Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
bitlock whole internal laptop drive

I recently made a live Linux usb what I boot with ventoy (it's zorin os lite 64x bit) and I noticed that I could acces all the files on the laptop without using password of the laptop itself, even the SAM file where the password of the laptop is saved, is there any way to bitlock the whole drive to prevent easily copying files with live usb?

If this is not the right sub, can someone then recommend the one I need

submitted by /u/Reasonable_Taro_8688
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Sql Injection for Beginners using Sqlmap

Hello Learners, so let’s start with my first blog it is just based on a topic you already knew SQL injection before that let me just…Continue reading on Medium »
Read more...
OverTheWire : Natas (Level 0–10)

This is a fairly interesting collection of challenges that helps to get an idea of Web Security.Continue reading on System Weakness »
Read more...
EvilnoVNC is a Ready to go Phishing (https://www.kitploit.com/search/label/Phishing) Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing (https://www.kitploit.com/search/label/Bypassing) by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time (https://www.kitploit.com/search/label/Real%20Time) all of the victim's actions, access to their downloaded files and the entire browser profile, including cookies, saved passwords, browsing history and much more.
Requirements Docker Chromium Download It's recommended to clone the complete repository or download the zip file.
Additionally, it's necessary to build Docker manually. You can do this by running the following commands: git clone https://github.com/JoelGMSec/EvilnoVNC
cd EvilnoVNC ; sudo chown -R 103 Downloads
sudo docker build -t joelgmsec/evilnovnc .
Usage ./start.sh -h

_____ _ _ __ ___ _ ____
| ____|_ _(_) |_ __ __\ \ / / \ | |/ ___|
| _| \ \ / / | | '_ \ / _ \ \ / /| \| | |
| |___ \ V /| | | | | | (_) \ V / | |\ | |___
|_____| \_/ |_|_|_| |_|\___/ \_/ |_| \_|\____|

---------------- by @JoelGMSec --------------

Usage: ./start.sh $resolution $url

Examples:
1280x720 16bits: ./start.sh 1280x720x16 http://example.com
1280x720 24bits: ./start.sh 1280x720x24 http://example.com
1920x1080 16bits: ./start.sh 1920x1080x16 http://example.com
1920x1080 24bits: ./start.sh 1920x1080x24 http://example.com

The detailed guide of use can be found at the following link: https://darkbyte.net/robando-sesiones-y-bypasseando-2fa-con-evilnovnc Features & To Do Export Evil-Chromium profile to host Save download files on host Disable parameters in URL (like password) Disable key combinations (like Alt+1 or Ctrl+S) Disable access to Thunar Decrypt cookies (https://www.kitploit.com/search/label/Cookies) in real time Expand cookie life to 99999999999999999 Dynamic (https://www.kitploit.com/search/label/Dynamic) title from original website Dynamic resolution from preload page Replicate real user-agent and other stuff Basic keylogger License This project is licensed under the GNU 3.0 license - see the LICENSE file for more details. Credits and Acknowledgments Original idea by @mrd0x (https://twitter.com/mrd0x): https://mrd0x.com/bypass-2fa-using-novnc
This tool has been created and designed from scratch by Joel Gámez Molina // @JoelGMSec Contact This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it. For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).

Download EvilnoVNC (https://github.com/JoelGMSec/EvilnoVNC)

___________________________
@hacking_Attack
@Hacking_Video
EXPLOITING OS COMMAND INJECTION VULNERABILITIES

Hi! My name is Hashar Mujahid. And today we are going to learn what OS command injections are and how we can exploit them.Continue reading on InfoSec Write-ups »
Read more...
hacking: security in practice
Hack the box

How much of their resources are accesible for free? Is their free version even practical to learn anything useful, or one has to paid to get anything from there?

submitted by /u/Liiberto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video