hacking: security in practice
Two Factor Code being sent unprompted

It started with my google account so I changed the password and a few account using the same password, now Im getting phone calls with 2 factor codes being sent via Phone calls but I have no Idea what account it is for. so something has been compromised, but what other step can I take if don't know what service is sending the 2 factor code.

submitted by /u/Famous-Error-2929
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Searching for a script

I am looking for a script to use in an online 2D MMO RPG where you can basically run dungeons automatically. Everyone who is willing to guide please let me know

submitted by /u/Ommarley
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Stepping Into Blockchains? It’s Time To Know the Basics…

There’s a huge fuss surrounding Blockchains nowadays. Many people talk about it but only a few have a real understanding of it.Continue reading on Bug Zero »
Read more...

Stepping Into Blockchains? It’s Time To Know the Basics…
https://blog.bugzero.io/stepping-into-blockchains-its-time-to-know-the-basics-6deaaf547e19?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

There’s a huge fuss surrounding Blockchains nowadays. Many people talk about it but only a few have a real understanding of it.Continue reading on Bug Zero » (https://blog.bugzero.io/stepping-into-blockchains-its-time-to-know-the-basics-6deaaf547e19?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Top 10 Vulnerabilities and How to Combat Them

https://cdn-images-1.medium.com/max/1366/1*TfirgDEHT1gYcrOXk4sCOA.jpeg
While the global economy and people’s social life have mostly moved into cyberspace, this has come with a number of concerns. According to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tuesday Morning Threat Report: Oct 25, 2022

https://cdn-images-1.medium.com/max/1050/0*g4X-h3ytB1FlvrfR.jpeg
The biggest hacks and industry news from the past 7 days.

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Android Pentesting 101 — Part 2

https://cdn-images-1.medium.com/max/600/0*4UIGpu305LV9LI2L
Welcome to Part 2 of Android Pentesting. This series is about how you can hack into Android and find vulnerabilities in it using various…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
learned alot about hacking. what next?

Learned alot in college but what are the next steps? Do I dualboot kali and mess with the cmd line? Mess with scripts? I know about those websites like hack the box etc. But I want to have a more solid foundation. To build an understanding.

Also. Anyone have any fun project ideas? Maybe cracking a phones screen lock? Or snagging neighbors wifi? Lol jk... ish.

Lemme know your opinions. Ideas or experience!

submitted by /u/Stock-Philosophy8675
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Apple fixes new zero-day used in attacks against iPhones, iPads

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
JSubFinder : Searches Webpages For Javascript To Find Hidden Subdomains & Secrets

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go’s amazing performance allowing it to utilize large data sets & be easily chained with other tools.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDpoT0WH6rB8qi1sAurqAeA1_WOlhRC71G25D1wucr9qHurov6MpjUXKN028VMPf-sep-UTbBCTQKPbN1BYqW7Iui8fWLrg-i6XgwTfNsDRAv-qPMPsB7PK0vahe9iIdKjg97duQ8536JjQS5aGY0P364jOcX-P3Tv3N4pvM6K3w_lubLoq0MBfCSb/s1600/JSubFinder1.gif InstallInstall the application and download the signatures needed to find secrets Using GO:go get github.com/ThreatUnkown/jsubfinder
wget https://raw.githubusercontent.com/ThreatUnkown/jsubfinder/master/.jsf_signatures.yaml && mv .jsf_signatu
Or Downloads Page Basic UsageSearchSearch the given url’s for subdomains and secrets
$ jsubfinder search -h

Execute the command specified

Usage:
JSubFinder search [flags]

Flags:
-c, --crawl Enable crawling
-g, --greedy Check all files for URL's not just Javascript
-h, --help help for search
-f, --inputFile string File containing domains
-t, --threads int Ammount of threads to be used (default 5)
-u, --url strings Url to check

Global Flags:
-d, --debug Enable debug mode. Logs are stored in log.info
-K, --nossl Skip SSL cert verification (default true)
-o, --outputFile string name/location to store the file
-s, --secrets Check results for secrets e.g api keys
--sig string Location of signatures for finding secrets
-S, --silent Disable printing to the console
Examples (results are the same in this case):
$ jsubfinder search -u www.google.com
$ jsubfinder search -f file.txt
$ echo www.google.com | jsubfinder search
$ echo www.google.com | httpx --silent | jsubfinder search$

apis.google.com
ogs.google.com
store.google.com
mail.google.com
accounts.google.com
www.google.com
policies.google.com
support.google.com
adservice.google.com
play.google.com With Secrets Enablednote --secrets=""will save the secret results in a secrets.txt file
$ echo www.youtube.com | jsubfinder search --secrets=""
www.youtube.com
youtubei.youtube.com
payments.youtube.com
2Fwww.youtube.com
252Fwww.youtube.com
m.youtube.com
tv.youtube.com
music.youtube.com
creatoracademy.youtube.com
artists.youtube.com

Google Cloud API Key Advanced examples$ echo www.google.com | jsubfinder search -crawl -s "google_secrets.txt" -S -o jsf_google.txt -t 10 -g
* -crawluse the default crawler to crawl pages for other URL’s to analyze
* -senables JSubFinder to search for secrets
* -SSilence output to console
* -o save output to specified file
* -t 10use 10 threads
* -gsearch every URL for JS, even ones we don’t think have any ProxyEnables the upstream HTTP proxy with TLS MITM sypport. This allows you to:

1. Browse sites in realtime and have JSubFinder search for subdomains and secrets real time.
2. If needed run jsubfinder on another server to offload the workload
$ JSubFinder proxy -h

Execute the command specified

Usage:
JSubFinder proxy [flags]

Flags:
-h, --help help for proxy
-p, --port int [...]

___________________________
@hacking_Attack
@Hacking_Video

Port for the proxy to listen on (default 8444)
--scope strings Url's in scope seperated by commas. e.g www.google.com,www.netflix.com
-u, --upstream-proxy string Adress of upsteam proxy e.g http://127.0.0.1:8888 (default "http://127.0.0.1:8888")

Global Flags:
-d, --debug Enable debug mode. Logs are stored in log.info
-K, --nossl Skip SSL cert verification (default true)
-o, --outputFile string name/location to store the file
-s, --secrets Check results for secrets e.g api keys
--sig string Location of signatures for finding secrets
-S, --silent Disable printing to the console $ jsubfinder proxy
Proxy started on :8444
Subdomain: out.reddit.com
Subdomain: www.reddit.com
Subdomain: 2Fwww.reddit.com
Subdomain: alb.reddit.com
Subdomain: about.reddit.com With Burp Suite1. Configure Burp Suite to forward traffic to an upstream proxy/ (User Options > Connections > Upsteam Proxy Servers > Add)
2. Run JSubFinder in proxy mode

Burp Suite will now forward all traffic proxied through it to JSubFinder. JSubFinder will retrieve the response, return it to burp and in another thread search for subdomains and secrets. With Proxify1. Launch Proxify & dump traffic to a folder proxify -output logs2. Configure Burp Suite, a Browser or other tool to forward traffic to Proxify (see instructions on their github page)
3. Launch JSubFinder in proxy mode & set the upstream proxy as Proxify jsubfinder proxy -u http://127.0.0.1:84434. Use Proxify’s replay utility to replay the dumped traffic to jsubfinder replay -output logs -burp-addr http://127.0.0.1:8444Run on another serverSimple, run JSubFinder in proxy mode on another server e.g 192.168.1.2. Follow the proxy steps above but set your applications upstream proxy as 192.168.1.2:8443 Advanced Examples$ jsubfinder proxy --scope www.reddit.com -p 8081 -S -o jsf_reddit.txt
* --scopelimits JSubFinder to only analyze responses from www.reddit.com
* -pport JSubFinders proxy server is running on
* -Ssilence output to the console/stdout
* -o output examples to this file Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WHAT IF YOU FORGOT YOUR BITCOIN PASSWORD?

Experts discuss the hacking capability needed to compromise digital wallets and how cryptocurrency holders can safeguard the security of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Support supports a Hacker

https://cdn-images-1.medium.com/max/900/0*wYSRIqm_kxeBaho9.png
Manipulating user accounts via Helpdesk

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The Logging Dead: Two Event Log Vulnerabilities Haunting Windows
https://www.reddit.com/r/redteamsec/comments/yd1ryb/the_logging_dead_two_event_log_vulnerabilities/

submitted by /u/lohacker0 (https://www.reddit.com/user/lohacker0)
[link] (https://www.varonis.com/blog/the-logging-dead-two-windows-event-log-vulnerabilities) [comments] (https://www.reddit.com/r/redteamsec/comments/yd1ryb/the_logging_dead_two_event_log_vulnerabilities/)

___________________________
@hacking_Attack
@Hacking_Video