb7ced62ae9eccee75a4d3ce6d796233c315551894bd32/687474703a2f2f7777772e736369776561766572732e6f72672f74657832696d672e7068703f66733d31352665713d6e virtual chunks, then each one is tested against next chunks.

So complexity is equal to https://camo.githubusercontent.com/816795a4b9032e5045eb7ced62ae9eccee75a4d3ce6d796233c315551894bd32/687474703a2f2f7777772e736369776561766572732e6f72672f74657832696d672e7068703f66733d31352665713d6e th triangle number: https://1.bp.blogspot.com/-YaOXmDO4oGI/YIxdQvJJVLI/AAAAAAAAWDk/8YbBZfUze54-h78SErbUW9mtvPfFB2SagCNcBGAsYHQ/w640-h388/duplicut_10_3-chunked-processing.png ThroubleshottingIf you find a bug, or something doesn't work as expected, please compile duplicut in debug mode and post an issue with attached output: # debug level can be from 1 to 4
make debug level=1
./duplicut [OPTIONS] 2>&1 | tee /tmp/duplicut-debug.log Download Duplicut

Hacking Articles
Wonderland TryHackMe Walkthrough

Today we’re going to solve another boot2root challenge called “Wonderland “. It’s available at TryHackMe for penetration testing practice. This lab is of medium difficultly if we have the right basic knowledge to break the labs and are attentive to all the details we find during the reconnaissance. The credit

The post Wonderland TryHackMe Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Stopping the Next SolarWinds Requires Doing Something Different

Will the SolarWinds breach finally prompt the right legislative and regulatory actions on a broader, more effective scale?

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Dark Reading Celebrates 15th Anniversary

Cybersecurity news site begins 16th year with plans to improve site, deliver more content on cyber threats and best practices.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I am confused

I received a video on discord and watched it , after that i was told that someone had acces to my pc from watching that video. Is it even posible ? Should i reinstall my windows ?

submitted by /u/leDonut114
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Has anyone ever gotten $1,000 in cash app after clicking on those youtube ads and filling up survey and signing up for 1 month Geico insurance????

I'm curious if any L33T hax0rs had ever completed that or is it a scam?

submitted by /u/coweggss
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there anyway to "spoof" the playtime of apps to trick my parents

Ok, so, backstory, I'm 15, but my parents are strict af on what I do, and I have this thing called "microsoft family safety" on my pc, I can use steam's built in web browser thing to bypass the history tracking, since it somehow doesn't track that, but, it also tracks what games I play and such, and I want to get some emulators, but I doubt my parents would like that when they see my playtime, since it's illegal and everything, So I am planning to factory reset my device, as it is connected to my microsoft account, and I just won't log in with that microsoft account, but is there anyway to "spoof" the playtime, like change a file or something, to make it look like I've played more than I have, as they will think it's pretty suspicious that I haven't been on anything that whole week

submitted by /u/Plutozxd
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
World's biggest dark web child porn network with 400,000 members shut by German prosecutors

https://external-preview.redd.it/lQNavroAaMTqBqVDPBsd-V3h0b6o1EHdgKCS3EVx97E.jpg?width=640&crop=smart&auto=webp&s=320fd8ee7954ecfc3aeaf6f44a9a226020b128b7 submitted by /u/Newsjunkeefromlondon
[link] [comments]

Deep Web
How I set up my websites with Tor and Nginx: Available via "clear web" and onion address, auto redirect to HTTPS, and Onion-Location and Alt-Svc headers

submitted by /u/system33-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Cheap games?

Are there any sites for cheap game keys?

submitted by /u/mysterymoneyman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Doxbin

Is Doxbin still dead? Are there any good doxing sites?

submitted by /u/mysterymoneyman
[link] [comments]

Deep Web
I need some advise. Is deep web safe to use?

I visited the .onion domains recently with tor and vpn and I saw pretty fucked up stuff. I only want to access the safe deep web and stay away from the illegal & dangerous dark web part. Are those fucked up gory stuff really the part of deep web and not dark? Should i worry about it? Or am i fine? What are your advices for me?

submitted by /u/7doa
[link] [comments]