Hacking Articles Tips Tricks Videos Tutorials
470 subscribers
66.1K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Accidental Account takeover

Hello Security Community,Continue reading on InfoSec Write-ups »
Read more...
Pen-100 Question
https://www.reddit.com/r/Pentesting/comments/xzvtgv/pen100_question/

I am a bit stuck on the final exercise for Linux in Pen-100 and I feel like I have searched everywhere online for an answer. Without writing the actual question (I changed names and wording) here is what I am supposed to do: Use bob's access to add a user to the machine with credentials "jon:password". Give the new user the same permissions that belong to bob. Then run the newuser binary in Bob's /home to get the flag. Ok so I ran id on bob and saw he has sudo, and I have his password the only groups bob is a part of is his group and sudo I create the user: sudo useradd jon -G sudo -m and then run: sudo passwd jon and give the password I ran the binary and didnt get the flag so I thought "Ok maybe add him to bob's group" did that and nothing gave him a shell as well /bin/bash same as bob, still didnt work deleted the user and did all the same steps except adding -m ~bob so jon has access to bob's home dir and still nothing. Am I missing something here, I checked the group file and I cant seem to find a way to give jon the "same" access that this binary checks. ​ Thank you for your help! ​ edit: accidentally had an actual user's username in the question submitted by /u/Early_Lab183 (https://www.reddit.com/user/Early_Lab183)
[link] (https://www.reddit.com/r/Pentesting/comments/xzvtgv/pen100_question/) [comments] (https://www.reddit.com/r/Pentesting/comments/xzvtgv/pen100_question/)

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Bypass M1 Pro Macbook Activation Lock

I just bought an m1 pro MacBook off of eBay and it has an activation lock. The seller won't tell me his apple ID, so is there any way to hack into his account and remove the device?

submitted by /u/Ejmuse_Official
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Aircrack-ng Password Dictionary Storage

As the title suggests, this is a question asking the community what they do or have considered doing in the past.

Aircrack-ng and other cracking tools allow the use of a dictionary / word list being passed to be used as a comparison. My question is what is the best way to go about managing and storing a password dictionary word list at a very large scale which can be easily managed and accessible to the appropriate tools?

I've noticed individuals use GitHub repos with password lists stored there but I've ran into issues where opening a extremely large dictionary would completely hault my machine due to the size of each file.

I was considering mongodb or some sort of documentless storage solutions but integration into the tools would be difficult and hence why I'm curious of other people's methods and or solutions.

Admins, please remove post if deemed inappropriate.

Thanks 👍

submitted by /u/itoby24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
SMS payloads via text - is it possible?

Is there any way you could send a payload through a text message/file? If so, how would you generate it? What would/could it do? Does it have any limitations? I have never seen or heard of one of these, and I’m deeply interested in what they can do. Any info on the topic would be really appreciated. Thanks.

submitted by /u/Hyperninja303
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video